Lucene search
+L

56 matches found

BDU FSTEC
BDU FSTEC
•added 2026/06/02 12:00 a.m.•14 views

The vulnerability of the database module of the OTRS order processing system allows a hacker to bypass existing security mechanisms.

The vulnerability of the database module of the OTRS request processing system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to bypass existing security mechanisms remotely...

9.4CVSS6.4AI score0.00489EPSS
SaveExploits1References3Affected Software2
NVD
NVD
•added 2026/05/26 8:16 p.m.•29 views

CVE-2026-9574

A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can lead to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS0.00411EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/05/26 7:30 p.m.•60 views

CVE-2026-9575 itsourcecode Student Transcript Processing System index.php sql injection

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit h...

7.5CVSS0.00411EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2026/05/26 12:00 a.m.•28 views

PT-2026-43389

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit h...

7.5CVSS6.8AI score0.00411EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•1 views

CVE-2026-9574: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in itsourcecode Student Transcript Processing System 1.0. This vulnerability affects unknown code of the file /admin/modules/student/trans.php. Executing a manipulation of the argument studentId/cid can lead to sql injection. The attack can be launched remotely. The exploit...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•1 views

CVE-2026-9573: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. The attack can be initiated remotely. The explo...

7.5CVSS7.1AI score0.00411EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/26 12:00 a.m.•1 views

CVE-2026-9575: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit h...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References3
Fedora
Fedora
•added 2026/04/28 1:36 a.m.•24 views

[SECURITY] Fedora 44 Update: botan3-3.9.0-7.fc44

Botan is a BSD-licensed crypto library written in C++. It provides a wide variety of basic cryptographic algorithms, X.509 certificates and CRLs, PKCS \11 certificate requests, a filter/pipe message processing system, and a wide variety of other features, all written in portable C++. The API...

9.3CVSS6.8AI score0.00502EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/10 12:00 a.m.•3 views

CVE-2026-34480: Improper Encoding or Escaping of Output

Apache Log4j Core's XmlLayout https://logging.apache.org/log4j/2.x/manual/layouts.htmlXmlLayout , in versions up to and including 2.25.3, fails to sanitize characters forbidden by the XML 1.0 specification https://www.w3.org/TR/xml/charsets producing invalid XML output whenever a log message or M...

7.5CVSS7AI score0.01187EPSS
SaveExploits0References1
Packet Storm News
Packet Storm News
•added 2026/03/16 12:00 a.m.•12 views

Botan C++ Crypto Algorithms Library 3.11.0

Botan is a C++ library of cryptographic algorithms, including AES, DES, SHA-1, RSA, DSA, Diffie-Hellman, and many others. It also supports X.509 certificates and CRLs, and PKCS 10 certificate requests, and has a high level filter/pipe message processing system. The library is easily portable to...

5.8AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/13 12:00 a.m.•1 views

CVE-2025-12362: Missing Authorization

The myCred – Points Management System For Gamification, Ranks, Badges, and Loyalty Program plugin for WordPress is vulnerable to Missing Authorization in versions up to, and including, 2.9.7. This is due to the plugin not properly verifying that a user is authorized to perform an action. This mak...

5.3CVSS5.7AI score0.0027EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/10/08 12:00 a.m.•18 views

itsourcecode Student Transcript Processing System SQL注入漏洞

itsourcecode Student Transcript Processing System is itsourcecode open source a student transcript processing system. A SQL injection vulnerability exists in version 1.0 of itsourcecode Student Transcript Processing System, which stems from an incorrect manipulation of the parameter uname in the...

9.8CVSS7.7AI score0.00421EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/08 12:00 a.m.•5 views

CVE-2025-11434: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Student Transcript Processing System 1.0. Affected is an unknown function of the file /login.php. Executing a manipulation of the argument uname can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2008-5061

Malware in sbrugna...

6CVSS6.4AI score0.00775EPSS
SaveExploits0References8
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•16 views

EUVD-2012-4484

Malware in sbrugna...

4CVSS6.2AI score0.01192EPSS
SaveExploits0References7
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•14 views

EUVD-2025-20519

Malicious code in bioql PyPI...

6.1CVSS4.9AI score0.00377EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/07/10 3:27 p.m.•27 views

CVE-2025-7182

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

6.1CVSS6.5AI score0.00377EPSS
SaveExploits1References1
NVD
NVD
•added 2025/07/08 3:15 p.m.•13 views

CVE-2025-7182

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

6.1CVSS0.00377EPSS
SaveExploits1References5
CVE
CVE
•added 2025/07/08 2:32 p.m.•38 views

CVE-2025-7182

The CVE-2025-7182 entry concerns itsourcecode Student Transcript Processing System 1.0. A vulnerability exists in the /admin/modules/subject/edit.php file where manipulation of the pre parameter enables cross-site scripting. The attack can be launched remotely, and the exploit has been publicly d...

6.1CVSS3.6AI score0.00377EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/07/08 2:32 p.m.•10 views

CVE-2025-7182 itsourcecode Student Transcript Processing System edit.php cross site scripting

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/modules/subject/edit.php. The manipulation of the argument pre leads to cross site scripting. The...

5.3CVSS6.4AI score0.00377EPSS
SaveExploits1References5
Rows per page
Query Builder