23394 matches found
EUVD-2019-20111
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690 Kados R10 GreenBee SQL Injection via mng_profile_id
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2019-25690
Kados R10 GreenBee is affected by an SQL injection vulnerability exposed via the mng_profile_id parameter. The issue allows an attacker to manipulate database queries and potentially extract sensitive data. Root cause is an injection flaw in the handling of mng_profile_id (network-accessible, low...
CVE-2019-25690 Kados R10 GreenBee SQL Injection via mng_profile_id
Kados R10 GreenBee contains an SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the mngprofileid parameter. Attackers can send crafted requests with malicious SQL payloads in the mngprofileid parameter to extract sensitive database...
CVE-2026-29923
creationtimestamp| type| source ---|---|--- 2026-04-05 20:00:04+00:00| seen| https://t.me/GithubRedTeam/78979 2026-04-10 13:00:04+00:00| seen| https://t.me/GithubRedTeam/79738 2026-04-10 21:03:04+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mj67urmbr52z 2026-04-13...
EUVD-2026-19111
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583
CVE-2026-5583 concerns PHPGurukul Online Shopping Portal Project 2.1. The vulnerability targets an unknown part of the file /my-profile.php in the Parameter Handler and arises from manipulating the argument fullname , which leads to a SQL injection. The issue is described as exploitable remotely ...
CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5583 PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection
A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotel...
CVE-2026-5572
creationtimestamp| type| source ---|---|--- 2026-04-05 15:58:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4jwnjg62d...
CVE-2026-5599
creationtimestamp| type| source ---|---|--- 2026-04-05 15:16:27+00:00| published-proof-of-concept| Telegram/bba5KoRxZjw4aUqHfMWZuI7ux2762ZWKOY2q9V8MiGPKQ0 2026-04-05 15:55:58+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mir4f2ag5j2j...
CVE-2026-5559
creationtimestamp| type| source ---|---|--- 2026-04-05 12:11:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpugsen52d...
CVE-2026-5564
creationtimestamp| type| source ---|---|--- 2026-04-05 12:10:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqpsnbbsk2i 2026-04-05 13:15:30+00:00| published-proof-of-concept| Telegram/YoTTVTi9Zv4k-o9HEVMgDeJ9GD4yUztoWynI9KgYScEME...
CVE-2026-5546
creationtimestamp| type| source ---|---|--- 2026-04-05 08:30:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqdjamnh72q...
CVE-2026-5542
creationtimestamp| type| source ---|---|--- 2026-04-05 08:15:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3miqcofacya2o...
CVE-2026-5544
A security flaw has been discovered in UTT HiPER 1250GW up to 3.2.7-210907-180535. The impacted element is an unknown function of the file /goform/formRemoteControl. The manipulation of the argument Profile results in stack-based buffer overflow. The attack can be executed remotely. The exploit h...