23420 matches found
PHPGurukul Vehicle Record Management System 安全漏洞
PHPGurukul Vehicle Record Management System is a vehicle record management system developed by PHPGurukul Corporation. Version 1.0 of the Phpgurukul Vehicle Record Management System contains a security vulnerability. This vulnerability arises from improper handling of the Name parameter input by...
Directory Traversal
Overview org.springframework.cloud:spring-cloud-config-server is a library that provides an HTTP resource-based API for external configuration. Affected versions of this package are vulnerable to Directory Traversal through the profile substitution logic in EnvironmentController,...
PT-2026-27186
Name of the Vulnerable Software and Affected Versions AVideo versions up to and including 26.0 Description A flaw exists in the order of operations during sanitization of the user profile "about" field. This allows any registered user to inject arbitrary JavaScript that executes when other users...
PT-2026-27270
Name of the Vulnerable Software and Affected Versions Spring Cloud versions 3.1.X through 3.1.12 Spring Cloud versions 4.1.X through 4.1.8 Spring Cloud versions 4.2.X through 4.2.2 Spring Cloud versions 4.3.X through 4.3.1 Spring Cloud versions 5.0.X through 5.0.1 Description A flaw exists in...
PT-2026-27233
Security Advisory — My Page Profile Update Improper Authorization Summary An improper authorization issue in the My Page profile update feature may allow modification of arbitrary user information. Affected Versions - 1.x series: = 1.41.0 - 2.x series: = 2.41.0 Patched Versions - 1.41.1 - 2.41.1...
CVE-2024-51223
A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...
CVE-2024-51223
A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Mobile Number parameter...
CVE-2024-51222
A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2024-51223
The CVE-2024-51223 entry describes a stored XSS in Phpgurukul Vehicle Record Management System v1.0, specifically in the /admin/profile.php component. An attacker can inject arbitrary script/HTML through the Mobile Number parameter, enabling execution in a victim’s browser. The available details ...
Simple E-Learning System SQL注入漏洞
Simple E-Learning System is a simple e-learning system developed by Carlo Montero as an individual project. Version 1.0 of Simple E-Learning System has a SQL injection vulnerability. This vulnerability stems from improper handling of the firstName parameter in the User Profile Update Handler...
PT-2026-27051
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-learning System version 1.0 Description A SQL injection issue exists in the User Profile Update Handler component. The manipulation of the firstName argument can lead to SQL injection. The exploit is publicly available...
CVE-2024-51222
A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2024-51222
A stored cross-site scripting XSS vulnerability in the component /admin/profile.php of Phpgurukul Vehicle Record Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter...
CVE-2026-33648
creationtimestamp| type| source ---|---|--- 2026-03-22 23:08:45+00:00| published-proof-of-concept| https://github.com/WWBN/AVideo/security/advisories/GHSA-5m4q-5cvx-36mw 2026-03-23 19:23:24+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrvxr6772u 2026-03-23 19:40:56+00:0...
CVE-2026-26136
creationtimestamp| type| source ---|---|--- 2026-03-22 19:38:52+00:00| seen| https://bsky.app/profile/wiert.bsky.social/post/3mhoccouttk2b...
CVE-2026-4551
creationtimestamp| type| source ---|---|--- 2026-03-22 16:34:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhnxyhx3sw2k...
CVE-2026-26209
creationtimestamp| type| source ---|---|--- 2026-03-22 15:57:00+00:00| published-proof-of-concept| https://github.com/agronholm/cbor2/security/advisories/GHSA-3c37-wwvx-h642 2026-03-23 19:23:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mhqrwh73uc2n 2026-03-25...
CVE-2019-25618
creationtimestamp| type| source ---|---|--- 2026-03-22 15:14:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhntjlhggc27...