7417 matches found
CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection
A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...
CVE-2026-19342 code-projects Task Management System Login index.php improper authentication
A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...
PT-2026-69285
Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description Remote SQL injection is possible through the manipulation of the task id variable within the '/user/comment count user.php' endpoint. SQL injection is a technique where an attacker...
CVE-2026-19342: Improper Authentication
A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...
CVE-2026-19344: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...
PT-2026-69284
Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description A remote SQL injection exists in the /admin/AdminLogin.php endpoint. This issue occurs when the email and password variables are manipulated, allowing an attacker to execute...
PT-2026-69322
Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An issue exists in the processing of the '/user/CommentSave.php' endpoint. Remote attackers can trigger cross site scripting XSS—a technique used to inject malicious scripts into web...
CVE-2026-19345: Missing Authorization
A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...
CVE-2026-19343: Improper Neutralization of Special Elements used in an SQL Command
A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...
PT-2026-69286
Name of the Vulnerable Software and Affected Versions code-projects Task Management System version 1.0 Description An authorization bypass exists in the /user/UpdateTaskStatus.php endpoint. A remote attacker can exploit this by manipulating the task id/val argument, allowing unauthorized actions ...
Malicious code in statist-browser-typed-client-eventea.projects.pwahelp (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector abd82004d1cbf2e4b6a3c77f48293b0d9638fe59592eb40291b6a332121f6fe6 Package contains no code paths that read installer secrets, fetch and execute remote content, relay caller data to third-party destinations, or...
CVE-2026-19284
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
EUVD-2026-54784
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2026-19284 MauricioMilano coder-api Projects Endpoint projects.ts createProject command injection
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
CVE-2026-19284: Improper Neutralization of Special Elements used in a Command
A security vulnerability has been detected in MauricioMilano coder-api up to 1.1.0. Affected is the function createProject of the file src/core/projects.ts of the component Projects Endpoint. The manipulation leads to command injection. The attack must be carried out locally. The project was...
PT-2026-69197
Name of the Vulnerable Software and Affected Versions MauricioMilano coder-api versions prior to 1.1.1 Description Command injection is possible within the Projects Endpoint component. The issue resides in the createProject function located in the src/core/projects.ts file. This flaw allows a loc...
CVE-2026-70561
TestLink 1.9.20 and earlier is affected by an insecure direct object reference in the attachmentdownload.php endpoint. An authenticated user, including low-privilege guests, can read arbitrary attachments by supplying any integer attachment ID, bypassing per-project access checks. Attackers can e...