Lucene search
+L

149193 matches found

NVD
NVD
•added 2026/10/02 3:16 a.m.•9 views

CVE-2026-104123

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

7.5CVSS0.00329EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/02 2:45 a.m.•3 views

CVE-2026-104123 SourceCodester Online Reviewer Management System btn_functions.php activity sql injection

A vulnerability was detected in SourceCodester Online Reviewer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /reviewer0/admins/assessments/activities/btnfunctions.php?action=activity. The manipulation of the argument Title results in sql injection...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/02 2:45 a.m.•6 views

CVE-2026-104123

The SourceCodester Online Reviewer Management System 1.0 is vulnerable to SQL injection due to an unknown functionality in the file /reviewer_0/admins/assessments/activities/btn_functions.php?action=activity. By manipulating the Title argument, an attacker can execute arbitrary SQL commands. This...

7.5CVSS5.8AI score0.00329EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/02 2:29 a.m.•8 views

CVE-2017-7529-Nginx---Remote-Integer-Overflow-Exploit

Este repositorio no tiene un README...

7.5CVSS6.8AI score0.62597EPSS
SaveExploits6
NVD
NVD
•added 2026/10/02 2:17 a.m.•6 views

CVE-2026-104053

A vulnerability was identified in itsourcecode Pet Shop Management System 1.0. The impacted element is an unknown function of the file adminreservefilter.php. Such manipulation of the argument filter leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

6.5CVSS0.002EPSS
SaveExploits0References6
Nuclei
Nuclei
•added 2026/10/02 2:11 a.m.•76 views

Atlassian Jira Confluence - Cross-Site Scripting

Atlassian Jira Confluence before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4, and from version 7.9.0 before version 7.9.2, allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the error messa...

6.1CVSS6.8AI score0.37611EPSS
SaveExploits0References5
CVE
CVE
•added 2026/10/02 1:15 a.m.•6 views

CVE-2026-104053

The itsourcecode Pet Shop Management System 1.0 is vulnerable to SQL injection via an unknown function in the admin_reservefilter.php file. The flaw occurs because the filter argument is improperly handled, allowing for remote exploitation. While the documents do not provide specific remediation ...

6.5CVSS5.8AI score0.002EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/10/02 1:15 a.m.•4 views

CVE-2026-73637

A flaw was found in httpd's modauthdigest module. A use-after-free vulnerability allows an unauthenticated remote attacker to corrupt the server's authentication state by submitting concurrent Digest authentication requests. This issue occurs when specific configuration settings, such as nonce...

7.3CVSS6.5AI score0.00264EPSS
SaveExploits0References5
EUVD
EUVD
•added 2026/10/02 1:00 a.m.•6 views

EUVD-2026-91158

A vulnerability was determined in itsourcecode Pet Shop Management System 1.0. The affected element is an unknown function of the file adminrejectcompleted.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

5.3CVSS5.7AI score0.002EPSS
SaveExploits0References6
Kitploit
Kitploit
•added 2026/10/02 12:11 a.m.•13 views

CVE-2021-24086

CVE-2021-24086 This is a proof of concept for CVE-2021-24086 "Windows TCP/IP Denial of Service Vulnerability ", a NULL dereference in tcpip.sys patched by Microsoft in February 2021. According to this tweet, the vulnerability has been found by @piazzt. It is triggerable remotely by sending...

7.5CVSS7.8AI score0.58961EPSS
SaveExploits7References3
Redos
Redos
•added 2026/10/02 12:00 a.m.•2 views

ROS-20261002-73-0034

The vulnerability of the EXTRACT function in the PostgreSQL database management system is related to the lack of protective measures for SQL query structures. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

8.8CVSS7.3AI score0.00466EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/10/02 12:00 a.m.•2 views

PT-2026-104122

Release of unverified plaintext in the CCM CcmBlockCipher and DSTU 7624 CCM KCcmBlockCipher AEAD modes in Legion of the Bouncy Castle Inc. bc-csharp before 2.7.0 allows a remote attacker to obtain decryptions of ciphertexts of their choosing via forged messages sent to an application that lets th...

8.2CVSS6.2AI score0.00286EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/01 11:29 p.m.•11 views

CVE-2025-70886

CVE-2025-70886 Un exploit de Prueba de Concepto PoC para CVE-2025-70886, una vulnerabilidad de denegación de servicio persistente en Halo CMS v2.22.4 y anteriores que permite a atacantes remotos bloquear la interfaz de comentarios del administrador mediante el envío de payloads malformados...

7.5CVSS6.1AI score0.00468EPSS
SaveExploits2References5
Kitploit
Kitploit
•added 2026/10/01 11:16 p.m.•12 views

OpenSSH-CVE-2024-6387-Fix

Script de Mitigación de la Vulnerabilidad CVE-2024-6387 en OpenSSH Resumen Este script de Bash está diseñado para ayudar a mitigar la vulnerabilidad CVE-2024-6387 en OpenSSH. La vulnerabilidad afecta a ciertas versiones de OpenSSH y podría permitir que atacantes remotos no autenticados ejecuten...

8.1CVSS7.4AI score0.99506EPSS
SaveExploits71References1
RedHat Linux
RedHat Linux
•added 2026/10/01 11:06 p.m.•4 views

mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header

A flaw was found in the Golang MIME Multipurpose Internet Mail Extensions package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service...

7.5CVSS5.9AI score0.0056EPSS
SaveExploits0References8
Kitploit
Kitploit
•added 2026/10/01 10:43 p.m.•6 views

CVE-2014-0224

Este repositorio no tiene un README...

7.4CVSS6.9AI score0.95326EPSS
SaveExploits9
OSV
OSV
•added 2026/10/01 8:36 p.m.•2 views

CVE-2026-104020 Uncontrolled recursion in the Ion reader in Amazon Ion Python

Uncontrolled recursion in the Ion reader in Amazon Ion Python before 0.15.0 might allow a remote unauthenticated actor to crash the application using the library, resulting in a denial of service, via a crafted, deeply nested Ion value. To remediate this issue, users should upgrade to version...

8.7CVSS6AI score
SaveExploits0References5
EUVD
EUVD
•added 2026/10/01 6:29 p.m.•7 views

EUVD-2026-91008

Confluent Kafka Python client's HashiCorp Vault KMS integration could allow a remote attacker to obtain sensitive information due to improper TLS certificate validation...

7.4CVSS6AI score0.00202EPSS
SaveExploits0References1
Kitploit
Kitploit
•added 2026/10/01 6:20 p.m.•18 views

CVE-2025-62168

CVE-2025-62168 Divulgación de Información de Squid Proxy en el manejo de errores Escáner Detección y PoC "Debido a una falla al redactar las credenciales de Autenticación HTTP, Squid es vulnerable a un ataque de Divulgación de Información. Gravedad: Este problema permite que un script omita las...

10CVSS8.5AI score0.6336EPSS
SaveExploits1
RedhatCVE
RedhatCVE
•added 2026/10/01 5:22 p.m.•7 views

CVE-2026-102825

A flaw was found in russh. The server fails to enforce the configured limit on maximum authentication attempts during user authentication. An unauthenticated remote attacker can exploit this flaw by continuously submitting authentication requests over a single connection. This allows an attacker ...

3.7CVSS5.9AI score0.00282EPSS
SaveExploits0References6
Rows per page
Query Builder