Lucene search
+L

89503 matches found

BDU FSTEC
BDU FSTEC
added 2026/07/20 12:0 a.m.6 views

The vulnerability of the Microsoft .NET software platform, related to improper encoding or escaping of output data, allows a perpetrator to execute an SSRF attack.

The vulnerability of the Microsoft .NET software platform is related to incorrect encoding or escaping of output data. Exploiting this vulnerability can allow a malicious actor to execute an SSRF attack remotely...

6.8CVSS5.7AI score0.0055EPSS
SaveExploits0References3Affected Software9
SUSE CVE
SUSE CVE
added 2026/07/19 5:43 p.m.7 views

SUSE CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/19 9:45 a.m.8 views

CVE-2026-16229

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5.3CVSS3.6AI score0.00273EPSS
SaveExploits0References6Affected Software1
Cvelist
Cvelist
added 2026/07/19 9:45 a.m.36 views

CVE-2026-16229 itsourcecode Courier Management System index.php cross site scripting

A flaw has been found in itsourcecode Courier Management System up to 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php. Executing a manipulation of the argument page can lead to cross site scripting. It is possible to launch the attack remotely. The exploit h...

5.3CVSS0.00273EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 9:15 a.m.36 views

CVE-2026-16227 SourceCodester Class and Exam Timetabling System edit_subject.php sql injection

A security vulnerability has been detected in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /editsubject.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/19 8:16 a.m.8 views

CVE-2026-16223

A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlBotSrc of the file backend/crm/src/main/java/cn/cordys/crm/system/service/IntegrationConfigService.java of the component Third Party Edit Endpoint. Executing a manipulation of the argument appSecret...

6.5CVSS0.00214EPSS
SaveExploits0References8
EUVD
EUVD
added 2026/07/19 7:15 a.m.13 views

EUVD-2026-45433

A vulnerability was determined in 1Panel-dev CordysCRM up to 1.4.1. Impacted is the function getSqlBotSrc of the file backend/crm/src/main/java/cn/cordys/crm/system/service/IntegrationConfigService.java of the component Third Party Edit Endpoint. Executing a manipulation of the argument appSecret...

6.5CVSS6.2AI score0.00214EPSS
SaveExploits0References8
NVD
NVD
added 2026/07/19 6:17 a.m.15 views

CVE-2026-16217

A security vulnerability has been detected in guohongze adminset up to 0.61. Affected by this vulnerability is an unknown functionality of the file delivery/deli.py of the component Delivery Deployment Endpoint. The manipulation of the argument projectid leads to authorization bypass. It is...

6.5CVSS0.0022EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/19 5:16 a.m.12 views

CVE-2026-16212

A vulnerability was identified in awesto django-shop up to 1.2.4. Affected is an unknown function of the file shop/models/inventory.py of the component Purchase Stock Handler. The manipulation leads to race condition. The attack is possible to be carried out remotely. The attack is considered to...

4.2CVSS0.00183EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 5:0 a.m.41 views

CVE-2026-16216 geex-arts django-jet OAuth cross-site request forgery

A weakness has been identified in geex-arts django-jet up to 1.0.8. Affected is an unknown function of the component OAuth Handler. Executing a manipulation can lead to cross-site request forgery. The attack may be performed from remote. The exploit has been made available to the public and could...

5.3CVSS0.00159EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/19 5:0 a.m.23 views

CVE-2026-16216

Geex-arts django-jet up to 1.0.8 contains a CSRF flaw in the OAuth Handler that can be exploited remotely. The vulnerability enables cross-site request forgery and is public, with no response from the project to the issue. The CVE reports a MEDIUM severity (CVSS 3.x/4.x family) and indicates no l...

5.3CVSS4.6AI score0.00159EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/19 3:16 a.m.10 views

CVE-2026-16206

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS0.00209EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/19 2:45 a.m.12 views

EUVD-2026-45419

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS4.8AI score0.00167EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/07/19 2:30 a.m.7 views

CVE-2026-16207 django-tastypie authentication.py ApiKeyAuthentication get request method with sensitive query strings

A vulnerability was detected in django-tastypie up to 0.15.1. Impacted is the function ApiKeyAuthentication of the file tastypie/authentication.py. The manipulation results in use of get request method with sensitive query strings. The attack can be launched remotely. This attack is characterized...

6.3CVSS4.4AI score0.00399EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/19 2:16 a.m.9 views

CVE-2026-16203

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be performed from remote. The exploit is...

5.1CVSS0.00199EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/19 2:15 a.m.48 views

CVE-2026-16206 django-oauth django-oauth-toolkit oauth2_validators.py _load_id_token session expiration

A security vulnerability has been detected in django-oauth django-oauth-toolkit 3.3.0. This issue affects the function loadidtoken of the file oauth2provider/oauth2validators.py. The manipulation leads to session expiration. The attack can be initiated remotely. The project was informed of the...

6.5CVSS0.00209EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/07/19 1:30 a.m.13 views

EUVD-2026-45414

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /forCYS.php. Such manipulation of the argument course leads to cross site scripting. The attack may be performed from remote. The exploit is...

5.1CVSS3.4AI score0.00199EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/07/19 12:45 a.m.8 views

CVE-2026-16201 zevorn rt-claw http_request net.c claw_net_post information disclosure

A vulnerability was found in zevorn rt-claw up to 0.2.0. Affected is the function clawnetget/clawnetpost of the file claw/services/tools/net.c of the component httprequest. The manipulation results in information disclosure. The attack can be executed remotely. The exploit has been made public an...

6.9CVSS5.4AI score0.00311EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/07/19 12:30 a.m.16 views

EUVD-2026-45406

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. T...

6.5CVSS6.2AI score0.00209EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/19 12:0 a.m.9 views

PT-2026-61042

A flaw has been found in django-tastypie up to 0.15.1. The affected element is the function CacheThrottle/CacheDBThrottle of the file tastypie/throttle.py. This manipulation causes race condition. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitability...

5CVSS4.7AI score0.00167EPSS
SaveExploits0References7
Rows per page
Query Builder