Lucene search
+L

43234 matches found

CVE
CVE
added 2026/08/09 10:15 a.m.46 views

CVE-2026-19347

The CVE-2026-19347 entry concerns itsourcecode Hospital Management System 1.0. A vulnerability exists in /viewdoctor.php where manipulating the delid argument enables SQL injection. This is a network-based issue with LOW/LOW- to MEDIUM-impact characteristics across confidentiality, integrity, and...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 10:0 a.m.39 views

CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS0.02216EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 10:0 a.m.63 views

CVE-2026-19346

CVE-2026-19346 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the formCertListInfo function of /goform/CertListInfo, where manipulating the Name argument can trigger remote command injection. Exploitation is described as remote and has been publicly disclosed. CVSS metrics indicate ...

9CVSS7.8AI score0.02216EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 9:30 a.m.47 views

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

6.9CVSS6.3AI score0.00524EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 9:30 a.m.38 views

CVE-2026-19345 code-projects Task Management System UpdateTaskStatus.php authorization

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS0.00524EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 9:15 a.m.35 views

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00412EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 9:15 a.m.42 views

CVE-2026-19344

CVE-2026-19344 affects the Code-Projects Task Management System 1.0. The vulnerability lies in the /user/comment_count_user.php component, where controlling the task_id parameter enables SQL injection. Exploitation is described as remote and the public exploit is disclosed; exploit maturity is la...

7.5CVSS7.2AI score0.00412EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/09 8:16 a.m.10 views

CVE-2026-19343

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/09 8:16 a.m.8 views

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00405EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 7:45 a.m.38 views

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 7:30 a.m.37 views

CVE-2026-19342 code-projects Task Management System Login index.php improper authentication

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00405EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 7:0 a.m.13 views

EUVD-2026-54910

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

9CVSS8.7AI score0.00441EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/09 6:45 a.m.3 views

CVE-2026-19340 anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgery

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/completebackend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possibl...

6.5CVSS6.2AI score0.00282EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/09 6:30 a.m.14 views

CVE-2026-19339

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

6.5CVSS6.3AI score0.00209EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/09 12:0 a.m.4 views

PT-2026-69289

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection exists due to improper processing of the /viewdoctor.php endpoint. An attacker can exploit this by manipulating the delid variable to execute unauthorized...

6.5CVSS6.7AI score0.002EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/08/08 4:54 p.m.7 views

EUVD-2026-54806

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...

9.8CVSS5.8AI score0.0213EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/08 4:51 p.m.33 views

CVE-2026-71948 D-Link DWR-M961 Command Injection via /boafrm/formDebugDiagnosticRun

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formDebugDiagnosticRun interface. A remote attacker can inject arbitrary malicious commands into the host field, resulting in command execution...

9.8CVSS0.02086EPSS
SaveExploits0References3
CVE
CVE
added 2026/08/08 7:30 a.m.61 views

CVE-2026-19268

Summary of CVE-2026-19268 (abdullah1854 MCPGateway) : The vulnerability affects the MCPGateway project up to commit 549f494a9e363f40530149de324b8097de424230, specifically the Claude Usage Range Endpoint. The issue is in the function getUsageByDateRange within src/services/claude-usage.ts, where a...

6.5CVSS6.3AI score0.01067EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/08 7:30 a.m.42 views

CVE-2026-19268 abdullah1854 MCPGateway Claude Usage Range Endpoint claude-usage.ts getUsageByDateRange command injection

A vulnerability was identified in abdullah1854 MCPGateway up to 549f494a9e363f40530149de324b8097de424230. This impacts the function getUsageByDateRange of the file src/services/claude-usage.ts of the component Claude Usage Range Endpoint. The manipulation of the argument since leads to command...

6.5CVSS0.01067EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/08 6:45 a.m.66 views

CVE-2026-19263

INQUIRELAB mcp-bridge-api (up to b30a82aa1d1d1139e0de846c41c8aadee6e06114), specifically the Servers Endpoint component mcp-bridge.js, is affected by a command injection vulnerability triggered by manipulating the command/args argument. The issue allows remote initiation. The product uses a rolli...

7.5CVSS7.1AI score0.01336EPSS
SaveExploits0References7
Rows per page
Query Builder