Lucene search
+L

43238 matches found

ATTACKERKB
ATTACKERKB
added 2026/08/09 11:30 a.m.10 views

CVE-2026-19351

A vulnerability was found in dresende node-sql-query 0.1.25/0.1.26/0.1.27/0.1.28. Affected by this vulnerability is the function SelectQuery.from/SelectQuery.build in the library lib/Select.js of the component Request Parameter Handler. Performing a manipulation results in sql injection. It is...

7.5CVSS7AI score0.00504EPSS
SaveExploits0References9Affected Software1
CVE
CVE
added 2026/08/09 10:45 a.m.44 views

CVE-2026-19350

Dolibarr ERP TakePOS module vulnerability CVE-2026-19350 affects the function fail in htdocs/takepos/invoice.php. The issue enables manipulation that leads to missing authorization, with remote exploitation potential. A patch identified as 8992ce8704da947b6abe7b65a6fe59aed736bb81 is available; ap...

6.5CVSS5.9AI score0.0035EPSS
SaveExploits0References7
NVD
NVD
added 2026/08/09 10:17 a.m.8 views

CVE-2026-19345

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS0.00524EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 10:15 a.m.9 views

EUVD-2026-54916

A vulnerability was identified in itsourcecode Hospital Management System 1.0. This issue affects some unknown processing of the file /viewdoctor.php. Such manipulation of the argument delid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might b...

6.5CVSS5.4AI score0.002EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 10:15 a.m.46 views

CVE-2026-19347

The CVE-2026-19347 entry concerns itsourcecode Hospital Management System 1.0. A vulnerability exists in /viewdoctor.php where manipulating the delid argument enables SQL injection. This is a network-based issue with LOW/LOW- to MEDIUM-impact characteristics across confidentiality, integrity, and...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 10:0 a.m.39 views

CVE-2026-19346 Tenda CH22 CertListInfo formCertListInfo command injection

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formCertListInfo of the file /goform/CertListInfo. This manipulation of the argument Name causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may b...

9CVSS0.02216EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 10:0 a.m.63 views

CVE-2026-19346

CVE-2026-19346 affects Tenda CH22 firmware 1.0.0.1. The vulnerability is in the formCertListInfo function of /goform/CertListInfo, where manipulating the Name argument can trigger remote command injection. Exploitation is described as remote and has been publicly disclosed. CVSS metrics indicate ...

9CVSS7.8AI score0.02216EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 9:30 a.m.47 views

CVE-2026-19345

In code-projects Task Management System 1.0, the vulnerable component is the file /user/UpdateTaskStatus.php. The issue arises from manipulation of the arguments task_id/val, leading to missing authorization. It enables remote exploitation, and the exploit has been made public. No remediation ste...

6.9CVSS6.3AI score0.00524EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 9:30 a.m.38 views

CVE-2026-19345 code-projects Task Management System UpdateTaskStatus.php authorization

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument taskid/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public...

6.9CVSS0.00524EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 9:15 a.m.35 views

CVE-2026-19344 code-projects Task Management System comment_count_user.php sql injection

A vulnerability has been found in code-projects Task Management System 1.0. Affected by this issue is some unknown functionality of the file /user/commentcountuser.php. The manipulation of the argument taskid leads to sql injection. It is possible to initiate the attack remotely. The exploit has...

7.5CVSS0.00412EPSS
SaveExploits0References6
CVE
CVE
added 2026/08/09 9:15 a.m.42 views

CVE-2026-19344

CVE-2026-19344 affects the Code-Projects Task Management System 1.0. The vulnerability lies in the /user/comment_count_user.php component, where controlling the task_id parameter enables SQL injection. Exploitation is described as remote and the public exploit is disclosed; exploit maturity is la...

7.5CVSS7.2AI score0.00412EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/09 8:16 a.m.10 views

CVE-2026-19343

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00263EPSS
SaveExploits0References6
NVD
NVD
added 2026/08/09 8:16 a.m.8 views

CVE-2026-19342

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00405EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 7:45 a.m.38 views

CVE-2026-19343 code-projects Task Management System AdminLogin.php sql injection

A flaw has been found in code-projects Task Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/AdminLogin.php. Executing a manipulation of the argument email/password can lead to sql injection. The attack may be performed from remote. The exploit...

7.5CVSS0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/09 7:30 a.m.37 views

CVE-2026-19342 code-projects Task Management System Login index.php improper authentication

A vulnerability was detected in code-projects Task Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Password results in improper authentication. The attack is possible to be carried out remotely. The...

7.3CVSS0.00405EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/08/09 7:0 a.m.13 views

EUVD-2026-54910

A security vulnerability has been detected in UTT HiPER 1200GW up to 2.5.3-170306. This impacts the function strcpy of the file /goform/pptpSrvGlobalConfig. Such manipulation of the argument EncryptionMode leads to stack-based buffer overflow. The attack can be executed remotely. The exploit has...

9CVSS8.7AI score0.00441EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/08/09 6:45 a.m.3 views

CVE-2026-19340 anubissbe ProjectHub-Mcp Webhooks API complete_backend.js server-side request forgery

A weakness has been identified in anubissbe ProjectHub-Mcp up to 5.0.0. This affects an unknown function of the file backend-fix/completebackend.js of the component Webhooks API. This manipulation of the argument url causes server-side request forgery. Remote exploitation of the attack is possibl...

6.5CVSS6.2AI score0.00282EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/09 6:30 a.m.14 views

CVE-2026-19339

A security flaw has been discovered in aliyun alibabacloud-dataworks-mcp-server up to 1.0.43. The impacted element is the function ReadResourceRequestSchema of the file src/resources/initResources.ts. The manipulation of the argument request.params.uri results in server-side request forgery. The...

6.5CVSS6.3AI score0.00209EPSS
SaveExploits0References7Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/09 12:0 a.m.4 views

PT-2026-69289

Name of the Vulnerable Software and Affected Versions itsourcecode Hospital Management System version 1.0 Description A remote SQL injection exists due to improper processing of the /viewdoctor.php endpoint. An attacker can exploit this by manipulating the delid variable to execute unauthorized...

6.5CVSS6.7AI score0.002EPSS
SaveExploits0References10
EUVD
EUVD
added 2026/08/08 4:54 p.m.7 views

EUVD-2026-54806

D-Link DWR-M961 devices with hardware version C1 and firmware version before 1.1.5C1202607071108 contain a command injection vulnerability in the /boafrm/formL2tpv3ConfigSetup interface. A remote attacker can inject arbitrary malicious commands into the tunnelid and sessionid fields, resulting in...

9.8CVSS5.8AI score0.0213EPSS
SaveExploits0References3
Rows per page
Query Builder