Lucene search
+L

43533 matches found

ATTACKERKB
ATTACKERKB
added 2026/05/26 12:30 a.m.10 views

CVE-2026-9518

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file viewstudents.php of the component Students Controller. The manipulation of the argument Name leads to cross site scripting. The attack is possible to be...

5.3CVSS4.2AI score0.00336EPSS
SaveExploits0References5
EUVD
EUVD
added 2026/05/26 12:30 a.m.23 views

EUVD-2026-31776

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file viewstudents.php of the component Students Controller. The manipulation of the argument Name leads to cross site scripting. The attack is possible to be...

5.3CVSS4.2AI score0.00336EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/26 12:16 a.m.16 views

CVE-2026-9517

A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can b...

7.5CVSS0.0039EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/26 12:00 a.m.17 views

CVE-2026-9517 hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control

A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can b...

7.5CVSS6.8AI score0.0039EPSS
SaveExploits0References5
CVE
CVE
added 2026/05/26 12:00 a.m.40 views

CVE-2026-9517

CVE-2026-9517 affects the hemant6488 CodeIgniter-StudentManagementSystem. The vulnerable element is an unknown function in the file /index.php/students/addStudentView of the Student Management Handler, where manipulation can lead to improper access controls. The issue is exploitable remotely and ...

7.5CVSS6.8AI score0.0039EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.25 views

PT-2026-43248

A vulnerability has been found in Totolink N300RH 6.1c.1353 B20190305. Affected is the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Web Management Interface. Such manipulation of the argument admpass leads to os command injection. The attack can be executed remotely...

10CVSS7AI score0.02133EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.31 views

PT-2026-43164

A vulnerability was identified in hemant6488 CodeIgniter-StudentManagementSystem. The impacted element is the function addStudent of the file view students.php of the component Students Controller. The manipulation of the argument Name leads to cross site scripting. The attack is possible to be...

5.3CVSS4.2AI score0.00336EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.26 views

PT-2026-43389

A vulnerability has been found in itsourcecode Student Transcript Processing System 1.0. This issue affects some unknown processing of the file /admin/modules/class/index.php?view=view. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit h...

7.5CVSS6.8AI score0.00259EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.46 views

PT-2026-43411

Name of the Vulnerable Software and Affected Versions JeecgBoot versions prior to 3.9.2 Description Improper access controls exist in the LoginController.selectDepart function within the /sys/selectDepart file. This flaw allows for remote exploitation. Recommendations Upgrade to version 3.9.2. As...

7.5CVSS7.1AI score0.00291EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.24 views

PT-2026-43181

A vulnerability has been found in itsourcecode Electronic Judging System 1.0. This affects an unknown part of the file /admin/edit judge.php. The manipulation of the argument judge id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and ma...

7.5CVSS6.8AI score0.00319EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.23 views

PT-2026-43160

A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can b...

7.5CVSS6.8AI score0.0039EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.25 views

PT-2026-43387

A vulnerability was detected in itsourcecode Student Transcript Processing System 1.0. This affects an unknown part of the file /admin/modules/student/index.php?view=view. Performing a manipulation of the argument studentId results in sql injection. The attack can be initiated remotely. The explo...

7.5CVSS7AI score0.00259EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.20 views

PT-2026-43180

A flaw has been found in xianrendzw EasyReport up to 2.0.17.0522 Beta. Affected by this issue is the function execute of the component REST Endpoint. Executing a manipulation of the argument reportParams can lead to sql injection. The attack can be launched remotely. The vendor was contacted earl...

6.5CVSS6.4AI score0.00246EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.32 views

PT-2026-43183

A vulnerability was found in itsourcecode Electronic Judging System 1.0. This vulnerability affects unknown code of the file /admin/edit team.php. The manipulation of the argument num id results in sql injection. The attack may be launched remotely. The exploit has been made public and could be...

7.5CVSS6.9AI score0.00319EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.36 views

PT-2026-43249

A vulnerability was found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 10. Affected by this vulnerability is an unknown functionality of the file /api/Dinner/PayConfig. Performing a manipulation of the argument tableno results in sql injection. The attack is possible...

7.5CVSS6.8AI score0.00259EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.23 views

PT-2026-43178

A security vulnerability has been detected in fraillt bitsery up to 5.2.4. Affected is the function loadFromSharedState in the library include/bitsery/ext/std smart ptr.h. Such manipulation leads to improper validation of specified type of input. It is possible to launch the attack remotely. The...

7.5CVSS6.6AI score0.00401EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/05/26 12:00 a.m.31 views

PT-2026-43372

A vulnerability was identified in teableio teable up to 1.9.x. This impacts an unknown function of the file apps/nextjs-app/src/features/auth/pages/LoginPage.tsx of the component Sign-up. The manipulation of the argument redirect leads to cross site scripting. The attack is possible to be carried...

5.3CVSS4.1AI score0.00282EPSS
SaveExploits0References8
NVD
NVD
added 2026/05/25 11:16 p.m.30 views

CVE-2026-9512

A security flaw has been discovered in Totolink CA750-PoE 6.2c.510. This vulnerability affects the function setPasswordCfg of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. Performing a manipulation of the argument admuser/admpass results in os command injection. The attack can b...

6.5CVSS0.01057EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/25 11:15 p.m.13 views

CVE-2026-9515 Totolink CA750-PoE Setting cstecgi.cgi setUnloadUserData os command injection

A vulnerability was detected in Totolink CA750-PoE 6.2c.510. The affected element is the function setUnloadUserData of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument pluginversion results in os command injection. The attack may be launched remotel...

6.5CVSS6.4AI score0.10811EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/05/25 10:45 p.m.12 views

CVE-2026-9514 Totolink CA750-PoE Setting cstecgi.cgi setNetworkDiag os command injection

A security vulnerability has been detected in Totolink CA750-PoE 6.2c.510. Impacted is the function setNetworkDiag of the file /cgi-bin/cstecgi.cgi of the component Setting Handler. The manipulation of the argument NetDiagHost/NetDiagPingNum/NetDiagPingSize/NetDiagPingTimeOut/NetDiagTracertHop is...

6.5CVSS6.4AI score0.10811EPSS
SaveExploits0References5
Rows per page
Query Builder