Lucene search
+L

82721 matches found

OSV
OSV
added 2026/05/31 9:31 a.m.5 views

GHSA-7W7M-V5VP-W699 Aider is vulnerable to Code Injection via editor_coder.run function

A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...

6.3CVSS6.2AI score0.00242EPSS
SaveExploits0References7
NVD
NVD
added 2026/05/31 9:16 a.m.17 views

CVE-2026-10175

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS0.00242EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
added 2026/05/31 8:45 a.m.13 views

CVE-2026-10175 Aider-AI Aider Architect Mode auth.py editor_coder.run code injection

A security flaw has been discovered in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has bee...

6.5CVSS6.4AI score0.00242EPSS
SaveExploits0References6
CVE
CVE
added 2026/05/31 8:45 a.m.71 views

CVE-2026-10175

Affected software : Aider-AI Aider 0.86.3, Architect Mode. Vulnerable component : editor_coder.run in auth.py. Vulnerability : input manipulation enables code injection. Impact : remote execution possible over network; CVSS indicates MEDIUM with low confidentiality/integrity/availability impact. ...

6.5CVSS6.4AI score0.00242EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/31 8:0 a.m.8 views

CVE-2026-10174 Aider-AI Aider Pre-commit Hook args.py protection mechanism

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit ...

5.3CVSS5.6AI score
SaveExploits0References8
EUVD
EUVD
added 2026/05/31 8:0 a.m.17 views

EUVD-2026-33494

A vulnerability was identified in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. The attack may be launched remotely. The exploit ...

6.5CVSS6.3AI score0.00228EPSS
SaveExploits0References6
EUVD
EUVD
added 2026/05/31 4:45 a.m.19 views

EUVD-2026-33489

A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected by this vulnerability is the function ajaxforgotpassword of the file application/controllers/Login.php of the component Forgot Password Endpoint. The...

6.3CVSS5.1AI score0.00286EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/05/31 12:31 a.m.16 views

EUVD-2026-33475

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...

5.8CVSS5.7AI score0.00206EPSS
SaveExploits0References5
NVD
NVD
added 2026/05/31 12:16 a.m.19 views

CVE-2026-10155

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...

5.8CVSS0.00206EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2026/05/31 12:0 a.m.15 views

Bdtask Multi-Store Inventory Management System SQL注入漏洞

The Bdtask Multi-Store Inventory Management System is an inventory management system developed by the Bdtask company in Bangladesh. Version 1.0 of the Bdtask Multi-Store Inventory Management System has a SQL injection vulnerability. This vulnerability arises from the accountsreportsearch function...

5.8CVSS5.9AI score0.00206EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.23 views

PT-2026-45172

A vulnerability was detected in OUSL-GROUP-BrinaryBrains School Student Management System up to 1e70e5ad1125b86dca4ee086eb6bb121f17708b6. Affected by this vulnerability is the function ajax forgot password of the file application/controllers/Login.php of the component Forgot Password Endpoint. Th...

6.3CVSS5.1AI score0.00286EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.19 views

PT-2026-45203

A security flaw has been discovered in OFCMS up to 1.1.3. The impacted element is the function Query of the file ofcms-adminsrcmainjavacomofsoftcmsadmincontrollerComnController.java of the component ComnController. Performing a manipulation of the argument system.user.query results in sql...

6.5CVSS6.4AI score0.00196EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/05/31 12:0 a.m.29 views

PT-2026-45221

A weakness has been identified in OFCMS 1.1.3. The affected element is the function Query of the file ofcms-adminsrcmainjavacomofsoftcmsadmincontrollersystemSysUserController.java of the component JSON Query Interface. This manipulation causes sql injection. The attack may be initiated remotely...

6.5CVSS6.4AI score0.00192EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/05/30 11:30 p.m.8 views

CVE-2026-10155

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...

5.8CVSS5.7AI score0.00206EPSS
SaveExploits0References4Affected Software1
CVE
CVE
added 2026/05/30 11:30 p.m.35 views

CVE-2026-10155

The CVE-2026-10155 describes a SQL injection in Bdtask Multi-Store Inventory Management System 1.0, specifically in accounts_report_search (application/modules/accounts/controllers/Accounts.php of Accounts Report Handler). The vulnerability is triggered by manipulating the argument dtpToDate, ena...

5.8CVSS5.7AI score0.00206EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/05/30 11:30 p.m.53 views

CVE-2026-10155 Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...

5.8CVSS0.00206EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/30 11:30 p.m.12 views

CVE-2026-10155 Bdtask Multi-Store Inventory Management System Accounts Report Accounts.php accounts_report_search sql injection

A vulnerability was found in Bdtask Multi-Store Inventory Management System 1.0. The impacted element is the function accountsreportsearch of the file application/modules/accounts/controllers/Accounts.php of the component Accounts Report Handler. Performing a manipulation of the argument dtpToDat...

5.8CVSS5.6AI score0.00206EPSS
SaveExploits0References4
Circl
Circl
added 2026/05/30 4:10 p.m.17 views

CVE-2026-46242

creationtimestamp| type| source ---|---|--- 2026-05-30 16:10:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116664396126951795 2026-05-31 10:50:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116668800060725732 2026-06-01 02:58:37+00:00| seen|...

7.8CVSS7.2AI score0.03234EPSS
SaveExploits3References68
Circl
Circl
added 2026/05/30 8:16 a.m.20 views

CVE-2026-10126

creationtimestamp| type| source ---|---|--- 2026-05-30 08:16:21+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-10126 2026-05-30 19:34:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3sacepx62n 2026-05-30 20:00:42+00:00| seen|...

9CVSS7.7AI score0.00753EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/05/30 8:0 a.m.50 views

CVE-2026-10112 sambitraj STUDENT-MANAGEMENT-SYSTEM Dashboard cross site scripting

A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM 1.0. Affected is an unknown function of the component Dashboard Page. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the...

4.8CVSS0.00206EPSS
SaveExploits0References5
Rows per page
Query Builder