Lucene search
+L

39718 matches found

GithubExploit
GithubExploit
•added 2026/01/19 9:44 p.m.•297 views

Exploit for SQL Injection in Phpgurukul Job_Portal

CVE-2024-8465 – SQL Injection Proof of Concept Team Inform...

9.8CVSS6AI score0.00464EPSS
SaveExploits1
Cvelist
Cvelist
•added 2026/01/19 3:32 p.m.•43 views

CVE-2026-1160 PHPGurukul Directory Management System Search index.php sql injection

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS0.00379EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/01/19 12:00 a.m.•21 views

PT-2026-3447

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been...

7.5CVSS5.5AI score0.00379EPSS
SaveExploits1References6
CNVD
CNVD
•added 2026/01/19 12:00 a.m.•18 views

WordPress SearchWiz plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress SearchWiz plugin that stems from the use of escattr instead of eschtml to output post titles in search results, whic...

6.4CVSS6.3AI score0.00252EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/19 12:00 a.m.•7 views

CVE-2026-1160: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in PHPGurukul Directory Management System 1.0. Impacted is an unknown function of the file /index.php of the component Search. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been...

9.8CVSS6.9AI score0.00379EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2026/01/19 12:00 a.m.•21 views

The vulnerability of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing program SumatraPDF lies in the use of an insecure search path, allowing attackers to execute arbitrary code.

The vulnerability of the PDF, EPUB, MOBI, FB2, CHM, XPS, and DjVu viewing program SumatraPDF lies in the use of an unreliable search path during the processing of Advanced Options. Exploiting this vulnerability allows a attacker to execute arbitrary code by sending a specially created malicious...

8.6CVSS7.2AI score0.00227EPSS
SaveExploits1References3Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/01/19 12:00 a.m.•9 views

MiracleLinux 7 : openldap-2.4.44-22.el7 (AXSA:2020-606:03)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2020-606:03 advisory. CVE-2020-12243 In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service daemon cras...

7.5CVSS7.3AI score0.04718EPSS
SaveExploits1References2
GithubExploit
GithubExploit
•added 2026/01/18 6:24 a.m.•213 views

Exploit for CVE-2025-67261

CVE-2025-67261 - Content-based blind SQL injection on Abacre R...

8.1AI score0.00209EPSS
SaveExploits2
RedhatCVE
RedhatCVE
•added 2026/01/16 11:31 p.m.•17 views

CVE-2020-36926

SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique...

7.5CVSS6.3AI score0.00586EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2026/01/16 11:15 p.m.•18 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.8AI score0.00173EPSS
SaveExploits0References3
OSV
OSV
•added 2026/01/16 11:15 p.m.•22 views

UBUNTU-CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/01/16 10:45 p.m.•14 views

CVE-2026-22816

Gradle is a build automation tool, and its native-platform tool provides Java bindings for native APIs. When resolving dependencies in versions before 9.3.0, some exceptions were not treated as fatal errors and would not cause a repository to be disabled. If a build encountered one of these...

8.6CVSS5.7AI score0.00173EPSS
SaveExploits0References3Affected Software1
IBM Security Bulletins
IBM Security Bulletins
•added 2026/01/16 2:25 p.m.•33 views

Security Bulletin: Multiple security vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak

Summary Multiple vulnerabilities in RedHat UBI affect IBM Robotic Process Automation for Cloud Pak. RedHat UBI is used as base image for IBM Robotic Process Automation for Cloud Pak images. This bulletin identifies the fixes required to address the vulnerabilites. Vulnerability Details...

9.8CVSS6.7AI score0.01254EPSS
SaveExploits1Affected Software1
NVD
NVD
•added 2026/01/16 12:16 a.m.•20 views

CVE-2020-36926

SmarterTrack 7922 contains an information disclosure vulnerability in the Chat Management search form that reveals agent identification details. Attackers can access the vulnerable /Management/Chat/frmChatSearch.aspx endpoint to retrieve agents' first and last names along with their unique...

7.5CVSS0.00586EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
•added 2026/01/16 12:11 a.m.•11 views

CVE-2025-65118 AVEVA Process Optimization Uncontrolled Search Path Element

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

9.3CVSS7.4AI score0.00252EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2026/01/16 12:11 a.m.•53 views

CVE-2025-65118 AVEVA Process Optimization Uncontrolled Search Path Element

The vulnerability, if exploited, could allow an authenticated miscreant OS Standard User to trick Process Optimization services into loading arbitrary code and escalate privileges to OS System, potentially resulting in complete compromise of the Model Application Server...

9.3CVSS0.00252EPSS
SaveExploits0References4
CVE
CVE
•added 2026/01/16 12:11 a.m.•54 views

CVE-2025-65118

CVE-2025-65118 affects AVEVA Process Optimization. The issue is described as an Uncontrolled Search Path Element that could allow an authenticated OS Standard User to cause Process Optimization services to load arbitrary code, enabling privilege escalation to OS System and potentially complete co...

9.3CVSS7.4AI score0.00252EPSS
SaveExploits0References4Affected Software1
CNNVD
CNNVD
•added 2026/01/16 12:00 a.m.•39 views

SmarterTools SmarterTrack security vulnerabilities

SmarterTools SmarterTrack is a customer service software developed by SmarterTools Corporation. It can improve customer service and reduce support costs. Version 7922 of SmarterTools SmarterTrack contains a security vulnerability. This vulnerability stems from the Chat Management search form, whi...

7.5CVSS5.8AI score0.00586EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•4 views

CVE-2020-36930: Unquoted Search Path or Element

SysGauge Server 7.9.18 contains an unquoted service path vulnerability in its binary path configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in 'C:\Program Files\SysGauge Server\bin\sysgaus.exe' to inject malicious executables...

8.5CVSS6.6AI score0.00238EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/01/16 12:00 a.m.•5 views

CVE-2021-47805: Unquoted Search Path or Element

Disk Savvy 13.6.14 contains an unquoted service path vulnerability in its Windows service configuration that allows local attackers to potentially execute arbitrary code. Attackers can exploit the unquoted path in service binaries to inject malicious executables that will be run with elevated...

8.5CVSS6.5AI score0.00236EPSS
SaveExploits1References1
Rows per page
Query Builder