Lucene search
+L

20 matches found

Kitploit
Kitploit
•added 2026/10/21 7:24 a.m.•31 views

opac-fast-automation

CVE-2025-65862 — Documentation, Analysis, and Automation Tool Research Purposes Only ⚠️ Ethical & Legal Warning All materials in this repository are provided solely for: security research, learning, vulnerability analysis, and testing in environments you own or have explicit permission to test...

6.4AI score
SaveExploits0
NVD
NVD
•added 2026/10/19 5:17 p.m.•7 views

CVE-2026-107083

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

9.8CVSS0.00496EPSS
SaveExploits1References2
NVD
NVD
•added 2026/10/19 4:17 p.m.•7 views

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

9.8CVSS0.00487EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/10/19 12:00 a.m.•36 views

CVE-2026-107081

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

0.00487EPSS
SaveExploits1References2
CVE
CVE
•added 2026/10/19 12:00 a.m.•13 views

CVE-2026-107081

The SENAYAN Library Management System (SLiMS) Bulian 9.8.0 is vulnerable to SQL injection via identifier injection in three admin AJAX endpoints: admin/AJAX_lookup_handler.php, admin/AJAX_check_id.php, and admin/AJAX_vocabolary_control.php. The root cause is the direct interpolation of tableName ...

6AI score0.00487EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/10/19 12:00 a.m.•6 views

EUVD-2026-104452

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

6AI score0.00487EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/10/19 12:00 a.m.•5 views

PT-2026-117478

Name of the Vulnerable Software and Affected Versions SENAYAN Library Management System SLiMS Bulian version 9.8.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the...

9.8CVSS6AI score0.00496EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2026/10/19 12:00 a.m.•37 views

CVE-2026-107083

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

0.00496EPSS
SaveExploits1References2
EUVD
EUVD
•added 2026/10/19 12:00 a.m.•7 views

EUVD-2026-104519

SENAYAN Library Management System SLiMS Bulian slims9bulian 9.8.0 is vulnerable to SQL Injection in admin/modules/reporting/customs/dldetail.php via the parameter fileID...

9.8CVSS5.9AI score0.00496EPSS
SaveExploits1References2
CVE
CVE
•added 2026/10/19 12:00 a.m.•10 views

CVE-2026-107083

The SENAYAN Library Management System (SLiMS) Bulian (slims9_bulian) 9.8.0 is vulnerable to SQL Injection (CWE-89) due to improper neutralization of special elements in unquoted numeric contexts. The vulnerability exists in two admin modules: admin/modules/serial_control/subscription.php (via ite...

9.8CVSS5.8AI score0.00496EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/19 12:00 a.m.•4 views

CVE-2026-107081: Undefined Security Weakness

SQL injection via identifier injection in the tableName and tableFields POST parameters of admin AJAX endpoints admin/AJAXlookuphandler.php, admin/AJAXcheckid.php, admin/AJAXvocabolarycontrol.php in SENAYAN Library Management System SLiMS Bulian 9.8.0 allows any authenticated staff user to extrac...

9.8CVSS6AI score0.00487EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 3:38 a.m.•19 views

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

7.5CVSS6.5AI score0.00741EPSS
SaveExploits1References1
Mend
Mend
•added 2025/05/08 12:00 a.m.•10 views

CVE-2025-45820

Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/bibliography/popauthoredit.php...

6.9CVSS0.00319EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/05/08 12:00 a.m.•21 views

SLiMS 9 Bulian Security Vulnerabilities

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version 9.6.1, which originates...

6.5CVSS7.7AI score0.00319EPSS
SaveExploits1References2
Mend
Mend
•added 2024/02/21 12:00 a.m.•8 views

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

6.9CVSS0.00549EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2023/12/01 12:00 a.m.•22 views

SLiMS 9 Bulian SQL Injection Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. An SQL injection vulnerability exists in SLiMS 9 Bulian version v9.6.1, which...

8.8CVSS8AI score0.00746EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2023/10/31 12:00 a.m.•22 views

SLiMS 9 Bulian Security Vulnerability

SLiMS 9 Bulian is a free and open source software from the SLiMS community in Indonesia. It is used for library resource management e.g. books, journals, digital files and other library materials and administration. A security vulnerability exists in SLiMS 9 Bulian version v.9.6.1, which stems fr...

8.8CVSS8.3AI score0.01076EPSS
SaveExploits1References3
Mend
Mend
•added 2023/04/14 12:00 a.m.•8 views

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

8.7CVSS0.00741EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/04/14 12:00 a.m.•6 views

PT-2023-22446

Name of the Vulnerable Software and Affected Versions SENAYAN Library Management System SLiMS Bulian version 9.5.2 Description The issue allows attackers to obtain information such as the user's geolocation and device information because the system does not strip exif data from uploaded images...

7.5CVSS5.8AI score0.00741EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/14 12:00 a.m.•8 views

CVE-2023-29850: Observable Discrepancy

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

7.5CVSS5.8AI score0.00741EPSS
SaveExploits1References2
Rows per page
Query Builder