Lucene search
+L

288371 matches found

Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•27 views

PT-2026-104720

A weakness has been identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This issue affects some unknown processing of the file signup.php of the component User Registration Endpoint. Executing a manipulation of th...

7.5CVSS6.9AI score0.00263EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
•added 2026/10/05 12:00 a.m.•17 views

RHEL 8 : mariadb-connector-c (RHSA-2026:75674)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:75674 advisory. The MariaDB Native Client library C driver is used to connect applications developed in C/C++ to MariaDB and MySQL databases. Security Fixes: mariad...

9.1CVSS8.2AI score0.01041EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
•added 2026/10/05 12:00 a.m.•17 views

Linux Distros Unpatched Vulnerability : CVE-2026-63268

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local te...

6.7CVSS5.8AI score0.00119EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•14 views

PT-2026-106474

Name of the Vulnerable Software and Affected Versions Porto Theme - Functionality versions prior to 3.9.4 Description An unauthenticated SQL Injection exists due to insufficient escaping of user-supplied parameters and a lack of proper preparation of SQL queries. This allows attackers to append...

9.3CVSS5.8AI score0.00243EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•11 views

PT-2026-104716

A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...

6.5CVSS6.5AI score0.002EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•17 views

CVE-2026-105185: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in itsourcecode Online Admission System 1.0. This affects an unknown function of the file /admin/examinee.php. Performing a manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•15 views

CVE-2026-105246: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Online Reviewer Management System 1.0. Impacted is an unknown function of the file /reviewer0/admins/assessments/Subject/btnfunctions.php?action=update. Performing a manipulation of the argument Subject results in sql injection. The attack can be...

7.5CVSS6.9AI score0.00269EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•16 views

CVE-2026-105254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Admission System 1.0. Impacted is an unknown function of the file /admin/schoolyear.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used...

6.5CVSS6.6AI score0.002EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•18 views

CVE-2026-63268: Exposure of Sensitive Information to an Unauthorized Actor

LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. A link of the sql type could name a folder of local text files as a database, so opening a document could read a local text file into the sheet. In fixed versions only the csv, html and xml...

6.7CVSS5.9AI score0.00119EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/05 12:00 a.m.•17 views

PT-2026-106268

A security flaw has been discovered in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. Impacted is an unknown function of the file signup.php of the component Registration Handler. The manipulation of the argument fname results in sql injection. The...

7.5CVSS6.7AI score0.00263EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/05 12:00 a.m.•15 views

CVE-2026-105168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

6.5CVSS6.3AI score0.002EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/05 12:00 a.m.•25 views

CVE-2026-88424

The software FineAdmin v1.0 contains a SQL injection vulnerability within the ButtonService.GetListByFilter() function. The flaw is triggered via the field/order parameter, which allows an attacker to execute crafted SQL statements to access sensitive database information . A Proof of Concept (Po...

9.8CVSS5.8AI score0.00336EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/10/05 12:00 a.m.•21 views

Adobe Campaign Classic SQL Injection

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.1CVSS7.7AI score0.00991EPSS
SaveExploits0References3
NVD
NVD
•added 2026/10/04 11:16 p.m.•18 views

CVE-2026-105166

A vulnerability was found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The affected element is the function insert of the file fooddonateform.php of the component Food Donation Form. Performing a manipulation of the...

7.5CVSS0.00269EPSS
SaveExploits0References6
NVD
NVD
•added 2026/10/04 11:16 p.m.•19 views

CVE-2026-105167

A vulnerability was determined in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. The impacted element is an unknown function of the file admin/donate.php. Executing a manipulation of the argument location can lead to sql...

7.5CVSS0.00269EPSS
SaveExploits0References6
Vulnrichment
Vulnrichment
•added 2026/10/04 11:15 p.m.•14 views

CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
CVE
CVE
•added 2026/10/04 11:15 p.m.•40 views

CVE-2026-105169

A security flaw exists in the Take Order Handler component of the kishor-23 food-waste-management-system . Specifically, an unknown function within the delivery/delivery.php file is vulnerable to SQL injection due to the improper handling of the order_id and delivery_person_id arguments. This vul...

7.5CVSS7AI score0.00263EPSS
SaveExploits0References6
Cvelist
Cvelist
•added 2026/10/04 11:15 p.m.•54 views

CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

7.5CVSS0.00263EPSS
SaveExploits0References6
osv_cve
osv_cve
•added 2026/10/04 11:15 p.m.•26 views

CVE-2026-105169 kishor-23 food-waste-management-system Take Order delivery.php sql injection

A security flaw has been discovered in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This impacts an unknown function of the file delivery/delivery.php of the component Take Order Handler. The manipulation of the argument...

6.9CVSS5.6AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2026/10/04 11:00 p.m.•53 views

CVE-2026-105168 kishor-23 food-waste-management-system Order Assignment Block admin.php sql injection

A vulnerability was identified in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file admin/admin.php of the component Order Assignment Block. The manipulation of the argument...

6.5CVSS0.002EPSS
SaveExploits0References6
Rows per page
Query Builder