27133 matches found
CVE-2026-6151
CVE-2026-6151 affects the code-projects Vehicle Showroom Management System 1.0. The vulnerability exists in /util/PaymentStatusFunction.php where manipulating the argument CUSTOMER_ID leads to SQL injection. The issue can be exploited remotely and the exploit is public. No remediation details are...
CVE-2026-6151 code-projects Vehicle Showroom Management System PaymentStatusFunction.php sql injection
A vulnerability was found in code-projects Vehicle Showroom Management System 1.0. This vulnerability affects unknown code of the file /util/PaymentStatusFunction.php. The manipulation of the argument CUSTOMERID results in sql injection. It is possible to launch the attack remotely. The exploit h...
CVE-2026-31283
In Totara LMS v19.1.5 and before, the forgot password API does not implement rate limiting for the target email address. which can be used for an Email Bombing attack. NOTE: the Supplier's position is that the pwresettime configuration defaults to 30 minutes, the pwresettime configuration is a ha...
PT-2026-32227
Name of the Vulnerable Software and Affected Versions Vehicle Showroom Management System version 1.0 Description A flaw exists in the /util/PaymentStatusFunction.php file within the Vehicle Showroom Management System. The CUSTOMER ID argument can be manipulated to cause a SQL injection. This can ...
Code-Projects Vehicle Showroom Management System SQL Injection Vulnerability
The Code-Projects Vehicle Showroom Management System is an open-source vehicle exhibition hall management system developed by Code-Projects. Version 1.0 of the Code-Projects Vehicle Showroom Management System contains a SQL injection vulnerability. This vulnerability arises from improper handling...
Eaton Active Devices Detection
The current plugin identifies Eaton devices that are still under active support. Eaton Lifecycle Statuses: - Active: Most current offering within a product category. - End of Life: Discontinued date announced - actively execute migrations and last time buys. Product generally orderable until the...
CVE-2026-6168
creationtimestamp| type| source ---|---|--- 2026-04-12 21:50:17+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116393942185014498 2026-04-13 07:47:14+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjeeshd4l727 2026-04-13 09:17:05+00:00| seen|...
MINI-WHHQ-M3PR-5M58
Bulletin has no description...
CVE-2026-6141
creationtimestamp| type| source ---|---|--- 2026-04-12 16:16:35+00:00| seen| https://www.incibe.es/incibe-cert/alerta-temprana/vulnerabilidades/cve-2026-6141 2026-04-13 02:53:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjduepjwot23...
MAL-2026-2611 Malicious code in upstart-lending-status (npm)
Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...
Malicious code in upstart-lending-status (npm)
Package is malware. It steals credentials, collects system info, and exfiltrates data to a remote server via postinstall script. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 627a2802a53ad7eb751fcac4b0a43245c6b0bf9e667db77051758b24d8bc4d96 The package...
Malicious code in upstart-loan-status (npm)
Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...
MAL-2026-2612 Malicious code in upstart-loan-status (npm)
Malicious package with postinstall script exfiltrating sensitive system data to a remote server. Multiple YARA rules and LLM analysis confirm. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2e7850b2e1fe8a8eeebd2a8593220743deeacbed610ada8e460fcd15bc51c732 The...
CVE-2026-6137
creationtimestamp| type| source ---|---|--- 2026-04-12 07:39:11+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116390595889322157 2026-04-13 01:17:42+00:00| published-proof-of-concept| Telegram/nag6kHTmr7R2m3RBAp9Z6zI9Kn5ruvnm4vlyMwU2lthiM 2026-04-13 01:21:07+00:00| seen|...
MINI-HFW7-GGC5-WP62
Bulletin has no description...
MINI-47R6-X374-3JC3
Bulletin has no description...
MINI-P43P-5V5J-Q82P
Bulletin has no description...
MINI-PQH5-96JF-34H4
Bulletin has no description...