Lucene search
+L

8417 matches found

BDU FSTEC
BDU FSTEC
added 2025/07/15 12:00 a.m.13 views

The vulnerability of the NetMRI network monitoring program lies in its failure to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the NetMRI network monitoring program lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

7.7CVSS6.1AI score0.36408EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/15 12:00 a.m.13 views

The vulnerability of the NetMRI network monitoring program lies in its failure to protect the SQL query structure, allowing attackers to execute arbitrary code.

The vulnerability of the NetMRI network monitoring program lies in the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.0999EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
added 2025/07/15 12:00 a.m.12 views

Open Solutions For Education openSIS SQL注入漏洞

Open Solutions For Education openSIS is an open source student information management system from Open Solutions For Education. A security vulnerability exists in Open Solutions For Education openSIS version 9.1, which originates from a SQL injection in the parameter id in the file Ajax.php, whic...

8.1CVSS7.6AI score0.0046EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2025/07/15 12:00 a.m.13 views

The vulnerability of the “Tekon” SCADA system, related to the failure to implement protective measures for the SQL query structure, allows attackers to gain unauthorized access to protected information.

The vulnerability of the SCADA system “Tekon” is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

7.6CVSS5.6AI score
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2025/07/14 11:21 p.m.7 views

SUSE CVE-2025-53549

The Matrix Rust SDK is a collection of libraries that make it easier to build Matrix clients in Rust. An SQL injection vulnerability in the EventCache::findeventwithrelations method of matrix-sdk 0.11 and 0.12 allows malicious room members to execute arbitrary SQL commands in Matrix clients that...

7.7CVSS8.6AI score0.00272EPSS
SaveExploits0References3
OSV
OSV
added 2025/07/14 7:15 a.m.12 views

CVE-2025-7581

A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positionsedit.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The...

8.8CVSS5.7AI score0.00325EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.19 views

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the /WeGIA/html/socio/sistema/processadeletarsocio.php endpoint. An attacker could exploit this vulnerability to...

10CVSS7.9AI score0.00472EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.11 views

Code-Projects AVL Rooms 安全漏洞

Code-Projects AVL Rooms is an AVL room system from Code-Projects open source. A security vulnerability exists in Code-Projects AVL Rooms version 1.0, which stems from a SQL injection due to incorrect manipulation of the parameter city in the file /city.php...

9.8CVSS7.8AI score0.00399EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.10 views

Code-Projects Job Diary 注入漏洞

Job Diary is a job diary software. Job Diary suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter ID in the file /view-emp.php. An attacker can exploit this vulnerability to execute illegal SQL commands to steal...

9.8CVSS7.8AI score0.00396EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.10 views

PHPGurukul Online Fire Reporting System 安全漏洞

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter teamid in the file /admin/new-requests.php. An attacker ca...

8.8CVSS7AI score0.00325EPSS
SaveExploits1References5
Packet Storm News
Packet Storm News
added 2025/07/14 12:00 a.m.9 views

ARMOR: Aligning Secure and Safe Large Language Models Via Meticulous Reasoning

Large Language Models LLMs have demonstrated remarkable generative capabilities. However, their susceptibility to misuse has raised significant safety concerns. While post-training safety alignment methods have been widely adopted, LLMs remain vulnerable to malicious instructions that can bypass...

7.4AI score
SaveExploits0
CNNVD
CNNVD
added 2025/07/14 12:00 a.m.11 views

SEMCMS 安全漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that supports multiple languages. A security vulnerability exists in SEMCMS v5.0, which originates from SQL injection of the lgid parameter in SEMCMSProducts.php...

5.4CVSS7.9AI score0.00226EPSS
SaveExploits1References4
OSV
OSV
added 2025/07/13 3:15 a.m.8 views

CVE-2025-7512

A vulnerability was found in code-projects Modern Bag 1.0. It has been classified as critical. Affected is an unknown function of the file /contact-back.php. The manipulation of the argument contact-name leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.8AI score
SaveExploits0References5
CNNVD
CNNVD
added 2025/07/13 12:00 a.m.10 views

Code-Projects Online Book Shop 注入漏洞

Code-Projects Online Book Shop is Code-Projects open source an online bookstore . Code-Projects Online Book Shop version 1.0 suffers from an injection vulnerability that stems from SQL injection due to incorrect manipulation of the parameter cid in the file /getdoctordaybooking.php...

9.8CVSS7.8AI score0.00399EPSS
SaveExploits1References6
VulnCheck KEV
VulnCheck KEV
added 2025/07/13 12:00 a.m.7 views

VulnCheck KEV: CVE-2022-38627

Nortek Linear eMerge E3-Series 0.32-08f, 0.32-07p, 0.32-07e, 0.32-09c, 0.32-09b, 0.32-09a, and 0.32-08e were discovered to contain a SQL injection vulnerability via the idt parameter...

9.8CVSS5.9AI score0.04305EPSS
SaveIn wildExploits2References92
CNNVD
CNNVD
added 2025/07/13 12:00 a.m.12 views

Code-Projects Online Appointment Booking System 注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that stems from an error in the parameter doctorname in the file /ulocateus.php that lacks validation of externally entered SQL statements. An...

9.8CVSS8.1AI score0.00394EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/07/13 12:00 a.m.11 views

PHPGurukul Vehicle Parking Management System 安全漏洞

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /admin/manage-category.php. An attacker...

8.8CVSS8.2AI score0.00325EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/07/13 12:00 a.m.10 views

PHPGurukul Student Result Management System 注入漏洞

Student Result Management System is a student result management system. Student Result Management System suffers from a SQL injection vulnerability that stems from an error in the parameter nid in the file /notice-details.php that lacks validation of externally entered SQL statements. An attacker...

9.8CVSS8AI score0.00448EPSS
SaveExploits2References6
OSV
OSV
added 2025/07/12 5:15 p.m.7 views

CVE-2025-7481

A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been classified as critical. This affects an unknown part of the file /users/profile.php. The manipulation of the argument firstname leads to sql injection. It is possible to initiate the attack remotely. The...

8.8CVSS5.8AI score0.00325EPSS
SaveExploits1References5
Packet Storm News
Packet Storm News
added 2025/07/12 12:00 a.m.9 views

LLM-Stackelberg Games: Conjectural Reasoning Equilibria and Their Applications to Spearphishing

We introduce the framework of LLM-Stackelberg games, a class of sequential decision-making models that integrate large language models LLMs into strategic interactions between a leader and a follower. Departing from classical Stackelberg assumptions of complete information and rational agents, ou...

6.7AI score
SaveExploits0
Rows per page
Query Builder