Lucene search
+L

8878 matches found

CNNVD
CNNVD
•added 2025/06/23 12:00 a.m.•12 views

Code-Projects Inventory Management System security vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the editCategoriesName parameter in the /phpaction/editCategories.php file for externally entered SQL statements. An...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/23 12:00 a.m.•18 views

Code-Projects Inventory Management System security vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the userid parameter in the /phpaction/changePassword.php file against an externally entered SQL statement. An...

9.8CVSS8.2AI score0.00498EPSS
SaveExploits1References2
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•13 views

SQL Injection Vulnerability in Changjitong T+ of Changjitong Information Technology Co. Ltd (CNVD-2025-17850)

T+ is a dynamic, intelligent and fashionable Internet management software, mainly for small and medium-sized industrial, trade and commerce enterprises with integrated financial and business applications, incorporating elements of socialization, mobility, Internet of Things, e-commerce and Intern...

8AI score
SaveExploits0
CNVD
CNVD
•added 2025/06/23 12:00 a.m.•21 views

Nipah virus Testing Management System /bwdates-report-ds.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

8.8CVSS8.3AI score0.00429EPSS
SaveExploits1References1
Packet Storm News
Packet Storm News
•added 2025/06/22 12:00 a.m.•13 views

Embedding Trust at Scale: Physics-Aware Neural Watermarking for Secure and Verifiable Data Pipelines

We present a robust neural watermarking framework for scientific data integrity, targeting high-dimensional fields common in climate modeling and fluid simulations. Using a convolutional autoencoder, binary messages are invisibly embedded into structured data such as temperature, vorticity, and...

6.9AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•17 views

PHPGurukul Art Gallery Management System Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter imageid in the file /admin/changepropic.php. An attacker...

8.8CVSS8.2AI score0.00452EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•19 views

PHPGurukul Art Gallery Management System Injection Vulnerability

Art Gallery Management System is an art gallery management system. Art Gallery Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter editid in the file /admin/changeimage.php. An attacker can...

8.8CVSS8.2AI score0.00452EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/21 12:00 a.m.•19 views

Code-Projects Simple Online Hotel Reservation System Injection Vulnerabilities

Simple Online Hotel Reservation System is a simple online hotel reservation system. Simple Online Hotel Reservation System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally-entered SQL statement in the parameter firstname in the file...

9.8CVSS8.2AI score0.00487EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/06/20 2:15 p.m.•29 views

CVE-2025-32753

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used in an SQL command 'SQL injection' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, informati...

7.8CVSS5.8AI score0.00191EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2025/06/20 4:15 a.m.•23 views

CVE-2025-6305

A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adminfeature.php. The manipulation of the argument productcode leads to sql injection. It is possible to initiate the attack remotely. The exploit...

9.8CVSS5.8AI score0.00481EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•10 views

Hospital Management System Injection Vulnerability

Hospital Management System is a hospital management software by Pon Aravind Boominathan, an individual developer. An injection vulnerability exists in Hospital Management System version 1.0, which results from SQL injection due to incorrect manipulation of parameter username1 in file /func3.php...

9.8CVSS7.7AI score0.00554EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•15 views

Code-Projects Simple Pizza Ordering System Injection Vulnerabilities

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the file /addmem.php. An attacker can exploit this vulnerability to execute illegal...

9.8CVSS8.1AI score0.00487EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•15 views

PHPGurukul Directory Management System injection vulnerability

Directory Management System is a directory management system. Directory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter adminname in the file /admin/admin-profile.php. An attacker can...

8.8CVSS8.2AI score0.00397EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2025/06/20 12:00 a.m.•15 views

Code-Projects Online Shoe Store Injection Vulnerability

Online Shoe Store is an online shoe store system. Online Shoe Store suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter pid in the file /admin/adminproduct.php. An attacker can exploit this vulnerability to...

9.8CVSS8.2AI score0.00514EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•21 views

gsf Base64 Encode

The vulnerability of the gsfbase64encodesimple function in the structured file library: The GNOME Project’s libgsf relies on the use of uninitialized variables. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

3.3CVSS5.4AI score
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•20 views

libgsf Code Execution

Vulnerability of the gsfpropertysettingscollec function in the structured file library: The GNOME Project’s libgsf is vulnerable to buffer overflow in dynamic memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

5.3CVSS6.6AI score
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/06/20 12:00 a.m.•24 views

libgsf Heap Buffer Overflow DoS

The vulnerability of the sortingkeycopy function in the structured file library of The GNOME Project’s libgsf is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality of the protected information...

3.3CVSS5.6AI score
SaveExploits0References3Affected Software2
Packet Storm News
Packet Storm News
•added 2025/06/19 12:00 a.m.•13 views

PRISON: Unmasking the Criminal Potential of Large Language Models

As large language models LLMs advance, concerns about their misconduct in complex social contexts intensify. Existing research overlooked the systematic understanding and assessment of their criminal capability in realistic interactions. We propose a unified framework PRISON, to quantify LLMs'...

7.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2025/06/18 12:00 a.m.•19 views

Chamilo LMS XML Sequence Arbitrary SQL

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of verification of the validity of XML objects’ sequences. Exploiting this vulnerability could allow an attacker, operating remotely, to execute arbitrary SQL queries...

9.4CVSS6AI score0.0057EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/06/18 12:00 a.m.•16 views

Chamilo LMS SQL Injection

The vulnerability of the Chamilo LMS, a system for electronic teaching and content management, lies in the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability could allow a malicious actor to execute arbitrary SQL queries remotely...

8.7CVSS6AI score0.02763EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder