CVE-2023-36159

CVE-2023-36159 Vulnerabilidad de Cross Site Scripting XSS en sourcecodester Lost and Found Information System 1.0 permite a atacantes remotos ejecutar código arbitrario a través de los campos Nombre, Segundo Nombre y Apellido en la página Crear Usuario...

CVE-2022-22029-NFS-Server-

Vulnerabilidad de ejecución remota de código en el Sistema de archivos de red de Windows CVE-2022-22039 Para explotar esta vulnerabilidad con éxito, un atacante debe ganar una condición de carrera. Realizar una llamada no autenticada y cuidadosamente construida a un servicio del Sistema de archiv...

CVE-2020-13159

CVE-2020-13159 - Artica Proxy anterior a 4.30.000000 Community Edition permite múltiples inyecciones de comandos del sistema operativo. Descripción del producto: Artica Tech ofrece una solución potente pero fácil de usar, normalmente reservada para grandes empresas y multinacionales. Con un preci...

CVE-2026-92253

WatchDog Anti-Virus 1.8.640 on Windows is affected by an improper link resolution vulnerability in its quarantine restoration process . A local, low-privileged attacker can create a directory junction at the original path of a quarantined file and, by persuading an administrator to restore that f...

CVE-2026-93997

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/editsymptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-94016

A cross-site scripting (XSS) flaw was identified in SourceCodester Drug Recommendation System 1.0 , specifically in the /drug_recommender/Admin/add_symptom endpoint. Manipulating the txtname parameter allows an authenticated remote attacker to inject and execute arbitrary script content, resultin...

EUVD-2026-83739

A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. This impacts an unknown function of the file /drugrecommender/Admin/addsymptom. Performing a manipulation of the argument txtname results in cross site scripting. Remote exploitation of the attack is possible. T...

CVE-2026-92254 WatchDog Antivirus kernel driver arbitrary file deletion via unauthenticated IOCTL

Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in Watchdog WatchDog Antivirus 1.8.640 driver versions 1.3.0.0 and earlier on Microsoft Windows allows local, low-privileged attackers to delete arbitrary files with SYSTEM privileges, bypassing NTFS access controls and...

CVE-2026-94015

A SQL injection vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the file /drug_recommender/Admin/edit_user.php . Manipulating the ID argument allows an unauthenticated, remote attacker to execute arbitrary SQL. The CVSS 3.1 score is 7.3 (HIGH) , reflecting ...

EUVD-2026-83736

A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file /drugrecommender/Admin/edituser.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available an...

-CVE-2025-8088

-CVE-2025-8088 Script de PowerShell para comprobar si tu dispositivo está afectado o no 🚨 ¡Alerta de CVE-2025-8088: WinRAR Zero-Day! 🚨 Una vulnerabilidad crítica de WinRAR CVE-2025-8088 está dando de qué hablar: los atacantes pueden explotar esta falla en versiones 7.13 para ejecutar código...

CVE-2026-93979

A security flaw has been discovered in code-projects Internship Management System 1.0. This affects an unknown part of the file /employer/login.php. Performing a manipulation of the argument Password results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2026-93980

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...

CVE-2026-93978

A vulnerability was identified in code-projects Internship Management System 1.0. Affected by this issue is some unknown functionality of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be executed remotely. The exploit is publicly available...

CVE-2026-93997

A SQL injection vulnerability exists in SourceCodester Drug Recommendation System 1.0 , specifically in the /Admin/edit_symptom.php file. The vulnerability is triggered by unsanitized input in the ID argument, allowing a remote, unauthenticated attacker to manipulate database queries. CVSS 3.1 sc...

EUVD-2026-83729

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/editsymptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-93997 SourceCodester Drug Recommendation System edit_symptom.php sql injection

A weakness has been identified in SourceCodester Drug Recommendation System 1.0. Affected by this issue is some unknown functionality of the file /Admin/editsymptom.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has...

CVE-2026-93980 code-projects Internship Management System Admin Login Form login.php sql injection

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...

CVE-2026-93980

A SQL injection vulnerability in the code-projects Internship Management System 1.0 affects the Admin Login Form (/admin/login.php). Manipulating the Password argument allows a remote, unauthenticated attacker to inject SQL, potentially compromising confidentiality, integrity, and availability. T...

EUVD-2026-83723

A weakness has been identified in code-projects Internship Management System 1.0. This vulnerability affects unknown code of the file /admin/login.php of the component Admin Login Form. Executing a manipulation of the argument Password can lead to sql injection. The attack may be performed from...