290128 matches found
CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...
CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...
CVE-2026-105469
The girishsaraf Online-Appointment-Booking-System contains a SQL injection vulnerability within the AJAX Endpoint component, specifically affecting the get_town.php file. The flaw is triggered by manipulating the countryid , townid , cid , didval , or cidval arguments. This vulnerability can be e...
CVE-2026-105469 girishsaraf Online-Appointment-Booking-System AJAX Endpoint get_town.php sql injection
A vulnerability was determined in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This vulnerability affects unknown code of the file gettown.php of the component AJAX Endpoint. Executing a manipulation of the argument countryid/townid/cid/didval/cidv...
CVE-2025-60710
CVE-2025-60710 هذا هو PoC لثغرة تصعيد الامتيازات المحلية في المهمة المجدولة \Microsoft\Windows\WindowsAI\Recall\PolicyConfiguration. عند بدء هذه المهمة المجدولة، ستحاول عملية taskhostw.exe فتح الدليل C:\Users%username%\AppData\Local\CoreAIPlatform.00\UKP والبحث عن أدلة باستخدام عامل التصفية...
CVE-2020-10558
CVE-2020-10558 : Tesla Model S/3/X Déni de Service DoS Chercheur en sécurité : Jacob Archuleta @nullze 📝 Aperçu de la vulnérabilité Une vulnérabilité critique de déni de service DoS a été découverte dans les Tesla Model 3, Model S et Model X toutes les versions antérieures à 2020.4.10. Cette...
CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...
CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...
CVE-2026-105468 girishsaraf Online-Appointment-Booking-System Login mlogin.php mysqli_query sql injection
A vulnerability was found in girishsaraf Online-Appointment-Booking-System up to f427b4757128ca253d33d0cc4e87bbb9c999a4d5. This affects the function mysqliquery of the file Admin/mlogin.php of the component Login Handler. Performing a manipulation of the argument uname/pass results in sql...
CVE-2026-105468
The girishsaraf Online-Appointment-Booking-System is vulnerable to a SQL injection flaw within the Login Handler component, specifically affecting the mysqli_query function in the Admin/mlogin.php file. An attacker can initiate a remote attack by manipulating the uname or pass arguments. While th...
AZL-105959 CVE-2026-105773 affecting package clamav 1.5.4-2
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
EUVD-2026-92797
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-105773 Canimaan Software ClamXAV local privilege escalation
Canimaan Software ClamXAV versions 3.3 - 3.11 contains a local privilege escalation vulnerability in the Privileged Helper Tool caused by a race condition and insufficient file validation, allowing a local attacker to execute arbitrary code with system privileges. Fixed in 3.11.1...
CVE-2026-54424
CVE-2026-54424 استغلال Parsec لإصدارات Windows الأقل من 150-104a للحصول على: تنفيذ تعليمات برمجية عن بُعد بصلاحيات SYSTEM قراءة ملف عشوائية بصلاحيات SYSTEM التقاط هاش NTLM لصلاحيات SYSTEM تنبع عمليات الاستغلال من نفس الثغرة، لكن المسارات الفعلية تختلف. شرح تقني:...
CVE-2025-26264
CVE-2025-26264 CVE-2025-26264 - GeoVision GV-ASWeb version 6.1.2.0 ou inférieure contient une vulnérabilité d'exécution de code à distance RCE dans sa fonctionnalité Notification Settings. Un attaquant authentifié disposant des privilèges "System Settings" dans ASWeb peut exploiter cette faille...
CVE-2026-105679
Ghost is a Node.js content management system. From 6.22.1 until 6.64.0, Ghost restricted the content type used to serve uploaded files to prevent browsers from executing them. On sites using the default local storage adapter, this restriction was not applied, so files uploaded by any staff user...
CVE-2026-105650
Ghost is a Node.js content management system. From 2.1.0 until 6.64.0, embedding a URL from an attacker-controlled website could result in untrusted scripts being stored in post content. These scripts could run in the Ghost editor, on the published site, and in newsletter emails, possibly resulti...
CVE-2021-39408
CVE-2021-39408 توجد ثغرة Cross Site Scripting XSS انعكاسية في إصدارات متعددة من الإصدار 1.0 من تطبيق Online Student Rate System، والتي تسمح بتنفيذ أوامر JavaScript بشكل تعسفي. الصفحة المعرضة للثغرة على index.php، تكون المعامل page معرضًا للثغرة، مما يسمح للمهاجم بتضمين أي كود JavaScript داخل وسوم...
log4shell
log4shell نص برمجي بلغة Python لفحص نظام ملفات الخادم بحثًا عن ملفات log4j jar المعرضة للثغرات CVE-2021-44228 و CVE-2021-45046. يمر النص البرمجي عبر نظام الملفات بشكل متكرر بما في ذلك zip و ear و war للعثور على إصدارات log4j من 2. إلى 2.15 التي تحتوي على...