Lucene search
+L

222 matches found

CNNVD
CNNVD
added 2025/08/15 12:00 a.m.9 views

Projectworlds Travel management System 注入漏洞

Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameters t1/s1 in file /updatesubcategory.php. An attacker can exploit this vulnerabili...

9.8CVSS8.2AI score0.00451EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/08/15 12:00 a.m.8 views

Projectworlds Travel management System 安全漏洞

Projectworlds Travel management System is a travel management system from Projectworlds India. A security vulnerability exists in Projectworlds Travel management System version 1.0, which is caused by SQL injection due to improper handling of parameter t1 in file /updatecategory.php...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/15 12:00 a.m.10 views

PT-2025-33477 · Projectworlds · Travel Management System

Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A vulnerability exists in projectworlds Travel Management System 1.0, affecting an unknown functionality within the /addcategory.php file. Manipulation of the t1 argument results...

9.8CVSS7.4AI score0.00421EPSS
SaveExploits1References9
RedhatCVE
RedhatCVE
added 2025/05/23 8:55 a.m.14 views

CVE-2024-0816

The buffer overflow vulnerability in the DX3300-T1 firmware version V5.50ABVY.4C0 could allow an authenticated local attacker to cause denial of service DoS conditions by executing the CLI command with crafted strings on an affected device...

5.5CVSS7.2AI score0.00145EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 8:19 a.m.21 views

CVE-2024-10427

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS7.5AI score0.00534EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 5:01 p.m.9 views

CVE-2020-27282

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files...

4.3CVSS6.5AI score0.00253EPSS
SaveExploits0
CNNVD
CNNVD
added 2025/05/09 12:00 a.m.12 views

CampCodes Online Food Ordering System 注入漏洞

CampCodes Online Food Ordering System is an online food ordering system from CampCodes, Inc. An injection vulnerability exists in version 1.0 of the CampCodes Online Food Ordering System, which originates from an SQL injection caused by the operation of parameter t1verified in file...

9.8CVSS7.9AI score0.00668EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/05/07 8:12 a.m.7 views

Malicious code in internal-lib-t1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0656cbf9afeeae51e03fe153910e1dad3a3840f219effb0583665acdfefb34ca Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2025/03/25 9:15 p.m.2 views

DEBIAN-CVE-2025-27830

An issue was discovered in Artifex Ghostscript before 10.05.0. A buffer overflow occurs during serialization of DollarBlend in a font, for base/writet1.c and psi/zfapi.c...

7.8CVSS6.7AI score0.00283EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/03/13 3:43 a.m.13 views

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS7.6AI score0.0106EPSS
SaveExploits0References1
OSV
OSV
added 2025/03/11 2:15 a.m.9 views

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS5.9AI score0.0106EPSS
SaveExploits0References1
NVD
NVD
added 2025/03/11 2:15 a.m.13 views

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS0.0106EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/03/11 1:37 a.m.7 views

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS7.2AI score0.0106EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/03/11 1:37 a.m.22 views

CVE-2024-12009

A post-authentication command injection vulnerability in the "ZyEE" function of the Zyxel EX5601-T1 firmware version V5.70ACDZ.3.6C0 and earlier could allow an authenticated attacker with administrator privileges to execute operating system OS commands on a vulnerable device...

7.2CVSS0.0106EPSS
SaveExploits0References1
CVE
CVE
added 2025/03/11 1:37 a.m.54 views

CVE-2024-12009

CVE-2024-12009 : A post-authentication command injection in the ZyEE function affects Zyxel EX5601-T1 firmware up to V5.70(ACDZ.3.6)C0 and earlier, allowing an authenticated administrator to execute OS commands on the device. Documented impact is high (C/H/I/A) with network access and no user int...

7.2CVSS7.9AI score0.0106EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2025/03/11 12:00 a.m.8 views

Zyxel EX5601-T1 操作系统命令注入漏洞

Zyxel EX5601-T1 is a dual-band wireless gateway from China Hopkins Zyxel. Operating system command injection vulnerability exists in Zyxel EX5601-T1 V5.70ACDZ.3.6C0 and earlier versions, which stems from a command injection in ZyEE functions that could lead to the execution of operating system...

7.2CVSS7.5AI score0.0106EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 5:06 a.m.7 views

CVE-2024-10336

A vulnerability was found in SourceCodeHero Clothes Recommendation System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/index.php of the component Admin Login Page. The manipulation of the argument t1 leads to sql injection. The attack may be...

9.8CVSS7.2AI score0.00633EPSS
SaveExploits0References1
NVD
NVD
added 2024/10/27 8:15 p.m.30 views

CVE-2024-10427

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS0.00534EPSS
SaveExploits1References4
OSV
OSV
added 2024/10/27 8:15 p.m.10 views

CVE-2024-10427

A vulnerability was found in Codezips Pet Shop Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /deleteanimal.php. The manipulation of the argument t1 leads to sql injection. The attack can be initiated remotely. The exploit has been...

9.8CVSS5.7AI score0.00534EPSS
SaveExploits1References4
CNNVD
CNNVD
added 2024/10/27 12:00 a.m.8 views

Codezips Pet Shop Management System SQL注入漏洞

Codezips Pet Shop Management System is a Codezips open source pet store management system. Codezips Pet Shop Management System version 1.0 has a SQL injection vulnerability, the vulnerability stems from improper handling of the t1 parameter in the /deleteanimal.php file resulting in SQL injection...

9.8CVSS7.1AI score0.00534EPSS
SaveExploits1References4
Rows per page
Query Builder