Lucene search
K

7411 matches found

CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

COVID19 Testing Management System password-recovery.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. COVID19 Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter contactno in the file...

9.8CVSS7.8AI score0.00412EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

COVID19 Testing Management System /patient-report.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

9.8CVSS7.9AI score0.00412EPSS
Exploits1References1
CNVD
CNVD
added 2025/05/07 12:0 a.m.2 views

COVID19 Testing Management System test-details.php File SQL Injection Vulnerability

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Status in the /test-details.php...

9.8CVSS8.2AI score0.00478EPSS
Exploits1References1
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.4 views

Disable IP Forwarding

If a node does not function as a gateway server, disable the IP forwarding function. Otherwise, attackers can use the node as a router. In the container scenario, if network packets need to be forwarded through the host, IP forwarding is allowed. SPDX-FileCopyrightText: 2025 Greenbone AG Some tex...

6.9AI score
Exploits0References4
OpenVAS
OpenVAS
added 2025/05/07 12:0 a.m.6 views

Do Not Install the HTTP Service

HyperText Transfer Protocol HTTP is a simple request-response protocol and usually runs over TCP. It specifies what messages the client may send to the server and what responses the client receives. Request and response messages include headers in ASCII, and the message content often uses a...

7AI score
Exploits0References3
CNVD
CNVD
added 2025/05/07 12:0 a.m.1 views

Nipah virus Testing Management System patient-search-report.php file SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter searchdata in the file...

9.8CVSS8.3AI score0.00412EPSS
Exploits1References1
Packet Storm News
Packet Storm News
added 2025/05/07 12:0 a.m.4 views

Commvault Command Center Innovation Release 11.38 Remote Code Execution

Remote code execution exploit for Commvault Command Center version 11.38. Written in Python. This tool allows testing single targets or scanning multiple hosts in bulk...

10CVSS9.8AI score0.97134EPSS
Exploits5
GithubExploit
GithubExploit
added 2025/05/06 8:14 p.m.622 views

Exploit for CVE-2025-2011

CVE-2025-2011 - Depicter Plugin SQL Injection Vulnerability...

7.5CVSS7.8AI score0.34059EPSS
Exploits6
SUSE Linux
SUSE Linux
added 2025/05/06 11:49 a.m.3 views

Security update for java-17-openjdk

This update for java-17-openjdk fixes the following issues: Update to upstream tag jdk-17.0.15+6 April 2025 CPU CVEs: CVE-2025-21587: Fixed JSSE unauthorized access, deletion or modification of critical data bsc1241274 CVE-2025-30691: Fixed Oracle Java SE Compiler Unauthorized Data Access...

9.1CVSS7.2AI score0.00749EPSS
Exploits0References12
OSV
OSV
added 2025/05/06 3:15 a.m.4 views

CVE-2025-4306

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...

9.8CVSS5.8AI score0.00478EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/05/06 2:0 a.m.16 views

CVE-2025-4306 PHPGurukul Nipah Virus Testing Management System edit-phlebotomist.php sql injection

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /edit-phlebotomist.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...

7.5CVSS0.00478EPSS
Exploits1References5
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.5 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-58058)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58058 advisory. - In the Linux kernel, the following vulnerability has been resolved: ubifs: skip dumping tnc tree when zroot ...

5.5CVSS6AI score0.00187EPSS
Exploits0References2
BDU FSTEC
BDU FSTEC
added 2025/05/06 12:0 a.m.1 views

The vulnerability of the INDIGO testing system lies in the absence of restrictions on authentication attempts. This allows a perpetrator to carry out an attack using brute-force methods—automated password retrieval.

The vulnerability of the INDIGO testing system is related to the absence of restrictions on authentication attempts. Exploiting this vulnerability allows a perpetrator, operating remotely, to carry out an attack using brute-force methods automated password cracking...

7.8CVSS5.5AI score
Exploits0References2Affected Software1
Positive Technologies
Positive Technologies
added 2025/05/06 12:0 a.m.4 views

PT-2025-19815 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been found in the PHPGurukul Human Metapneumovirus Testing Management System. The problem affects an unknown functionality of the file...

9.8CVSS7.5AI score0.00478EPSS
Exploits1References10
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.16 views

CBL Mariner 2.0 Security Update: kernel (CVE-2024-58063)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-58063 advisory. - In the Linux kernel, the following vulnerability has been resolved: wifi: rtlwifi: fix memory leaks and...

5.5CVSS6AI score0.00187EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2025/05/06 12:0 a.m.6 views

Azure Linux 3.0 Security Update: kernel (CVE-2025-21920)

The version of kernel installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-21920 advisory. - In the Linux kernel, the following vulnerability has been resolved: vlan: enforce underlying device type...

7.1CVSS6.1AI score0.00178EPSS
Exploits0References2
OSV
OSV
added 2025/05/05 7:32 p.m.13 views

GHSA-C5VG-26P8-Q8CR Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack

Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...

6.8CVSS6.8AI score0.00411EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2025/05/05 7:32 p.m.27 views

Mobile Security Framework (MobSF) Allows Web Server Resource Exhaustion via ZIP of Death Attack

Vulnerable MobSF Versions: = v4.3.2 Details: MobSF is a widely adopted mobile application security testing tool used by security teams across numerous organizations. Typically, MobSF is deployed on centralized internal or cloud-based servers that also host other security tools and web application...

6.8CVSS6.8AI score0.00411EPSS
Exploits1References4Affected Software1
Wordfence Blog
Wordfence Blog
added 2025/05/05 2:32 p.m.22 views

WordPress Security Research Series: Setting Up Your Research Lab

Welcome to Part 3 of the WordPress Security Research Beginner Series! If you haven’t yet, take a minute to check out the series introduction to get a sense of what this series is all about. You’ll also want to catch up on Part 1, where we dig into WordPress request architecture and hooks, and Par...

9.8CVSS7.3AI score0.92319EPSS
Exploits4
CNNVD
CNNVD
added 2025/05/05 12:0 a.m.1 views

PHPGurukul Nipah virus Testing Management System 安全漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from improper manipulation of the parameter mobilenumber in the file /edit-phlebotomist.php, no details of the vulnerabili...

9.8CVSS7.8AI score0.00478EPSS
Exploits1References1
Rows per page
Query Builder