Lucene search
+L

577 matches found

NVD
NVD
•added 2026/02/10 3:16 p.m.•15 views

CVE-2025-7347

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS0.00311EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2026/02/10 2:08 p.m.•11 views

CVE-2025-7347

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS5.4AI score0.00311EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2026/02/10 12:00 a.m.•16 views

Dinibh Patrol Tracking System 安全漏洞

Dinibh Patrol Tracking System is an inspection management platform developed by the Turkish company Dinibh. The versions of Dinibh Patrol Tracking System 10022026 and earlier contained security vulnerabilities. These vulnerabilities stemmed from bypassing authorization using user control keys,...

8.8CVSS5.8AI score0.00311EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/02/10 12:00 a.m.•14 views

PT-2026-7265

Name of the Vulnerable Software and Affected Versions Dinibh Patrol Tracking System versions through 10022026 Description An authorization bypass exists due to a user-controlled key issue in Dinibh Patrol Tracking System. This allows exploitation of trusted identifiers. The vendor was contacted...

8.8CVSS5.4AI score0.00311EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/10 12:00 a.m.•4 views

CVE-2025-7347: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key vulnerability in Dinibh Puzzle Software Solutions Dinibh Patrol Tracking System allows Exploitation of Trusted Identifiers. This issue affects Dinibh Patrol Tracking System: through 10022026. NOTE: The vendor was contacted early about this disclosu...

8.8CVSS5.8AI score0.00311EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/01/09 9:21 a.m.•17 views

CVE-2021-41156

anuko/timetracker is an, open source time tracking system. In affected versions Time Tracker uses browsertoday hidden control on a few pages to collect the today's date from user browsers. Because of not checking this parameter for sanity in versions prior to 1.19.30.5601, it was possible to craf...

6.8CVSS6AI score0.00494EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/07 9:42 a.m.•25 views

CVE-1999-0805

Novell NetWare Transaction Tracking System TTS in Novell 4.11 and earlier allows remote attackers to cause a denial of service via a large number of requests...

5CVSS6.9AI score0.01292EPSS
SaveExploits0References1
CNVD
CNVD
•added 2025/12/25 12:00 a.m.•27 views

Scholars Tracking System delete_user.php File SQL Injection Vulnerability

Scholars Tracking System is a scholars tracking system. Scholars Tracking System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in parameter ID in file /admin/deleteuser.php. An attacker can exploit this vulnerability to...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/20 3:12 p.m.•27 views

CVE-2025-14951

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/20 2:11 p.m.•24 views

CVE-2025-14950

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/20 4:17 a.m.•27 views

CVE-2025-14940

A vulnerability was determined in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /admin/deleteuser.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/19 3:31 p.m.•21 views

EUVD-2025-204540

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References7
EUVD
EUVD
•added 2025/12/19 3:31 p.m.•19 views

EUVD-2025-204535

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS7.2AI score0.00387EPSS
SaveExploits1References7
OSV
OSV
•added 2025/12/19 3:15 p.m.•19 views

CVE-2025-14951

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/19 3:15 p.m.•20 views

CVE-2025-14951

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

9.8CVSS0.00387EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/12/19 2:32 p.m.•50 views

CVE-2025-14951 code-projects Scholars Tracking System home.php sql injection

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/19 2:32 p.m.•33 views

CVE-2025-14951

CVE-2025-14951 affects Code-Projects Scholars Tracking System 1.0. The vulnerability is in the /home.php file where manipulation of the post_content parameter enables SQL injection. It can be exploited remotely; public disclosures exist. The available connected documents corroborate impact and re...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/12/19 2:32 p.m.•8 views

CVE-2025-14951 code-projects Scholars Tracking System home.php sql injection

A security vulnerability has been detected in code-projects Scholars Tracking System 1.0. The impacted element is an unknown function of the file /home.php. Such manipulation of the argument postcontent leads to sql injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS7AI score0.00387EPSS
SaveExploits1References5
OSV
OSV
•added 2025/12/19 2:15 p.m.•13 views

CVE-2025-14950

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/19 2:15 p.m.•21 views

CVE-2025-14950

A weakness has been identified in code-projects Scholars Tracking System 1.0. The affected element is an unknown function of the file /deletepost.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to t...

9.8CVSS0.00387EPSS
SaveExploits1References5
Rows per page
Query Builder