Lucene search
+L

7137 matches found

CNNVD
CNNVD
added 2025/08/13 12:00 a.m.11 views

SourceCodester COVID 19 Testing Management System 注入漏洞

SourceCodester COVID 19 Testing Management System is a SourceCodester open source web-based application that provides an online platform for personal and Covid test management to manage individual testing processes and results. An injection vulnerability exists in version 1.0 of the SourceCodeste...

9.8CVSS7.8AI score0.00421EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.20 views

PT-2025-33064 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A SQL injection issue exists in code-projects Job Diary 1.0. The vulnerability affects an unknown functionality within the /user-apply.php file. Manipulation of the job title argument can lead ...

9.8CVSS7.4AI score0.0044EPSS
SaveExploits1References10
Positive Technologies
Positive Technologies
added 2025/08/13 12:00 a.m.15 views

PT-2025-33098 · Code Projects · Medical Store Management System

Name of the Vulnerable Software and Affected Versions: code-projects Medical Store Management System version 1.0 Description: A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation o...

8.8CVSS8.1AI score0.00391EPSS
SaveExploits1References11
CNNVD
CNNVD
added 2025/08/13 12:00 a.m.10 views

itsourcecode Sports Management System 注入漏洞

Sports Management System a sports management system. The Sports Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter code in the file /Admin/match.php. An attacker can exploit this vulnerabilit...

9.8CVSS7.9AI score0.00417EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2025/08/12 12:30 p.m.24 views

Bouncy Castle for Java on All (API modules) allows Excessive Allocation

A resource allocation vulnerability exists in Bouncy Castle for Java by Legion of the Bouncy Castle Inc. that affects all API modules. The vulnerability allows attackers to cause excessive memory allocation through unbounded resource consumption, potentially leading to denial of service. The issu...

6.3CVSS6.9AI score0.00541EPSS
SaveExploits0References5Affected Software7
Vulnrichment
Vulnrichment
added 2025/08/12 9:13 a.m.4 views

CVE-2025-8885 Possible DOS in processing specially formed ASN.1 Object Identifiers

Allocation of Resources Without Limits or Throttling vulnerability in Legion of the Bouncy Castle Inc. BC Java bcprov on All API modules, Legion of the Bouncy Castle Inc. BC-FJA bc-fips on All allows Excessive Allocation. This vulnerability is associated with program files...

6.3CVSS6.2AI score0.00541EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/12 12:00 a.m.19 views

PT-2025-32637

Name of the Vulnerable Software and Affected Versions: Bouncy Castle for Java versions 1.0 through 1.77 Bouncy Castle for Java - FJA versions 1.0.0 through 2.0.0 Description: A resource allocation issue exists in Bouncy Castle for Java affecting all API modules. The vulnerability allows attackers...

6.3CVSS6.7AI score0.00541EPSS
SaveExploits0References19
NVD
NVD
added 2025/08/11 3:15 p.m.11 views

CVE-2025-8859

A vulnerability was identified in code-projects eBlog Site 1.0. Affected by this vulnerability is an unknown functionality of the file /native/admin/save-slider.php of the component File Upload Module. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit...

8.8CVSS0.00332EPSS
SaveExploits1References5
NVD
NVD
added 2025/08/09 8:15 p.m.12 views

CVE-2025-8773

A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/logingetPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. It is possible ...

9.8CVSS0.00632EPSS
SaveExploits1References4
CVE
CVE
added 2025/08/09 8:02 p.m.50 views

CVE-2025-8773

CVE-2025-8773 concerns Dinstar Monitoring Platform (甘肃省危险品库监控平台) 1.0. The vulnerability is a SQL injection in an unknown function of the file /itc/${appPath}/login_getPasswordErrorNum.action triggered by manipulating userBean.loginName. Impact is described as remote exploit enabling full impact o...

9.8CVSS7.4AI score0.00632EPSS
SaveExploits1References4Affected Software1
Positive Technologies
Positive Technologies
added 2025/08/09 12:00 a.m.18 views

PT-2025-32454 · Dinstar · Dinstar Monitoring Platform

Name of the Vulnerable Software and Affected Versions: Dinstar Monitoring Platform version 1.0 Description: A critical vulnerability exists in Dinstar Monitoring Platform 甘肃省危险品库监控平台. The issue is a SQL injection vulnerability stemming from the manipulation of the userBean.loginName argument with...

7.5CVSS8AI score0.00632EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2025/08/08 12:00 a.m.11 views

Wanzhou WOES Intelligent Optimization Energy Saving System 注入漏洞

Wanzhou WOES Intelligent Optimization Energy Saving System is an Intelligent Optimization Energy Saving System from the Chinese company Wanzhou. An injection vulnerability exists in version 1.0 of the Wanzhou WOES Intelligent Optimization Energy Saving System, which is caused by an incorrect...

8.8CVSS7AI score0.0034EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/08 12:00 a.m.10 views

Wanzhou WOES Intelligent Optimization Energy Saving System 安全漏洞

Wanzhou WOES Intelligent Optimization Energy Saving System is an Intelligent Optimization Energy Saving System from Wanzhou, China. A security vulnerability exists in version 1.0 of the Wanzhou WOES Intelligent Optimization Energy Saving System, which is caused by a SQL injection due to incorrect...

8.8CVSS6.9AI score0.0034EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/08/07 12:00 a.m.21 views

PT-2025-32318 · Wanzhou · Woes Intelligent Optimization Energy Saving System

Name of the Vulnerable Software and Affected Versions: Wanzhou WOES Intelligent Optimization Energy Saving System version 1.0 Description: A vulnerability exists in Wanzhou WOES Intelligent Optimization Energy Saving System 1.0. The issue involves SQL injection due to the manipulation of the...

6.5CVSS6.8AI score0.0034EPSS
SaveExploits1References8
CNNVD
CNNVD
added 2025/08/04 12:00 a.m.10 views

RiderLike Fruit Crush-Brain App 安全漏洞

RiderLike Fruit Crush-Brain App is a mobile game by RiderLike. A security vulnerability exists in RiderLike Fruit Crush-Brain App version 1.0, which originates from improper export of AndroidManifest.xml...

5.3CVSS5.5AI score0.00131EPSS
SaveExploits0References5
OSV
OSV
added 2025/08/03 5:15 a.m.22 views

CVE-2025-8499

A vulnerability was found in code-projects Online Medicine Guide 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /cusfindambulence2.php. The manipulation of the argument Search leads to sql injection. The attack can be initiated remotely. The exploit has...

9.8CVSS5.8AI score0.0059EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/03 12:00 a.m.11 views

Projectworlds Online Admission System 注入漏洞

Projectworlds Online Admission System is an online admission system from Projectworlds India. An injection vulnerability exists in Projectworlds Online Admission System version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter ID in the file /viewform.php...

9.8CVSS7.8AI score0.00473EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/03 12:00 a.m.11 views

Code-Projects Human Resource Integrated System 注入漏洞

Human Resource Integrated System is a human resource integration system. An injection vulnerability exists in Code-Projects Human Resource Integrated System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter content in the file...

8.8CVSS6.8AI score0.00487EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/03 12:00 a.m.10 views

Code-Projects Online Medicine Guide 注入漏洞

Code-Projects Online Medicine Guide is a Code-Projects open source online medicine guide. An injection vulnerability exists in Code-Projects Online Medicine Guide version 1.0, which stems from SQL injection due to incorrect manipulation of the parameter mname in the file /adaddmed.php...

9.8CVSS7.8AI score0.00473EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/02 12:00 a.m.10 views

SourceCodester Online Hotel Reservation System 注入漏洞

SourceCodester Online Hotel Reservation System is a SourceCodester open source online hotel system. An injection vulnerability exists in SourceCodester Online Hotel Reservation System version 1.0, which originates from SQL injection due to incorrect manipulation of the parameter ID in the file...

9.8CVSS7.8AI score0.00479EPSS
SaveExploits1References6
Rows per page
Query Builder