107,328 results · Clear filters · Feed
-
Medium 6.5CVE-2026-105306 Public exploit
Keycloak-services: keycloak-services: token introspection audience bypass via dynamic client registration
A flaw was found in the Dynamic Client Registration flow of the Keycloak identity and access management server. The issue occurs because the registration process fails to filter security-sensitive client attributes when a new client is created. An attacker wi…
-
Medium 5.7
Keycloak-services: keycloak-services: user session note mapper exposes upstream idp access tokens
A flaw was found in the User Session Note mapper of the Keycloak identity and access management solution. The issue occurs because the mapper does not validate whether a requested session note contains sensitive internal credentials, such as federated access …
-
Medium 6.3
kishor-23 food-waste-management-system Login Flow login.php session fixiation
A vulnerability has been found in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. This affects an unknown function of the file login.php of the component Login Flow. Such manipulation o…
-
Medium 4.7
osCommerce osCommerce2 Newsletter Management newsletters.php include code injection
A security flaw has been discovered in osCommerce osCommerce2 up to 2.3.4.1. This vulnerability affects the function include of the file admin/newsletters.php of the component Newsletter Management. Performing a manipulation of the argument module results in …
-
Medium 4.3
osCommerce osCommerce2 Payment payment.php include code injection
A vulnerability was identified in osCommerce osCommerce2 up to 2.3.4.1. This affects the function include of the file includes/classes/payment.php of the component Payment Page. Such manipulation of the argument MODULE_PAYMENT_INSTALLED leads to code injectio…
-
Medium 6.3
itsourcecode Online Admission System key.php sql injection
A vulnerability has been found in itsourcecode Online Admission System 1.0. Affected is an unknown function of the file /admin/key.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disc…
-
Medium 6.3
itsourcecode Online Admission System new.php sql injection
A flaw has been found in itsourcecode Online Admission System 1.0. This impacts an unknown function of the file /new.php. Executing a manipulation of the argument schedid can lead to sql injection. The attack can be launched remotely. The exploit has been pub…
-
Medium 6.3
itsourcecode Online Admission System register1.php sql injection
A vulnerability was identified in itsourcecode Online Admission System 1.0. This issue affects some unknown processing of the file register1.php. The manipulation of the argument fname leads to sql injection. The attack is possible to be carried out remotely.…
-
Medium 6.3
Jeebase UserService info updateUser dynamically-determined object attributes
A vulnerability was determined in Jeebase 0.0.1. This vulnerability affects the function updateUser of the file /user/update/info of the component UserService. Executing a manipulation of the argument user/tempUser can lead to dynamically-determined object at…
-
Medium 5.5
In Modem, there is a possible information disclosure due to a logic error. This could lead to local information disclos…
-
Medium 6.7
In apusys, there is a possible memory corruption due to use after free. This could lead to local escalation of privileg…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of ser…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to a missing bounds check. This could lead to remote denial of ser…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to a missing permission check. This could lead to remote denial of…
-
Medium 6.7
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege …
-
Medium 6.7
In aidl, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege …
-
Medium 6.7
In aidl, there is a possible escalation of privilege due to a missing permission check. This could lead to local escala…
-
Medium 5.3
In Modem, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote denial of …
-
Medium 6.7
In display, there is a possible escalation of privilege due to an integer overflow. This could lead to local escalation…
-
Medium 6.2
In apu, there is a possible application crash due to double free. This could lead to local denial of service with no ad…
-
Medium 6.7
In display, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 6.7
In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation …
-
Medium 6.7
In ccci, there is a possible out of bounds write and read due to a missing bounds check. This could lead to local infor…
-
Medium 6.8
In meta, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of …
-
Medium 6.7
In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation…
-
Medium 6.7
In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of priv…
-
Medium 6.7
In vdec, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privileg…
-
Medium 5.3
In Modem, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service, …
-
Medium 5.3
In Modem, there is a possible system crash due to improper input validation. This could lead to remote denial of servic…
-
Medium 6.7
In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privileg…
-
Medium 4.7
SourceCodester Drug Recommendation System Symptom Creation add_symptom.php mysqli_real_escape_string sql injection
A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0. The impacted element is the function mysqli_real_escape_string of the file /Admin/add_symptom.php of the component Symptom Creation. Performing a manipulation of the argumen…
-
Medium 4.7
SourceCodester Drug Recommendation System Drug Creation add_drug.php sql injection
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. The affected element is an unknown function of the file /Admin/add_drug.php of the component Drug Creation. Such manipulation of the argument txtname/cmdtype/txtusage/txtsideeffe…
-
Medium 4.7
SourceCodester Drug Recommendation System edit_class.php sql injection
A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /Admin/edit_class.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. T…
-
Medium 5.9
Chaterm before 0.12.1 Login CSRF via chaterm:// OAuth Callback
Chaterm before 0.12.1 contains a login cross-site request forgery vulnerability that allows remote attackers to inject login state by sending chaterm:// callbacks without OAuth state validation. Attackers can trigger a crafted callback with attacker-controlle…
-
Medium 5.4
Gerapy Project Management views.py project_create path traversal
A vulnerability has been found in Gerapy up to 0.9.13. This vulnerability affects the function project_create of the file gerapy/server/core/views.py of the component Project Management. The manipulation of the argument project_name leads to path traversal. R…
-
Medium 6.1
Bacularis 5.4.0 - 6.5.1 is vulnerable to Cross Site Scripting (XSS) in the Organization name field.
-
Medium 5.4
In Bacularis v1.0.0 - 6.5.1 when adding a new pool, the LabelFormat field allows for a Cross Site Scripting (XSS) paylo…
-
Medium 6.5
Feehi CMS 2.1.1 is vulnerable to Directory Traversal. An authenticated backend user with article edit permission can de…
-
Medium 6.5
ApiAdmin v.5.0 and before is vulnerable to SQL Injection in the user-list endpoint GET /admin/User/getUsers via the gid…