SQL injection in Code-projects Voting System 1.0 allows remote authenticated attackers with low privileges to execute arbitrary SQL commands via the ID parameter in /admin/positions_row.php. Publicly available exploit code exists, enabling data theft or manipulation.
SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows remote authenticated attackers with low privileges to manipulate the teamid parameter in /admin/completed-requests.php, potentially leading to unauthorized data access or modification. A publicly available proof-of-concept exists, but no active exploitation has been confirmed and the EPSS score indicates low real-world exploitation probability.
SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows remote attackers with low-privileged access to execute arbitrary SQL commands via the teamid parameter in /admin/new-requests.php. Exploit code is publicly available, though no active exploitation has been reported and EPSS indicates a low probability (0.04%) of widespread use.
SQL injection in PHPGurukul Online Fire Reporting System 1.2 allows authenticated remote attackers to execute arbitrary SQL commands via the teamid parameter in /admin/workin-progress-requests.php. A proof-of-concept exploit is publicly available, but the vulnerability is not listed in CISA KEV and the EPSS score is very low (0.04%), indicating limited exploitation likelihood in the wild. The CVSS 4.0 base score of 2.1 reflects low impact and the requirement for low‑privilege authentication.
Authenticated SQL injection in code-projects Voting System 1.0 allows a low-privileged attacker to manipulate the description parameter in the admin panel endpoint /admin/positions_add.php, leading to unauthorized data access or modification. Public exploit code is available, but exploitation probability is very low (EPSS 0.04%) and the vector requires authentication; no active exploitation has been confirmed.
SQL injection in code-projects Voting System 1.0 allows authenticated remote attackers to execute arbitrary SQL commands via the ID parameter in /admin/voters_row.php, leading to potential database compromise. Exploit code is publicly available, and no vendor patch exists.
SQL injection in code-projects Voting System 1.0 allows authenticated low-privilege attackers to manipulate the ID parameter in /admin/voters_edit.php, potentially accessing or modifying database contents. A public exploit is available, though exploitation probability is low (EPSS 0.04%) and no active exploitation has been reported.
SQL injection in Voting System 1.0 allows remote attackers with low privileges to manipulate database queries via the firstname and lastname parameters in /admin/voters_add.php. Exploit code is publicly available but the vulnerability has a very low EPSS exploitation probability (0.04%) and no active exploitation has been confirmed by CISA KEV.
Path traversal in jshERP up to version 3.5 allows authenticated users with high privileges to manipulate the Title parameter in the exportExcelByParam function, potentially reading or writing arbitrary files on the server. Public exploit code is available, but the EPSS exploitation probability is low (0.28%) and there is no evidence of active exploitation. The vendor has not responded to the disclosure, and no official patch has been released.
Memory corruption in the pthread_cond_destroy function of snap7-rs's Public API allows adjacent-network attackers with low privileges to cause limited confidentiality, integrity, and availability impacts. The vulnerability affects versions up to 1.142.1, and publicly available exploit code has been published. Despite a 'critical' classification in the description, EPSS indicates a low exploitation probability (0.04%), and the flaw is not listed in CISA KEV.
Reflected cross-site scripting in PHPGurukul Online Library Management System 3.0 allows a remote, low-privileged attacker to inject arbitrary JavaScript into the admin panel by manipulating the `stdid` parameter in `/admin/student-history.php`. A victim admin user who loads a crafted URL or page would execute attacker-controlled script in their browser session, enabling session hijacking or DOM manipulation. A public proof-of-concept exploit has been disclosed on GitHub; EPSS remains very low at 0.03% (8th percentile), consistent with a niche product with limited real-world attack surface.
A security vulnerability in A vulnerability in the External Interface of OTRS (CVSS 5.3) that allows conclusions. Remediation should follow standard vulnerability management procedures.
A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The researcher highlights, that "[a]lthough this functionality is currently disabled due to server CGI configuration errors, it is essentially a 'time bomb' waiting to be activated". The vendor was contacted early about this disclosure but did not respond in any way.
A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser and used with the affected applications. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier.
A stored Cross-Site Scripting (XSS) vulnerability exists in the Access Control of ADM, the issue allows an attacker to inject malicious scripts into the folder name field while creating a new shared folder. These scripts are not properly sanitized and will be executed when the folder name is subsequently displayed in the user interface. This allows attackers to execute arbitrary JavaScript in the context of another user's session, potentially accessing session cookies or other sensitive data. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier.
A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function image_drop_upload_ajax/image_delete_ajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 1.0.78 is able to address this issue. The identifier of the patch is 98ea9ee4a2052c4327f89d2f7688cc1b5749450d. It is recommended to upgrade the affected component.
py-libp2p before 0.2.3 allows a peer to cause a denial of service (resource consumption) via a large RSA key.
ImageMagick is free and open-source software used for editing and manipulating digital images. In versions prior to 7.1.2-0 and 6.9.13-26, in ImageMagick's `magick stream` command, specifying multiple consecutive `%d` format specifiers in a filename template causes a memory leak. Versions 7.1.2-0 and 6.9.13-26 fix the issue.
Denial of service via inefficient regular expression in chinese-poetry 0.1 allows low-privileged remote attackers to degrade server performance by sending crafted input to the rank/server.js endpoint. Exploit code is publicly available, but no active exploitation (KEV) is reported; EPSS indicates a low exploitation probability (0.05%).
Cross-site scripting (XSS) in ShopXO versions up to 6.5.0 allows remote attackers to inject malicious scripts via the lang/system_type parameter in header.html. The exploit is publicly available, posing a risk of arbitrary JavaScript execution in the browser of a user who is tricked into clicking a crafted link. EPSS score is very low (0.03%) with no active exploitation reported in CISA KEV.
Command injection in D-Link DIR-818LW router firmware (up to 20191215) allows authenticated administrators to execute arbitrary OS commands by manipulating the NTP Server field on the System Time page. The vulnerability is publicly disclosed with exploit code available, but exploitation requires high privileges. The device is end-of-life, so no vendor patch will be released.
Cross-site scripting in Bigotry OneBase up to 1.3.6 allows low-privileged authenticated attackers to inject arbitrary JavaScript into the browser of a victim who visits a crafted link. The vulnerability exists in the parse_args function of /tpl/think_exception.tpl due to improper sanitization of the args argument. Exploit code is publicly available, but no active exploitation has been confirmed.
Cross-site scripting in the URL Filtering Page of Sapido RB-1802 firmware version 1.0.32 allows authenticated high-privilege attackers to inject arbitrary web script via the URL address parameter. When a victim administrator later views the manipulated filter list, the script executes in their browser, potentially leading to session theft or interface manipulation. Expl
GitHub Kanban MCP Server is a Model Context Protocol (MCP) server for managing GitHub issues in Kanban board format and streamlining LLM task management. Version 0.3.0 of the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. The MCP Server exposes the tool `add_comment` which relies on Node.js child process API `exec` to execute the GitHub (`gh`) command, is an unsafe and vulnerable API if concatenated with untrusted user input. As of time of publication, no known patches are available.