Rezultati pretraživanja za 'Od datuma: 03.11.2024.'
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|---|---|---|---|
| CVE-2026-59665 | - | Cross-Site Scripting vulnerability in the Repasat application. Successful exploitation of this vulnerability could allow an attacker to trick a user into executing arbitrary code in the victim’s browser. The “nomMotivo” parameter is affected – endpoi | 2026-10-02 17:59:09 | 2026-10-02 10:17:08 |
| CVE-2026-51878 | - | deeptutor 1.4.0 contains an authorization bypass through a user-controlled object identifier in TurnRuntimeManager.regenerate_last_turn. A remote caller can enumerate or obtain a session_id and trigger regenerate on another user's session. | 2026-10-02 17:59:09 | 2026-10-01 22:17:02 |
| CVE-2026-51873 | - | Devika v1.0 is vulnerable to Directory Traversal in the Coder.save_code_to_project function, which allows attackers to write files outside the intended project workspace. | 2026-10-02 17:59:09 | 2026-10-01 22:17:02 |
| CVE-2026-39600 | 4.7 | URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Mehul Gohil Aculect AI Companion aculect-ai-companion allows Phishing.This issue affects Aculect AI Companion: from n/a through 0.8.1. | 2026-10-02 17:52:32 | 2026-10-02 15:17:09 |
| CVE-2026-39444 | 5.4 | Authorization Bypass Through User-Controlled Key vulnerability in PublishPress PublishPress Series organize-series allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PublishPress Series: from n/a through 3.1.3. | 2026-10-02 17:52:32 | 2026-10-02 15:17:09 |
| CVE-2026-39439 | 6.5 | Missing Authorization vulnerability in Kiera Howe WebSamurai websamurai allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebSamurai: from n/a through 1.0.7. | 2026-10-02 17:52:32 | 2026-10-02 15:17:09 |
| CVE-2026-32584 | 5.3 | Insertion of Sensitive Information Into Sent Data vulnerability in Chiranjit Hazarika Smart One Click Setup – Complete Demo Import & Export smart-one-click-setup allows Retrieve Embedded Sensitive Data.This issue affects Smart One Click Setup – C | 2026-10-02 17:52:32 | 2026-10-02 15:17:09 |
| CVE-2026-104638 | 5.0 | A security vulnerability has been detected in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The impacted element is an unknown function of the file php/sessions.php. The manipulation of the argument ID leads | 2026-10-02 17:52:32 | 2026-10-02 15:17:09 |
| CVE-2026-104637 | 7.5 | A weakness has been identified in onetwothreeneth HospitalManagementSystem up to 9ef91ed6007314b6473110ed699dff76d158f61d. The affected element is the function add_patient/add_physician/add_account/update_account/update_subaccount/edit_physician/edit | 2026-10-02 17:52:32 | 2026-10-02 15:17:08 |
| CVE-2026-104625 | 6.5 | A security flaw has been discovered in CodeAstro Simple Loan Management System 1.0. Impacted is an unknown function of the file /admin/index.php. Performing a manipulation of the argument g_name results in sql injection. The attack may be initiated r | 2026-10-02 17:52:32 | 2026-10-02 15:17:08 |
| ID | CVSS | Sažetak | Zadnje ažurirano | Objavljeno |
|---|
Stranica
/12739
Zapisa po stranici: