5.3

CVSS4.0

CVE-2026-5587 - wbbeyourself MAC-SQL Refiner Agent agents.py _execute_sql sql injection

A vulnerability was identified in wbbeyourself MAC-SQL up to 31a9df5e0d520be4769be57a4b9022e5e34a14f4. This affects the function _execute_sql of the file core/agents.py of the component Refiner Agent. The manipulation leads to sql injection. Remote exploitation of the attack is possible. The exploi…

πŸ“… Published: April 5, 2026, 6:15 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

5.3

CVSS4.0

CVE-2026-5586 - zhongyu09 openchatbi Multi-stage Text2SQL Workflow sql injection

A vulnerability was determined in zhongyu09 openchatbi up to 0.2.1. The impacted element is an unknown function of the component Multi-stage Text2SQL Workflow. Executing a manipulation of the argument keywords can lead to sql injection. The attack may be launched remotely. The exploit has been publ…

πŸ“… Published: April 5, 2026, 6 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

6.9

CVSS4.0

CVE-2026-5585 - Tencent AI-Infra-Guard Task Detail Endpoint task_manager.go information disclosure

A vulnerability was found in Tencent AI-Infra-Guard 4.0. The affected element is an unknown function of the file common/websocket/task_manager.go of the component Task Detail Endpoint. Performing a manipulation results in information disclosure. The attack may be initiated remotely. The exploit has…

πŸ“… Published: April 5, 2026, 5:30 p.m. πŸ”„ Last Modified: April 30, 2026, 9:16 p.m.

6.9

CVSS4.0

CVE-2026-5584 - Fosowl agenticSeek query Endpoint PyInterpreter.py PyInterpreter.execute code injection

A vulnerability has been found in Fosowl agenticSeek 0.1.0. Impacted is the function PyInterpreter.execute of the file sources/tools/PyInterpreter.py of the component query Endpoint. Such manipulation leads to code injection. The attack can be launched remotely. The exploit has been disclosed to th…

πŸ“… Published: April 5, 2026, 4:45 p.m. πŸ”„ Last Modified: April 30, 2026, 9:12 p.m.

5.3

CVSS4.0

CVE-2026-5583 - PHPGurukul Online Shopping Portal Project Parameter my-profile.php sql injection

A security vulnerability has been detected in PHPGurukul Online Shopping Portal Project 2.1. This affects an unknown part of the file /my-profile.php of the component Parameter Handler. The manipulation of the argument fullname leads to sql injection. It is possible to initiate the attack remotely.…

πŸ“… Published: April 5, 2026, 4:30 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

5.3

CVSS4.0

CVE-2026-5580 - CodeAstro Online Classroom Parameter addvideos.php sql injection

A vulnerability was identified in CodeAstro Online Classroom 1.0. Impacted is an unknown function of the file /OnlineClassroom/addvideos.php of the component Parameter Handler. The manipulation of the argument videotitle leads to sql injection. It is possible to initiate the attack remotely. The ex…

πŸ“… Published: April 5, 2026, 4:15 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

5.3

CVSS4.0

CVE-2026-5579 - CodeAstro Online Classroom Parameter updatedetailsfromfaculty.php sql injection

A vulnerability was determined in CodeAstro Online Classroom 1.0. This issue affects some unknown processing of the file /OnlineClassroom/updatedetailsfromfaculty.php?myfid=108 of the component Parameter Handler. Executing a manipulation of the argument fname can lead to sql injection. The attack m…

πŸ“… Published: April 5, 2026, 4 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

5.3

CVSS4.0

CVE-2026-5578 - CodeAstro Online Classroom Parameter addassessment.php sql injection

A vulnerability was found in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /OnlineClassroom/addassessment.php of the component Parameter Handler. Performing a manipulation of the argument deleteid results in sql injection. The attack is possible to be carried o…

πŸ“… Published: April 5, 2026, 3:45 p.m. πŸ”„ Last Modified: April 7, 2026, 1:20 p.m.

6.9

CVSS4.0

CVE-2026-5577 - Song-Li cross_browser details Endpoint uniquemachine_app.py sql injection

A vulnerability has been found in Song-Li cross_browser up to ca690f0fe6954fd9bcda36d071b68ed8682a786a. This affects an unknown part of the file flask/uniquemachine_app.py of the component details Endpoint. Such manipulation of the argument ID leads to sql injection. The attack can be executed remo…

πŸ“… Published: April 5, 2026, 3:30 p.m. πŸ”„ Last Modified: April 30, 2026, 9:26 p.m.

5.1

CVSS4.0

CVE-2026-5576 - SourceCodester/jkev Record Management System Add Employee save_emp.php unrestricted upload

A flaw has been found in SourceCodester/jkev Record Management System 1.0. Affected by this issue is some unknown functionality of the file save_emp.php of the component Add Employee Page. This manipulation causes unrestricted upload. Remote exploitation of the attack is possible. The exploit has b…

πŸ“… Published: April 5, 2026, 3:15 p.m. πŸ”„ Last Modified: April 24, 2026, 6:14 p.m.
Total resulsts: 349182
Page 683 of 34,919
Β« previous page Β» next page
Filters