Search Vulnerabilities

Comfast CF-N1-S Endpoint mbox-config command injection

User‑Controlled HTTP Header In Fortra's GoAnywhere MFT Allows Arbitrary DNS Lookups

HTML Injection possible in system generated emails in Fortra's GoAnywhere MFT

Metasoft 美特软件 MetaCRM Interface sql.jsp Statement.executeUpdate sql injection

phili67 Ecclesia CRM Query Viewer view ValidateInput sql injection

modelscope agentscope _python.py execute_shell_command code injection

langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection

ProjectsAndPrograms School Management System HTTP GET Parameter buslocation.php sql injection

liangliangyy DjangoBlog WeChat Bot commonapi.py CommandHandler command injection

dameng100 muucmf index.html getListByPage sql injection

QueryMine sms GET Request Parameter deletecourse.php sql injection

QueryMine sms GET Request Parameter editcourse.php sql injection

Quiz and Survey Master (QSM) <= 11.1.0 - Unauthenticated Shortcode Injection Leading to Arbitrary Quiz Result Disclosure via Quiz Answer Text Input...

MaxKB: Sandbox Result Validation Bypass via Tool Output Spoofing

aandrew-me ytDownloader Compressor Feature compressor.js child_process.exec command injection

code-projects Easy Blog Site post.php sql injection

PHPGurukul Daily Expense Tracking System register.php sql injection

itsourcecode Construction Management System equipments.php sql injection

itsourcecode Construction Management System employees.php sql injection

SourceCodester Pharmacy Sales and Inventory System ajax.php sql injection