🔥 Trending CVEs - Last 90 Days

CVE-2026-0606 is a SQL injection vulnerability in code-projects Online Music Site 1.0 that allows remote attackers to execute arbitrary SQL commands v...

CVE-2026-0605 is an SQL injection vulnerability in code-projects Online Music Site 1.0 that allows attackers to manipulate database queries through th...

This SQL injection vulnerability in code-projects Online Product Reservation System 1.0 allows attackers to manipulate database queries through the em...

This vulnerability allows attackers to bypass authentication in MiniCMS versions up to 1.8 by exploiting an unknown function in the article handler co...

This vulnerability allows remote attackers to bypass authentication in MiniCMS's trash file restore functionality, potentially enabling unauthorized a...

This vulnerability in MiniCMS allows attackers to bypass authentication mechanisms and potentially publish unauthorized pages. It affects MiniCMS vers...

This SQL injection vulnerability in code-projects Online Product Reservation System 1.0 allows attackers to manipulate database queries through the ad...

This SQL injection vulnerability in Online Product Reservation System 1.0 allows attackers to manipulate database queries through the /handgunner-admi...

This SQL injection vulnerability in code-projects Online Product Reservation System 1.0 allows remote attackers to execute arbitrary SQL commands thro...

This SQL injection vulnerability in code-projects Online Product Reservation System 1.0 allows attackers to manipulate database queries through the ad...

The Petlibro Smart Pet Feeder Platform contains an improper access control vulnerability that allows attackers to manipulate any device by sending arb...

This authorization bypass vulnerability in Petlibro Smart Pet Feeder Platform allows unauthorized users to add themselves as shared owners to any devi...

This SQL injection vulnerability in Online Music Site 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in /Frontend/...

CVE-2026-0570 is a SQL injection vulnerability in code-projects Online Music Site 1.0 that allows remote attackers to execute arbitrary SQL commands v...

This SQL injection vulnerability in code-projects Content Management System 1.0 allows attackers to manipulate database queries through the /pages.php...

This SQL injection vulnerability in code-projects Online Music Site 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter...

This vulnerability allows remote attackers to execute SQL injection attacks against Yonyou KSOA 9.0 through the /kp/PrintZPYG.jsp file by manipulating...

This vulnerability in jackying H-ui.admin allows attackers to upload arbitrary files without restrictions via the /lib/webuploader/0.1.5/server/previe...

This CVE describes a SQL injection vulnerability in Yonyou KSOA 9.0 through the /worksheet/agent_worksdel.jsp endpoint. Attackers can manipulate the I...

This CVE describes a SQL injection vulnerability in Yonyou KSOA 9.0's /worksheet/agent_work_report.jsp endpoint via the ID parameter. Attackers can re...

This vulnerability allows remote attackers to execute arbitrary SQL commands via the ID parameter in the /worksheet/agent_worksadd.jsp endpoint of Yon...

This SQL injection vulnerability in Online Guitar Store 1.0 allows attackers to execute arbitrary SQL commands via the dre_title parameter in the admi...

CVE-2025-15354 is a SQL injection vulnerability in itsourcecode Society Management System 1.0 that allows remote attackers to execute arbitrary SQL co...

This SQL injection vulnerability in itsourcecode Society Management System 1.0 allows attackers to manipulate database queries through the Username pa...

This vulnerability allows attackers to perform Server-Side Request Forgery (SSRF) attacks against FeehiCMS installations up to version 2.1.1. By manip...

A CSV formula injection vulnerability in TrueConf Server v5.5.2.10813 allows authenticated users to embed malicious spreadsheet formulas in exported c...

BiggiDroid Simple PHP CMS 1.0 contains a SQL injection vulnerability in the admin login page that allows remote attackers to execute arbitrary SQL com...

This CVE describes a command injection vulnerability in the Edimax BR-6208AC router's web configuration interface. Attackers can execute arbitrary com...

This CVE describes a command injection vulnerability in Edimax BR-6208AC routers that allows remote attackers to execute arbitrary commands on affecte...

This vulnerability allows remote attackers to execute arbitrary code or cause denial of service via a heap-based buffer overflow in the snap7-rs libra...

CVE-2025-15243 is an SQL injection vulnerability in Simple Stock System 1.0's login.php file that allows remote attackers to execute arbitrary SQL com...

CVE-2025-15208 is a SQL injection vulnerability in the Refugee Food Management System 1.0 that allows attackers to manipulate database queries through...

Campcodes Supplier Management System 1.0 contains a SQL injection vulnerability in the /admin/add_area.php file via the txtAreaCode parameter. This al...

Campcodes Supplier Management System 1.0 contains a SQL injection vulnerability in the /admin/view_products.php file through manipulation of the chkId...

CVE-2025-15198 is a SQL injection vulnerability in the College Notes Uploading System 1.0 that allows attackers to manipulate database queries through...

CVE-2025-15196 is an SQL injection vulnerability in code-projects Assessment Management 1.0 that allows attackers to execute arbitrary SQL commands vi...

CVE-2025-15195 is a SQL injection vulnerability in code-projects Assessment Management 1.0 that allows remote attackers to execute arbitrary SQL comma...

This SQL injection vulnerability in Refugee Food Management System 1.0 allows attackers to manipulate database queries through the 'a' parameter in /h...

CVE-2025-15185 is a SQL injection vulnerability in the Refugee Food Management System 1.0 that allows remote attackers to execute arbitrary SQL comman...

This SQL injection vulnerability in Refugee Food Management System 1.0 allows attackers to execute arbitrary SQL commands via the 'a' parameter in /ho...

This SQL injection vulnerability in Refugee Food Management System 1.0 allows attackers to manipulate database queries through the tfid parameter in /...

CVE-2025-15182 is a SQL injection vulnerability in code-projects Refugee Food Management System 1.0 that allows remote attackers to execute arbitrary ...

CVE-2025-15181 is an SQL injection vulnerability in the Refugee Food Management System 1.0 that allows attackers to manipulate database queries throug...

CVE-2025-15168 is an SQL injection vulnerability in itsourcecode Student Management System 1.0 that allows remote attackers to execute arbitrary SQL c...

CVE-2025-15167 is a SQL injection vulnerability in itsourcecode Online Cake Ordering System 1.0 that allows attackers to execute arbitrary SQL command...

This vulnerability allows remote attackers to execute arbitrary SQL commands via the ID parameter in the /updatesupplier.php?action=edit endpoint of i...

CVE-2025-15165 is an SQL injection vulnerability in itsourcecode Online Cake Ordering System 1.0 that allows remote attackers to execute arbitrary SQL...

This CVE describes a SQL injection vulnerability in phpok3w's show.php file through manipulation of the ID parameter. Attackers can remotely exploit t...

This SQL injection vulnerability in the saiftheboss7 onlinemcqexam software allows attackers to manipulate database queries through the ans1/ans2 para...

This CVE describes an SQL injection vulnerability in FantasticLBP Hotels_Server's Room.php API endpoint. Attackers can exploit the hotelId parameter t...