Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2703▼ 615 respecto a la semana anterior
Críticas / altas1293▼ 208 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)291▼ 219 respecto a la semana anterior
15 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (5.3) | 0.53% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 2/7/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /classes/Master.php?f=delete_category. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The… | |
| Modificada | Media (5.3) | 0.68% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 2/7/2024 | 17/6/2026 | A vulnerability was found in SourceCodester Home Owners Collection Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Users.php?f=save. The manipulation of the argument img leads to unrestricted upload. The attack may be initiated remotely. The exploit has… | |
| Modificada | Media (6.1) | 1.1% | 💥 PoC | Home Owners Collection Management System Project Home Owners Collection Management System | 11/5/2022 | 9/7/2026 | Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['page'] parameter. | |
| Modificada | Media (6.1) | 0.83% | 💥 PoC | Home Owners Collection Management System Project Home Owners Collection Management System | 11/5/2022 | 9/7/2026 | Home Owners Collection Management v1 was discovered to contain a reflected cross-site scripting (XSS) vulnerability in the Admin panel via the $_GET['s'] parameter. | |
| Modificada | Crítica (9.8) | 1.3% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 21/4/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase. | |
| Modificada | Crítica (9.8) | 1.3% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 21/4/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_phase. | |
| Modificada | Crítica (9.8) | 1.3% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 21/4/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_collection. | |
| Modificada | Crítica (9.8) | 1.2% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 21/4/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via /hocms/classes/Master.php?f=delete_member. | |
| Modificada | Alta (7.8) | 1.6% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 2/3/2022 | 17/6/2026 | A remote code execution (RCE) vulnerability in the Avatar parameter under /admin/?page=user/manage_user of Home Owners Collection Management System v1.0 allows attackers to execute arbitrary code via a crafted PNG file. | |
| Modificada | Crítica (9.8) | 1.3% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 2/3/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel. | |
| Modificada | Crítica (9.8) | 2.0% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 2/3/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /student_attendance/index.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file. | |
| Modificada | Media (6.1) | 0.64% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 28/2/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the collected_by parameter under the List of Collections module. | |
| Modificada | Crítica (9.8) | 2.1% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 26/2/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/view_member.php. | |
| Modificada | Crítica (9.8) | 1.4% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 26/2/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 allows unauthenticated attackers to compromise user accounts via a crafted POST request. | |
| Modificada | Alta (8.8) | 23% | — | Home Owners Collection Management System Project Home Owners Collection Management System | 26/2/2022 | 17/6/2026 | Home Owners Collection Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the parameter "cover" in SystemSettings.php. |