PT-2026-94157

Name of the Vulnerable Software and Affected Versions Paid Downloads versions prior to 3.16 Description The Paid Downloads plugin for WordPress allows unauthenticated arbitrary file upload through the admin request handler function. This occurs because the function lacks proper authorization and...

CVE-2026-2200: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploit has been made available to the publi...

CVE-2026-25803: Use of Hard-coded Credentials

3DP-MANAGER is an inbound generator for 3x-ui. In version 2.0.1 and prior, the application automatically creates an administrative account with known default credentials admin/admin upon the first initialization. Attackers with network access to the application's login interface can gain full...

CVE-2025-11171: Missing Authentication for Critical Function

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...

EUVD-2024-1950

Malicious code in bioql PyPI...

Exploit for CVE-2025-6934

CVE-2025-6934 – Eksploitasi WordPress Opal Estate Pro 📖...

CVE-2025-7924: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in PHPGurukul Online Banquet Booking System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be launche...

CVE-2025-7942: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in PHPGurukul Taxi Stand Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument adminname leads to cross site scripting. The attack can be...

CVE-2025-7198: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Jonnys Liquor 1.0. This vulnerability affects unknown code of the file /admin/admin-area.php. The manipulation of the argument drink leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to th...

CVE-2025-4916: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Auto Taxi Stand Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be initiated remotely...

CVE-2025-4861: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be launched...

CVE-2025-4761: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. This vulnerability affects unknown code of the file /admin/admin-profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-4703: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. The attack can be...

CVE-2025-28056

rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component...

CVE-2025-28056: Improper Neutralization of Special Elements used in an SQL Command

rebuild v3.9.0 through v3.9.3 has a SQL injection vulnerability in /admin/admin-cli/exec component...

CVE-2025-3370: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploi...

CVE-2025-2060: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack...

PT-2025-10031

Name of the Vulnerable Software and Affected Versions PHPGurukul Emergency Ambulance Hiring Portal version 1.0 Description A critical vulnerability was found in the PHPGurukul Emergency Ambulance Hiring Portal. This issue affects an unknown part of the file /admin/admin-profile.php. The...

PT-2025-7603

Name of the Vulnerable Software and Affected Versions PHPGurukul Art Gallery Management System version 1.0 Description A critical vulnerability was found in the PHPGurukul Art Gallery Management System. The issue affects an unknown functionality of the file /admin/admin-profile.php. The...

PT-2024-17927

Name of the Vulnerable Software and Affected Versions PHPGurukul Land Record System version 1.0 Description A problematic issue has been found in the PHPGurukul Land Record System. The issue affects an unknown function of the file /admin/admin-profile.php. Manipulation of the Admin Name argument...