EUVD-2019-3529

Malware in sbrugna...

EUVD-2025-25204

Malicious code in bioql PyPI...

EUVD-2025-6861

Malicious code in bioql PyPI...

PT-2025-35375

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Polling System Code version 1.0 Description: A SQL injection issue exists due to the manipulation of the myusername argument in the /admin/checklogin.php file. The attack can be performed remotely. The exploit is publicl...

CVE-2025-55734 flaskBlo Authorization Bypass

flaskBlog is a blog app built with Flask. In 2.8.0 and earlier, the code checks if the userRole is "admin" only when visiting the /admin page, but not when visiting its subroutes. Specifically, only the file routes/adminPanel.py checks the user role when a user is trying to access the admin page,...

Pre-School Enrollment System check_availability.php File SQL Injection Vulnerability

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...

PHPGurukul Pre-School Enrollment System 注入漏洞

Pre-School Enrollment System is a web-based preschool enrollment system. The Pre-School Enrollment System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in the file /admin/checkavailability.ph...

CVE-2025-5208

A vulnerability, which was classified as critical, was found in SourceCodester Online Hospital Management System 1.0. This affects an unknown part of the file /admin/checkavailability.php. The manipulation of the argument emailid leads to sql injection. It is possible to initiate the attack...

SourceCodester Online Hospital Management System 注入漏洞

SourceCodester Online Hospital Management System is a SourceCodester open source online hospital management system. An injection vulnerability exists in SourceCodester Online Hospital Management System version 1.0, which originates from SQL injection due to incorrect operation of the parameter...

CVE-2024-9159

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not proper...

PYSEC-2025-96

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not proper...

CVE-2024-9159 Incorrect Authorization in gaizhenbiao/chuanhuchatgpt

An incorrect authorization vulnerability exists in gaizhenbiao/chuanhuchatgpt version git c91dbfc. The vulnerability allows any user to restart the server at will, leading to a complete loss of availability. The issue arises because the function responsible for restarting the server is not proper...

CVE-2024-9159

CVE-2024-9159 affects gaizhenbiao/chuanhuchatgpt (git commit c91dbfc). The reboot/server restart function is not protected by an admin check, enabling an attacker to trigger a server restart and cause availability loss. Underlying root cause: improper authorization check around the restart operat...

Restaurant Table Booking System /admin/check_availability.php File SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter username in the /admin/checkavailability.php file, which can lead to SQL injection. An...

PHPGurukul Restaurant Table Booking System 安全漏洞

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter username in the /admin/checkavailability.php file, which can lead to SQL injection. An...

CVE-2025-1869 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/checkavalability.php...

CVE-2025-1869

CVE-2025-1869 describes a SQL injection vulnerability in the 101news project (version 1.0) affecting the username parameter in admin/check_avalability.php. Root cause: improper input handling in that parameter allows injection into the SQL query. Impact per CVSS is high across confidentiality, in...

CVE-2025-1869 SQL injection vulnerability in 101news

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "username" parameter in admin/checkavalability.php...

SourceCodester Best online news portal project SQL注入漏洞

SourceCodester Best online news portal project is a SourceCodester open source news website. A SQL injection vulnerability exists in version 1.0 of the SourceCodester Best online news portal project, which originates from a SQL injection in the admin/checkavalability.php file...

CVE-2024-43769

In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed...