28488 matches found
CVE-2025-13059 SourceCodester Alumni Management System manage_career.php sql injection
A weakness has been identified in SourceCodester Alumni Management System 1.0. The impacted element is an unknown function of the file /managecareer.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available t...
EUVD-2025-131910
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Golemiq 0 Day Analytics allows SQL Injection.This issue affects 0 Day Analytics: from n/a through 4.0.0...
CVE-2025-59499
Improper neutralization of special elements used in an sql command 'sql injection' in SQL Server allows an authorized attacker to elevate privileges over a network...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
bind: Cache poisoning due to weak PRNG
A vulnerability was found in BIND resolvers caused by a weakness in the Pseudo Random Number Generator PRNG. This weakness allows an attacker to potentially predict the source port and query ID used by BIND, enabling cache poisoning attacks. If successful, the attacker can inject malicious DNS...
CVE-2025-13047
CVE-2025-13047 affects the ViewLead Technology Bacteriology Laboratory Reporting System. The vulnerability is a SQL Injection that allows unauthenticated remote attackers to inject arbitrary SQL and read database contents. Root cause and exact vulnerable component are described as an injection fl...
EUVD-2025-119986
Bacteriology Laboratory Reporting System developed by ViewLead Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-13047
...
Malicious code in luna-query-hyperion-cordelia (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6142e23ee5ab164fc5622f93b19756207d75ddf3f601955b5f9f00d999c2c42d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-113902
Malicious code in eslint-config-query-cosmiconfig-kastra npm...
Malicious code in meteor-start-query-cressida (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbc490646055a04b32e6ac80c29731adb0ffe77135199dacd712a2f500f6711d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-115427
Malicious code in changelog-query-adonis-equinox npm...
EUVD-2025-124592
Malicious code in nconf-query-browserify-protractor npm...
EUVD-2025-113114
Malicious code in graphql-chakra-ui-luna-proxima npm...
EUVD-2025-121863
Malicious code in socketio-proxima-tethys-query npm...
EUVD-2025-122947
Malicious code in query-nightmare-cz-conventional-changelog-juno npm...
Malicious code in pino-pretty-sirius-query-lynx (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0c73b7c75b3e6d45e3910318ed625d09bfd01135b8bceedac98a8b4dc0c0101e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111286
Malicious code in meissa-process-query-janus npm...
Malicious code in luna-query-hyperion-hyperion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6703642c5e7790979d8f6356a5c1c0a8f05d50e01d7fc6bcf2962a0e0c9b2e92 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...