CVE-2021-47904 PhreeBooks 5.2.3 - Remote Code Execution

PhreeBooks 5.2.3 contains an authenticated file upload vulnerability in the Image Manager that allows remote code execution. Attackers can upload a malicious PHP web shell by exploiting unrestricted file type uploads to gain command execution on the server...

PhreeBooks security vulnerabilities

PhreeBooks is a business resource planning and accounting software developed by the PhreeBooks company. Version 5.2.3 of PhreeBooks contains a security vulnerability, which stems from a file upload vulnerability in the Image Manager, potentially allowing remote code execution...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003663)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003663 advisory. An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of servic...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003755)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003755 advisory. An issue was discovered in the Linux kernel before 5.2.3. Out of bounds access exists in the functions ath6klwmipstreamtimeouteventrx and ath6klwmicaceventrx in the...

CVE-2025-23885

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in anildhiman MJ Contact us mj-contact-us allows Reflected XSS.This issue affects MJ Contact us: from n/a through = 5.2.3...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000225)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000225 advisory. An issue was discovered in drivers/xen/balloon.c in the Linux kernel before 5.2.3, as used in Xen through 4.12.x, allowing guest OS users to cause a denial of servic...

CVE-2025-66078

CVE-2025-66078 is a WordPress plugin vulnerability in the MotoPress Hotel Booking Lite (Jetmonsters Hotel Booking Lite) ≤ 5.2.3 that allows remote code execution via improper generation of code (Web/App-side code injection). The entry is supported across multiple catalogs (NVD, Red Hat, CVE list)...

EUVD-2025-204049

Improper Control of Generation of Code 'Code Injection' vulnerability in jetmonsters Hotel Booking Lite motopress-hotel-booking-lite allows Remote Code Inclusion.This issue affects Hotel Booking Lite: from n/a through = 5.2.3...

WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability

SQL Injection vulnerability discovered by w41bu1 in WordPress Plugin Ninja Tables versions = 5.2.3...

CVE-2025-67519

CVE-2025-67519 concerns an SQL Injection in the Ninja Tables (Ninja Tables) WordPress plugin, affecting Ninja Tables versions from n/a through 5.2.3. The vulnerability is described as Improper Neutralization of Special Elements used in an SQL Command. The provided documents do not include a concr...

CVE-2025-67519 WordPress Ninja Tables plugin <= 5.2.3 - SQL Injection vulnerability

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Shahjahan Jewel Ninja Tables ninja-tables allows SQL Injection.This issue affects Ninja Tables: from n/a through = 5.2.3...

WordPress plugin Ninja Tables SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A SQL injectio...

WordPress Hotel Booking Lite plugin <= 5.2.3 - Remote Code Execution (RCE) vulnerability

Remote Code Execution RCE vulnerability discovered by benzdeus in WordPress Plugin Hotel Booking Lite versions = 5.2.3...

EUVD-2018-13519

Malware in sbrugna...

EUVD-2007-4490

Malware in sbrugna...

EUVD-2019-1007

Malware in sbrugna...

EUVD-2024-35448

Malicious code in bioql PyPI...

EUVD-2024-2294

Malicious code in bioql PyPI...

EUVD-2023-29042

Malicious code in bioql PyPI...

Linux Distros Unpatched Vulnerability : CVE-2020-5397

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Spring Framework, versions 5.2.x prior to 5.2.3 are vulnerable to CSRF attacks through CORS preflight requests that target Spring MVC spring-webmvc module or...