Lucene search
+L

13344 matches found

EUVD
EUVD
•added 2025/11/18 8:27 a.m.•20 views

EUVD-2025-197941

The ACF Flexible Layouts Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'acfflmupdatetemplatewithpastedlayout' function in all versions up to, and including, 1.1.6. This makes it possible for unauthenticated attackers to...

6.5CVSS4.9AI score0.00218EPSS
SaveExploits0References3
Patchstack
Patchstack
•added 2025/11/17 11:20 p.m.•23 views

WordPress ACF Flexible Layouts Manager plugin <= 1.1.6 - Missing Authorization to Unauthenticated Custom Field Update vulnerability

Missing Authorization to Unauthenticated Custom Field Update vulnerability discovered by Ahmad Salem a7mad.cc in WordPress Plugin ACF Flexible Layouts Manager versions = 1.1.6...

6.5CVSS7AI score0.00218EPSS
SaveExploits0References1Affected Software1
HackRead
HackRead
•added 2025/11/17 9:48 p.m.•15 views

Bitsgap vs HaasOnline: Advanced Features vs Smart Simplicity

Power vs Practicality in Crypto Automation...

7AI score
SaveExploits0
osv_cve
osv_cve
•added 2025/11/17 1:15 p.m.•19 views

CVE-2025-13278

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowedbooksearch.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

8.8CVSS5.8AI score0.00381EPSS
SaveExploits1References4
EUVD
EUVD
•added 2025/11/17 3:30 a.m.•23 views

EUVD-2025-197736

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing manipulation of the argument rollnumber can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

6.5CVSS6.5AI score0.00381EPSS
SaveExploits1References5
osv_cve
osv_cve
•added 2025/11/17 1:15 a.m.•22 views

CVE-2025-13255

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /booksearch.php. Performing a manipulation of the argument bookpub/booktitle results in sql injection. It is possible to initiate the attack remotely...

8.8CVSS5.8AI score0.00421EPSS
SaveExploits1References6
CVE
CVE
•added 2025/11/17 1:02 a.m.•42 views

CVE-2025-13256

CVE-2025-13256 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in an unknown function of /borrow.php where manipulating the argument roll_number can cause SQL injection. The flaw can be exploited remotely, and public exploits are available. The connected documen...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References4Affected Software1
RedHat Linux
RedHat Linux
•added 2025/11/17 12:42 a.m.•54 views

Critical: Red Hat Security Advisory: lasso security update

An update for lasso is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability...

9.8CVSS7.7AI score0.01093EPSS
SaveExploits1References2
CVE
CVE
•added 2025/11/17 12:02 a.m.•38 views

CVE-2025-13254

CVE-2025-13254 affects projectworlds Advanced Library Management System 1.0. The vulnerability is in the unknown code path of /add_member.php where manipulation of the roll_number parameter enables SQL injection. Exploitation may be remote and public exploitation is indicated by the sources. The ...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•13 views

CVE-2025-13253: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

8.8CVSS6.4AI score0.00381EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•8 views

CVE-2025-13256: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrow.php. Executing a manipulation of the argument rollnumber can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References6
Packet Storm News
Packet Storm News
•added 2025/11/17 12:00 a.m.•17 views

A Fuzzy Logic-Based Cryptographic Framework for Real-Time Dynamic Key Generation for Enhanced Data Encryption

With the ever-growing demand for cybersecurity, static key encryption mechanisms are increasingly vulnerable to adversarial attacks due to their deterministic and non-adaptive nature. Brute-force attacks, key compromise, and unauthorized access have become highly common cyber threats. This resear...

6.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2025/11/17 12:00 a.m.•22 views

Telerik UI for ASP.NET AJAX Unsafe Reflection

According to its self-reported version number, the version of Telerik UI for ASP.NET AJAX is affected by an unsafe reflection vulnerability resulting in denial of service and advanced attacks scenarios. Note that the scanner has not tested for these issues but has instead relied only on the...

7.5CVSS7AI score0.26268EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2025/11/17 12:00 a.m.•24 views

PT-2025-47101

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /add member.php. Such manipulation of the argument roll number leads to sql injection. The attack may be performed from remote. The exploit is publicly...

6.5CVSS7.2AI score0.00381EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•10 views

CVE-2025-13278: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in projectworlds Advanced Library Management System 1.0. Impacted is an unknown function of the file /borrowedbooksearch.php. Such manipulation of the argument datefrom/dateto leads to sql injection. The attack can be launched remotely. The exploit has been disclose...

8.8CVSS6.4AI score0.00381EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•9 views

CVE-2025-13254: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. This vulnerability affects unknown code of the file /addmember.php. Such manipulation of the argument rollnumber leads to sql injection. The attack may be performed from remote. The exploit is publicly availab...

8.8CVSS6.5AI score0.00381EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13255: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. This issue affects some unknown processing of the file /booksearch.php. Performing a manipulation of the argument bookpub/booktitle results in sql injection. It is possible to initiate the attack remotely...

8.8CVSS6.5AI score0.00421EPSS
SaveExploits1References8
Cvelist
Cvelist
•added 2025/11/16 11:32 p.m.•37 views

CVE-2025-13253 projectworlds Advanced Library Management System add_librarian.php sql injection

A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...

6.5CVSS0.00381EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•20 views

amdgpu_dmdebugfs Heap Buffer Overflow DoS

The vulnerability in the capabilitiesshow function of the drivers/gpu/drm/amd/display/amdgpudm/amdgpudmdebugfs.c driver of the Direct Rendering Infrastructure DRI support for AMD graphics cards in Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allo...

5.5CVSS6.7AI score0.00202EPSS
SaveExploits0References6Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/11/16 12:00 a.m.•28 views

AMD Graphics DRI DoS

The vulnerability of the optc32disablecrtc function in the drivers/gpu/drm/amd/display/dc/dcn32/dcn32optc.c driver module related to AMD graphics cards for Linux operating systems is associated with a numerical overflow. Exploiting this vulnerability could allow an attacker to cause a service...

5.5CVSS7AI score0.00222EPSS
SaveExploits0References8Affected Software1
Rows per page
Query Builder