2319 matches found
CVE-2025-13286: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...
CVE-2025-13057: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...
CVE-2025-7663: Missing Authorization
The Ovatheme Events Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on several functions in the /class-ovaem-ajax.php file in all versions up to, and including, 1.8.6. This makes it possible for unauthenticated attackers to delete ticket files,...
CVE-2025-12612: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...
CVE-2025-12347: Unrestricted Upload of File with Dangerous Type
A flaw has been found in MaxSite CMS up to 109. This issue affects some unknown processing of the file application/maxsite/admin/plugins/editorfiles/save-file-ajax.php. Executing manipulation of the argument filepath/content can lead to unrestricted upload. The attack can be executed remotely. Th...
CVE-2025-11171: Missing Authentication for Critical Function
The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter,...
EUVD-2010-3207
Malware in sbrugna...
EUVD-2012-2503
Malware in sbrugna...
EUVD-2014-9136
Malware in sbrugna...
EUVD-2015-9285
Malware in sbrugna...
EUVD-2015-9156
Malware in sbrugna...
EUVD-2018-11204
Malware in sbrugna...
EUVD-2018-10433
Malware in sbrugna...
EUVD-2018-10104
Malware in sbrugna...
EUVD-2018-9822
Malware in sbrugna...
EUVD-2018-8136
Malware in sbrugna...
EUVD-2019-5927
Malware in sbrugna...
EUVD-2015-9276
Malware in sbrugna...