8651 matches found
CVE-2025-0843
CVE-2025-0843 affects needyamin Library Card System 1.0, specifically the Admin Panel’s admindashboard.php. The vulnerability arises from unsafely handling the email and password parameters, enabling remote SQL injection. This is described across multiple connected records (NVD, Red Hat, CVE list...
CVE-2025-0842
A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...
CVE-2025-0842
CVE-2025-0842 affects the needyamin Library Card System 1.0, specifically the Login component's admin.php. The vulnerability arises from improper handling of the email and password parameters, enabling SQL injection. CVE entries and related advisories indicate remote exploitation with publicly di...
CVE-2025-0842 needyamin Library Card System Login admin.php sql injection
A vulnerability was found in needyamin Library Card System 1.0 and classified as critical. This issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack may be initiated remotely. The...
Revert "mmc: dw_mmc: Fix IDMAC operation with pages bigger than 4K"
...
PT-2025-4068 · Unknown · Needyamin Library Card System
Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue affects some unknown processing of the file admin.php of the component Login. The manipulation of the email/password argument leads to SQL injection. The attack may be...
PT-2025-4070 · Unknown · Needyamin Library Card System
Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A problem was found in the needyamin Library Card System. It affects an unknown functionality of the file signup.php of the component Registration Page. The manipulation of the arguments...
PT-2025-4069 · Unknown · Needyamin Library Card System
Name of the Vulnerable Software and Affected Versions: needyamin Library Card System version 1.0 Description: A critical issue has been identified in the Admin Panel component, specifically in the admindashboard.php file, where an unknown function is affected. The manipulation of the email and...
Library Card System 注入漏洞
Library Card System is a library management system developed by Md. Yamin Hossain, an individual developer in Bangladesh. An injection vulnerability exists in Library Card System version 1.0, which stems from an incorrect manipulation of the email/password parameter that can lead to sql injection...
The vulnerability of the fsl_asoc_card_probe() function (sound/soc/fsl/fsl-asoc-card.c) in the AsoC component of Linux kernel, which allows a hacker to cause a service failure.
The vulnerability of the fslasoccardprobe function sound/soc/fsl/fsl-asoc-card.c in the AsoC component of Linux operating systems is related to pointer manipulation. Exploiting this vulnerability could allow an attacker to cause a service failure...
VulnCheck KEV: CVE-2019-3980
The Solarwinds Dameware Mini Remote Client agent v12.1.0.89 supports smart card authentication which can allow a user to upload an executable to be executed on the DWRCS.exe host. An unauthenticated, remote attacker can request smart card login and upload and execute an arbitrary executable run...
WordPress Magic the Gathering Card Tooltips plugin <= 3.4.0 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by muhammad yudha in WordPress Plugin Magic the Gathering Card Tooltips versions = 3.4.0...
WordPress plugin Magic the Gathering Card Tooltips 跨站脚本漏洞
WordPress and the WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blogs on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPres...
A week in security (January 13 – January 19)
Last week on Malwarebytes Labs: iMessage text gets recipient to disable phishing protection so they can be phished The new rules for AI and encrypted messaging, with Mallory Knodel Lock and Code S06E01 Insurance company accused of using secret software to illegally collect and sell location data ...
The vulnerability of the SmartCardReader class in the Smart Cards for Windows service (formerly known as Smart Card Resource Manager) on Windows operating systems allows a malicious individual to disclose protected information.
The vulnerability of the SmartCardReader class in the Smart Cards for Windows service previously known as Smart Card Resource Manager in Windows operating systems is related to the use of an uninitialized resource. Exploiting this vulnerability could allow an attacker to disclose sensitive...
CVE-2025-0559
A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site...
CVE-2025-0559 Campcodes School Management Software Create Id Card Page create-id-card cross site scripting
A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site...
CVE-2025-0559 Campcodes School Management Software Create Id Card Page create-id-card cross site scripting
A vulnerability, which was classified as problematic, has been found in Campcodes School Management Software 1.0. This issue affects some unknown processing of the file /create-id-card of the component Create Id Card Page. The manipulation of the argument ID Card Title leads to cross site...
Campcodes School Management Software 代码注入漏洞
Campcodes School Management Software is a school management software from Campcodes, Inc. A code injection vulnerability exists in Campcodes School Management Software version 1.0, which originates from a cross-site scripting vulnerability in the ID Card Title parameter of the /create-id-card fil...
PT-2025-3952 · Unknown · Campcodes School Management
Name of the Vulnerable Software and Affected Versions: Campcodes School Management Software version 1.0 Description: A cross-site scripting issue has been found in the Create Id Card Page component, specifically in the file /create-id-card. The manipulation of the ID Card Title argument leads to...