PT-2025-40628

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the SMB client implementation. Specifically, the smbd destroy function may attempt to access memory after it has been freed, potentially leading t...

PT-2025-38288

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Exam Form Submission version 1.0 Description: A SQL injection flaw exists due to manipulation of the credits argument in the /admin/update s3.php file. Remote exploitation is possible. The exploit has been published...

personal-security-checklist-1

This repository is an open-source project for a curated checklist of 300+ tips for protecting digital security and privacy in 2022. It is a community-driven project that allows contributors to suggest and submit points to be added, amended, or removed from the list. The project has a code of...

WordPress Dokan Pro plugin <= 4.0.5 - Authenticated (Vendor+) Privilege Escalation vulnerability

Authenticated Vendor+ Privilege Escalation vulnerability discovered by Foxyyy in WordPress Plugin Dokan Pro versions = 4.0.5...

Malicious code in get-asphalt-9-legends-credits-generator (npm)

The package get-asphalt-9-legends-credits-generator was found to contain malicious code...

MAL-2025-39454 Malicious code in working-asphalt-9-legends-credits-generator (npm)

The package working-asphalt-9-legends-credits-generator was found to contain malicious code...

MAL-2025-18150 Malicious code in decentraland-credits-squid (npm)

The package decentraland-credits-squid was found to contain malicious code...

Malicious code in working-asphalt-9-legends-credits-generator (npm)

The package working-asphalt-9-legends-credits-generator was found to contain malicious code...

MAL-2025-23255 Malicious code in instantly-asphalt-9-legends-credits-generator (npm)

The package instantly-asphalt-9-legends-credits-generator was found to contain malicious code...

Malicious code in decentraland-credits-squid (npm)

The package decentraland-credits-squid was found to contain malicious code...

MAL-2025-21364 Malicious code in get-asphalt-9-legends-credits-generator (npm)

The package get-asphalt-9-legends-credits-generator was found to contain malicious code...

Exam Form Submission update_s5.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates5.php. An attacker can exploit this vulnerability to execute illegal SQL...

Exam Form Submission update_s7.php file SQL injection vulnerability

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates7.php. An attacker can exploit this vulnerability to execute illegal SQL...

WordPress FileBird – WordPress Media Library Folders & File Manager plugin <= 6.4.8 - Authenticated (Author+) SQL Injection vulnerability

Authenticated Author+ SQL Injection vulnerability discovered by Kenneth Billones in WordPress Plugin Filebird versions = 6.4.8...

WordPress Campus Directory plugin <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via noaccess_msg Parameter vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via noaccessmsg Parameter vulnerability discovered by muhammad yudha in WordPress Plugin Campus Directory versions = 1.9.1...

CVE-2025-8372

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-8371

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updates5.php. The manipulation of the argument credits leads to sql injection. The attack can be launched remotely. Th...

code-projects Exam Form Submission 注入漏洞

Exam Form Submission is an exam form. Exam Form Submission suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter credits in file /admin/updates5.php. An attacker can exploit this vulnerability to execute illegal SQL...

CVE-2025-8372: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/updates7.php. The manipulation of the argument credits leads to sql injection. The attack may be launched remotely. The exploit h...

CVE-2025-8371: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in code-projects Exam Form Submission 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/updates5.php. The manipulation of the argument credits leads to sql injection. The attack can be launched remotely. Th...