EUVD-2025-27172

Malicious code in bioql PyPI...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

An Insecure Direct Object Reference IDOR in Envasadora H2O Eireli - Soda Cristal v40.20.4 allows authenticated attackers to access sensitive data for other users via a crafted HTTP request...

CVE-2025-52389

CVE-2025-52389 describes an Insecure Direct Object Reference (IDOR) in the application "Envasadora H2O Eireli - Soda Cristal" version v40.20.4 . The vulnerability allows authenticated attackers to access sensitive data belonging to other users through a crafted HTTP request. The issue’s CVSS v3.1...

PT-2025-36502

Name of the Vulnerable Software and Affected Versions: Envasadora H2O Eireli - Soda Cristal version 40.20.4 Description: An Insecure Direct Object Reference IDOR exists in Envasadora H2O Eireli - Soda Cristal version 40.20.4. Authenticated attackers can access sensitive data belonging to other...

Envasadora H2O Soda Cristal 安全漏洞

Envasadora H2O Soda Cristal is an application from Envasadora H2O, Brazil. A security vulnerability exists in Envasadora H2O Soda Cristal version v40.20.4, which stems from an insecure direct object reference that could lead to the disclosure of sensitive data...

cristal-rentacar.ro Cross Site Scripting vulnerability OBB-2506964

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

horizonte-cristal---habinedita-74.empreendimentos.com.pt XSS vulnerability

Open Bug Bounty ID: OBB-629099 Description| Value ---|--- Affected Website:| horizonte-cristal---habinedita-74.empreendimentos.com.pt Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting /...

cristal-et-bronze.com XSS vulnerability

Open Bug Bounty ID: OBB-598847 Description| Value ---|--- Affected Website:| cristal-et-bronze.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Roxio CinePlayer 3.2 (SonicMediaPlayer.dll) Remote BOF Exploit

Exploit for windows platform in category remote exploits ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit ============================================================== Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF...

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow

Roxio CinePlayer 3.2 - SonicMediaPlayer.dll Remote Buffer Overflow Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Roxio CinePlayer 3.2 SonicMediaPlayer.dll Remote BOF Exploit Advisory from secunia 22251 By : Super-cristal Greetings: His0k4, snakespc.com Tested on Windows Xp Sp2...

CastRipper 2.50.70 (.m3u) Universal Stack Overflow Exploit (py)

Exploit for unknown platform in category local exploits =============================================================== CastRipper 2.50.70 .m3u Universal Stack Overflow Exploit py =============================================================== !/usr/bin/python print "" print " CastRipper 2.50.70...

Absolute Form Processor SQL Injection

----------------------------------------------------- ----------------------------------------------------- Absolute Form Processor XE-V 1.5 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.com Vive Algerie demo :...

My Dealer CMS 2.0 - Authentication Bypass

My Dealer CMS 2.0 - Authentication Bypass ----------------------------------------------------- ----------------------------------------------------- My Dealer Cms 2.0 auth Bypass Remote Sql Injecion ----------------------------------------------------- Founder: ThE g0bL!NDz Home: www.h4ckf0ru.co...

PG Matchmaking Script - Multiple SQL Injections

PG Matchmaking Script - Multiple SQL Injections ================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE...

PG Matchmaking Script - Multiple SQL Injections

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...

pgmatchmaking-sql.txt

================================================================================================================== SSSSS NN N AA K K EEEEE SSSSS TTTTTTTTT EEEEE AA MM MM S N N N A A K K E S T E A A M M M M SSSSS N N N AAAAAA KKK EEEEE SSSSS T EEEEE AAAAAA M M M M S N N N A A K K E S T E A A M M M...