Lucene search
+L

6801 matches found

RedhatCVE
RedhatCVE
added 2025/12/26 3:22 a.m.10 views

CVE-2025-15074

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

9.8CVSS7.3AI score0.00438EPSS
SaveExploits1References1
EUVD
EUVD
added 2025/12/25 6:55 p.m.8 views

EUVD-2025-205384

Malicious code in ing-feat-kyc-consent npm...

6.6AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/12/25 6:55 p.m.9 views

Malicious code in ing-feat-kyc-consent (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 33ec1565e92d1ecffd4215be59b4dbd0d6a1e91be1511dab5c9b6ece1c202507 The package ing-feat-kyc-consent was found to contain malicious code. Source: ghsa-malware...

7AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/25 1:23 p.m.9 views

CVE-2025-68590

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in CRM Perks Integration for Contact Form 7 HubSpot cf7-hubspot allows Blind SQL Injection.This issue affects Integration for Contact Form 7 HubSpot: from n/a through = 1.4.2...

7.6CVSS7.6AI score0.00324EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/25 3:30 a.m.16 views

EUVD-2025-205361

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

7.5CVSS6.8AI score0.00438EPSS
SaveExploits1References7
OSV
OSV
added 2025/12/25 3:15 a.m.9 views

CVE-2025-15074

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

9.8CVSS5.7AI score0.00438EPSS
SaveExploits1References5
NVD
NVD
added 2025/12/25 3:15 a.m.11 views

CVE-2025-15074

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

9.8CVSS0.00438EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/12/25 2:32 a.m.37 views

CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

7.5CVSS0.00438EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/12/25 2:32 a.m.5 views

CVE-2025-15074 itsourcecode Online Frozen Foods Ordering System customer_details.php sql injection

A vulnerability was identified in itsourcecode Online Frozen Foods Ordering System 1.0. This vulnerability affects unknown code of the file /customerdetails.php. Such manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be...

7.5CVSS7AI score0.00438EPSS
SaveExploits1References5
CVE
CVE
added 2025/12/25 2:32 a.m.22 views

CVE-2025-15074

The CVE-2025-15074 affects itsourcecode Online Frozen Foods Ordering System 1.0, specifically the /customer_details.php file. The issue is a SQL injection vulnerability arising from unknown code manipulation, exploitable remotely over the network. The vulnerability is supported by multiple source...

9.8CVSS7AI score0.00438EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/12/25 12:00 a.m.7 views

itsourcecode Online Frozen Foods Ordering System SQL注入漏洞

itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from a misuse of unknown code in the file /customerdetails.php,...

9.8CVSS7.8AI score0.00438EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2025/12/25 12:00 a.m.10 views

PT-2025-53384

Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in the itsourcecode Online Frozen Foods Ordering System version 1.0. The issue affects unknown code within the /customer details.php file...

9.8CVSS7.6AI score0.00438EPSS
SaveExploits1References11
CVE
CVE
added 2025/12/22 6:57 p.m.42 views

CVE-2025-15033

CVE-2025-15033 affects WooCommerce core 8.1–10.4.2 under a specific site configuration, allowing logged-in customers to view guest order data. The issue is mitigated by patches in 10.4.3 and backported to 8.1.3; sites on 8.0 or earlier are not affected. If applicable, upgrade to 10.4.3 or 8.1.3+ ...

6.5CVSS6.5AI score0.00323EPSS
SaveExploits0References1
NVD
NVD
added 2025/12/18 8:16 a.m.9 views

CVE-2025-60090

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Insightly gf-insightly allows Object Injection.This issue affects WP Gravity Forms Insightly: from n/a through = 1.1.6...

9.8CVSS0.00459EPSS
SaveExploits0References1
OSV
OSV
added 2025/12/18 8:16 a.m.9 views

CVE-2025-60089

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Object Injection.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through = 1.3.5...

9.8CVSS5.8AI score0.00459EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2025/12/18 7:22 a.m.7 views

CVE-2025-60091 WordPress WP Gravity Forms Zoho CRM and Bigin plugin <= 1.2.9 - Deserialization of untrusted data vulnerability

Deserialization of Untrusted Data vulnerability in CRM Perks WP Gravity Forms Zoho CRM and Bigin gf-zoho allows Object Injection.This issue affects WP Gravity Forms Zoho CRM and Bigin: from n/a through = 1.2.9...

9.8CVSS6.6AI score0.00459EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/12/18 12:35 a.m.15 views

CVE-2025-66923

A Cross-site scripting XSS vulnerability in Create/Update Customers in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phonenumber parameter...

7.2CVSS6AI score0.0054EPSS
SaveExploits1References1
NVD
NVD
added 2025/12/17 6:15 p.m.11 views

CVE-2025-66923

A Cross-site scripting XSS vulnerability in Create/Update Customers in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phonenumber parameter...

7.2CVSS0.0054EPSS
SaveExploits1References2
NVD
NVD
added 2025/12/17 1:15 p.m.13 views

CVE-2025-14096

A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system. Other related CVE's ar...

8.4CVSS0.00132EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/12/17 12:19 p.m.44 views

CVE-2025-14096 Credential Disclosure vulnerability in Radiometer Products

A vulnerability exists in multiple Radiometer products that allow an attacker with physical access to the analyzer possibility to extract credential information. The vulnerability is due to a weakness in the design and insufficient credential protection in operating system. Other related CVE's ar...

8.4CVSS0.00132EPSS
SaveExploits0References1
Rows per page
Query Builder