55886 matches found
QNAP File Station 5 Trust Management Issues Vulnerability (CNVD-2025-15403)
QNAP File Station 5 is a file management system launched by Weilian Technology, which is mainly used for file management of NAS devices. QNAP File Station 5 suffers from a trust management issue vulnerability that stems from improper certificate validation, no details of the vulnerability are...
CVE-2025-52920
Innoshop (v0.4.1 and earlier) is affected by an IDOR vulnerability in the frontend store. The issue allows disclosure of other customers’ PII and deletion of their product reviews by manipulating IDs in endpoints such as /en/account/orders/{ORDER_ID} and /en/account/reviews/{REVIEW_ID}, or by alt...
openSUSE Security Advisory (SUSE-SU-2025:02045-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-6492
creationtimestamp| type| source ---|---|--- 2025-06-22 20:48:05+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19174 2025-06-22 22:14:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsa3phfcqq2r...
CVE-2025-6487
creationtimestamp| type| source ---|---|--- 2025-06-22 18:44:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19172 2025-06-22 19:00:58+00:00| published-proof-of-concept| Telegram/nHwRDF2pACkOFCESw7WBf09x7jYFFFCQYf7GTcksxOZY6eE 2025-06-22 19:24:13+00:00| seen|...
CVE-2025-6451
The CVE-2025-6451 entry concerns code-projects’ Simple Online Hotel Reservation System 1.0. Multiple connected sources confirm a SQL injection in the file /admin/delete_pending.php via the transaction_id parameter, allowing remote exploitation. The issue stems from lack of validation/sanitization...
PT-2025-26570 · Unknown +1 · Codemirror +1
Name of the Vulnerable Software and Affected Versions: CodeMirror versions up to 5.17.0 Description: A vulnerability was found in the Markdown Mode component, specifically in the file mode/markdown/markdown.js, leading to inefficient regular expression complexity. This issue can be exploited...
Code-Projects Online Bidding System Injection Vulnerabilities
Online Bidding System is an online bidding system. Online Bidding System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of file /details.php. An attacker can exploit this vulnerability to execute illega...
CVE-2025-6446
creationtimestamp| type| source ---|---|--- 2025-06-21 23:30:45+00:00| published-proof-of-concept| Telegram/5DOq2DiFQqVGP4NgcBlMmGjMiliyLoJ8urq1ooGyZBVufk 2025-06-21 23:43:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19139 2025-06-22 02:15:49+00:00| seen|...
CVE-2025-6446
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...
CVE-2025-6446
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...
CVE-2025-6446
CVE-2025-6446 affects code-projects Client Details System 1.0, where SQL injection arises from lack of validation of the Username parameter in /clientdetails/admin/index.php. The issue allows remote exploitation, with publicly disclosed exploits and potential disclosure/exfiltration of database d...
CVE-2025-6446 code-projects Client Details System index.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...
CVE-2025-6446 code-projects Client Details System index.php sql injection
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...
CVE-2025-6411
CVE-2025-6411 affects PHPGurukul Art Gallery Management System 1.1. The vulnerability resides in the /admin/changepropic.php endpoint, where manipulation of the imageid parameter leads to SQL injection. Exploitation is possible remotely and exploit details have been publicly disclosed. Several co...
Code-Projects Client Details System Injection Vulnerability
Client Details System is a client information system. Client Details System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter Username in file /clientdetails/admin/index.php. An attacker can exploit this...
PT-2025-26531 · Unknown · Code-Projects Client Details System
Name of the Vulnerable Software and Affected Versions: code-projects Client Details System version 1.0 Description: A critical vulnerability exists in code-projects Client Details System 1.0, affecting the processing of the file /clientdetails/admin/index.php. Manipulation of the Username argumen...
CVE-2025-6446: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /clientdetails/admin/index.php. The manipulation of the argument Username leads to sql injection. The attack may be initiated...
CVE-2025-48945
pycares is a Python module which provides an interface to c-ares. c-ares is a C library that performs DNS requests and name resolutions asynchronously. Prior to version 4.9.0, pycares is vulnerable to a use-after-free condition that occurs when a Channel object is garbage collected while DNS...