CVE-2025-10112

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

itsourcecode Student Information Management System 安全漏洞

itsourcecode Student Information Management System is an itsourcecode open source student information management system. A security vulnerability exists in itsourcecode Student Information Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of the...

CVE-2025-10112 itsourcecode Student Information Management System index.php sql injection

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112 itsourcecode Student Information Management System index.php sql injection

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112

CVE-2025-10112 affects itsourcecode Student Information Management System 1.0. The vulnerability is a SQL injection in the file /admin/modules/department/index.php caused by manipulation of the ID parameter in an unknown function. The issue is exploitable remotely and, according to multiple sourc...

PT-2025-36530

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A weakness exists in itsourcecode Student Information Management System 1.0. The issue involves SQL injection caused by manipulation of the ID argument within an...

Defense Department Scrambles to Pretend It’s Called the War Department

President Donald Trump said the so-called Department of War branding is to counter the “woke” Department of Defense name...

Chinese Firms Linked to Silk Typhoon Filed 15+ Patents for Cyber Espionage Tools

Chinese companies linked to the state-sponsored hacking group known as Silk Typhoon aka Hafnium have been identified as behind over a dozen technology patents, shedding light on the shadowy cyber contracting ecosystem and its offensive capabilities. The patents cover forensics and intrusion tools...

deer-wms-2 注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source . The deer-wms-2 3.3 and earlier versions have an injection vulnerability, the vulnerability stems from the file /system/dept/list on the parameter params dataScope wrong operation leads to SQL injection...

CVE-2025-8123

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been classified as critical. Affected is an unknown function of the file /system/dept/edit. The manipulation of the argument ancestors leads to sql injection. It is possible to launch the attack remotely. The exploit has been...

deer-wms-2 SQL注入漏洞

deer-wms-2 is a warehouse management system in China deerwms open source. A SQL injection vulnerability exists in deer-wms-2 3.3 and earlier versions, which originates from the incorrect operation of the parameter ancestors in the file /system/dept/edit that leads to SQL injection...

LiveHelperChat 4.61 - Stored Cross Site Scripting (XSS) via Department Assignment Alias Nick Field

Exploit Title: LiveHelperChat 4. Save the changes. 5. Revist the Department Assignment settings page and edit the Alias Nick field, the cross site scripting xss will execute...

Another Supply Chain Vulnerability

ProPublica is reporting: Microsoft is using engineers in China to help maintain the Defense Department's computer systems--with minimal supervision by U.S. personnel--leaving some of the nation's most sensitive data vulnerable to hacking from its leading cyber adversary, a ProPublica investigatio...

PT-2025-30334 · Unknown · Livehelperchat

Name of the Vulnerable Software and Affected Versions: Live Helper Chat version 4.60 Description: A stored cross-site scripting XSS issue exists in the department assignment editing module. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the Alias Nick...

CVE-2025-51403: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter...

CVE-2025-51403

A stored cross-site scripting XSS vulnerability in the department assignment editing module of of Live Helper Chat v4.60 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Alias Nick parameter...

Live Helper Chat 安全漏洞

Live Helper Chat is an open source plugin that supports online chat by an individual developer Live Helper Chat. Provides chat functionality for web platforms. A security vulnerability exists in Live Helper Chat version v4.60, which stems from insufficient validation of the Alias Nick parameter...