EUVD-2025-116249

Malicious code in babel-development-jabbah-lacerta npm...

EUVD-2025-114490

Malicious code in development-dotenv-pyxis-ariel npm...

EUVD-2025-114493

Malicious code in development-chariklo-server-janus npm...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

PT-2025-46668

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A Cross Site Scripting issue exists in CentralSquare Community Development. The issue is present in form fields, potentially allowing for malicious script injection. Recommendation...

CVE-2025-64281: Authentication Bypass Using an Alternate Path or Channel

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that originates from cross-site scripting in form fields...

CVE-2025-64281

An Authentication Bypass issue in CentralSquare Community Development 19.5.7 allows attackers to access the admin panel without admin credentials...

CVE-2025-64280: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

CVE-2025-64280

A SQL Injection vulnerability exists in CentralSquare Community Development version 19.5.7 . The issue is caused by unfiltered input in the permit_no field, which allows an attacker to inject and execute arbitrary SQL commands. This vulnerability could lead to a significant impact on the integrit...

CVE-2025-64281

An Authentication Bypass vulnerability exists in CentralSquare Community Development version 19.5.7 . The flaw allows an attacker to bypass normal authentication checks and gain unauthorized access to the admin panel without requiring valid administrative credentials. The underlying cause is clas...

CVE-2025-59491: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

The vulnerability of the Security component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform, related to access control deficiencies, allows an attacker to gain read, modify, and delete access to data.

The vulnerability of the Security component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to access control deficiencies. Exploiting this vulnerability may allow an attacker operating remotely to gain read, modify, and delete...

CVE-2025-59491

Cross Site Scripting vulnerability in CentralSquare Community Development 19.5.7 via form fields...

PT-2025-46671

Name of the Vulnerable Software and Affected Versions CentralSquare Community Development version 19.5.7 Description A SQL Injection issue exists in CentralSquare Community Development 19.5.7. Attackers can inject SQL code through the permit no field. Recommendations Update to a newer version tha...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7, which stems from an authentication bypass that could result in unauthorized acces...

CentralSquare Community Development 安全漏洞

CentralSquare Community Development is a public affairs department software system for local governments from CentralSquare USA. A security vulnerability exists in CentralSquare Community Development version 19.5.7 that stems from unfiltered input in the permitno field, which could lead to an SQL...

CVE-2025-64280

A SQL Injection Vulnerability in CentralSquare Community Development 19.5.7 allows attackers to inject SQL via the permitno field...

EUVD-2025-93390

Adobe Pass versions 3.7.3 and earlier are affected by an Incorrect Authorization vulnerability. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and write access. Exploitation of this issue requires user interaction in that a victim must install...