1563 matches found
EUVD-2025-198170
The ELCA Star Transmitter Remote Control firmware 1.25 for STAR150, BP1000, STAR300, STAR2000, STAR1000, STAR500, and possibly other models, contains an information disclosure vulnerability allowing unauthenticated attackers to retrieve admin credentials and system settings via an unprotected...
EUVD-2025-198200
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodesfiles/ActivateLicense.php. When a license file is uploaded, the application derives a new...
EUVD-2025-198188
AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component F2MAdmin that exposes an unauthenticated prompt upload endpoint at AudioCodesfiles/utils/IVR/diagram/ajaxPromptUploadFile.php. The script accepts an uploaded file and...
EUVD-2025-198211
A weakness has been identified in code-projects Courier Management System 1.0. This affects an unknown function of the file /add-office.php. This manipulation of the argument OfficeName causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public a...
EUVD-2025-198110
Not used...
EUVD-2025-197861
PHPGurukul Online Shopping Portal 2.0 is vulnerable to Cross Site Scripting XSS via the quantity parameter in my-cart.php...
EUVD-2025-197872
A flaw has been found in itsourcecode Web-Based Internet Laboratory Management System 1.0. This impacts an unknown function of the file /user/controller.php. Executing manipulation can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used...
EUVD-2025-197846
CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...
EUVD-2025-197852
CWE-78 Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'...
EUVD-2025-197869
PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the fullname, emailid, and contactno parameters in login.php...
EUVD-2025-197624
Reflected Cross-Site Scripting XSS vulnerability in SVX Portal 2.7A via the id parameter to Recivers.php...
EUVD-2025-180205
ProsemirrorToHtml has a Cross-Site Scripting XSS vulnerability through unescaped HTML attribute values...
EUVD-2025-176011
Malicious code in terser-antares-markdownlint-telesto npm...
EUVD-2025-136228
Malicious code in itale-adci-gnyagibhygyu npm...
EUVD-2025-137853
Malicious code in astam-ift-digokiusnla npm...
EUVD-2025-137143
Malicious code in imodiov-kufni-acumnacffgteafsgredcadfacvfehx npm...
EUVD-2025-132285
Malicious code in susu1 npm...
EUVD-2025-132781
Malicious code in @akunsansan0/karedok39 npm...
EUVD-2025-131933
IBM OpenPages 9.0 and 9.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking...