494 matches found
CVE-2025-11904
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2025-11904 yanyutao0402 ChanCMS hasUse sql injection
A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.2. This affects the function hasUse of the file /cms/model/hasUse. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The...
CVE-2025-11596
A vulnerability was determined in code-projects E-Commerce Website 1.0. The affected element is an unknown function of the file /pages/deleteorderdetails.php. Executing manipulation of the argument orderid can lead to sql injection. The attack can be executed remotely. The exploit has been public...
CVE-2025-11515
A security flaw has been discovered in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/users/register-complaint.php. Performing manipulation of the argument cid results in sql injection. It is possible to initiate the attack remotely. The explo...
CVE-2025-11475
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. Affected by this issue is some unknown functionality of the file /viewmember.php. Executing a manipulation of the argument userid can lead to sql injection. The attack can be launched remotely. The exploit has...
CVE-2025-11433
A security flaw has been discovered in itsourcecode Leave Management System 1.0. This impacts the function redirect of the file /module/employee/controller.php?action=reset of the component Query Parameter Handler. Performing a manipulation of the argument ID results in cross site scripting. It i...
CVE-2025-11420
A vulnerability was detected in code-projects E-Commerce Website 1.0. Impacted is an unknown function of the file /pages/editorderdetails.php. The manipulation of the argument orderid results in sql injection. The attack may be launched remotely. The exploit is now public and may be used...
CVE-2025-11358
A weakness has been identified in code-projects Simple Banking System 1.0. Impacted is an unknown function of the file /removeuser.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and...
EUVD-2002-1103
Malware in sbrugna...
BBMRI-ERIC Negotiator 安全漏洞
BBMRI-ERIC Negotiator is a biospecimen repository access tool from the Austrian company BBMRI-ERIC. A security vulnerability exists in BBMRI-ERIC Negotiator version v3.15.2, which stems from improper manipulation of the userID parameter and could lead to an insecure direct object reference attack...
EUVD-2025-32489
A vulnerability was detected in zhuimengshaonian wisdom-education up to 1.0.4. The affected element is an unknown function of the file src/main/java/com/education/api/controller/student/WrongBookController.java. Performing manipulation of the argument subjectId results in authorization bypass. Th...
EUVD-2025-31393
Malicious code in bioql PyPI...
EUVD-2025-23336
Malicious code in bioql PyPI...
EUVD-2025-26467
Malicious code in bioql PyPI...
EUVD-2023-35974
Malicious code in bioql PyPI...
EUVD-2024-37918
Malicious code in bioql PyPI...
EUVD-2025-29834
Malicious code in bioql PyPI...
EUVD-2024-3544
Malicious code in bioql PyPI...