CVE-2025-9592

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/billinfo.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

CVE-2025-9592

CVE-2025-9592 affects itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /report/bill_info.php, caused by unsafely processing the vid parameter. Remote exploitation is possible, and the exploit is public. Affected behavior and impact are described as en...

CVE-2025-9592 itsourcecode Apartment Management System bill_info.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/billinfo.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

CLSA-2025-1756409198 wget: Fix of CVE-2024-38428

CVE-2024-38428: fix mishandle semicolons in userinfo subcomponent of URI to prevent insecure behavior...

Contrast leaks workload secrets to logs on INFO level

This is the same vulnerability as https://github.com/edgelesssys/contrast/security/advisories/GHSA-h5f8-crrq-4pw8. The original vulnerability had been fixed for release v1.8.1, but the fix was not ported to the main branch and thus not present in releases v1.9.0 ff. Below is a brief repetition of...

MAL-2025-41522 Malicious code in @twork-data-services/proxy-prime-api-v2-get-cu-products-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41518 Malicious code in @twork-data-services/proxy-prime-api-v1-balances-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41516 Malicious code in @twork-data-services/proxy-prime-api-v1-account-overdraft-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41513 Malicious code in @twork-data-services/proxy-prime-acc-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41511 Malicious code in @twork-data-services/proxy-invest-v2-api-v2-broker-account-customer-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41506 Malicious code in @twork-data-services/proxy-invest-api-v1-futures-info-single (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41485 Malicious code in @twork-data-services/company-tariff-info (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-35149

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A vulnerability exists in the processing of the file /report/bill info.php. Manipulation of the vid argument results in SQL injection. Remote exploitation is possible. The...

PT-2025-35152

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Apartment Management System version 1.0. The issue is located in the /report/complain info.php file, within an unknown function...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/billinfo.php. An attacker can exploit this vulnerability...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/complaininfo.php. An attacker can exploit this...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2025-9523

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-30060

The CVE-2025-30060 entry describes a SQL injection vulnerability in the ReturnUserUnitsXML.pl service, where the getUserInfo function is exploitable through the UserID parameter. Root cause: unsanitized user input in a SQL query (UserID) leading to unauthorized data access or modification. Impact...