CVE-2025-10426

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

CVE-2025-10426

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

CVE-2025-10426

The CVE-2025-10426 entry concerns itsourcecode Online Laundry Management System 1.0. A SQL injection vulnerability exists in an unknown function of the file /login.php triggered by manipulating the Username argument. The issue is exploitable remotely and exploitation has been publicly released. R...

CVE-2025-10426 itsourcecode Online Laundry Management System login.php sql injection

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

PT-2025-37449

Name of the Vulnerable Software and Affected Versions itsourcecode Online Laundry Management System version 1.0 Description A security flaw has been discovered that allows for SQL injection. Manipulation of the Username argument in an unknown function of the file /login.php can trigger this issue...

itsourcecode Online Laundry Management System SQL注入漏洞

itsourcecode Online Laundry Management System is an online laundry management system from itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Laundry Management System, which stems from an incorrect manipulation of the parameter Username in the fil...

CVE-2025-10426: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

WordPress Laundry City Theme <= 1.2.16 - Local File Inclusion Vulnerability

Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Laundry City versions = 1.2.16...

WordPress Laundry City Theme <= 1.2.16 is vulnerable to Local File Inclusion

Software Laundry City Type Theme Vulnerable versions = 1.2.16 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID a4cd7e73d762 Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber Immuni...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

CVE-2025-46018

CSC Pay Mobile App 2.19.4 fixed in version 2.20.0 contains a vulnerability allowing users to bypass payment authorization by disabling Bluetooth at a specific point during a transaction. This could result in unauthorized use of laundry services and potential financial loss...

Exploit for CVE-2025-46018

CVE-2025-46018 – CSC Pay Mobile App Payment Authentication Byp...

PT-2025-31639

Name of the Vulnerable Software and Affected Versions CSC Pay Mobile App versions prior to 2.20.0 Description The CSC Pay Mobile App contains an issue that allows users to bypass payment authorization by disabling Bluetooth during a transaction. This bypass could lead to unauthorized use of laund...

CVE-2025-52842

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842 Laundry 2.3.0 - Account Takeover via Reflected XSS

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52842

The CVE-2025-52842 issue concerns Laundry (Linux/macOS) v2.3.0, caused by improper neutralization of input during web page generation, enabling a reflected XSS that could lead to account takeover. Public references in NVD/Red Hat and other feeds confirm affected software and vulnerability descrip...