CVE-2025-52842

The CVE-2025-52842 issue concerns Laundry (Linux/macOS) v2.3.0, caused by improper neutralization of input during web page generation, enabling a reflected XSS that could lead to account takeover. Public references in NVD/Red Hat and other feeds confirm affected software and vulnerability descrip...

CVE-2025-52841

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841 Laundry 2.3.0 - Account Takeover via CSRF

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841 Laundry 2.3.0 - Account Takeover via CSRF

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-52841

CVE-2025-52841 is a CSRF vulnerability in Laundry running on Linux and macOS, affecting Laundry 2.3.0 and enabling account takeover. Publicly available sources in the connected set confirm the issue as CSRF leading to potential unauthorized account access, with no explicit exploitation status in ...

Laundry 跨站脚本漏洞

Laundry is a laundry management system by Moahiminur Rahaman Individual Developer. A cross-site scripting vulnerability exists in Laundry version 2.3.0 that stems from improper input neutralization and could lead to cross-site scripting attacks and account takeover...

PT-2025-27661

Name of the Vulnerable Software and Affected Versions: Laundry version 2.3.0 Description: A Cross-Site Request Forgery CSRF issue allows for Account Takeover. This affects Linux and MacOS systems. Recommendations: For Laundry version 2.3.0, update to a version that includes a fix for this issue, ...

Laundry 安全漏洞

Laundry is a laundry management system by Moahiminur Rahaman Individual Developer. A security vulnerability exists in Laundry version 2.3.0, which stems from vulnerability to cross-site request forgery attacks that could lead to account takeover...

CVE-2025-52841: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Laundry on Linux, MacOS allows to perform an Account Takeover. This issue affects Laundry: 2.3.0...

PT-2025-27676

Name of the Vulnerable Software and Affected Versions: Laundry version 2.3.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS, which allows Account Takeover. This affects Laundry on Linux and MacOS...

CVE-2025-52842: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Laundry on Linux, MacOS allows Account Takeover. This issue affects Laundry: 2.3.0...

CVE-2025-5906

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-5906

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-5906

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-5906 code-projects Laundry System data missing authentication

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-5906

CVE-2025-5906 affects code-projects Laundry System 1.0. The vulnerability involves missing authentication in an unspecified area under /data/, enabling remote exploitation over the network. Multiple connected sources describe a critical issue with remote attack capability and public disclosure of...

CVE-2025-5906 code-projects Laundry System data missing authentication

A vulnerability classified as critical has been found in code-projects Laundry System 1.0. This affects an unknown part of the file /data/. The manipulation leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be use...

Laundry System insert_laundry.php file cross-site scripting vulnerability

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Customer in the file /data/insertlaundry.php, which can be exploited by an attacker to execute...

Laundry System insert_type.php file cross-site scripting vulnerability

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Type in the file /data/inserttype.php, which can be exploited by an attacker to execute arbitrar...