271 matches found
PT-2026-3249
Name of the Vulnerable Software and Affected Versions TheLibrarian versions prior to the fixed version Description The supervisord status page within TheLibrarian can be accessed via the web fetch tool, potentially exposing running processes in the backend. This allows for the retrieval of...
PT-2026-3247
Name of the Vulnerable Software and Affected Versions The Librarian affected versions not specified Description The Librarian software has an information leakage issue stemming from the web fetch tool. This allows an attacker to retrieve arbitrary external content, potentially using The Librarian...
CVE-2018-1000139
I, Librarian version 4.8 and earlier contains a Cross Site Scripting XSS vulnerability in "id" parameter in stable.php that can result in an attacker using the XSS to send a malicious script to an unsuspecting user...
CVE-2018-1000141
I, Librarian version 4.9 and earlier contains an Incorrect Access Control vulnerability in ajaxdiscussion.php that can result in any users gaining unauthorized access read, write and delete to project discussions...
CVE-2019-11428
I, Librarian 4.10 has XSS via the export.php exportfiles parameter...
CVE-2025-13253
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...
EUVD-2025-197733
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...
CVE-2025-13253
A vulnerability was determined in projectworlds Advanced Library Management System 1.0. This affects an unknown part of the file /addlibrarian.php. This manipulation of the argument Username causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly...
Projectworlds Advanced Library Management System SQL注入漏洞
Projectworlds Advanced Library Management System is an advanced library management system from Projectworlds India. A SQL injection vulnerability exists in Projectworlds Advanced Library Management System version 1.0, which stems from incorrect manipulation of the parameter Username in the file...
CVE-2025-13253
CVE-2025-13253 affects projectworlds Advanced Library Management System 1.0. A SQL injection vulnerability exists in the /add_librarian.php file due to manipulation of the Username parameter. This can be exploited remotely and the exploit has been publicly disclosed. Multiple sources corroborate ...
PT-2025-47094
Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0 that allows for SQL injection. This issue is located in the /add librarian.php file, where...
Fedora 44 : dokuwiki / php-php81_bc-strftime (2025-5c621a5a8a)
The remote Fedora 44 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-5c621a5a8a advisory. - Initial build for PHP81BC\strftime - Update DokuWiki to version 2025-05-14b Librarian Tenable has extracted the preceding description block directly from t...
Linux Distros Unpatched Vulnerability : CVE-2025-61224
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'56.1 allows a remote attacker to execute arbitrary code via the q parameter CVE-2025-61224...
EUVD-2017-1504
Malware in sbrugna...
EUVD-2017-1502
Malware in sbrugna...
EUVD-2019-3103
Malware in sbrugna...
EUVD-2018-1857
Malware in sbrugna...
EUVD-2018-1855
Malware in sbrugna...