CVE-2025-34155: Observable Response Discrepancy

Tibbo AggreGate Network Manager 6.40.05 contains an observable response discrepancy in its login functionality. Authentication failure messages differ based on whether a supplied username exists or not, allowing an unauthenticated remote attacker to infer valid account identifiers. This can...

PT-2025-42538

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 and earlier Description ClipBucket is an open source video hosting platform built with PHP. A Blind SQL injection flaw exists in the Admin Area’s “/admin area/login as user.php” file. Successful exploitation of this...

EUVD-2013-1123

Malware in sbrugna...

EUVD-2018-20422

Malware in sbrugna...

EUVD-2020-30210

Malware in sbrugna...

EUVD-2020-26940

Malware in sbrugna...

EUVD-2008-6901

Malware in sbrugna...

EUVD-2025-12697

Malicious code in bioql PyPI...

EUVD-2024-23279

Malicious code in bioql PyPI...

EUVD-2023-41369

Malicious code in bioql PyPI...

EUVD-2024-43723

Malicious code in bioql PyPI...

EUVD-2024-0155

Malicious code in bioql PyPI...

EUVD-2023-2516

Malicious code in bioql PyPI...

EUVD-2022-28958

Malicious code in bioql PyPI...

EUVD-2023-54092

Malicious code in bioql PyPI...

CVE-2025-8741 macrozheng mall login cleartext transmission

A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The...

CVE-2025-8378

A vulnerability was found in Campcodes Online Hotel Reservation System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/index.php of the component Login. The manipulation of the argument username/password leads to sql injection. The attac...

CVE-2023-30458

A username enumeration issue was discovered in Medicine Tracker System 1.0. The login functionality allows a malicious user to guess a valid username due to a different response time from invalid usernames. When one enters a valid username, the response time increases depending on the length of t...

CVE-2023-38871

The commit 3730880 April 2023 and v.0.9-beta1 of gugoan Economizzer has a user enumeration vulnerability in the login and forgot password functionalities. The app reacts differently when a user or email address is valid, and when it's not. This may allow an attacker to determine whether a user or...

PT-2025-22817 · Unknown · Phpgurukul Student Management System

Name of the Vulnerable Software and Affected Versions: PHPGURUKUL Student Management System using PHP and MySQL version 1 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities are located at the "/studentrecordms/login.php" API endpoint, specifically v...