41266 matches found
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
shadow-utils security update
An update is available for shadow-utils. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The shadow-utils packages include programs for converting UNIX password...
RLSA-2025:20145 Low: shadow-utils security update
The shadow-utils packages include programs for converting UNIX password files to the shadow password format, as well as utilities for managing user and group accounts. Security Fixes: shadow-utils: Default subordinate ID configuration in /etc/login.defs could lead to compromise CVE-2024-56433 For...
Session Fixation
Overview Products.PluggableAuthService is a Pluggable Zope authentication / authorization framework Affected versions of this package are vulnerable to Session Fixation. Affected versions of this package are vulnerable to Session Fixation. The session authentication helper fails to clear session...
EUVD-2024-55112
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...
CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...
CVE-2024-45675
CVE-2024-45675 affects IBM Informix Dynamic Server 14.10 on Windows, where a local user can log into the Informix server as administrator without a password due to authentication bypass in DB-Access. The issue is confirmed by multiple sources, including IBM’s bulletin detailing vulnerable configu...
CVE-2024-45675 IBM Informix Dynamic Server Authentication Bypass
IBM Informix Dynamic Server 14.10 could allow a local user on the system to log into the Informix server as administrator without a password...
CVE-2025-63531
A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the receiverLogin.php component. The application fails to properly sanitize user-supplied input in SQL queries, allowing an attacker to inject arbitrary SQL code. By manipulating the remail and rpassword fields, a...
CVE-2025-63534
A cross-site scripting XSS vulnerability exists in the Blood Bank Management System 1.0 within the login.php component. The application fails to properly sanitize or encode user-supplied input before rendering it in response. An attacker can inject malicious JavaScript payloads into the msg and...
CVE-2025-63529
A session fixation vulnerability exists in Blood Bank Management System 1.0 in login.php that allows an attacker to set or predict a user's session identifier prior to authentication. When the victim logs in, the application continues to use the attacker-supplied session ID rather than generating...
SourceCodester Zoo Management System 安全漏洞
SourceCodester Zoo Management System is a SourceCodester open source zoo management system. A security vulnerability exists in Sourcecodester Zoo Management System v1.0, which originates from a cross-site scripting vulnerability in /classes/Login.php...
Code-Projects Online Medicine Guide 安全漏洞
Code-Projects Online Medicine Guide is an online medicine guide from Code-Projects open source. A security vulnerability exists in version 1.0 of code-projects Online Medicine Guide, which stems from the upass parameter in /login.php being susceptible to SQL injection attacks...
CVE-2025-65881
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
PT-2025-48740
Name of the Vulnerable Software and Affected Versions code-projects Online Medicine Guide version 1.0 Description The software is susceptible to a SQL Injection issue through the /login.php endpoint. The upass parameter is the entry point for this flaw. Recommendations Apply input validation and...
IBM Informix Dynamic Server 安全漏洞
IBM Informix Dynamic Server IDS is a scalable object-relational database server from International Business Machines IBM that provides continuous data availability and disaster recovery, among other features, for clustered data centers. A security vulnerability exists in IBM Informix Dynamic Serv...
CVE-2025-65380
The PHPGurukul Billing System 1.0 is vulnerable to SQL Injection via the admin/index.php endpoint. The root cause is the application's failure to validate the username parameter, which is concatenated directly into a backend SQL query. An attacker can exploit this by submitting a maliciously cons...
PT-2025-48743
Sourcecodester Zoo Management System v1.0 is vulnerable to Cross Site Scripting XSS in /classes/Login.php...
CVE-2025-60736
The Online Medicine Guide v1.0 by Code Projects is vulnerable to a CRITICAL SQL Injection flaw in the /login.php file. The root cause is the direct concatenation of the upass POST parameter into SQL queries without proper validation, sanitization, or the use of prepared statements . This allows a...