Schools Alert Management Script - Arbitrary File Read

Schools Alert Management Script is susceptible to an arbitrary file read vulnerability via the f parameter in img.php, aka absolute path traversal. id: CVE-2018-12054 info: name: Schools Alert Management Script - Arbitrary File Read author: wisnupramoedya severity: high description: Schools Alert...

The vulnerabilities of the functions cgi_speed(), cgi_dhcpd_lease(), cgi_dns(), cgi_set_ip(), cgi_upnp_del(), cgi_dhcpd(), cgi_upnp_add(), and cgi_upnp_edit in the script /cgi-bin/network_mgr.cgi of the D-Link DNS-320 network storage software allow a intruder to execute arbitrary commands.

The vulnerabilities of the functions cgispeed, cgidhcpdlease, cgidns, cgisetip, cgiupnpdel, cgidhcpd, cgiupnpadd, and cgiupnpedit in the script /cgi-bin/networkmgr.cgi of the D-Link DNS-320 network storage software are related to the lack of measures for cleaning input data. Exploiting these...

CodeAstro Ingredients Stock Management System SQL注入漏洞

The CodeAstro Ingredients Stock Management System is a inventory management system developed by CodeAstro Inc. Version 1.0 of the CodeAstro Ingredients Stock Management System has a SQL injection vulnerability. This vulnerability arises from incorrect operations with the parameter txtsearchcatego...

CVE-2026-26890

Sourcecodester Pharmacy Point of Sale System v1.0 is vulnerable to SQL Injection in /pharmacy/manageproduct.php...

CVE-2026-2224

A vulnerability was detected in code-projects Online Reviewer System 1.0. This affects an unknown part of the file /system/system/admins/manage/users/btnfunctions.php. The manipulation of the argument firstname results in cross site scripting. It is possible to launch the attack remotely. The...

EUVD-2025-37501

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability...

CVE-2025-11761

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability...

CVE-2025-11761

Technical details about affected versions, root cause and fixes are not provided in the supplied documents. Monitor HP advisories for updates.

CVE-2025-11761: Uncontrolled Search Path Element

A potential security vulnerability has been identified in the HP Client Management Script Library software, which might allow escalation of privilege during the installation process. HP is releasing software updates to mitigate the potential vulnerability...

EUVD-2008-3735

Malware in sbrugna...

EUVD-2018-19208

Malware in sbrugna...

EUVD-2009-2228

Malware in sbrugna...

EUVD-2018-18606

Malware in sbrugna...

EUVD-2025-19195

Malicious code in bioql PyPI...

EUVD-2022-48964

Malicious code in bioql PyPI...

Creativeitem Ekushey CRM 跨站脚本漏洞

Creativeitem Ekushey CRM is an open source project management script by Creativeitem. A cross-site scripting vulnerability exists in Creativeitem Ekushey CRM that stems from insufficient validation of user input and could lead to a stored cross-site scripting attack...

CVE-2025-29331

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates...

CVE-2025-29331

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates...

CVE-2025-29331: Improper Certificate Validation

An issue in MHSanaei 3x-ui before v.2.5.3 and before allows a remote attacker to execute arbitrary code via the management script x-ui passes the no check certificate option to wget when downloading updates...

CVE-2025-29331

A remote code execution vulnerability exists in MHSanaei 3x-ui versions prior to v.2.5.3 . The root cause is that the x-ui management script fails to verify certificates by passing the no check certificate option to wget during update downloads. This allows a remote attacker to execute arbitrary ...