CVE-2025-52551 Proprietary protocol allows for unauthenticated file operations

E2 Facility Management Systems use a proprietary protocol that allows for unauthenticated file operations on any file in the file system...

PT-2025-35560

Name of the Vulnerable Software and Affected Versions: E2 Facility Management Systems affected versions not specified Description: E2 Facility Management Systems utilizes a proprietary protocol that permits unauthenticated file operations on any file within the file system. Recommendations: At th...

WhatWeb Scanner 0.6.2

WhatWeb is a next-generation web scanner. WhatWeb recognizes web technologies including content management systems CMS, blogging platforms, statistic/analytics packages, JavaScript libraries, web servers, and embedded devices. WhatWeb has over 1800 plugins, each to recognize something different...

Generative AI for Cybersecurity of Energy Management Systems: Methods, Challenges, and Future Directions

This paper elaborates on an extensive security framework specifically designed for energy management systems EMSs, which effectively tackles the dynamic environment of cybersecurity vulnerabilities and/or system problems SPs, accomplished through the incorporation of novel methodologies. A...

Vulnerabilities in Code Issues in Various ABB Products (CNVD-2025-13598)

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

CVE-2024-25288

SLIMS Senayan Library Management Systems 9 Bulian v9.6.1 is vulnerable to SQL Injection via pop-scope-vocabolary.php...

CVE-2024-22936

Cross-site scripting XSS vulnerability in Parents & Student Portal in Genesis School Management Systems in Genesis AIMS Student Information Systems v.3053 allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2023-48813

Senayan Library Management Systems Slims 9 Bulian v9.6.1 is vulnerable to SQL Injection via admin/modules/reporting/customs/finesreport.php...

CVE-2023-45996

SQL injection vulnerability in Senayan Library Management Systems Slims v.9 and Bulian v.9.6.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via a crafted script to the reborrowLimit parameter in the membertype.php...

CVE-2025-45819

Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/author.php...

CVE-2025-45818

CVE-2025-45818 affects Slims (Senayan Library Management Systems) 9 Bulian 9.6.1 via SQL injection in admin/modules/master_file/item_status.php. The vulnerability targets a web-accessible PHP script, with CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N; impact is Confidentiality and Integrity (Low)...

CVE-2025-45819

Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/author.php...

CVE-2025-45819

CVE-2025-45819 affects Slims (Senayan Library Management Systems) version 9 Bulian 9.6.1. The issue is a SQL Injection vulnerability in the file path admin/modules/master_file/author.php, arising from inadequate input handling in that module. Documented impact in the CVE data shows low confidenti...

CVE-2025-45818

Slims Senayan Library Management Systems 9 Bulian 9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/itemstatus.php...

CVE-2025-25403

Slims Senayan Library Management Systems 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/colltype.php...

CVE-2025-25403

Slims Senayan Library Management Systems 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/colltype.php...

CVE-2025-25403

Slims Senayan Library Management Systems 9 Bulian V9.6.1 is vulnerable to SQL Injection in admin/modules/masterfile/colltype.php...

CVE-2025-25403

Slims (Senayan Library Management Systems) 9 Bulian V9.6.1 is affected by a SQL Injection in admin/modules/master_file/coll_type.php. The root cause is unsanitized user input in SQL queries, enabling high-severity impact (CVSS 3.1: 9.8, CRITICAL) on confidentiality, integrity and availability. No...

159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of Disclosure

As many as 159 CVE identifiers have been flagged as exploited in the wild in the first quarter of 2025, up from 151 in Q4 2024. "We continue to see vulnerabilities being exploited at a fast pace with 28.3% of vulnerabilities being exploited within 1-day of their CVE disclosure," VulnCheck said in...

SQL Injection Vulnerability in Salary Inquiry System of Wuhan Evonik Software Co.

Wuhan Evonik Software Co., Ltd. specializes in AutoCAD secondary development, Office secondary development, information management systems, etc., is committed to creating efficient CAD graphics and Office productivity tools. Wuhan Evonik Software Co., Ltd. salary inquiry system SQL injection...