CVE-2025-8339

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-8340

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

CVE-2025-8340

CVE-2025-8340 affects Code-Projects Intern Membership Management System 1.0, specifically the Error Message Handler’s fill_details.php. The vulnerability arises from manipulating the email parameter, enabling remote cross-site scripting (XSS). The issue can be exploited remotely and the exploit h...

CVE-2025-8340 code-projects Intern Membership Management System Error Message fill_details.php cross site scripting

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file filldetails.php of the component Error Message Handler. The manipulation of the argument email leads to cross site scripting...

CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

CVE-2025-8339

CVE-2025-8339 affects code-projects Intern Membership Management System 1.0. A SQL injection vulnerability exists in an unknown portion of the file /student_login.php caused by unsafely manipulating the user_name (and password) parameters, enabling remote exploitation. Exploit details are publicl...

CVE-2025-8339 code-projects Intern Membership Management System student_login.php sql injection

A vulnerability was found in code-projects Intern Membership Management System 1.0. It has been classified as critical. This affects an unknown part of the file /studentlogin.php. The manipulation of the argument username/password leads to sql injection. It is possible to initiate the attack...

Code-Projects Intern Membership Management System 安全漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. A security vulnerability exists in Code-Projects Intern Membership Management System version 1.0, which originates from a cross-site scripting attack due to misuse of the paramete...

Code-Projects Intern Membership Management System 安全漏洞

Code-Projects Intern Membership Management System is a Code-Projects open source intern membership management system. A security vulnerability exists in code-projects Intern Membership Management System version 1.0, which originates from SQL injection due to incorrect manipulation of the paramete...

PT-2025-31463 · Unknown · Intern Membership Management System

Name of the Vulnerable Software and Affected Versions: Intern Membership Management System version 1.0 Description: A critical issue exists in Intern Membership Management System 1.0. The vulnerability is due to SQL injection caused by the manipulation of the user name/password argument in the...

GHSA-652X-M2GR-HPPM OAuth2-Proxy's `--gitlab-group` GitLab Group Authorization config flag stopped working in v7.0.0

The --gitlab-group flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization wasn't restricted. Additionally, any authenticated users had whichever groups were set in --gitlab-group added to the new...

OAuth2-Proxy's `--gitlab-group` GitLab Group Authorization config flag stopped working in v7.0.0

The --gitlab-group flag for group-based authorization in the GitLab provider stopped working in the v7.0.0 release. Regardless of the flag settings, authorization wasn't restricted. Additionally, any authenticated users had whichever groups were set in --gitlab-group added to the new...

Cascading and Proxy Membership Inference Attacks

A Membership Inference Attack MIA assesses how much a trained machine learning model reveals about its training data by determining whether specific query instances were included in the dataset. We classify existing MIAs into adaptive or non-adaptive, depending on whether the adversary is allowed...

WordPress WP-Members Membership plugin cross-site scripting vulnerability

WordPress WP-Members Membership plugin is a free membership plugin for WordPress, which is mainly used to restrict access to website content and support user login, registration and personalized user profile management. WordPress WP-Members Membership plugin suffers from a cross-site scripting...

LoRA-Leak: Membership Inference Attacks against LoRA Fine-Tuned Language Models

Language Models LMs typically adhere to a "pre-training and fine-tuning" paradigm, where a universal pre-trained model can be fine-tuned to cater to various specialized domains. Low-Rank Adaptation LoRA has gained the most widespread use in LM fine-tuning due to its lightweight computational cost...

Tab-MIA: a Benchmark Dataset for Membership Inference Attacks on Tabular Data in LLMs

Large language models LLMs are increasingly trained on tabular data, which, unlike unstructured text, often contains personally identifiable information PII in a highly structured and explicit format. As a result, privacy risks arise, since sensitive records can be inadvertently retained by the...

CompLeak: Deep Learning Model Compression Exacerbates Privacy Leakage

Model compression is crucial for minimizing memory storage and accelerating inference in deep learning DL models, including recent foundation models like large language models LLMs. Users can access different compressed model versions according to their resources and budget. However, while existi...

GATEBLEED: Exploiting On-Core Accelerator Power Gating for High Performance and Stealthy Attacks on AI

As power consumption from AI training and inference continues to increase, AI accelerators are being integrated directly into the CPU. Intel's Advanced Matrix Extensions AMX is one such example, debuting on the 4th generation Intel Xeon Scalable CPU. We discover a timing side and covert channel,...

WordPress plugin WP-Members Membership Plugin 跨站脚本漏洞

WordPress WP-Members Membership plugin is a free membership plugin for WordPress, which is mainly used to restrict access to website content and support user login, registration and personalized user profile management. WordPress WP-Members Membership plugin suffers from a cross-site scripting...

Optimizing Canaries for Privacy Auditing with Metagradient Descent

In this work we study black-box privacy auditing, where the goal is to lower bound the privacy parameter of a differentially private learning algorithm using only the algorithm's outputs i.e., final trained model. For DP-SGD the most successful method for training differentially private deep...