Lucene search
+L

11620 matches found

RedhatCVE
RedhatCVE
•added 2025/09/28 6:48 p.m.•24 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.8AI score0.00478EPSS
SaveExploits1References1
Microsoft CVE
Microsoft CVE
•added 2025/09/28 1:02 a.m.•14 views

hwmon: (drivetemp) Fix driver producing garbage data when SCSI errors occur

...

5.5CVSS6.9AI score0.00203EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2025/09/28 12:00 a.m.•39 views

PT-2025-39795

Name of the Vulnerable Software and Affected Versions code-projects Project Monitoring System version 1.0 Description A cross site scripting issue exists due to manipulation of the txtapplyto argument. The issue is located in the file /onlineJobSearchEngine/postjob.php within an unknown function...

5.4CVSS4.6AI score0.00286EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/28 12:00 a.m.•9 views

CVE-2025-11124: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in code-projects Project Monitoring System 1.0. Affected is an unknown function of the file /onlineJobSearchEngine/postjob.php. Such manipulation of the argument txtapplyto leads to cross site scripting. The attack may be launched remotely. The exploit has been...

5.4CVSS3.7AI score0.00286EPSS
SaveExploits1References7
osv_cve
osv_cve
•added 2025/09/27 7:15 p.m.•12 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS5.7AI score0.00478EPSS
SaveExploits1References5
NVD
NVD
•added 2025/09/27 7:15 p.m.•18 views

CVE-2025-11074

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS0.00478EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/09/27 6:32 p.m.•26 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS0.00478EPSS
SaveExploits1References5
CVE
CVE
•added 2025/09/27 6:32 p.m.•51 views

CVE-2025-11074

Affected software: code-projects Project Monitoring System 1.0. Vulnerability: SQL injection in the login.php file caused by unsafe handling of username/password inputs, enabling remote exploitation. Root cause/condition: Manipulation of the parameters in /login.php leads to SQL injection; exploi...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References5Affected Software1
Vulnrichment
Vulnrichment
•added 2025/09/27 6:32 p.m.•7 views

CVE-2025-11074 code-projects Project Monitoring System login.php sql injection

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

7.5CVSS6.9AI score0.00478EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/27 12:00 a.m.•4 views

CVE-2025-11074: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in code-projects Project Monitoring System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument username/password causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used...

9.8CVSS7AI score0.00478EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/09/27 12:00 a.m.•26 views

PT-2025-39738

Name of the Vulnerable Software and Affected Versions code-projects Project Monitoring System version 1.0 Description A flaw exists in code-projects Project Monitoring System 1.0 that allows for SQL injection. The issue is located in an unknown function of the /login.php file. Manipulation of the...

9.8CVSS6.9AI score0.00478EPSS
SaveExploits1References14
CNNVD
CNNVD
•added 2025/09/27 12:00 a.m.•18 views

Code-Projects Project Monitoring System SQL注入漏洞

Project Monitoring System is a project monitoring system. Project Monitoring System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters username/password in the file /login.php. An attacker can exploit this...

9.8CVSS8.2AI score0.00478EPSS
SaveExploits1References6
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/26 9:37 a.m.•13 views

Malicious code in nodejs-example-google-cloud-monitoring (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_mal
osv_mal
•added 2025/09/26 9:37 a.m.•12 views

MAL-2025-47699 Malicious code in nodejs-example-google-cloud-monitoring (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
osv_usn
osv_usn
•added 2025/09/26 7:47 a.m.•30 views

USN-7769-3 linux-aws-6.14, linux-hwe-6.14 vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

9.8CVSS6.7AI score0.01341EPSS
SaveExploits9References185
Cvelist
Cvelist
•added 2025/09/26 3:25 a.m.•32 views

CVE-2025-10745 Banhammer – Monitor Site Traffic, Block Bad Users and Bots <= 3.4.8 - Unauthenticated Protection Mechanism Bypass

The Banhammer – Monitor Site Traffic, Block Bad Users and Bots plugin for WordPress is vulnerable to Blocking Bypass in all versions up to, and including, 3.4.8. This is due to a site-wide “secret key” being deterministically generated from a constant character set using md5 and base64encode and...

5.3CVSS0.00367EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
•added 2025/09/26 12:00 a.m.•11 views

Anteon Unauthenticated Access

Anteon is an eBPF-based Kubernetes Monitoring and Performance Testing Platform. When accessible without authentication, an attacker can gain unauthorized access to the Anteon interface, potentially leading to information disclosure or further exploitation of the system. No source data...

6.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2025/09/26 12:00 a.m.•11 views

cAdvisor Unauthenticated Access

cAdvisor short for container Advisor is an open-source tool developed by Google that provides real-time monitoring and performance analysis of running containers. By default, cAdvisor does not require authentication to access the application. This allows an attacker to access sensitive data. No...

7AI score
SaveExploits0References1
Ubuntu
Ubuntu
•added 2025/09/25 12:33 p.m.•35 views

USN-7769-1: Linux kernel vulnerabilities

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - ARM64 architecture; - PowerPC architecture; - x86 architecture; - Block layer subsystem; - Cryptographic API; - ACP...

9.8CVSS6.7AI score0.01341EPSS
SaveExploits9
CNNVD
CNNVD
•added 2025/09/25 12:00 a.m.•22 views

iMonitor EAM 安全漏洞

iMonitor EAM is an employee computer network activity monitoring software from iMonitor USA. A security vulnerability exists in iMonitor EAM version 9.6394, which stems from the failure to use authentication or encryption during communication, which could lead to the disclosure of sensitive...

6.5CVSS6.5AI score0.00125EPSS
SaveExploits0References1
Rows per page
Query Builder