3343 matches found
TencentOS Server 4: taglib (TSSA-2025:0423)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0423 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2025-13421
A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-13421
A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-13421
The CVE-2025-13421 entry concerns itsourcecode Human Resource Management System 1.0. A SQL injection vulnerability exists in an unknown function of /src/store/NoticeStore.php where manipulating the noticeDesc argument can compromise the database. The issue is exploitable remotely and has been pub...
CVE-2025-13421 itsourcecode Human Resource Management System NoticeStore.php sql injection
A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been...
itsourcecode Human Resource Management System SQL注入漏洞
itsourcecode Human Resource Management System is itsourcecode open source human resource management system. A SQL injection vulnerability exists in itsourcecode Human Resource Management System version 1.0, which originates from the incorrect operation of the parameter noticeDesc in the file...
CVE-2025-59116
Windu CMS (v4.1) is vulnerable to User Enumeration during login, where login-response differences enable brute-force validation of usernames. Only v4.1 was tested as vulnerable; fix is available in v4.1 build 2250. Affected components, root cause (message-based distinction on login) and impact (f...
CVE-2025-11868
creationtimestamp| type| source ---|---|--- 2025-11-18 09:29:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m5vghafhkf2b...
CGA-838V-C9WQ-JRW3
Bulletin has no description...
WordPress Make Email Customizer for WooCommerce plugin <= 1.0.6 - Authenticated (Subscriber+) Arbitrary Options Update vulnerability
Authenticated Subscriber+ Arbitrary Options Update vulnerability discovered by Khaled Alenazi Nxploited in WordPress Plugin Make Email Customizer for WooCommerce versions = 1.0.6...
EUVD-2025-197672
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2025-47059
Name of the Vulnerable Software and Affected Versions Simple Cafe Ordering System version 1.0 Description A flaw exists in the Simple Cafe Ordering System that allows for remote code execution. The issue is located in the /addmem.php file, where manipulation of the studentnum argument can lead to...
EUVD-2025-177506
Malicious code in nuxtjs-steganography-dynamo-rocket npm...
EUVD-2025-136146
Malicious code in itale-adci-ykhjyafol npm...
EUVD-2025-133085
Malicious code in teate-thy-sonic-girini npm...
EUVD-2025-136667
Malicious code in sahuar-satidaf-faguba npm...
EUVD-2025-145006
Malicious code in salsabilla npm...
EUVD-2025-149035
Malicious code in teagood-sukuna24 npm...
CVE-2025-40131
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: Fix peer lookup in ath12kdpmonrxdelivermsdu In ath12kdpmonrxdelivermsdu, peer lookup fails because rxcb-peerid is not updated with a valid value. This is expected in monitor mode, where RX frames bypass the regular ...