21 matches found
EUVD-2025-13458
Malicious code in bioql PyPI...
EUVD-2025-13463
Malicious code in bioql PyPI...
EUVD-2025-13466
Malicious code in bioql PyPI...
CVE-2025-45320
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...
CVE-2025-45321
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...
CVE-2025-45321
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...
CVE-2025-45322
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...
CVE-2025-45320
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...
CVE-2025-45322
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...
CVE-2025-45320
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...
PT-2025-19717 · Unknown · Kashipara Online Service Management Portal
Name of the Vulnerable Software and Affected Versions: Kashipara Online Service Management Portal version V1.0 Description: A Directory Listing Vulnerability was found in the /osms/Requester/ directory. Recommendations: For Kashipara Online Service Management Portal version V1.0, consider...
CVE-2025-45322: Improper Neutralization of Special Elements used in an SQL Command
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...
CVE-2025-45322
The kashipara Online Service Management Portal V1.0 is vulnerable to an SQL Injection flaw within the osms/Requester/CheckStatus.php file. The vulnerability is caused by an unvalidated checkid parameter, which could allow an attacker to perform an SQL injection attack. To mitigate this risk, it i...
CVE-2025-45321
Kashipara Online Service Management Portal V1.0 is affected by a SQL Injection in the /osms/Requester/Requesterchangepass.php endpoint, exploited via the rPassword parameter. The underlying cause is improper handling of this parameter, enabling an attacker to perform injection attacks. CVSS v3.1 ...
CVE-2025-45320
The Kashipara Online Service Management Portal V1.0 contains a Directory Listing Vulnerability within the /osms/Requester/ directory. This flaw stems from the mishandling of the directory, which could lead to the disclosure of directory listings to unauthorized users. To minimize the risk of expl...
CVE-2025-45322
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter...
CVE-2025-45321: Improper Neutralization of Special Elements used in an SQL Command
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...
CVE-2025-45320: Exposure of Information Through Directory Listing
A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0...
CVE-2025-45321
kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword...
PT-2025-19718 · Unknown · Kashipara Online Service Management Portal
Name of the Vulnerable Software and Affected Versions: kashipara Online Service Management Portal version V1.0 Description: The issue concerns a SQL Injection vulnerability in the /osms/Requester/Requesterchangepass.php endpoint, specifically via the rPassword parameter. Recommendations: For...