300 matches found
ChurchCRM CartToFamily.php File SQL Injection Vulnerability
ChurchCRM is an open source church management system. ChurchCRM suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements for the PersonAddress parameter in the src/CartToFamily.php file. No details of the vulnerability are provided at...
CVE-2025-68275 ChurchCRM vulnerable to Stored XSS - Group name > Person Listing
ChurchCRM is an open-source church management system. Versions prior to 6.5.3 have a stored cross-site scripting vulnerability on the pages View Active People, View Inactive people, and View All People. Version 6.5.3 fixes the issue...
Network-Vuln
🔍 Network Vulnerability Scanner !Pythonhttps://img.shiel...
One-Person Production: Wondershare Filmora V15 Empowers Solo Creators With AI
AI is transforming the video-making process of creators. Learn how WondershareFilmora V15 helps individual creators edit smarter using powerful AI...
PT-2025-45447
Name of the Vulnerable Software and Affected Versions GuoMinJim PersonManage versions prior to commit 5a02b1ab208feacf3a34fc123c9381162afbaa95 2020-11-23 Description An arbitrary file download issue exists in the document query function within the Download Center menu of the PersonManage system...
EUVD-2012-0978
Malware in sbrugna...
EUVD-2020-7706
Malware in sbrugna...
EUVD-2021-18296
Malware in sbrugna...
EUVD-2016-4463
Malware in sbrugna...
EUVD-2020-2721
Malware in sbrugna...
EUVD-2025-26182
Malicious code in bioql PyPI...
EUVD-2025-25493
Malicious code in bioql PyPI...
EUVD-2023-41382
Malicious code in bioql PyPI...
EUVD-2022-27303
Malicious code in bioql PyPI...
EUVD-2024-28328
Malicious code in bioql PyPI...
Vision Transformers: the Threat of Realistic Adversarial Patches
The increasing reliance on machine learning systems has made their security a critical concern. Evasion attacks enable adversaries to manipulate the decision-making processes of AI systems, potentially causing security breaches or misclassification of targets. Vision Transformers ViTs have gained...
CVE-2025-40709
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...
CVE-2025-40709
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...
CVE-2025-40709
OpenAtlas v8.9.0 is affected by a Cross-Site Scripting (XSS) vulnerability due to inadequate validation of user input in POST requests to /insert/person/, specifically the name and alias-0 parameters. The issue could allow a remote, authenticated attacker to craft queries that steal session cooki...
CVE-2025-40709 Cross-Site Scripting (XSS) vulnerability in OpenAtlas by ACDH-CH
Cross-Site Scripting XSS vulnerability in OpenAtlas v8.9.0 from the Austrian Centre for Digital Humanities and Cultural Heritage ACDH-CH, due to inadequate validation of user input when a POST request is sent. The vulnerabilities could allow a remote user to send specially crafted queries to an...