User-Management-PHP-MYSQL 安全漏洞

User-Management-PHP-MYSQL is a secure user management system by Ajay Randhawa Individual Developer. A security vulnerability exists in User-Management-PHP-MYSQL that stems from mishandling of unknown code and could lead to cross-site request forgery attacks...

CVE-2025-12202: Cross-Site Request Forgery (CSRF)

A security flaw has been discovered in ajayrandhawa User-Management-PHP-MYSQL web up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This vulnerability affects unknown code. Performing manipulation results in cross-site request forgery. The attack can be initiated remotely. The exploit has been...

CVE-2025-12201: Unrestricted Upload of File with Dangerous Type

A vulnerability was identified in ajayrandhawa User-Management-PHP-MYSQL up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This affects an unknown part of the file /admin/edit-user.php of the component User Management Interface. Such manipulation of the argument image leads to unrestricted upload. ...

EUVD-2020-29370

Malware in sbrugna...

EUVD-2020-18537

Malware in sbrugna...

EUVD-2007-6478

Malware in sbrugna...

EUVD-2006-3958

Malware in sbrugna...

EUVD-2024-17435

Malicious code in bioql PyPI...

EUVD-2024-35108

Malicious code in bioql PyPI...

EUVD-2024-3311

Malicious code in bioql PyPI...

EUVD-2024-17434

Malicious code in bioql PyPI...

EUVD-2024-1233

Malicious code in bioql PyPI...

EUVD-2022-32587

Malicious code in bioql PyPI...

EUVD-2024-27220

Malicious code in bioql PyPI...

EUVD-2024-27219

Malicious code in bioql PyPI...

EUVD-2024-3257

Malicious code in bioql PyPI...

EUVD-2024-17436

Malicious code in bioql PyPI...

php: Leak partial content of the heap through heap buffer over-read in mysqlnd

A flaw was found in the PHP MySQL client library. This vulnerability allows a hostile MySQL server to disclose the content of the client's heap, potentially exposing data from other SQL requests and other users of the same server via malicious server interactions...

PT-2025-30360 · Librenms · Librenms

Name of the Vulnerable Software and Affected Versions: LibreNMS versions 25.6.0 and below Description: LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring system. Versions 25.6.0 and below contain an architectural vulnerability in the /ajax form.php endpoint that permits Remot...

CVE-2025-45065

The PHPGurukul Employee Record Management System in PHP and MySQL v1 contains a SQL injection vulnerability within the loginerms.php endpoint. The root cause is a lack of measures to protect the SQL query structure , which allows attackers to inject malicious SQL code. Successful exploitation can...