Malicious code in rca-overlay-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis e53864a144cd059b57b54e04fbdd4b522e837be90b0cca8354683ef4868f7889 The OpenSSF Package Analysis project identified 'rca-overlay-panel' @ 3.0.0 npm as malicious. It is considered malicious because: - The package...

Heimdall 安全漏洞

Heimdall is an open source application panel and launcher for LinuxServer.io. A security vulnerability exists in Heimdall version 2.6.3-ls307, which stems from improper HTTP header handling and could lead to host header injection and open redirection attacks...

The vulnerability of the Grafana monitoring and surveillance platform, related to insufficient validation of input data, allows a perpetrator to trigger a service failure.

The vulnerability of the Grafana monitoring and observation platform is related to insufficient validation of input data during the processing of panel headers or names. Exploiting this vulnerability can allow a malicious actor to cause service failures...

itsourcecode Employee Management System 注入漏洞

itsourcecode Employee Management System is itsourcecode open source employee management system. An injection vulnerability exists in itsourcecode Employee Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Username in the file...

Online Banquet Booking System /admin/view-user-queries.php File SQL Injection Vulnerability

Online Banquet Booking System is an online banquet booking system. Online Banquet Booking System is vulnerable to a SQL injection vulnerability that stems from the viewid parameter in the /admin/view-user-queries.php file not being security filtered. No details of the vulnerability are available ...

DuraComm SPM-500 DP-10iN-100-MU 访问控制错误漏洞

The DuraComm SPM-500 DP-10iN-100-MU is a DC power distribution panel from DuraComm, Inc. An access control error vulnerability exists in the DuraComm SPM-500 DP-10iN-100-MU, which stems from functional access control that lacks user authentication, and could cause an attacker to repeatedly reboot...

DuraComm SPM-500 DP-10iN-100-MU 跨站脚本漏洞

The DuraComm SPM-500 DP-10iN-100-MU is a DC power distribution panel from DuraComm USA. A cross-site scripting vulnerability exists in the DuraComm SPM-500 DP-10iN-100-MU, which stems from susceptibility to cross-site scripting attacks that could prevent a legitimate user from accessing the web...

DuraComm SPM-500 DP-10iN-100-MU 安全漏洞

The DuraComm SPM-500 DP-10iN-100-MU is a DC power distribution panel from DuraComm USA. A security vulnerability exists in the DuraComm SPM-500 DP-10iN-100-MU that originates from the unencrypted transmission of sensitive data that could be intercepted by an attacker...

Voting System positions_edit.php file SQL Injection Vulnerability

Voting System is an election system. Voting System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in parameter ID in file /admin/positionsedit.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

E-Commerce Site Arbitrary File Upload Vulnerability

E-Commerce Site is an e-commerce site. E-Commerce Site suffers from an arbitrary file upload vulnerability that stems from improper manipulation of the parameter photo in the file /admin/usersphoto.php, no details of the vulnerability are available at this time...

Vehicle Parking Management System reg-users.php File SQL Injection Vulnerability

Vehicle Parking Management System is a parking management system. Vehicle Parking Management System suffers from a SQL injection vulnerability that stems from an error in the parameter del in the file /admin/reg-users.php that lacks validation of externally entered SQL statements. An attacker can...

Exploit for CVE-2025-50716

Multiple Vulnerabilities in RealEstate-PHP v1.0 Disclosure for...

Code-Projects Online Appointment Booking System 注入漏洞

Online Appointment Booking System is an online appointment booking system. Online Appointment Booking System suffers from a SQL injection vulnerability that originates from improper handling of the parameter did in the file /admin/deletedoctor.php, which can be exploited by an attacker to inject...

CVE-2025-53923 Emlog vulnerable to reflected Cross-site Scripting in admin panel

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Due to lack of sanitization it is possible to inject HTML/JS code into keywor...

CVE-2025-53923

Emlog is affected by a cross-site scripting (XSS) issue in versions up to 2.5.17 caused by insufficient sanitization of the keyword parameter. Exploitation requires a user to click a crafted link, allowing JavaScript execution in the administrator’s browser. Public advisories indicate no patched ...

CVE-2025-53923 Emlog vulnerable to reflected Cross-site Scripting in admin panel

Emlog is an open source website building system. A cross-site scripting XSS vulnerability in emlog up to and including pro-2.5.17 allows remote attackers to inject arbitrary web script or HTML via the keyword parameter. Due to lack of sanitization it is possible to inject HTML/JS code into keywor...

Code-Projects Simple Car Rental System 代码问题漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A code issue vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which arises from an arbitrary file upload due to incorrect manipulation of the parameter image in the file...

Malicious code in @blocks-shared/atom-panel (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 4c591a20fbe6de7639db5ac559fbc7db95960967fb3eb809e6fe2f58943f4a75 The OpenSSF Package Analysis project identified...

Malicious code in clock-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 94f232d3ca0a55cee4a30418e75111d62c8ce4b44baa018c72400b9aee310ab4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in grafana-polystat-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 16c78bb4eab009d5ca0b36e692021c2f9d402df7bef90eb6642dee10f8e69095 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...