519 matches found
CVE-2025-13565 SourceCodester Inventory Management System resetPassword.php password recovery
A weakness has been identified in SourceCodester Inventory Management System 1.0. The affected element is an unknown function of the file /model/user/resetPassword.php. Executing manipulation can lead to weak password recovery. The attack may be performed from remote. The exploit has been made...
OSV-2025-932 Heap-use-after-free in password_file__cleanup
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=462551340 Crash type: Heap-use-after-free READ 8 Crash state: passwordfilecleanup mosquittosecuritycleanupdefault brokerfuzzpasswordfile.cpp...
EUVD-2024-55095
PHPGurukul Complaint Management System 2.0 is vulnerable to SQL Injection via the email and mobileno parameters in reset-password.php...
EUVD-2024-55083
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the currentpassword parameter in change-password.php...
PHPGurukul Student Record System 安全漏洞
Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from a lack of validation of the currentpassword parameter in change-password.php against an externally entered SQL statement. An attacker can exploit this vulnerability to...
PT-2025-44041
A vulnerability has been found in SourceCodester Best Salon Management System 1.0. This affects an unknown part of the file /panel/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-58712
A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root...
XML External Entity (XXE)
langchaincommunity is vulnerable to XML External Entity XXE. The vulnerability is due to insecure XML parsing in the EverNoteLoader component that uses etree.iterparse without disabling external entity references, which allows an attacker to craft a malicious XML payload to access sensitive local...
EUVD-2012-4453
Malware in sbrugna...
EUVD-2002-0572
Malware in sbrugna...
EUVD-2001-1392
Malware in sbrugna...
EUVD-2002-1217
Malware in sbrugna...
EUVD-2009-0225
Malware in sbrugna...
EUVD-2017-5181
Malware in sbrugna...
EUVD-2000-0568
Malware in sbrugna...
EUVD-2004-0949
Malware in sbrugna...
EUVD-1999-0843
Malware in sbrugna...
EUVD-2006-0768
Malware in sbrugna...