7476 matches found
CVE-2025-2854: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Payroll Management System 1.0. Affected by this vulnerability is an unknown functionality of the file updateemployee.php. The manipulation of the argument emptype leads to sql injection. The attack can be launched remotely. The...
PT-2025-13455 · Gitlab · Gitlab Ce/Ee
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 16.0 through 17.8.5 GitLab CE/EE versions 17.9 through 17.9.2 GitLab CE/EE versions 17.10 through 17.10.0 Description: An issue has been discovered in GitLab CE/EE, allowing internal users to gain unauthorized access to...
CVE-2025-2673: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic has been found in code-projects Payroll Management System 1.0. Affected is an unknown function of the file /homeemployee.php. The manipulation of the argument division leads to cross site scripting. It is possible to launch the attack remotely. The exploi...
GitLab Authentication Bypass Task Status Modification
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to remotely modify the status of tasks in publicly accessible projects...
Code-Projects Payroll Management System 安全漏洞
Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect operation of the parameter division that can lead to cross-site scripting...
Code-Projects Payroll Management System 注入漏洞
Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...
CVE-2025-2672: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...
PT-2025-12509
Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A critical issue affects the processing of the file /add deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The...
PT-2025-12510
Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A vulnerability has been found in the code-projects Payroll Management System. The issue affects an unknown function of the file /home employee.php. The manipulation of the divisi...
Code-Projects Human Resource Management System 安全漏洞
Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A security vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from an improperly authorized Index function in the handlerAccount.go...
PT-2025-12416
Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A critical issue affects the function Index of the file handlerAccount.go. The manipulation of the argument user cookie leads to improper authorization. The exploit has...
CVE-2025-2590: Improper Neutralization of Input During Web Page Generation
A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...
PT-2025-12417
Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A vulnerability was found in the code-projects Human Resource Management System. It has been classified as problematic. The function UpdateRecruitmentById of the file...
rails-mcp-server
Rails MCP Server A Ruby implementation of a Model Context Pro...
CVE-2024-9099
In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...
CVE-2024-9099
In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...
Lunary 安全漏洞
lunary is lunary open source a production toolkit for LLM . An information disclosure vulnerability exists in lunary that stems from a GET /projects API endpoint exposing all project public and private API keys to users with least privileges, which can be exploited by an attacker to obtain...
CVE-2024-9099: Exposure of Sensitive Information Through Metadata
In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...
PT-2025-12268
Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version v1.4.29 Description The GET "/projects" API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This issue allows unauthorized users ...
