GitLab Enterprise Edition和GitLab Community Edition 安全漏洞

GitLab Enterprise Edition EE and GitLab Community Edition CE are both products of GitLab, Inc. GitLab Enterprise Edition is a content management system. GitLab Enterprise Edition is a content management system. A security vulnerability exists in GitLab Enterprise Edition and GitLab Community...

PT-2025-9983 · Unknown · Code-Projects Blood Bank Management System

Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue was found in the code-projects Blood Bank Management System. The problem is related to the manipulation of the donor id argument in the /user dashboard/view...

CVE-2025-1967 code-projects Blood Bank Management System donor.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank Management System 1.0. Affected by this issue is some unknown functionality of the file /userdashboard/donor.php. The manipulation of the argument name leads to cross site scripting. The attack may be...

PT-2025-9734

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank Management System version 1.0 Description A vulnerability has been found in the code-projects Blood Bank Management System, affecting some unknown functionality of the file /user dashboard/donor.php. The manipulation o...

CVE-2025-1956

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

CVE-2025-1956 code-projects Shopping Portal Login index.php sql injection

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

Code-Projects Blood Bank System 代码注入漏洞

Code-Projects Blood Bank System is an open source blood bank management system from Code-Projects. A code injection vulnerability exists in code-projects Blood Bank System version 1.0, which stems from an incorrect manipulation of the parameter Bloodname that can lead to cross-site scripting...

CVE-2025-1957: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has bee...

PT-2025-9714

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A problematic issue was discovered in the code, affecting the /BBfile/Blood/o+.php file. The manipulation of the Bloodname argument leads to cross-site scripting. This issue can be...

CVE-2025-1956: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in code-projects Shopping Portal 1.0. This affects an unknown part of the file /Shopping/Admin/index.php of the component Login. The manipulation of the argument password leads to sql injection. It is possible to initiate the attack remotely...

PT-2025-9708

Name of the Vulnerable Software and Affected Versions code-projects Online Class and Exam Scheduling System version 1.0 Description A issue was found in the system, affecting some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the username argument...

CVE-2025-1904: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Blood Bank System 1.0. Affected by this issue is some unknown functionality of the file /Blood/A+.php. The manipulation of the argument Availibility leads to cross site scripting. The attack may be launched...

PT-2025-9623

Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A problem has been found in the code-projects Blood Bank System, affecting some unknown functionality of the file /Blood/A+.php. The manipulation of the Availibility argument leads to...

PT-2025-9713

Name of the Vulnerable Software and Affected Versions code-projects Shopping Portal version 1.0 Description A critical issue has been discovered in the Login component of the Shopping Portal, specifically affecting the /Shopping/Admin/index.php file. The manipulation of the password argument lead...

Code-Projects Shopping Portal 注入漏洞

Code-Projects Shopping Portal is a Code-Projects open source shopping site. An injection vulnerability exists in Code-Projects Shopping Portal version 1.0, which stems from an incorrect manipulation of the parameter password that can lead to sql injection...

CVE-2025-1955: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Online Class and Exam Scheduling System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Scheduling/scheduling/pages/profile.php. The manipulation of the argument username leads to cross site...

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. "The infected projects...

The GitVenom campaign: cryptocurrency theft using GitHub

In our modern world, it's difficult to underestimate the impact that open-source code has on software development. Over the years, the global community has managed to publish a tremendous number of projects with freely accessible code that can be viewed and enhanced by anyone on the planet. Very...

PT-2025-7653

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical vulnerability was found in the code-projects Real Estate Property Management System. The issue affects an unknown functionality of the file /ajax state.php...

CVE-2025-1576: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...