2314 matches found
CVE-2025-9689 SourceCodester Advanced School Management System item_select sql injection
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/itemselect. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now...
PT-2025-35359
Name of the Vulnerable Software and Affected Versions: SourceCodester Advanced School Management System version 1.0 Description: A SQL injection issue exists in SourceCodester Advanced School Management System 1.0. The vulnerability is located in an unknown function within the /index.php/stock/it...
Linux Distros Unpatched Vulnerability : CVE-2023-23144
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Integer overflow vulnerability in function QDecCoordOnUnitSphere file bifs/unquantize.c in GPAC version 2.2-rev0-gab012bbfb-master. CVE-2023-23144 Note that...
CVE-2025-9689: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Advanced School Management System 1.0. The impacted element is an unknown function of the file /index.php/stock/itemselect. The manipulation of the argument q results in sql injection. It is possible to launch the attack remotely. The exploit is now...
SourceCodester Advanced School Management System 安全漏洞
SourceCodester Advanced School Management System is an advanced school management system from SourceCodester open source. A security vulnerability exists in SourceCodester Advanced School Management System version 1.0, which originates from a SQL injection due to a misbehavior of parameter q in...
MAL-2025-41938 Malicious code in amazon-q-vscode (npm)
The package communicates with a domain associated with malicious activity...
Malicious code in amazon-q-vscode (npm)
The package communicates with a domain associated with malicious activity...
Linux Distros Unpatched Vulnerability : CVE-2021-46916
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ixgbe: Fix NULL pointer dereference in ethtool loopback test The ixgbe driver currently...
CVE-2025-9107: Improper Neutralization of Input During Web Page Generation
A vulnerability was determined in Portabilis i-Diario up to 1.5.0. This impacts an unknown function of the file /alunos/searchautocomplete. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from a remote location. The exploit has been publicly...
Malicious code in @zalastax/nolb-lion-lib-q (npm)
The package @zalastax/nolb-lion-lib-q was found to contain malicious code...
Malicious code in @zalastax/nolb-json-q (npm)
The package @zalastax/nolb-json-q was found to contain malicious code...
Malicious code in @zalastax/nolb-gulp-q (npm)
The package @zalastax/nolb-gulp-q was found to contain malicious code...
Malicious code in @zalastax/nolb-node-q (npm)
The package @zalastax/nolb-node-q was found to contain malicious code...
Malicious code in @zalastax/nolb-_openfonts_q (npm)
The package @zalastax/nolb-openfontsq was found to contain malicious code...
Malicious code in @zalastax/nolb-graphql-q (npm)
The package @zalastax/nolb-graphql-q was found to contain malicious code...
MAL-2025-12742 Malicious code in @zalastax/nolb-nodebb-plugin-q (npm)
The package @zalastax/nolb-nodebb-plugin-q was found to contain malicious code...
MAL-2025-13468 Malicious code in @zalastax/nolb-qmuzik-q (npm)
The package @zalastax/nolb-qmuzik-q was found to contain malicious code...
MAL-2025-11165 Malicious code in @zalastax/nolb-discord-q (npm)
The package @zalastax/nolb-discord-q was found to contain malicious code...