CVE-2025-8500

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely...

CVE-2025-8500

A vulnerability was found in code-projects Human Resource Integrated System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insert-and-view/action.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely...

CVE-2025-8468

CVE-2025-8468 affects code-projects Wazifa System 1.0. The vulnerability lies in /controllers/reset.php where manipulating the email parameter enables SQL injection. This can be exploited remotely; public exploit/disclosures exist. Several sources confirm the issue and classify impact as high/cri...

PT-2025-31739 · Unknown · Wazifa System

Name of the Vulnerable Software and Affected Versions: code-projects Wazifa System version 1.0 Description: A critical vulnerability exists in code-projects Wazifa System 1.0, affecting an unknown functionality within the /controllers/reset.php file. Manipulation of the email argument results in ...

CVE-2025-8436

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewdoc.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

CVE-2025-8436 projectworlds Online Admission System viewdoc.php sql injection

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /viewdoc.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has be...

gdk-pixbuf-devel-2.42.12-4.1 on GA media (moderate)

gdk-pixbuf-devel-2.42.12-4.1 on GA media Announcement ID: openSUSE-SU-2025:15397-1 Rating: moderate Cross-References: CVE-2025-6199 CVSS scores: CVE-2025-6199 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N CVE-2025-6199 SUSE : 4.8...

ffmpeg-7-7.1.1-8.1 on GA media (moderate)

ffmpeg-7-7.1.1-8.1 on GA media Announcement ID: openSUSE-SU-2025:15396-1 Rating: moderate Cross-References: CVE-2025-7700 CVSS scores: CVE-2025-7700 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-7700 SUSE : 6.9 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N...

docker-28.3.3_ce-26.1 on GA media (moderate)

docker-28.3.3ce-26.1 on GA media Announcement ID: openSUSE-SU-2025:15395-1 Rating: moderate Cross-References: CVE-2025-54388 CVSS scores: CVE-2025-54388 SUSE : 5.2 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N CVE-2025-54388 SUSE : 5.1 CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:...

SUSE: Security Advisory (SUSE-SU-2025:02530-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-8187

A vulnerability was found in Campcodes Courier Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /editparcel.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has...

java-17-openj9-17.0.16.0-1.1 on GA media (moderate)

java-17-openj9-17.0.16.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15391-1 Rating: moderate Cross-References: CVE-2025-30749 CVE-2025-50059 CVSS scores: CVE-2025-30749 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-30749 SUSE : 8.3...

MozillaFirefox-141.0-1.1 on GA media (moderate)

MozillaFirefox-141.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15386-1 Rating: moderate Cross-References: CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032 CVE-2025-8033 CVE-2025-8034 CVE-2025-8035 CVE-2025-8036 CVE-2025-8037 CVE-2025-8038 CVE-2025-8039...

rpi-imager-1.9.5-1.1 on GA media (moderate)

rpi-imager-1.9.5-1.1 on GA media Announcement ID: openSUSE-SU-2025:15388-1 Rating: moderate Cross-References: CVE-2025-5916 CVSS scores: CVE-2025-5916 SUSE : 4.4 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L CVE-2025-5916 SUSE : 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:L/SC:N/SI:N/SA:N...

ruby3.4-rubygem-thor-1.4.0-1.1 on GA media (moderate)

ruby3.4-rubygem-thor-1.4.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15382-1 Rating: moderate Cross-References: CVE-2025-54314 CVSS scores: CVE-2025-54314 SUSE : 2.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:N CVE-2025-54314 SUSE : 2...

python311-starlette-0.47.2-1.1 on GA media (moderate)

python311-starlette-0.47.2-1.1 on GA media Announcement ID: openSUSE-SU-2025:15381-1 Rating: moderate Cross-References: CVE-2025-54121 CVSS scores: CVE-2025-54121 SUSE : 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L CVE-2025-54121 SUSE : 6.9...

MozillaThunderbird-140.1.0-1.1 on GA media (moderate)

MozillaThunderbird-140.1.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15383-1 Rating: moderate Cross-References: CVE-2025-6427 CVE-2025-6432 CVE-2025-6433 CVE-2025-6434 CVE-2025-6435 CVE-2025-6436 CVE-2025-8027 CVE-2025-8028 CVE-2025-8029 CVE-2025-8030 CVE-2025-8031 CVE-2025-8032...

CVE-2025-8159 D-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow

A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLanguageChange of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to stack-based buffer overflow. The...

CVE-2025-8125

A vulnerability was found in deerwms deer-wms-2 up to 3.3. It has been rated as critical. Affected by this issue is some unknown functionality of the file /system/role/authUser/allocatedList. The manipulation of the argument paramsdataScope leads to sql injection. The attack may be launched...

jupyter-jupyterlab-templates-0.5.2-3.1 on GA media (moderate)

jupyter-jupyterlab-templates-0.5.2-3.1 on GA media Announcement ID: openSUSE-SU-2025:15373-1 Rating: moderate Cross-References: CVE-2025-7783 CVSS scores: CVE-2025-7783 SUSE : 8.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N CVE-2025-7783 SUSE : 9.4...