2393 matches found
PT-2025-41214
Name of the Vulnerable Software and Affected Versions code-projects Web-Based Inventory and POS System version 1.0 Description A flaw exists in code-projects Web-Based Inventory and POS System 1.0. The issue is related to the manipulation of the emailid argument in the /login.php file, which can...
PT-2025-41241
Name of the Vulnerable Software and Affected Versions Kilo Code versions prior to 4.86.0 Description A flaw exists in Kilo Code that allows for injection through manipulation of the ClineProvider function within the src/core/webview/ClineProvider.ts file of the Prompt Handler component. This issu...
PT-2025-41254
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.2 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q4.5 Description A stored cross-site scripting XSS issue exists in Forms within the software. This allows remote attackers to inject arbitrary web scri...
CVE-2025-11416 PHPGurukul Beauty Parlour Management System invoices.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to th...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-11407
CVE-2025-11407 affects D-Link DI-7001 MINI (firmware 24.04.18B1). The vulnerability is in the upgrade_filter.asp component where manipulation of the path argument leads to OS command injection. Attack could be initiated remotely, and public exploits exist. Some sources do not provide a confirmed ...
CVE-2025-11402 SourceCodester Hotel and Lodge Management System del_curr.php sql injection
A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /delcurr.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...
EUVD-2014-3485
Malware in sbrugna...
EUVD-2008-5887
Malware in sbrugna...
EUVD-2006-7125
Malware in sbrugna...
EUVD-2011-1817
Malware in sbrugna...
EUVD-2013-5535
Malware in sbrugna...
EUVD-2012-3432
Malware in sbrugna...
EUVD-2013-6146
Malware in sbrugna...
EUVD-2015-7294
Malware in sbrugna...
EUVD-2007-2555
Malware in sbrugna...
EUVD-2006-4581
Malware in sbrugna...