2393 matches found
PT-2025-41249
Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves the manipulation of the ID argument in the /edit room.php file, leading to a SQL...
PT-2025-41241
Name of the Vulnerable Software and Affected Versions Kilo Code versions prior to 4.86.0 Description A flaw exists in Kilo Code that allows for injection through manipulation of the ClineProvider function within the src/core/webview/ClineProvider.ts file of the Prompt Handler component. This issu...
PT-2025-41254
Name of the Vulnerable Software and Affected Versions Liferay Portal versions 7.3.2 through 7.4.3.111 Liferay DXP versions 2023.Q3.1 through 2023.Q4.5 Description A stored cross-site scripting XSS issue exists in Forms within the software. This allows remote attackers to inject arbitrary web scri...
CVE-2025-11416 PHPGurukul Beauty Parlour Management System invoices.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown part of the file /admin/invoices.php. Performing a manipulation of the argument delid results in sql injection. The attack can be initiated remotely. The exploit has been released to th...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-43823
Cross-site scripting XSS vulnerability in the Commerce Search Result widget in Liferay Portal 7.4.0 through 7.4.3.111, and Liferay DXP 2023.Q4 before patch 6, 2023.Q3 before patch 9, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload...
CVE-2025-11407
CVE-2025-11407 affects D-Link DI-7001 MINI (firmware 24.04.18B1). The vulnerability is in the upgrade_filter.asp component where manipulation of the path argument leads to OS command injection. Attack could be initiated remotely, and public exploits exist. Some sources do not provide a confirmed ...
CVE-2025-11402 SourceCodester Hotel and Lodge Management System del_curr.php sql injection
A vulnerability has been found in SourceCodester Hotel and Lodge Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /delcurr.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been...
EUVD-2021-15675
Malware in sbrugna...
EUVD-2012-3432
Malware in sbrugna...
EUVD-2008-6383
Malware in sbrugna...
EUVD-2014-3934
Malware in sbrugna...
EUVD-2006-2553
Malware in sbrugna...
EUVD-2014-9255
Malware in sbrugna...
EUVD-2013-6146
Malware in sbrugna...
EUVD-2013-5535
Malware in sbrugna...
EUVD-2007-6275
Malware in sbrugna...
EUVD-2006-4581
Malware in sbrugna...