CVE-2025-9599

The CVE-2025-9599 entry concerns itsourcecode Apartment Management System 1.0, with a SQL injection vulnerability in /setting/month_setup.php via the txtMonthName parameter. Multiple connected sources (CNVD, CNNVD, RH Red Hat style, CVE lists, VulnEnrichment, PT-2025-35163) describe an externally...

CVE-2025-9598

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/yearsetup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released t...

CVE-2025-9598 itsourcecode Apartment Management System year_setup.php sql injection

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/yearsetup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released t...

CVE-2025-9598

CVE-2025-9598 affects itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /setting/year_setup.php, triggered by manipulating the txtXYear parameter. This allows remote exploitation and may lead to sensitive data disclosure or database manipulation, as in...

CVE-2025-9598 itsourcecode Apartment Management System year_setup.php sql injection

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/yearsetup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released t...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter ddlEmpName in file /setting/employeesalarysetup.php. An attacker...

PT-2025-35164

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A security issue exists in itsourcecode Apartment Management System version 1.0. The manipulation of the txtMemberType argument in the file /setting/member type setup.php can...

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink devices lies in the unencrypted storage of confidential information, allowing attackers to compromise the confidentiality and integrity of the protected data.

The vulnerability of FIELDVUE Emerson ValveLink software products regarding setup, calibration, and diagnostics is related to the unencrypted storage of confidential information. Exploiting this vulnerability could allow an attacker to compromise the confidentiality and integrity of the protected...

PT-2025-35166

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists in the /setting/employee salary setup.php file. The ddlEmpName argument is susceptible to manipulation, potentially allowing for remote exploitatio...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter txtXYear in the file /setting/yearsetup.php. An attacker can...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter txtBillType in the file /setting/billsetup.php. An attacker can exploi...

PT-2025-35212

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Apartment Management System version 1.0. The vulnerability is located in the /setting/utility bill setup.php file, where manipulati...

SUSE SLED15: MozillaThunderbird / MozillaThunderbird-translations-common / etc (SUSE-SU-2025:03007-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03007-1 advisory. Updated to Mozilla Thunderbird 140.2 MFSA 2025-72 bsc1248162: CVE-2025-9179: Sandbox escape due...

PT-2025-35163

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A weakness exists in an unknown functionality of the file /setting/month setup.php. Manipulation of the txtMonthName argument can lead to SQL injection. The attack can be...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter txtGasBill in the file /setting/utilitybillsetup.php. An attacker can...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of an externally entered SQL statement in the parameter txtMonthName in the file /setting/monthsetup.php. An attacker c...

The vulnerability of software products for configuring, calibrating, and diagnosing FIELDVUE Emerson ValveLink devices lies in the violation of data protection mechanisms, allowing attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of FIELDVUE Emerson ValveLink software products regarding setup, calibration, and diagnostics is related to a breach of data protection mechanisms. Exploiting this vulnerability could allow attackers to compromise the confidentiality and integrity of the protected information...

SUSE CVE-2024-48908

lychee link checking action checks links in Markdown, HTML, and text files using lychee. Prior to version 2.0.2, there is a potential attack of arbitrary code injection vulnerability in lychee-setup of the composite action at action.yml. This issue has been patched in version 2.0.2...

MAL-2025-191796 Malicious code in mulaptested-pakname (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fe9ba6c7da3568c9fc879641c190c301a2bd8a349b38a44295eb2924139c78b4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...

Malicious code in mulaptested-pakname (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 fe9ba6c7da3568c9fc879641c190c301a2bd8a349b38a44295eb2924139c78b4 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...