9437 matches found
CVE-2025-9009 itsourcecode Online Tour and Travel Management System email_setup.php sql injection
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/emailsetup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2025-9009 itsourcecode Online Tour and Travel Management System email_setup.php sql injection
A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/emailsetup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclose...
CVE-2025-4410
A buffer overflow vulnerability exists in the module SetupUtility. An attacker with local privileged access can exploit this vulnerability by executeing arbitrary code...
Linux Distros Unpatched Vulnerability : CVE-2025-38035
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nvmet-tcp: don't restore null skstatechange queue-statechange is set as part of nvmettcpsetqueuesock, but if the TCP connection isn't established when...
itsourcecode Online Tour and Travel Management System 注入漏洞
itsourcecode Online Tour and Travel Management System is itsourcecode open source an online tour and travel management system . An injection vulnerability exists in version 1.0 of itsourcecode Online Tour and Travel Management System, which originates from a SQL injection due to incorrect...
Linux Distros Unpatched Vulnerability : CVE-2024-35850
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: Bluetooth: qca: fix NULL-deref on non- serdev setup Qualcomm ROME controllers can be...
PT-2025-33441
Name of the Vulnerable Software and Affected Versions: itsourcecode Online Tour and Travel Management System version 1.0 Description: A SQL injection vulnerability exists in itsourcecode Online Tour and Travel Management System 1.0. The vulnerability is located in an unknown function within the...
Linux Distros Unpatched Vulnerability : CVE-2025-37778
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krbauthenticate krbauthenticate frees sess-user and does not...
Linux Distros Unpatched Vulnerability : CVE-2023-0122
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A NULL pointer dereference vulnerability in the Linux kernel NVMe functionality, in nvmetsetupauth, allows an attacker to perform a Pre-Auth Denial of Service D...
Malicious code in setup-jsonnet (npm)
The package setup-jsonnet was found to contain malicious code...
Malicious code in setup-docker (npm)
The package setup-docker was found to contain malicious code...
Malicious code in setup-foreman (npm)
The package setup-foreman was found to contain malicious code...
MAL-2025-33024 Malicious code in setup-docker (npm)
The package setup-docker was found to contain malicious code...
MAL-2025-33025 Malicious code in setup-foreman (npm)
The package setup-foreman was found to contain malicious code...
Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...
MAL-2025-26123 Malicious code in mean_setup (npm)
The package meansetup was found to contain malicious code...
MAL-2025-33026 Malicious code in setup-grunt (npm)
The package setup-grunt was found to contain malicious code...
MAL-2025-7747 Malicious code in @digital-wealth-web/cwp-service-setup (npm)
The package @digital-wealth-web/cwp-service-setup was found to contain malicious code...