24726 matches found
CVE-2025-9593 itsourcecode Apartment Management System unit_status_info.php sql injection
A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unitstatusinfo.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used...
CVE-2025-9593
Affected software: itsourcecode Apartment Management System 1.0. The vulnerability is an SQL injection in the /report/unit_status_info.php file caused by unsafely handling the usid parameter. This allows remote exploitation and an exploit has been published. Connected advisories confirm the issue...
CVE-2025-9586
creationtimestamp| type| source ---|---|--- 2025-08-28 21:11:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108447341555170...
CVE-2025-9584
creationtimestamp| type| source ---|---|--- 2025-08-28 20:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108236769126304...
CVE-2025-6203
creationtimestamp| type| source ---|---|--- 2025-08-28 20:03:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108179538985792 2025-09-02 06:30:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lxtijqktdl25 2025-09-02 16:09:59+00:00| seen|...
CVE-2025-9575
creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...
CVE-2025-9576
creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...
CVE-2025-57218
creationtimestamp| type| source ---|---|--- 2025-08-28 17:56:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107678659351418...
Storing Passwords in a Recoverable Format
Overview org.xwiki.platform:xwiki-platform-export-pdf-api is an API for multipage PDF export that supports both client-side printing, using the user's web browser, and server-side printing, e.g. using a headless Chrome browser that may run inside a Docker container. Affected versions of this...
CVE-2025-55583
creationtimestamp| type| source ---|---|--- 2025-08-28 14:41:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106911137398166...
CVE-2025-54125
creationtimestamp| type| source ---|---|--- 2025-08-28 13:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54125.yaml 2025-08-30 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhubciqr2b 2025-09-13...
CVE-2025-8067
creationtimestamp| type| source ---|---|--- 2025-08-28 13:23:28+00:00| seen| https://seclists.org/oss-sec/2025/q3/140 2025-08-28 15:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106984983497798 2025-08-28 15:57:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/143 2025-08-...
MAL-2025-41515 Malicious code in @twork-data-services/proxy-prime-api-v1-account-getting-services-status (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41491 Malicious code in @twork-data-services/customer-api-v2-customer-vip-status (npm)
--- -= Per source details. Do not edit below this line.=-...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter usid in the file /report/unitstatusinfo.php. An attacker can exploit...
PT-2025-35113
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 14.4.2 through 16.4.7 XWiki Platform versions 16.5.0-rc-1 through 16.10.6 XWiki Platform versions 17.0.0-rc-1 through 17.4.0-rc-1 Description: The PDF export jobs store sensitive cookies unencrypted in job statuses. Th...
PT-2025-34983
Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 Description: QuickCMS is susceptible to a Cross-Site Request Forgery CSRF issue in the page deletion functionality. A malicious actor can create a crafted website that, when visited by an administrator, automatically send...
Google Android Information Disclosure Vulnerability (CNVD-2025-19991)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to an obfuscated agent in multiple functions of StatusHint.java and TelecomServiceImpl.java. An attacker could exploit the vulnerability to disclose...
CVE-2018-25115
creationtimestamp| type| source ---|---|--- 2025-08-27 21:46:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115102920260061146 2025-08-29 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf6r7ar2n...