2315 matches found
CVE-2024-44639
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...
CVE-2024-44639
PHPGurukul Student Record System 3.20 is vulnerable to SQL Injection via the sub1, sub2, sub3, sub4, and course-short parameters in add-subject.php...
EUVD-2024-55078
Multiple parameters in register.php in PHPGurukul Student Record System 3.20 are vulnerable to SQL injection. These include: c-full, fname, mname,lname, gname, ocp, nation, mobno, email, board1, roll1, pyear1, board2, roll2, pyear2, sub1,marks1, sub2, course-short, income, category, ph, country,...
MAL-2025-70906 Malicious code in subjective-sapphire-lemming (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c4e0f9664f27f7cb06ae899154704a7c3e9bc2910086231813fea7354ec0779a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Introducing Nylon Face Mask Attacks: A Dataset for Evaluating Generalised Face Presentation Attack Detection
Face recognition systems are increasingly deployed across a wide range of applications, including smartphone authentication, access control, and border security. However, these systems remain vulnerable to presentation attacks PAs, which can significantly compromise their reliability. In this wor...
编号撤回
JetBrains YouTrack is a browser-based bug tracking and project management software from the Czech company JetBrains. The software features bug tracking, creating workflows and monitoring project progress. A security vulnerability exists in versions prior to JetBrains YouTrack 2025.3.104432, which...
OPENSUSE-SU-2025:20021-1 Security update for MozillaThunderbird
This update for MozillaThunderbird fixes the following issues: Changes in MozillaThunderbird: Mozilla Thunderbird 140.3.0 ESR: Right-clicking 'List-ID' - 'Unsubscribe' created double encoded draft subject Thunderbird could crash on startup Thunderbird could crash when importing mail Opening Websi...
A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing
GNU TLS is vulnerable to a denial-of-service DoS due to inefficient certificate processing in the libtasn1 library. An attacker could present a maliciously crafted certificate that contains a large amount of subject alternative name or name constraint inputs, potentially leading to excessive...
gnutls security, bug fix, and enhancement update
An update is available for gnutls. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnutls packages provide the GNU Transport Layer Security GnuTLS library,...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
EUVD-2025-33359
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross-Site Scripting (XSS) . The root cause is the improper neutralization of input within the Subject Description field, which allows for the injection of malicious scripts into the application. To remediate this, it is recommended to u...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
CVE-2025-60304
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...
PT-2025-41444
Name of the Vulnerable Software and Affected Versions code-projects Simple Scheduling System version 1.0 Description The Simple Scheduling System is susceptible to Cross Site Scripting XSS through the Subject Description field. This allows for the injection of malicious scripts into the...
Code-Projects Simple Scheduling System 安全漏洞
Code-Projects Simple Scheduling System is an open source simple scheduling system from Code-Projects. A security vulnerability exists in Code-Projects Simple Scheduling System version 1.0, which stems from the vulnerability of the Subject Description field to cross-site scripting attacks...
CVE-2025-60304: Improper Neutralization of Input During Web Page Generation
code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting XSS via the Subject Description field...