CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

Viber Desktop version 25.6.0 and potentially earlier are vulnerable to HTML Injection via the text parameter in the message compose or forward interface. The application fails to properly neutralize input, allowing the rendering of unvalidated HTML content through the deep link handler (viber://f...

CVE-2025-55996: Improper Neutralization of Input During Web Page Generation

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

CVE-2025-55996

Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface...

The vulnerability of the setSmsCfg function in the microprogramming software for TOTOLINK NR1800X allows a hacker to cause a service failure.

The vulnerability of the setSmsCfg function in the microprogrammed software of TOTOLINK NR1800X routers is related to buffer overflow during the processing of the text parameter. Exploiting this vulnerability can allow an attacker to cause service failures...

Medical Store Management System MainPanel.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. Medical Store Management System has a SQL injection vulnerability that originates from improper filtering of searchTxt parameters in the MainPanel.java file, which can be exploited by an attacker to obtain sensitive information...

CVE-2025-8929 code-projects Medical Store Management System MainPanel.java sql injection

A vulnerability has been found in code-projects Medical Store Management System 1.0. This vulnerability affects unknown code of the file MainPanel.java. The manipulation of the argument searchTxt leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-8929

CVE-2025-8929 affects the code-projects Medical Store Management System 1.0. The vulnerability resides in the file MainPanel.java , where the input parameter searchTxt is not properly filtered, leading to a SQL injection . Exploitation can be performed remotely, and the exploit has been disclosed...

Code-Projects Medical Store Management System 注入漏洞

Medical Store Management System is a pharmacy management system. Medical Store Management System has a SQL injection vulnerability that originates from improper filtering of searchTxt parameters in the MainPanel.java file, which can be exploited by an attacker to obtain sensitive information...

CVE-2020-9083

HUAWEI Mate 20 smart phones with Versions earlier than 10.1.0.163C00E160R3P8 have a denial of service DoS vulnerability. The attacker can enter a large amount of text on the phone. Due to insufficient verification of the parameter, successful exploitation can impact the service...

CVE-2025-45841: Out-of-bounds Write

TOTOLINK NR1800X V9.1.0u.6681B20230703 was discovered to contain an authenticated stack overflow via the text parameter in the setSmsCfg function...

CVE-2025-3427

The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infilltext' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for...

PT-2025-15380 · WordPress · 3Dprint Lite

Name of the Vulnerable Software and Affected Versions: 3DPrint Lite plugin for WordPress versions up to, and including, 2.1.3.6 Description: The issue arises from insufficient escaping on the user-supplied infill text parameter and lack of sufficient preparation on the existing SQL query, making ...

PT-2025-12781

Name of the Vulnerable Software and Affected Versions Frndzk Expandable Bottom Bar plugin for WordPress versions up to, and including, 1.0 Description The issue allows authenticated attackers with administrator-level permissions and above to inject arbitrary web scripts in pages due to insufficie...

WordPress plugin Frndzk Expandable Bottom Bar 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPre...

CVE-2025-2510: Improper Neutralization of Input During Web Page Generation

The Frndzk Expandable Bottom Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-leve...

WordPress Frndzk Expandable Bottom Bar plugin <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via text Parameter vulnerability

Authenticated Administrator+ Stored Cross-Site Scripting via text Parameter vulnerability discovered by johska in WordPress Plugin Frndzk Expandable Bottom Bar versions = 1.0...

PT-2025-11137

Name of the Vulnerable Software and Affected Versions: ArielBrailovsky-ViralAd plugin for WordPress versions up to, and including, 1.0.8 Description: The issue allows unauthenticated attackers to perform SQL Injection via the text and id parameters of the limpia function due to insufficient...

Exploit for Cross-site Scripting in Squidex.Io Squidex

CVE-2023-24278 - Reflected XSS Vulnerabilities in Squidex...

Code-Projects Pharmacy Management System SQL注入漏洞

Code-Projects Pharmacy Management System is a Code-Projects open source pharmacy management system. A SQL injection vulnerability exists in Code-Projects Pharmacy Management System version 1.0, which stems from the parameter text in the file /addnewinvoice.php that can lead to SQL injection...