EUVD-2026-33637

A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/addsubtopic.php. This manipulation of the argument topicid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available ...

CVE-2026-10258

CVE-2026-10258 affects itsourcecode Content Management System 1.0. The vulnerability resides in the /admin/add_sub_topic.php file, where manipulating the topic_id parameter enables SQL injection in an unspecified function. The attack can be performed remotely, and public exploits are available. C...

CVE-2026-10242 itsourcecode Content Management System instructions.php sql injection

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2026-10242: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Content Management System 1.0. This impacts an unknown function of the file /instructions.php. This manipulation of the argument topicid causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the...

CVE-2026-10258: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in itsourcecode Content Management System 1.0. Impacted is an unknown function of the file /admin/addsubtopic.php. This manipulation of the argument topicid causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available ...

CVE-2026-10257: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Content Management System 1.0. This issue affects some unknown processing of the file /admin/updatessimg.php. The manipulation of the argument topicid results in sql injection. The attack can be executed remotely. The exploit has been released t...

CVE-2026-10265: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Content Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/edittopic.php. Such manipulation of the argument topicid leads to sql injection. The attack may be launched remotely. The exploit is publicly...

CVE-2025-64519: Improper Neutralization of Special Elements used in an SQL Command

TorrentPier is an open source BitTorrent Public/Private tracker engine, written in php. In versions up to and including 2.8.8, an authenticated SQL injection vulnerability exists in the moderator control panel modcp.php. Users with moderator permissions can exploit this vulnerability by supplying...

EUVD-2012-5236

Malware in sbrugna...

EUVD-2007-3667

Malware in sbrugna...

EUVD-2004-2746

Malware in sbrugna...

EUVD-2003-0478

Malware in sbrugna...

EUVD-2003-0480

Malware in sbrugna...

EUVD-2008-5245

Malware in sbrugna...

Discourse 安全漏洞

Discourse is an open source community discussion platform from Discourse Open Source. The platform includes features such as communities, email, and chat rooms. A security vulnerability exists in Discourse 3.5.0 and earlier versions, which stems from an AI suggestion endpoint that does not proper...

CVE-2025-58055: Improper Access Control

Discourse is an open-source community discussion platform. In versions 3.5.0 and below, the Discourse AI suggestion endpoints for topic “Title”, “Category”, and “Tags” allowed authenticated users to extract information about topics that they weren’t authorized to access. By modifying the “topicid...

CVE-2004-2756

Cross-site scripting XSS vulnerability in viewtopic.php in Xoops 2.x, possibly 2 through 2.0.5, allows remote attackers to inject arbitrary web script or HTML via the 1 forum and 2 topicid parameters...

osTicket 安全漏洞

osTicket is a widely used and trusted open source support work order system from osTicket. A security vulnerability exists in osTicket version 1.17.5 and earlier, which stems from a combination of the keywords and topicid parameters in the search function of the tickets.php page that results in S...

CVE-2025-26241: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket =1.17.5 allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination...

CVE-2021-45811: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in the "Search" functionality of "tickets.php" page in osTicket 1.15.x allows authenticated attackers to execute arbitrary SQL commands via the "keywords" and "topicid" URL parameters combination...