CVE-2025-45091

Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting XSS attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities...

PT-2025-37477

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A security flaw exists in Campcodes Online Job Finder System that allows for SQL injection. The issue affects the processing of the /advancesearch.php file. Manipulation of the...

CVE-2025-10444: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Job Finder System 1.0. This issue affects some unknown processing of the file /advancesearch.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has...

Seafile security vulnerabilities

Seafile is an open source enterprise cloud disk from China Haiwen Huzhi Network Technology Seafile. The product features Markdown WYSIWYG editing, Wiki, file labeling, and more. A security vulnerability exists in Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro, which stems from a...

Campcodes Online Job Finder System SQL Injection Vulnerability

CampCodes Online Job Finder System is an online job finder system from CampCodes, Inc. A SQL injection vulnerability exists in version 1.0 of the Campcodes Online Job Finder System, which stems from an incorrect manipulation of the parameter Username in the file /advancesearch.php, which could le...

SourceCodester Online Student File Management SQL Injection Vulnerability

SourceCodester Online Student File Management is a SourceCodester open source online student file management system. A SQL injection vulnerability exists in SourceCodester Online Student File Management version 1.0, which stems from an incorrect manipulation of the parameter Username in the file...

PT-2025-37478

Name of the Vulnerable Software and Affected Versions: Campcodes Computer Sales and Inventory System version 1.0 Description: A weakness has been identified in Campcodes Computer Sales and Inventory System 1.0. Manipulation of the Username argument in the file /pages/us transac.php?action=add can...

CVE-2025-10426: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been releas...

CVE-2025-45091

Seafile versions 11.0.18-Pro, 12.0.10, and 12.0.10-Pro are vulnerable to a stored Cross-Site Scripting XSS attack. An authenticated attacker can exploit this vulnerability by modifying their username to include a malicious XSS payload in notification and activities...

PT-2025-37753

Name of the Vulnerable Software and Affected Versions: Seafile versions 11.0.18-Pro Seafile versions 12.0.10 Seafile versions 12.0.10-Pro Description: Seafile is susceptible to a stored Cross-Site Scripting XSS attack. An authenticated attacker can exploit this issue by modifying their username t...

ROS-20250912-13

A vulnerability in OpenBao's secret management and encryption system is related to an unexpected normalization in the in the TOTP base library. Exploitation of the vulnerability could allow an attacker to gain access to sensitive data A vulnerability in the OpenBao secret management and encryptio...

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...

CVE-2025-10115

A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file usersearchajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized...

CVE-2025-10100

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-10102

A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been release...

Linux Distros Unpatched Vulnerability : CVE-2022-47373

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on the forget password...

Linux Distros Unpatched Vulnerability : CVE-2022-32741

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Attacker is able to determine if the provided username exists and it's valid using Request New Password feature, based on the response time. CVE-2022-32741 Note...

SolaX Cloud security vulnerabilities

SolaX Cloud is a photovoltaic monitoring and management platform from SolaX China. A security vulnerability exists in SolaX Cloud, which stems from the username suggestion feature leaking sensitive information...

Online Event Judging System index.php File SQL Injection Vulnerability

Online Event Judging System is an online event judging system. The Online Event Judging System suffers from a SQL injection vulnerability that originates from the /index.php file not securely filtering the Username parameter. An attacker can exploit this vulnerability by constructing a malicious...

CVE-2025-10118

A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out...