WordPress plugin WPSyncSheets Lite For WPForms 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

WordPress Admire Extra plugin <= 1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin Admire Extra versions = 1.6...

Security update for go1.24

This update for go1.24 fixes the following issues: CVE-2025-22866: Fixed timing sidechannel for P-256 on ppc64le bsc1236801. CVE-2025-22867: Fixed arbitrary code execution during build on darwin bsc1236839. Other fixes: go1.2r42 release tracking bsc1236217 Patch Instructions: To install this SUSE...

PT-2025-6153 · Unknown · 1000 Projects Bookstore Management System

Name of the Vulnerable Software and Affected Versions: 1000 Projects Bookstore Management System version 1.0 Description: A critical issue has been found in the 1000 Projects Bookstore Management System. This issue affects an unknown part of the file process users del.php. The manipulation of the...

Mercury MIPC552W 安全漏洞

Mercury MIPC552W is a webcam from Mercury China. A security vulnerability exists in Mercury MIPC552W v1.0, which stems from a lack of length validation and a buffer overflow vulnerability that could cause the remote target device to crash or execute arbitrary commands...

cool-admin-java 代码问题漏洞

cool-admin-java is a backend privilege management framework for COOL individual developers. A code issue vulnerability exists in cool-admin-java v1.0. An attacker can exploit this vulnerability to execute arbitrary code by uploading specially crafted files...

PT-2025-6118 · Code Projects · Code-Projects Vehicle Parking Management System

Name of the Vulnerable Software and Affected Versions: code-projects Vehicle Parking Management System version 1.0 Description: A critical issue was found in the Authentication component, specifically affecting the login function. The manipulation of the username argument leads to a stack-based...

CVE-2024-57668

In Code-projects Shopping Portal v1.0, the insert-product.php page has an arbitrary file upload vulnerability...

CVE-2025-25136 WordPress Optimate Ads plugin <= 1.0.3 - Cross-Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in shujahat21 Optimate Ads optimate-ads allows Stored XSS.This issue affects Optimate Ads: from n/a through = 1.0.3...

PT-2025-5950 · Unknown · Scriptonite Simple User Profile

Name of the Vulnerable Software and Affected Versions: Scriptonite Simple User Profile versions 1.9 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS in Scriptonite Simple User Profile. Recommendations: For versions 1.9 and earlier, updat...

CVE-2024-57599

Cross Site Scripting vulnerability in DouPHP v.1.8 Release 20231203 allows attackers to execute arbitrary code via a crafted payload injected into the description parameter in /admin/article.php...

SourceCodester Packers and Movers Management System 安全漏洞

SourceCodester Packers and Movers Management System is an open source packers and movers management system from Sourcecodester. A security vulnerability exists in version 1.0 of the SourceCodester Packers and Movers Management System, which stems from Users.php containing a cross-site request...

PT-2025-5879 · Unknown · Egavilan Media Resumes Management/Job Application Website

Name of the Vulnerable Software and Affected Versions: Egavilan Media Resumes Management and Job Application Website version 1.0 Description: The issue allows remote attackers to inject arbitrary code via the First and Last Name fields in the Apply For This Job Form. This is a Stored Cross Site...

CVE-2024-56015

Cross-Site Request Forgery CSRF vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3...

CVE-2024-33962

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'code' in...

CVE-2024-33957

SQL injection vulnerability in E-Negosyo System affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in 'id' in '/admin/orders/controller.php' parameter...

CVE-2024-33960

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'end' in...

CVE-2024-33968

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'Attendance' and 'YearLevel' in...

CVE-2024-33970

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'studid' in...

CVE-2024-33965

SQL injection vulnerability in PayPal, Credit Card and Debit Card Payment affecting version 1.0. An attacker could exploit this vulnerability by sending a specially crafted query to the server and retrieve all the information stored in it through the following 'view' in...