6118 matches found
PT-2025-45316
Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Elated-Themes Academist academist.This issue affects Academist: from n/a through 1.3...
SUSE-SU-2025:3951-1 Security update for runc
This update for runc fixes the following issues: - CVE-2025-31133: Fixed container escape via 'masked path' abuse due to mount race conditions bsc1252232. - CVE-2025-52565: Fixed container escape with malicious config due to /dev/console mount and related races bsc1252232. - CVE-2025-52881: Fixed...
CVE-2025-60925
codeshare v1.0.0 was discovered to contain an information leakage vulnerability...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989353)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989353 advisory. In the Linux kernel, the following vulnerability has been resolved: dm ioctl: prevent potential spectre v1 gadget It appears like cmd could be a Spectre v1 gadget as...
PT-2025-45071
Name of the Vulnerable Software and Affected Versions AI Engine plugin for WordPress versions prior to 3.1.4 AI Engine versions 2.8.x and 2.9.x prior to 2.9.5 Description The AI Engine plugin for WordPress has a Sensitive Information Exposure issue via the /mcp/v1/ REST API endpoint. When the...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990309)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990309 advisory. In the Linux kernel, the following vulnerability has been resolved: netlink: prevent potential spectre v1 gadgets Most netlink attributes are parsed and validated...
CVE-2025-60925
codeshare v1.0.0 was discovered to contain an information leakage vulnerability...
CVE-2025-50363
Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting XSS in /maid-hiring.php va the name field...
CVE-2025-63452
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php...
CVE-2025-60925
CVE-2025-60925 affects codeshare v1.0.0 and is an information leakage vulnerability. Metrics indicate CVSS v3.1 base score 5.3 (Medium); attack vector Network, attack complexity Low, privileges Required None, user interaction None, scope Unchanged; confidentiality impact Low. Connected sources co...
WordPress plugin DominoKit 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A security...
CVE-2025-60925
codeshare v1.0.0 was discovered to contain an information leakage vulnerability...
EUVD-2025-37492
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php...
EUVD-2025-37499
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /editproduct.php?id=1...
CVE-2025-63452
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php...
CVE-2025-63453
Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php...
CVE-2025-63447
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addcustomer.php...
CVE-2025-63446
Water Management System v1.0 is vulnerable to Cross Site Scripting XSS in /addvendor.php...