6118 matches found
Jenkins plugin Azure Service Fabric 跨站请求伪造漏洞
Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application software. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. Jenkins plugin A...
PT-2025-1427 · Magma · Magma
Name of the Vulnerable Software and Affected Versions: Magma versions 1.8.0 and earlier Description: A Null pointer dereference issue in the Mobile Management Entity MME allows network-adjacent attackers to crash the MME via an S1AP "S1Setup Request" packet missing an expected Global eNB ID field...
WordPress plugin UltraLight 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
itsourcecode Farm Management System 代码问题漏洞
itsourcecode Farm Management System is an open source farm management system from itsourcecode. A code issue vulnerability exists in version 1.0 of itsourcecode Farm Management System, which stems from the pigphoto parameter of the file /add-pig.php that can lead to unrestricted uploads...
The vulnerability of the NTLMv1 protocol implementation in Windows operating systems allows attackers to enhance their privileges.
The vulnerability of the NTLMv1 protocol in Windows operating systems is related to deficiencies in the authentication process. Exploiting this vulnerability can allow a malicious actor to gain increased privileges remotely...
PT-2025-3957 · Unknown · Code-Projects Fantasy-Cricket
Name of the Vulnerable Software and Affected Versions: code-projects Fantasy-Cricket version 1.0 Description: A critical issue has been found in the code-projects Fantasy-Cricket software. The vulnerability is a remote SQL injection in the /authenticate.php file, which can be exploited by...
PT-2025-3955 · Codezips · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...
Codezips Gym Management System 注入漏洞
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...
Campcodes School Management Software 代码注入漏洞
Campcodes School Management Software is a school management software from Campcodes, Inc. A code injection vulnerability exists in Campcodes School Management Software version 1.0, which originates from a cross-site scripting vulnerability in the ID Card Title parameter of the /create-id-card fil...
PT-2025-3952 · Unknown · Campcodes School Management
Name of the Vulnerable Software and Affected Versions: Campcodes School Management Software version 1.0 Description: A cross-site scripting issue has been found in the Create Id Card Page component, specifically in the file /create-id-card. The manipulation of the ID Card Title argument leads to...
1000 Projects Campaign Management System Platform for Women 安全漏洞
1000 Projects Campaign Management System Platform for Women is an open source campaign management system platform from 1000 Projects. A security vulnerability exists in version 1.0 of the 1000 Projects Campaign Management System Platform for Women, which stems from a parameter uname in the file...
PT-2025-3946 · Codezips · Codezips Gym Management System
Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/edit member.php, where the manipulation of the name argument leads to SQL injection. The attack can be initiated...
1000 Projects Campaign Management System Platform for Women 安全漏洞
1000 Projects Campaign Management System Platform for Women is an open source campaign management system platform from 1000 Projects. A security vulnerability exists in version 1.0 of the 1000 Projects Campaign Management System Platform for Women, which stems from a parameter Username in the fil...
dingfanzu SQL injection vulnerability (CNVD-2025-02106)
dingfanzu is a php based takeaway ordering website. A SQL injection vulnerability exists in dingfanzu v1.0, which stems from the application's lack of validation of externally entered SQL statements. A local attacker can exploit this vulnerability to execute arbitrary code via the contents of the...
PT-2025-3934 · Code Projects · Admission Management System
Name of the Vulnerable Software and Affected Versions: code-projects Admission Management System version 1.0 Description: A critical issue was found in the Admission Management System. The problem affects an unknown functionality of the file /signupconfirm.php. The manipulation of the in eml...
PT-2025-3939 · Unknown · 1000 Projects Campaign Management System Platform For Women
Name of the Vulnerable Software and Affected Versions: 1000 Projects Campaign Management System Platform for Women version 1.0 Description: A critical issue has been identified, affecting an unknown functionality of the file /Code/sc login.php. The manipulation of the uname argument leads to SQL...
Codezips Gym Management System 注入漏洞
Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter name in the file /dashboard/admin/editmember.php that can lead to SQL injection...
Code-Projects Job Recruitment 代码注入漏洞
Code-Projects Job Recruitment is a Code-Projects open source job portal. A code injection vulnerability exists in Code-Projects Job Recruitment version 1.0, which stems from the parameter type of the file /parse/feedbacksystem.php that can lead to cross-site scripting attacks...
CVE-2025-23710
Cross-Site Request Forgery CSRF vulnerability in Mayur Sojitra Flying Twitter Birds flying-twitter-birds allows Stored XSS.This issue affects Flying Twitter Birds: from n/a through = 1.8...