576 matches found
CVE-2015-10063
A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file login.php. The manipulation of the argument user/pass leads to sql injection. The attack may be initiated remotely. The identifier of the patch is...
CVE-2024-38409
Memory corruption while station LL statistic handling...
CVE-2024-0359
A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely...
GHSA-3327-6X79-Q396
creationtimestamp| type| source ---|---|--- 2025-02-04 19:33:49+00:00| seen| https://infosec.exchange/users/cve/statuses/113947287785542382...
GHSA-R57H-547H-W24F
creationtimestamp| type| source ---|---|--- 2025-02-03 21:24:15+00:00| seen| https://infosec.exchange/users/cve/statuses/113942059711678817...
CVE-2024-13347
creationtimestamp| type| source ---|---|--- 2025-02-03 06:15:38+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhavd4oufv2f 2025-02-03 09:27:14+00:00| seen| https://t.me/cvedetector/17056 2025-02-06 02:39:10+00:00| seen|...
BELL-CVE-2025-21669
Bulletin has no description...
CVE-2025-21674
creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:28+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy3lf2pe2e 2025-01-31 15:22:42+00:00| seen| https://t.me/cvedetector/16945...
GHSA-X5RV-W9PM-8QP8
creationtimestamp| type| source ---|---|--- 2025-01-31 02:04:26+00:00| seen| https://infosec.exchange/users/cve/statuses/113920512197050890 2025-01-31 03:21:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3551 2025-01-31 15:14:56+00:00| published-proof-of-concept|...
CVE-2025-24374
creationtimestamp| type| source ---|---|--- 2025-01-29 07:00:56+00:00| seen| https://bsky.app/profile/symfony.com/post/3lgufjj5oh52a 2025-01-29 08:19:01+00:00| seen| https://bsky.app/profile/druid.fi/post/3lgujv2zyt22r 2025-01-29 15:30:44+00:00| seen|...
GHSA-93Q8-GQ69-WQMW
creationtimestamp| type| source ---|---|--- 2025-01-27 12:33:00+00:00| seen| https://gist.github.com/SavyFrost/a7bbd84d59f72f3c2cfed44779ad0793...
CVE-2019-15690
creationtimestamp| type| source ---|---|--- 2025-01-24 18:04:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2955 2025-01-24 18:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113884825791621074 2026-08-05 05:00:07+00:00| seen| https://t.me/timcorehacking/834...
CVE-2025-21495
creationtimestamp| type| source ---|---|--- 2025-01-21 21:16:35+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgbrm6sn3d2n 2025-01-23 17:03:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/2778...
CVE-2025-21537
...
CVE-2025-21535
...
CVE-2025-21319
CVE-2025-21319 is a Windows kernel memory information disclosure vulnerability. The issue is tracked in multiple vulnerabilities and discussed by Microsoft, with a CVSSv3.1 base score of 5.5 (Local attack, Low attack complexity, Low privileges required, no user interaction, High confidentiality i...
CVE-2025-0458
CVE-2025-0458 affects Virtual Computer Vysual RH Solution 2024.12.1, where the Login Panel’s /index.php contains vulnerable functionality. The described issue arises from manipulating the page argument, enabling remote cross-site scripting (XSS). The vulnerability is publicly disclosed and attack...
CVE-2024-57658
An issue in the sqltreehash1 component of openlink virtuoso-opensource v7.2.11 allows attackers to cause a Denial of Service DoS via crafted SQL statements...
CVE-2025-22597 WeGIA has a Cross-Site Scripting (XSS) Stored endpoint 'CobrancaController.php' parameter 'local_recepcao'
WeGIA is a web manager for charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the CobrancaController.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts into the localrecepcao parameter. The injected script...
CVE-2024-56299
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Pektsekye Notify Odoo notify-odoo allows Stored XSS.This issue affects Notify Odoo: from n/a through = 1.0.0...