Malicious code in xray-561-project (npm)

The package xray-561-project was found to contain malicious code...

Malicious code in zulu-xray-lzmk (npm)

The package zulu-xray-lzmk was found to contain malicious code...

Malicious code in yankee-xray-charlie-ejhsb (npm)

The package yankee-xray-charlie-ejhsb was found to contain malicious code...

Malicious code in xray-elderberry-echo-kzvty (npm)

The package xray-elderberry-echo-kzvty was found to contain malicious code...

Malicious code in raspberry-xray-golf-utves (npm)

The package raspberry-xray-golf-utves was found to contain malicious code...

Malicious code in xray-fig-vrow (npm)

The package xray-fig-vrow was found to contain malicious code...

Malicious code in xray-bravo-o4ps (npm)

The package xray-bravo-o4ps was found to contain malicious code...

Malicious code in xray-golf-velw (npm)

The package xray-golf-velw was found to contain malicious code...

Patient Record Management System xray_form.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2025-7754

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xrayform.php. The manipulation of the argument itrno leads to sql injection. The attack can be initiated remotely. The exploit ha...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

CVE-2022-41950

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...

CVE-2022-41945

super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...

CVE-2021-21652

A cross-site request forgery CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2021-21653

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2019-19679

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue...

CVE-2019-19678

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue...

Patient Record Management System xray_print.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter itrno of the xrayprint.php file. The vulnerability ca...

CVE-2025-3208

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xrayprint.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack remotely. The exploit...