MAL-2025-39948 Malicious code in xray-island-pvra (npm)

The package xray-island-pvra was found to contain malicious code...

MAL-2025-38131 Malicious code in vanilla-xray-0kbw (npm)

The package vanilla-xray-0kbw was found to contain malicious code...

MAL-2025-39972 Malicious code in xray-tangerine-zulu-jxles (npm)

The package xray-tangerine-zulu-jxles was found to contain malicious code...

MAL-2025-21689 Malicious code in golf-xray-lsls (npm)

The package golf-xray-lsls was found to contain malicious code...

MAL-2025-29931 Malicious code in project-82n7t-xray (npm)

The package project-82n7t-xray was found to contain malicious code...

MAL-2025-18240 Malicious code in delta-papa-xray-sgnbv (npm)

The package delta-papa-xray-sgnbv was found to contain malicious code...

MAL-2025-39932 Malicious code in xray-da3-project (npm)

The package xray-da3-project was found to contain malicious code...

Malicious code in xray-y0w-project (npm)

The package xray-y0w-project was found to contain malicious code...

Malicious code in xray-hotel-gnis (npm)

The package xray-hotel-gnis was found to contain malicious code...

Malicious code in xray-golf-velw (npm)

The package xray-golf-velw was found to contain malicious code...

Patient Record Management System xray_form.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2025-7754

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xrayform.php. The manipulation of the argument itrno leads to sql injection. The attack can be initiated remotely. The exploit ha...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

CVE-2022-41950

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...

CVE-2022-41945

super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...

CVE-2021-21652

A cross-site request forgery CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2021-21653

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2019-19679

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue...

CVE-2019-19678

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue...