150 matches found
CVE-2026-19837
CVE-2026-19837 affects Webkul Bagisto up to 2.4.4. The issue is in /admin/customers/search (Customer Search) where manipulating the Query argument can disclose information. The attack is possible remotely, with a publicly available exploit. The vendor notes issues identified during internal secur...
org.glassfish.main.admingui:console-commandrecorder-plugin (>=7.0.16, <=9.0.0-m3), org.glassfish.main.featuresets:debug (>=6.2.5, <=9.0.0-m3) +5 more potentially affected by CVE-2025-14340 via org.glassfish.main.admin:rest-service (>=5.0.1, <=9.0.0-m3)
org.glassfish.main.admin:rest-service MAVEN version =5.0.1, =7.0.16, =6.2.5, =7.1.0-m1, =7.1.0-m1, =5.0.1, =5.0.1, =5.0.1, =9.0.0-m3 Source cves: CVE-2025-14340 Source advisory: SNYK:JAVA-ORGGLASSFISHMAINADMIN-15323111...
CVE-2024-39153
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/infodeal.php?mudi=del=news...
CVE-2024-39154
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/keyWorddeal.php?mudi=del=word...
CVE-2024-39158
idccms v1.35 was discovered to contain a Cross-Site Request Forgery CSRF via the component /admin/userSysdeal.php?mudi=infoSet...
EUVD-2025-202701
A Cross-Site Request Forgery CSRF in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page...
CVE-2025-65472
A Cross-Site Request Forgery CSRF in the /admin/admin.inc.php component of EasyImages 2.0 v2.8.6 and below allows attackers to escalate privileges to Administrator via user interaction with a malicious web page...
Cross-site Scripting (XSS)
novosga/novosga is vulnerable to Cross-site Scripting XSS. The vulnerability is due to improper sanitization of user-supplied input in the logoNavbar/logoLogin parameters within the /admin component’s SVG File Handler, which allows an attacker to inject and execute arbitrary web scripts remotely...
CVE-2025-63298
A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/managewebsite.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of...
EUVD-2006-6402
Malware in sbrugna...
EUVD-2006-6403
Malware in sbrugna...
EUVD-2006-6149
Malware in sbrugna...
EUVD-2018-8078
Malware in sbrugna...
EUVD-2020-19192
Malware in sbrugna...
EUVD-2024-35362
Malicious code in bioql PyPI...
EUVD-2024-36155
Malicious code in bioql PyPI...
EUVD-2023-34667
Malicious code in bioql PyPI...
EUVD-2021-33134
Malicious code in bioql PyPI...