33 matches found
PT-2026-105828
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate user of the file litellm/proxy/auth/login utils.py of the component PROXY ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be...
PT-2026-89694
A security flaw has been discovered in BerriAI litellm up to 1.82.2. This impacts the function authenticate user of the file litellm/proxy/auth/login utils.py of the component PROXY ADMIN database API Key Generator. Performing a manipulation results in session expiration. The attack may be...
Ella Core 安全漏洞
Ella Core is an open-source solution developed by Ella Networks for use in private networks as a 5G core network solution. Versions of Ella Core prior to 1.7.0 contained security vulnerabilities. These vulnerabilities stemmed from the NetworkManager role being granted backup and restore...
CVE-2026-27461
Pimcore is an Open Source Data & Experience Management Platform. In versions up to and including 11.5.14.1 and 12.3.2, the filter query parameter in the dependency listing endpoints is JSON-decoded and the value field is concatenated directly into RLIKE clauses without sanitization or parameteriz...
GHSA-C5GQ-4H56-4MMX FUXA Unauthenticated Exposure of Plaintext Database Credentials
Description An information disclosure vulnerability in FUXA allows an unauthenticated, remote attacker to retrieve sensitive administrative database credentials. This affects FUXA through version 1.2.9. This issue has been patched in FUXA version 1.2.10. Impact This affects all deployments,...
CVE-2025-64174
Magento-lts is a long-term support alternative to Magento Community Edition CE. Versions 20.15.0 and below are affected by a stored Cross-Site Scripting XSS vulnerability that could be abused by an admin with direct database access or the admin notification feed source to inject malicious scripts...
EUVD-2017-15081
Malware in sbrugna...
EUVD-2025-31158
Malicious code in bioql PyPI...
The vulnerability of the microprogramming-based switching software of Zenitel ICX500 and ICX510 arises from the lack of protective measures for the SQL query structure, allowing attackers to gain unauthorized access to the Billing Admin database.
The vulnerability of the microprogramming-based switching software of Zenitel ICX500 and ICX510 lies in the lack of protective measures for the SQL query structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the Billing Admin database...
CVE-2025-59816
This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...
CVE-2025-59816 Authenticated Union based SQL-injection in the search input field
This vulnerability allows attackers to directly query the underlying database, potentially retrieving all data stored in the Billing Admin database, including user credentials. User passwords are stored in plaintext, significantly increasing the severity of this issue...
CVE-2025-59816
CVE-2025-59816 affects Zenitel ICX500/ICX510 Billing Admin endpoint. Affects the Billing Admin component where attackers can query the underlying database directly, potentially retrieving all data including plaintext passwords. Root cause: database query exposure via the Billing Admin interface. ...
CVE-2025-59814
CVE-2025-59814 affects Zenitel ICX500/ICX510 Gateway Billing Admin endpoint, enabling unauthorized access to read the Billing Admin database. Multiple connected sources corroborate a vulnerability in the Billing Admin area, with impact described as reading the entire database contents. The NCSC a...
CVE-2024-45894
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
WordPress Pods plugin < 3.2.8.2 - Admin+ SQL Injection vulnerability
Admin+ SQL Injection vulnerability discovered by Dmitrii Ignatyev in WordPress Plugin Pods versions 3.2.8.2...
PT-2025-5983
Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9 Description A critical issue has been discovered, affecting the deletedir action/restore action function in the lib/admin/database admin.php library. This leads to path traversal and can be initiated remotely. The issue...
PT-2025-4119
Name of the Vulnerable Software and Affected Versions CmsEasy version 7.7.7.9 Description A critical vulnerability was found in CmsEasy, affecting the function backAll action in the library lib/admin/database admin.php of the file "/index.php?case=database&act=backAll&admin dir=admin&site=default...
CVE-2024-45894
BlueCMS 1.6 suffers from Arbitrary File Deletion via the filename parameter in an /admin/database.php?act=del request...
