2713 matches found
CVE-2025-48726
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the...
CVE-2025-52858
CVE-2025-52858 is a NULL pointer dereference affecting QNAP QTS and QuTS hero. The vulnerability could allow a remote attacker with an administrator account to trigger a denial-of-service (DoS). Public details confirm affected products and root cause as a NULL pointer dereference, with exploitati...
CVE-2025-11118
A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CVE-2025-11118
The CVE-2025-11118 entry affects CodeAstro Student Grading System 1.0. A flaw in handling the staffId parameter in /adminLogin.php allows SQL injection, with remote exploitation and public proof-of-concept exploits. Impact is indicated as high in multiple sources, including NVD metrics; exploitat...
CVE-2025-11118 CodeAstro Student Grading System adminLogin.php sql injection
A vulnerability was identified in CodeAstro Student Grading System 1.0. This issue affects some unknown processing of the file /adminLogin.php. Such manipulation of the argument staffId leads to sql injection. The attack may be performed from remote. The exploit is publicly available and might be...
CodeAstro Student Grading System SQL注入漏洞
CodeAstro Student Grading System is a student grading system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Student Grading System version 1.0, which stems from an incorrect manipulation of the parameter staffId in the file /adminLogin.php, which could lead to a SQL injection...
PT-2025-39789
Name of the Vulnerable Software and Affected Versions CodeAstro Student Grading System version 1.0 Description A flaw exists in the processing of the /adminLogin.php file within CodeAstro Student Grading System. Manipulation of the staffId argument can lead to a SQL injection. This issue is...
GHSA-Q82V-H4RQ-5C86 Rancher update on users can deny the service to the admin
Impact A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. Specifically: - Username takeover: A user wit...
Rancher update on users can deny the service to the admin
Impact A vulnerability has been identified within Rancher Manager where a missing server-side validation on the .username field in Rancher can allow users with update permissions on other User resources to cause denial of access for targeted accounts. Specifically: - Username takeover: A user wit...
Hostel Management System login.php File SQL Injection Vulnerability
Hostel Management System is a hostel management system. Hostel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter email in the file /justines/admin/login.php. An attacker can use this...
CVE-2025-10796
A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the file /justines/admin/login.php. The manipulation of the argument email results in sql injection. The attack can be launched remotely. The exploit has been made public and could ...
CVE-2025-10834
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...
CVE-2025-10834
A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument useremail leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available a...
itsourcecode Open Source Job Portal SQL注入漏洞
itsourcecode Open Source Job Portal is itsourcecode open source a business portal site . A SQL injection vulnerability exists in itsourcecode Open Source Job Portal version 1.0, which originates from a misuse of the parameter useremail in the file /jobportal/admin/login.php, which could lead to a...
PT-2025-39109
Name of the Vulnerable Software and Affected Versions itsourcecode Open Source Job Portal version 1.0 Description A flaw exists in itsourcecode Open Source Job Portal version 1.0 that allows for SQL injection. Manipulation of the user email parameter in the file /jobportal/admin/login.php can...
CVE-2025-5948 Service Finder Bookings <= 6.0 - Unauthenticated Privilege Escalation via claim_business
The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user's identity prior to claiming a business when using the claimbusiness AJAX action. This...
CVE-2025-57119
An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function...
Online Library Management System adminlogin.php Component Elevation of Privilege Vulnerability
Online Library Management System is an online library management system. An elevation of privilege vulnerability exists in the Online Library Management System, which is caused by a flaw in the adminlogin.php component and the Login function, and can be exploited by an attacker to cause an...