CVE-2025-60318

SourceCodester Pet Grooming Management Software version 1.0 is vulnerable to Cross-Site Scripting (XSS) within the /admin/profile.php component. The root cause is the insufficient validation of the fname (First Name) and lname (Last Name) input fields. Successful exploitation allows an attacker t...

EUVD-2021-29213

Malicious code in bioql PyPI...

CVE-2022-28866

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...

Improper access control

Multiple Improper Access Control was discovered in Nokia AirFrame BMC Web GUI R18 Firmware v4.13.00. It does not properly validate requests for access to or editing of data and functionality in all endpoints under /settings/ and /api/settings/. By not verifying the permissions for access to...

CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...

CVE-2021-42235

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...

CVE-2021-42235: Improper Neutralization of Special Elements used in an SQL Command

SQL injection in osTicket before 1.14.8 and 1.15.4 login and password reset process allows attackers to access the osTicket administration profile functionality...