38935 matches found
The Man behind the Sound: Demystifying Audio Private Attribute Profiling Via Multimodal Large Language Model Agents
Our research uncovers a novel privacy risk associated with multimodal large language models MLLMs: the ability to infer sensitive personal attributes from audio data -- a technique we term audio private attribute profiling. This capability poses a significant threat, as audio can be covertly...
PT-2025-29471 · Code Projects · Wedding Reservation
Name of the Vulnerable Software and Affected Versions: code-projects Wedding Reservation version 1.0 Description: A critical issue exists in code-projects Wedding Reservation 1.0, affecting an unknown part of the file /global.php. The manipulation of the argument lu leads to SQL injection, allowi...
REAL-IoT: Characterizing GNN Intrusion Detection Robustness under Practical Adversarial Attack
Graph Neural Network GNN-based network intrusion detection systems NIDS are often evaluated on single datasets, limiting their ability to generalize under distribution drift. Furthermore, their adversarial robustness is typically assessed using synthetic perturbations that lack realism. This...
PT-2025-29470 · Code Projects · Electricity Billing System
Name of the Vulnerable Software and Affected Versions: code-projects Electricity Billing System version 1.0 Description: A critical issue exists in code-projects Electricity Billing System version 1.0. The vulnerability is due to a SQL injection flaw within the /user/change password.php file...
PT-2025-29502 · Yijiusmile · Kkfileviewofficeedit
Name of the Vulnerable Software and Affected Versions: YiJiuSmile kkFileViewOfficeEdit affected versions not specified Description: A critical issue exists in the onlinePreview function of the /onlinePreview file. Manipulation of the url argument can lead to path traversal, allowing for remote...
PT-2025-29455 · Phpgurukul · Phpgurukul Dairy Farm Shop Management System
Name of the Vulnerable Software and Affected Versions: PHPGurukul Dairy Farm Shop Management System version 1.3 Description: A critical vulnerability exists in PHPGurukul Dairy Farm Shop Management System version 1.3 due to a SQL injection issue in the /invoice.php file. The del argument can be...
CVE-2025-7453
A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded...
CVE-2025-6851
The Broken Link Notifier plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.3.0 via the ajaxblinks function which ultimately calls the checkurlstatuscode function. This makes it possible for unauthenticated attackers to make web requests to...
PT-2025-29383 · Campcodes · Campcodes Sales/Inventory System
Name of the Vulnerable Software and Affected Versions: Campcodes Sales and Inventory System version 1.0 Description: A critical vulnerability exists in Campcodes Sales and Inventory System that allows for unrestricted file upload. The vulnerability affects unknown code within the /pages/product...
PT-2025-29364 · Jinher Oa · Jinher Oa
Name of the Vulnerable Software and Affected Versions: Jinher OA version 1.0 Description: A problematic issue exists in Jinher OA version 1.0 related to an unknown functionality within the file /c6/Jhsoft.Web.message/ToolBar/DelTemp.aspx. This issue allows for XML External Entity XXE reference...
PT-2025-29439 · Tenda · Tenda Ac500
Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: A critical vulnerability exists in the Tenda AC500. The vulnerability is located in the formSetAPCfg function of the /goform/setWtpData file. Manipulation of the radio 2g 1 argument leads to a...
AdvGrasp: Adversarial Attacks on Robotic Grasping from a Physical Perspective
Adversarial attacks on robotic grasping provide valuable insights into evaluating and improving the robustness of these systems. Unlike studies that focus solely on neural network predictions while overlooking the physical principles of grasping, this paper introduces AdvGrasp, a framework for...
PT-2025-29386 · Code Projects · Online Appointment Booking System
Name of the Vulnerable Software and Affected Versions: code-projects Online Appointment Booking System version 1.0 Description: A critical issue exists in code-projects Online Appointment Booking System. The vulnerability is located in the /get town.php file and involves SQL injection through...
LaSM: Layer-Wise Scaling Mechanism for Defending Pop-Up Attack on GUI Agents
Graphical user interface GUI agents built on multimodal large language models MLLMs have recently demonstrated strong decision-making abilities in screen-based interaction tasks. However, they remain highly vulnerable to pop-up-based environmental injection attacks, where malicious visual element...
CVE-2025-53626
pdfme is a TypeScript-based PDF generator and React-based UI. The expression evaluation feature in pdfme 5.2.0 to 5.4.0 contains critical vulnerabilities allowing sandbox escape leading to XSS and prototype pollution attacks. This vulnerability is fixed in 5.4.1...
CVE-2025-7483 PHPGurukul Vehicle Parking Management System forgot-password.php sql injection
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13. It has been rated as critical. This issue affects some unknown processing of the file /users/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. Th...
CVE-2025-7474 code-projects Job Diary search.php sql injection
A vulnerability was found in code-projects Job Diary 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclose...
PT-2025-29329 · Unknown · Modern Bag
Name of the Vulnerable Software and Affected Versions: Modern Bag version 1.0 Description: A critical issue exists in Modern Bag 1.0, specifically within the /admin/category-list.php file. Manipulation of the idCate argument can lead to a SQL injection. This allows for remote attacks. The exploit...
PT-2025-29398 · D Link · Dir-818Lw
Name of the Vulnerable Software and Affected Versions: D-Link DIR-818LW versions up to 20191215 Description: A critical issue exists in D-Link DIR-818LW. The vulnerability is located within the System Time Page component. Manipulation of the NTP Server argument can lead to os command injection,...
