CVE-2024-39250

CVE-2024-39250 PoC nuclei 模板 Efrotech's http://www.efrotech.com/ TimeTrax https://etimetrax.com/ 是一款人力资源考勤跟踪程序，我发现了一个未认证的SQL注入漏洞。该攻击向量易于执行，所以我创建了一个nuclei模板。...

EUVD-2025-1745

Malicious code in bioql PyPI...

EUVD-2024-51263

Malicious code in bioql PyPI...

EUVD-2024-51191

Malicious code in bioql PyPI...

EUVD-2024-51204

Malicious code in bioql PyPI...

EUVD-2024-51210

Malicious code in bioql PyPI...

EUVD-2024-51179

Malicious code in bioql PyPI...

EUVD-2024-51107

Malicious code in bioql PyPI...

EUVD-2024-51178

Malicious code in bioql PyPI...

EUVD-2024-50909

Malicious code in bioql PyPI...

EUVD-2024-51293

Malicious code in bioql PyPI...

EUVD-2025-2063

Malicious code in bioql PyPI...

WordPress All in One Time Clock Lite plugin cross-site scripting vulnerability

WordPress All in One Time Clock Lite plugin is a plugin for tracking employee's working hours and supports employee/volunteer/contractor attendance recording and report generation. The WordPress All in One Time Clock Lite plugin suffers from a cross-site scripting vulnerability that stems from th...

CVE-2025-0536

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/editaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely. The...

CVE-2024-12898

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/facultyaction.php. The manipulation of the argument facultycourseid leads to sql injection. The attack can be initiate...

CVE-2024-13037

A vulnerability was found in 1000 Projects Attendance Tracking Management System 1.0. It has been classified as critical. Affected is the function attendancereport of the file /admin/report.php. The manipulation of the argument courseid leads to sql injection. It is possible to launch the attack...

CVE-2024-13005

A vulnerability classified as critical was found in 1000 Projects Attendance Tracking Management System 1.0. This vulnerability affects unknown code of the file /admin/attendanceaction.php. The manipulation of the argument attendanceid leads to sql injection. The attack can be initiated remotely...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument courseid leads to sql injection. It is possible to initiate the attack remotely. Th...

CVE-2025-1189

CVE-2025-1189 affects 1000 Projects Attendance Tracking Management System v1.0. A SQL injection vulnerability exists in the /admin/chart1.php page via the course_id parameter, allowing remote exploitation as described in multiple sources. Exploitation details beyond the basic vector are not provi...