1184 matches found
EUVD-2022-51430
Malicious code in bioql PyPI...
EUVD-2024-51293
Malicious code in bioql PyPI...
EUVD-2024-16185
Malicious code in bioql PyPI...
EUVD-2022-32493
Malicious code in bioql PyPI...
EUVD-2024-44493
Malicious code in bioql PyPI...
Library Management System 安全漏洞
Library Management System is a library management system with QR code for attendance and automatic generation of library cards by King Albaracin Individual Developer. A security vulnerability exists in Library Management System, which is a result of cross-site scripting due to an incorrect...
CVE-2025-9743
A security flaw has been discovered in code-projects Human Resource Integrated System 1.0. Impacted is an unknown function of the file loginattendance2.php. Performing manipulation of the argument employeeid/date results in sql injection. The attack can be initiated remotely. The exploit has been...
Code-Projects Human Resource Integrated System 安全漏洞
Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter employeeid/date in the file loginattendance2.php. A...
WebITR 访问控制错误漏洞
WebITR is a poor attendance system from WebITR Corporation of Taiwan, China. WebITR suffers from an access control error vulnerability that stems from a lack of authentication, which could allow an unauthenticated remote attacker to log in to the system as an arbitrary user...
WebITR 安全漏洞
WebITR is a poor attendance system from WebITR Corporation of Taiwan, China. A security vulnerability exists in WebITR that stems from vulnerability to absolute path traversal attacks, which could lead to a remote attacker downloading arbitrary system files...
WebITR SQL注入漏洞
WebITR is a poor attendance system from WebITR Corporation of Taiwan, China. WebITR suffers from a SQL injection vulnerability that stems from susceptibility to SQL injection attacks and could lead to the execution of arbitrary SQL commands by an unauthenticated remote attacker...
Connect with the security community at Microsoft Ignite 2025
In today’s AI-powered world, security professionals are facing unprecedented challenges—and opportunities. As generative AI reshapes the digital landscape, the need for robust, intelligent, and adaptive security strategies has never been more urgent. At Microsoft Ignite 2025, we will showcase...
Connect with the security community at Microsoft Ignite 2025
In today’s AI-powered world, security professionals are facing unprecedented challenges—and opportunities. As generative AI reshapes the digital landscape, the need for robust, intelligent, and adaptive security strategies has never been more urgent. At Microsoft Ignite 2025, we will showcase...
WordPress All in One Time Clock Lite plugin cross-site scripting vulnerability
WordPress All in One Time Clock Lite plugin is a plugin for tracking employee's working hours and supports employee/volunteer/contractor attendance recording and report generation. The WordPress All in One Time Clock Lite plugin suffers from a cross-site scripting vulnerability that stems from th...
CVE-2023-41521
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createSessionTerm.php via the id, termId, and sessionName parameters...
CVE-2023-41524
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the username parameter at index.php...
CVE-2023-41523
Student Attendance Management System v1 was discovered to contain a SQL injection vulnerability via the emailAddress parameter at createClassTeacher.php...
CVE-2023-41520
Student Attendance Management System v1 was discovered to contain multiple SQL injection vulnerabilities in createClassArms.php via the classId and classArmName parameters...
