8874 matches found
PT-2025-47602
Name of the Vulnerable Software and Affected Versions Institute-of-Current-Students version 1.0 Description The software contains a time-based blind SQL injection issue in the ''mydetailsstudent.php'' endpoint. The myds GET parameter is not properly sanitized before use in SQL queries, potentiall...
CVE-2025-52410
CVE-2025-52410 affects Institute-of-Current-Students v1.0. The vulnerability is a time-based blind SQL injection in the mydetailsstudent.php endpoint, caused by insufficient sanitization of the GET parameter myds used in SQL queries. This leads to high-impact outcomes (confidentiality, integrity,...
EUVD-2025-198051
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...
CVE-2025-65093 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...
CVE-2025-65093 LibreNMS is vulnerable to SQL Injection (Boolean-Based Blind) in hostname parameter in ajax_output.php endpoint
LibreNMS is an auto-discovering PHP/MySQL/SNMP based network monitoring tool. Prior to version 25.11.0, a boolean-based blind SQL injection vulnerability was identified in the LibreNMS application at the /ajaxoutput.php endpoint. The hostname parameter is interpolated directly into an SQL query...
How Adversaries Exploit the Blind Spots in Your EASM Strategy
Internet-facing assets like domains, servers, or networked device endpoints are where attackers look first, probing their target’s infrastructure…...
Malicious code in blind-purple-python (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector be5c16558a076087c67c07733dd5d026ae9d399fad0f129b20f1455d41212350 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-117507
Malicious code in blind-purple-python npm...
EUVD-2025-77436
Malicious code in blindchimpanzee-smiletea npm...
EUVD-2025-77435
Malicious code in blindsnail-strongdev npm...
EUVD-2025-77437
Malicious code in blindchicken-appteadev npm...
EUVD-2025-82635
Malicious code in blindelk0xrequest npm...
EUVD-2025-82634
Malicious code in blindplatypus0xrequest npm...
MAL-2025-100010 Malicious code in blind_platypus_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 72a9ea09fef6ecb5bbfee20c77bb0651f49d97f8b5d39ff584a0fac1d4bd04b5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-100009 Malicious code in blind_elk_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 394a13799393de669977d5f3c698b78aa2535df48572ffcc638178cfcd30f5b6 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-82636
Malicious code in blindcockroach0xrequest npm...
EUVD-2025-71660
Malicious code in blindjunglefowlz3n npm...
EUVD-2025-65157
Malicious code in blindsailfishz3n npm...
Malicious code in blind_elephant_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6bcab644ee6d4efe7faa653c3779f7e8d93ea18fef8ff817963cf7c2aa001192 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...