184 matches found
CVE-2025-15197
The CVE-2025-15197 entry concerns code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. The flaw is in the admin/editposts.php file, where manipulating the image parameter allows an unrestricted upload. This enables remote exploitation as indicated by the public exploit. Affect...
EUVD-2025-205630
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated...
CVE-2025-15197: Unrestricted Upload of File with Dangerous Type
A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vulnerability affects unknown code of the file /admin/editposts.php. Performing manipulation of the argument image results in unrestricted upload. The attack may be initiated...
PT-2025-53763
Name of the Vulnerable Software and Affected Versions code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description A security flaw exists in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. The issue involves unrestricted upload due to...
buzz-captions (1.1.0), hyfi-ml (0.2.0) +4 more potentially affected by CVE-2025-14929 via transformers (4.39.1)
transformers PYPI version 4.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - buzz-captions 1.1.0 - hyfi-ml 0.2.0 - integral-deid =0.1.0, =4.0.0rc6, =0.0.1, =2.2.8, =2.4.5 Source cves: CVE-2025-14929 Source...
CVE-2023-38913
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
EUVD-2023-42673
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2023-38913
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2023-38913
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2023-38913
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2023-38913
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
PT-2025-51317
Name of the Vulnerable Software and Affected Versions anirbandutta9 NEWS-BUZZ version 1.0 Description A SQL injection flaw exists in anirbandutta9 NEWS-BUZZ version 1.0. This allows a remote attacker to execute arbitrary code by using a crafted script. The vulnerability is due to insufficient inp...
CVE-2023-38913
The anirbandutta9 NEWS-BUZZ news management system (version v.1.0 ) is vulnerable to a SQL injection flaw. This vulnerability stems from insufficient input validation , which may allow a remote attacker to execute arbitrary code via a crafted script, potentially involving the script parameter. No...
NEWS-BUZZ security vulnerabilities
NEWS-BUZZ is a news management system by ANIRBAN DUTTA Individual Developer that allows users to publish and manage a variety of news content. A security vulnerability exists in NEWS-BUZZ version v.1.0, which stems from vulnerability to SQL injection attacks and may lead to the execution of...
CVE-2023-38913: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in anirbandutta9 NEWS-BUZZ v.1.0 allows a remote attacker to execute arbitrary code via a crafted script...
EUVD-2025-120028
Malicious code in buzz-invasion npm...
MAL-2025-140261 Malicious code in buzz-invasion (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61a7617eda9ffa84bbc251331724293f7dffc8f255e37b2f026a2ce00f4fb5f9 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2020-21810
Malware in sbrugna...