EUVD-2011-0337

Malware in sbrugna...

EUVD-2011-3350

Malware in sbrugna...

EUVD-2025-30399

Malicious code in bioql PyPI...

PT-2025-40523

Name of the Vulnerable Software and Affected Versions MetInfo CMS version 8.0 Description A stored Cross-Site Scripting XSS issue exists in the image management module of the software. The vulnerability is located in the appsystemimgadminimg admin.class.php component. Attackers can upload malicio...

CVE-2025-60454

A stored Cross-Site Scripting XSS vulnerability has been discovered in MetInfo CMS version 8.0. The vulnerability exists in the image management module, specifically in the app\system\img\admin\imgadmin.class.php component. The vulnerability allows attackers to upload malicious SVG files containi...

PT-2025-39640

Name of the Vulnerable Software and Affected Versions kalcaddle kodbox versions through 1.61.09 Description A security issue exists in kalcaddle kodbox versions through 1.61.09 related to path traversal. The fileOut function within the app/controller/explorer/index.class.php file is affected...

CVE-2025-10782

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-9788

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/adminclass.php. Executing manipulation of the argument idno can lead to sql injection. The attack can be launched remotely. Th...

CVE-2025-9788

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/adminclass.php. Executing manipulation of the argument idno can lead to sql injection. The attack can be launched remotely. Th...

CVE-2025-9788 SourceCodester/Campcodes School Log Management System admin_class.php sql injection

A vulnerability was determined in SourceCodester/Campcodes School Log Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/adminclass.php. Executing manipulation of the argument idno can lead to sql injection. The attack can be launched remotely. Th...

CampCodes School Log Management System 安全漏洞

CampCodes School Log Management System is a school log management system from CampCodes Philippines. A security vulnerability exists in CampCodes School Log Management System version 1.0, which is caused by a SQL injection due to incorrect manipulation of parameter idno in file...

Linux Distros Unpatched Vulnerability : CVE-2018-14017

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The rbinjavaannotationnew function in shlr/java/class.c in radare2 2.7.0 allows remote attackers to cause a denial of service heap-based buffer over-read and...

Malicious code in route-promise-class-file-encode (npm)

The package route-promise-class-file-encode was found to contain malicious code...

MAL-2025-32476 Malicious code in route-promise-class-file-encode (npm)

The package route-promise-class-file-encode was found to contain malicious code...

CampCodes Online Movie Theater Seat Reservation 代码问题漏洞

CampCodes Online Movie Theater Seat Reservation is an online theater seat reservation system from CampCodes Philippines. A code issue vulnerability exists in CampCodes Online Movie Theater Seat Reservation version 1.0, which stems from an unrestricted upload due to incorrect manipulation of the...

CVE-2023-42323

Cross Site Request Forgery CSRF vulnerability in DouHaocms v.3.3 allows a remote attacker to execute arbitrary code via the adminAction.class.php file...

CVE-2021-27312

Server Side Request Forgery SSRF vulnerability in Gleez Cms 1.2.0, allows remote attackers to execute arbitrary code and obtain sensitive information via modules/gleez/classes/request.php...

CVE-2019-16642

App\Mobile\Controller\ZhuantiController.class.php in TuziCMS 2.0.6 has SQL injection via the index.php/Mobile/Zhuanti/group?id= substring...

CVE-2002-1990

Resin 2.0.5 through 2.1.2 allows remote attackers to reveal physical path information via a URL request for the example Java class file HelloServlet...

SourceCodester Music Class Enrollment System 安全漏洞

SourceCodester Music Class Enrollment System is an open source music class enrollment system from SourceCodester. A security vulnerability exists in SourceCodester Music Class Enrollment System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter ID in...