CVE-2026-72297

In the Linux kernel, the following vulnerability has been resolved: net: atm: reject out-of-range traffic classes in QoS validation Reject ATM traffic classes above ATMANYCLASS in checktp. SOATMQOS stores the supplied QoS after checkqos succeeds, so accepting larger values leaves invalid...

EUVD-2025-210537

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2025-67403

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2025-67403

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2025-67403: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester CASAP Automated Enrollment System 1.0 is vulnerable to SQL Injection in updateclass.php via the parameter classname...

CVE-2025-12650: Improper Neutralization of Input During Web Page Generation

The Simple post listing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'classname' parameter in the postlist shortcode in all versions up to, and including, 0.2. This is due to insufficient input sanitization and output escaping on user-supplied attributes. This makes i...

EUVD-2008-0612

Malware in sbrugna...

EUVD-2023-52752

Malicious code in bioql PyPI...

EUVD-2023-52756

Malicious code in bioql PyPI...

CVE-2025-10781

CVE-2025-10781 affects Campcodes Online Learning Management System 1.0. The vulnerability is in the file /admin/edit_class.php, where manipulation of the parameter named class_name enables a SQL injection. The description states the attack can be executed remotely and the exploit is publicly avai...

CVE-2025-10782: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Online Learning Management System 1.0. Affected is an unknown function of the file /admin/class.php. Performing manipulation of the argument classname results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-10781: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Online Learning Management System 1.0. This impacts an unknown function of the file /admin/editclass.php. Such manipulation of the argument classname leads to sql injection. The attack can be executed remotely. The exploit is publicly available and migh...

CVE-2025-5940: Improper Neutralization of Input During Web Page Generation

The Osom Blocks – Custom Post Type listing block plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘classname’ parameter in all versions up to, and including, 1.2.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

CVE-2024-50832

A SQL Injection vulnerability was found in /admin/editclass.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

CVE-2024-5371

A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submitenrollstudent.php. The manipulation of the argument classname leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-50824

A SQL Injection vulnerability was found in /admin/class.php in kashipara E-learning Management System Project 1.0 via the classname parameter...

CVE-2024-50824

The CVE-2024-50824 entry concerns Kashipara E-learning Management System Project 1.0, with a SQL Injection in /admin/class.php via the class_name parameter. Affected component is the server-side PHP script handling class_name in the admin interface. The vulnerability allows attackers to manipulat...

CVE-2024-41239

A Stored Cross Site Scripting XSS vulnerability was found in "/smsa/addclasssubmit.php" in Responsive School Management System v3.2.0, which allows remote attackers to execute arbitrary code via "classname" parameter field...

CVE-2024-5371

A vulnerability classified as problematic has been found in Kashipara College Management System 1.0. This affects an unknown part of the file submitenrollstudent.php. The manipulation of the argument classname leads to cross site scripting. It is possible to initiate the attack remotely. The...

CVE-2024-5370

A vulnerability was found in Kashipara College Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file submitenrollstaff.php. The manipulation of the argument classname leads to cross site scripting. The attack may be launched...