CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

CVE-2025-56697

A Stored Cross-Site Scripting XSS vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php...

Computer Laboratory System File Upload Vulnerability

Computer Laboratory System is a computer laboratory system. A file upload vulnerability exists in Computer Laboratory System that stems from the file upload feature not restricting file types, no details of the vulnerability are available at this time...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

“A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study

As if ransomware wasn’t enough of a security problem for the sector, educational institutions also need to worry about their own students, a recent study shows. Last week, the UK Information Commissioner’s Office ICO published a report about the "insider threat of students". Here are a few key...

MAL-2025-47322 Malicious code in kinyongi (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d732e3667e35428369a2536b0d3d1ba6f5afbedd13b166bd769316c2ac8c750c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transform-remove-console (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 34def0802df34551bb9471a5204d7188e0b1d20db136c605b706bd98166df2d3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in xo-tray-height (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77b86db993d991491d3db2d143bb8031f63d03acf7e372dcf716c51987f0d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47364 Malicious code in xo-tray-height (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e77b86db993d991491d3db2d143bb8031f63d03acf7e372dcf716c51987f0d87 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @fastifyv4/fastifyv4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7083057255001380bdd51cad61f09f708b1f711acee9a0f9c83f8ad4a6388201 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-47299 Malicious code in conditionsjs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0435e7d1dfd8568f73471eb3a1fe65cbe2e5891606cc0f64ace4156091c56cb7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in oci-plugin-compliance (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 762cb43037a71931178ccf3452552b84331b30ada3f192f5d979eed5b372da3f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in working_tests (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49c21a63c0a80ed6817e5b19617e29f869d463d77843ef462ec7f9f177abe0aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @rxnt/phr-client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 947f7c203c3177bd72a083fb5900eea77703e68cea6fccaf8fc27d871dfa65ef Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...

CVE-2025-56697

A Stored Cross-Site Scripting XSS vulnerability was discovered in the /users/adminpanel/admin/home.php?page=feedbacks file of Kashipara Computer Base Test v1.0. Attackers can inject malicious scripts via the smyFeedbacks POST parameter in /users/home.php...

Kashipara Computer Base Test project in PHP 安全漏洞

Kashipara Computer Base Test project in PHP is a web application from Kashipara Inc. A security vulnerability exists in Kashipara Computer Base Test project in PHP v1.0, which stems from insufficient cleanup of the parameter smyFeedbacks in the file /users/adminpanel/admin/home.php, which could...

Code-Projects Computer Laboratory System 安全漏洞

Computer Laboratory System is a computer laboratory system. A file upload vulnerability exists in Computer Laboratory System that stems from the file upload feature not restricting file types, no details of the vulnerability are available at this time...

CVE-2025-56295

code-projects Computer Laboratory System 1.0 has a file upload vulnerability. Staff can upload malicious files by uploading PHP backdoor files when modifying personal avatar information and use web shell connection tools to obtain server permissions...