7552 matches found
CVE-2025-9830
CVE-2025-9830 affects PHPGurukul Beauty Parlour Management System 1.1. The vulnerability is a SQL injection in the file /admin/add-customer-services.php, triggered by manipulating the sids[] parameter. It is exploitable remotely and publicly available exploits exist. Reported by multiple sources ...
CVE-2025-9830 PHPGurukul Beauty Parlour Management System add-customer-services.php sql injection
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-services.php. The manipulation of the argument sids results in sql injection. The attack can be executed remotely. The exploit has been released...
Palo Alto Networks, Zscaler and PagerDuty Hit in Salesforce Linked Data Breaches
Hackers exploited the Salesloft Drift app to steal OAuth tokens and access Salesforce data, exposing customer details at…...
PT-2025-35611
Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A security flaw exists in PHPGurukul Beauty Parlour Management System 1.1. The issue is related to SQL injection within an unknown function of the...
PHPGurukul Beauty Parlour Management System 安全漏洞
Beauty Parlour Management System is a software system for standardizing salon business processes and improving management efficiency. Beauty Parlour Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally entered SQL statements in t...
CVE-2025-9830: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/add-customer-services.php. The manipulation of the argument sids results in sql injection. The attack can be executed remotely. The exploit has been released...
CVE-2025-9118
A path traversal vulnerability in the NPM package installation process of Google Cloud Dataform allows a remote attacker to read and write files in other customers' repositories via a maliciously crafted package.json file...
Linux Distros Unpatched Vulnerability : CVE-2021-21443
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Agents are able to list customer user emails without required permissions in the bulk action screen. This issue affects: OTRS AG OTRS Community Edition: 6.0.x...
Linux Distros Unpatched Vulnerability : CVE-2017-16854
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Open Ticket Request System OTRS through 3.3.20, 4 through 4.0.26, 5 through 5.0.24, and 6 through 6.0.1, an attacker who is logged in as a customer can use t...
MAL-2025-41523 Malicious code in @twork-data-services/proxy-prime-api-v6-customer-account-lite-info (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41511 Malicious code in @twork-data-services/proxy-invest-v2-api-v2-broker-account-customer-info (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41510 Malicious code in @twork-data-services/proxy-invest-v2-api-v1-customer-margin-attributes (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41502 Malicious code in @twork-data-services/proxy-cms-customer-pay-tokens (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41500 Malicious code in @twork-data-services/prime-customer-products (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41496 Malicious code in @twork-data-services/customer-storage-api-v5-customer (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41495 Malicious code in @twork-data-services/customer-storage-api-v3-customer-timezone (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41494 Malicious code in @twork-data-services/customer-storage-api-v3-customer-attribute (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41493 Malicious code in @twork-data-services/customer-storage-api-v2-customer-email (npm)
--- -= Per source details. Do not edit below this line.=-...