CVE-2025-10100 SourceCodester Simple Forum Discussion System admin_class.php sql injection

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

CVE-2025-10033

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

CVE-2025-10068 itsourcecode Online Discussion Forum add_views.php sql injection

A flaw has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin/adminforum/addviews.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may...

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum of itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which originates from a SQL injection attack due to a misuse of the parameter ID in the file /admin/adminforum/addviews.ph...

CVE-2025-10033

A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...

CVE-2025-10033

CVE-2025-10033 affects itsourcecode Online Discussion Forum 1.0. The vulnerability is a SQL injection in the /admin file caused by manipulation of the Username parameter, exploitable remotely, with public disclosure. Multiple sources confirm the issue and provide varying CVSS perspectives; the NV...

itsourcecode Online Discussion Forum SQL注入漏洞

itsourcecode Online Discussion Forum is an online forum for itsourcecode open source. A SQL injection vulnerability exists in itsourcecode Online Discussion Forum version 1.0, which is caused by an incorrect manipulation of the parameter Username resulting in a SQL injection attack...

MAL-2025-44027 Malicious code in discussion-practical-organization (npm)

The package discussion-practical-organization was found to contain malicious code...

Malicious code in discussion-practical-organization (npm)

The package discussion-practical-organization was found to contain malicious code...

Linux Distros Unpatched Vulnerability : CVE-2013-7233

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site request forgery CSRF vulnerability in the retrospam component in wp-admin/options- discussion.php in WordPress 2.0.11 and earlier allows remote...

MAL-2025-17980 Malicious code in dasnoo-discussion (npm)

The package dasnoo-discussion was found to contain malicious code...

Malicious code in dasnoo-discussion (npm)

The package dasnoo-discussion was found to contain malicious code...

OpenBao Userpass and LDAP User Lockout Bypass

Impact Attackers could bypass the automatic user lockout mechanisms in the OpenBao Userpass or LDAP auth systems. This was caused by different aliasing between pre-flight and full login request user entity alias attributions. Patches OpenBao v2.3.2 will patch this issue. Workarounds Existing user...

CVE-2025-50130

creationtimestamp| type| source ---|---|--- 2025-07-08 14:05:13+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114817991499817295...

CVE-2025-53532

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauthorized user to create discussions on any repository where giscus is installed. This affects the server-side part of giscus, which is provided via http://giscus.app or your own...

CVE-2025-53532

CVE-2025-53532 affects giscus server-side API, allowing an unauthorized user to create discussions in any repository where giscus is installed. Impact is partial for integrity with no confidentiality/availability impact stated; CVSS v3.1 base score 5.3 (Network attack vector, Low attack complexit...

CVE-2025-53532 giscus allows unauthorized discussion creation

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauthorized user to create discussions on any repository where giscus is installed. This affects the server-side part of giscus, which is provided via http://giscus.app or your own...

CVE-2025-53532 giscus allows unauthorized discussion creation

giscus is a commenting system powered by GitHub Discussions. A bug in giscus' discussions creation API allowed an unauthorized user to create discussions on any repository where giscus is installed. This affects the server-side part of giscus, which is provided via http://giscus.app or your own...

CVE-2025-53104 gluestack-ui Command Injection Vulnerability via discussion-to-slack GitHub Action Workflow

gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS NativeWind. Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields title, body, etc. were directly...

CVE-2025-53104 gluestack-ui Command Injection Vulnerability via discussion-to-slack GitHub Action Workflow

gluestack-ui is a library of copy-pasteable components & patterns crafted with Tailwind CSS NativeWind. Prior to commit e6b4271, a command injection vulnerability was discovered in the discussion-to-slack.yml GitHub Actions workflow. Untrusted discussion fields title, body, etc. were directly...