CVE-2025-9473

SourceCodester Online Bank Management System 1.0 has a SQL injection in /feedback.php triggered by manipulating the msg parameter. The vulnerability is remote and has public exploit discussion. Multiple sources describe the issue and its impact on confidentiality, integrity, and availability as h...

CVE-2025-9473 SourceCodester Online Bank Management System feedback.php sql injection

A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly an...

PT-2025-34741

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Bank Management System version 1.0 Description: A security issue exists in SourceCodester Online Bank Management System 1.0. The vulnerability is located in the /feedback.php file, within an unknown function. Manipulatio...

SourceCodester Online Bank Management System Security Vulnerabilities

SourceCodester Online Bank Management System is a SourceCodester open source online bank management system. A security vulnerability exists in SourceCodester Online Bank Management System version 1.0, which is caused by a SQL injection attack due to incorrect manipulation of the parameter msg in...

Training Language Model Agents to Find Vulnerabilities with CTF-Dojo

Large language models LLMs have demonstrated exceptional capabilities when trained within executable runtime environments, notably excelling at software engineering tasks through verified feedback loops. Yet, scalable and generalizable execution-grounded environments remain scarce, limiting...

ROS-20250819-01

Moodle virtual learning environment vulnerability related to IDOR issue in Feedback report. Exploitation The vulnerability could allow an attacker acting remotely to gain unauthorized access to features that would otherwise be restricted. functions that would otherwise be limited to Vulnerability...

MAL-2025-26201 Malicious code in merchant_feedback-client (npm)

The package merchantfeedback-client was found to contain malicious code...

MAL-2025-7742 Malicious code in @cseofeedback/feedback-lite (npm)

The package @cseofeedback/feedback-lite was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-7968 Malicious code in @frozen-ui/feedback (npm)

The package @frozen-ui/feedback was found to contain malicious code...

MAL-2025-9290 Malicious code in @sellerly/slr-feedback-form (npm)

The package @sellerly/slr-feedback-form was found to contain malicious code...

Malicious code in merchant_feedback-client (npm)

The package merchantfeedback-client was found to contain malicious code...

Malicious code in @sellerly/slr-feedback-form (npm)

The package @sellerly/slr-feedback-form was found to contain malicious code...

Malicious code in @cseofeedback/feedback-lite (npm)

The package @cseofeedback/feedback-lite was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in @frozen-ui/feedback (npm)

The package @frozen-ui/feedback was found to contain malicious code...

BIT-MOODLE-2025-26526 Feedback response viewing and deletions did not respect Separate Groups mode

Separate Groups mode restrictions were not factored into permission checks before allowing viewing or deletion of responses in Feedback activities...

CVE-2025-46414

CVE-2025-46414 affects EG4 Electronics EG4 Inverters. The vulnerability is an unlimited number of PIN-entry attempts for a registered product, enabling brute-force access if an attacker has a valid device serial number. The API provides clear feedback on correct PINs. A server-side patch was issu...

PT-2025-32370 · Unknown · Registered Product

Name of the Vulnerable Software and Affected Versions: versions prior to April 6, 2025 Description: The product does not limit the number of attempts for entering the correct PIN for a registered product, potentially allowing an attacker to gain unauthorized access using brute-force methods if th...

Enhancing Software Vulnerability Detection through Adaptive Test Input Generation Using Genetic Algorithm

Software vulnerabilities continue to undermine the reliability and security of modern systems, particularly as software complexity outpaces the capabilities of traditional detection methods. This study introduces a genetic algorithm-based method for test input generation that innovatively...

BIT-MOODLE-2024-43438 Moodle: idor in feedback non-respondents report allows messaging arbitrary site users

A flaw was found in Feedback. Bulk messaging in the activity's non-respondents report did not verify message recipients belonging to the set of users returned by the report...

aflnet

It is an offensive tool for network protocols. AFLNet is a greybox fuzzer for protocol implementations. It takes a mutational approach and uses state-feedback, in addition to code-coverage feedback, to guide the fuzzing process. AFLNet is seeded with a corpus of recorded message exchanges between...