CVE-2025-3041

CVE-2025-3041 affects Project Worlds Online Time Table Generator 1.0. A vulnerability in the /admin/updatestudent.php endpoint allows unrestricted upload via the pic parameter. Exploitation can be remote and the exploit has been disclosed publicly. Connected sources indicate no public details on ...

CVE-2025-3040

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addstudent.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotel...

An AI Image Generator’s Exposed Database Reveals What People Really Used It For

An unsecured database used by a generative AI app revealed prompts and tens of thousands of explicit images—some of which are likely illegal. The company deleted its websites after WIRED reached out...

CVE-2025-3040: Unrestricted Upload of File with Dangerous Type

A vulnerability was found in Project Worlds Online Time Table Generator 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/addstudent.php. The manipulation of the argument pic leads to unrestricted upload. The attack may be launched remotel...

Projectworlds Online Time Table Generator 安全漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A security vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from the fact that incorrect manipulation of the parameter pic can lead to unlimited uploads...

PT-2025-14009 · Unknown · Project Worlds Online Time Table Generator

Name of the Vulnerable Software and Affected Versions: Project Worlds Online Time Table Generator version 1.0 Description: A critical vulnerability has been found in Project Worlds Online Time Table Generator. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of...

Projectworlds Online Time Table Generator 安全漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. A security vulnerability exists in Projectworlds Online Time Table Generator version 1.0, which stems from the fact that incorrect manipulation of the parameter pic can lead to unlimited uploads...

CVE-2025-22637

Cross-Site Request Forgery CSRF vulnerability in verkkovaraani Print PDF Generator and Publisher nopeamedia allows Cross Site Request Forgery.This issue affects Print PDF Generator and Publisher: from n/a through = 1.2.0...

CVE-2025-30854

Cross-Site Request Forgery CSRF vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Cross Site Request Forgery.This issue affects Serial Codes Generator and Validator with WooCommerce Support: from n/a through = 2.7....

@excelltechkylc/code-generator (>=1.0.0, <=1.0.1), @excelltechkylc/compiler (>=1.0.0, <=1.0.1) +5 more potentially affected by CVE-2024-38985 via depath (1.0.6)

depath NPM version 1.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on depath and may be impacted: - @excelltechkylc/code-generator =1.0.0, =1.0.0, =1.0.6, =1.0.6, =1.0.0, =1.0.4 - vitis-lowcode-renderer 1.0.0 - vitis-lowcode-simulator-renderer 1.0.0...

Malicious code in paypal-url-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee5e504dfd1a8b2c6e07c8e238a743be5b370d288b12b38eb37e16d82051ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2890 Malicious code in paypal-url-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eee5e504dfd1a8b2c6e07c8e238a743be5b370d288b12b38eb37e16d82051ae9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in transactions-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware add05b58536e55e9dfed5253cce6ec918d905362b9e9d30531d1a20dd39aca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2791 Malicious code in transactions-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware add05b58536e55e9dfed5253cce6ec918d905362b9e9d30531d1a20dd39aca1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in transactions-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in toc-generator-markdown

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in toc-generator-markdown (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78aba0f665dc55e94b5a5dc3b90ce2d371080c1acda0c4565429afcfb9ba4fe6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dir-tree-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24acc439ef66f72887d3c3ea802bef5645428d0247a824fe61d4454840fdfa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-2754 Malicious code in dir-tree-generator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e24acc439ef66f72887d3c3ea802bef5645428d0247a824fe61d4454840fdfa1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in dir-tree-generator

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...