EUVD-2026-54518

Nexus Repository 3 was found to be vulnerable to stored cross-site scripting XSS. A user with the nexus:blobstores:create or nexus:blobstores:update permission could set a blob store name containing malicious script content, which would later execute in the browser of another user viewing system...

EUVD-2025-1759

Malicious code in bioql PyPI...

Citrix Virtual Apps and Desktops - Unable to create/update catalog in Hyper-V Environment

When admin tries to create or update machine catalog, there is an error message displayed in Studio. Error details: Failed to update the master image associated with the provisioning scheme because the configuration validating is not successful. If you check the details: StudioErrorId :...

CVE-2025-0562

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-0562

CVE-2025-0562 affects Codezips Gym Management System 1.0. A vulnerability in the file /dashboard/admin/health_status_entry.php allows manipulation of the usrid parameter, leading to SQL injection. The issue can be exploited remotely and, per sources, the exploit has been disclosed publicly. Remed...

CVE-2025-0562 Codezips Gym Management System health_status_entry.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

CVE-2025-0562 Codezips Gym Management System health_status_entry.php sql injection

A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/healthstatusentry.php. The manipulation of the argument usrid leads to sql injection. The attack may be initiated remotely. The explo...

PT-2025-3955 · Codezips · Codezips Gym Management System

Name of the Vulnerable Software and Affected Versions: Codezips Gym Management System version 1.0 Description: A critical issue affects the processing of the file /dashboard/admin/health status entry.php, where the manipulation of the usrid argument leads to SQL injection. The attack can be...

Codezips Gym Management System 注入漏洞

Codezips Gym Management System is an open source gym management system from Codezips. An injection vulnerability exists in Codezips Gym Management System version 1.0, which stems from the parameter usrid in the file /dashboard/admin/healthstatusentry.php that can lead to SQL injection...

ManageEngine ADAudit Plus Xnode Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ManageEngine ADAudit Plus Xnode Enumeration', 'Description' = %q This module exploits default admin credentials for the DataEngine Xnode server i...

Oxeye warns of SSRF Vulnerability in Owncast, SQL Injection Flaws in EaseProbe

By Waqas Owncase is a self-hosted live video streaming software, while EaseProbe is a lightweight and standalone health status checking tool. This is a post from HackRead.com Read the original post: Oxeye warns of SSRF Vulnerability in Owncast, SQL Injection Flaws in EaseProbe...

GTAB Software Tabit 信息泄露漏洞

GTAB Software Tabit is a full-featured program from GTAB Software for creating, playing and printing fingerstyle scores for guitar, bass or banjo. GTAB Software Tabit suffers from an information disclosure vulnerability that stems from several APIs on its web system displaying unauthorized...

Denial Of Service (DoS)

grpc-ts-health-check is vulnerable to denial of service DoS. The vulnerability exists as it exposes an API endpoint that may allow attackers to set the service's health status to failing...

ESX hardware status change however, the change is not reflected in OpsMgr.

The overall health status of the host can be updated in certain scenarios, but the hardware item health status is not correctly updated in OpsMgr. An important symptom is that the health state of the hardware item may be "Unknown" grey in VMware vSphere client...