PT-2025-34668 · Unknown · Phpgurukul Hospital Management System

Name of the Vulnerable Software and Affected Versions: phpgurukul Hospital Management System version 4.0 Description: The phpgurukul Hospital Management System is susceptible to SQL Injection via the username parameter in the index.php file. Recommendations: As a temporary workaround, sanitize th...

PT-2025-34666 · Foxcms · Foxcms

Name of the Vulnerable Software and Affected Versions: FoxCMS version 1.2.6 Description: FoxCMS version 1.2.6 contains a Cross Site Scripting issue in the /index.php/article endpoint. This allows attackers to execute arbitrary code. Recommendations: As a temporary workaround, consider restricting...

CVE-2024-46413

Rebuild v3.7.7 was discovered to contain a Server-Side Request Forgery SSRF via the type parameter in the com.rebuild.web.admin.rbstore.RBStoreControllerloadDataIndex method...

CVE-2025-56214

The phpgurukul Hospital Management System 4.0 is vulnerable to SQL Injection due to a lack of validation for externally entered SQL statements. The flaw exists in the index.php file via the username parameter. This vulnerability allows for unauthorized database access or manipulation. As a tempor...

CVE-2025-55409

FoxCMS version 1.2.6 is susceptible to a Cross-Site Scripting (XSS) vulnerability within the /index.php/article endpoint. This security flaw allows an attacker to execute arbitrary code on the target system. As a temporary workaround, it is recommended to restrict access to the /index.php/article...

CVE-2024-46413

The enterprise management system Rebuild version v3.7.7 is vulnerable to a Server-Side Request Forgery (SSRF) . The root cause is located in the type parameter within the com.rebuild.web.admin.rbstore.RBStoreController#loadDataIndex method. This vulnerability could allow an attacker to trigger un...

CVE-2025-55409

FoxCMS 1.2.6, there is a Cross Site Scripting vulnerability in /index.php/article. This allows attackers to execute arbitrary code...

Linux Distros Unpatched Vulnerability : CVE-2016-10201

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the format parameter in...

Linux Distros Unpatched Vulnerability : CVE-2015-8856

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the serve-index package before 1.6.3 for Node.js allows remote attackers to inject arbitrary web script or HTML via a...

Linux Distros Unpatched Vulnerability : CVE-2016-10202

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in Zoneminder 1.30 and earlier allows remote attackers to inject arbitrary web script or HTML via the path info to...

Linux Distros Unpatched Vulnerability : CVE-2017-3163

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - When using the Index Replication feature, Apache Solr nodes can pull index files from a master/leader node using an HTTP API which accepts a file name. However,...

Malicious code in hydenmj (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 82524d59837163aa01cabc41d849e511e785a0c1f6a4a33ee3d257f22c7f0fbc Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47753 Malicious code in comedrivewithmeman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f756bca9e923d8b4919ed8a85a73016e735e67f811f2844df1d28388dae361d Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in comedrivewithmeman (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8f756bca9e923d8b4919ed8a85a73016e735e67f811f2844df1d28388dae361d Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47765 Malicious code in fifam5tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 950882b4ee8d998f2521e9f90e402c3414f4b2872fd10f2cd8833ecfd1053a74 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in fifam5tl (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 950882b4ee8d998f2521e9f90e402c3414f4b2872fd10f2cd8833ecfd1053a74 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Malicious code in fucknuker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ef4a800b6c8d046529d8fdc3a49314fa87c84e2cc8b499b3c2c1941d7103c5fe Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47767 Malicious code in fucknukeer (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ba298ecb23601a4d9ddb1c2123c99ed19ff6a44c82225c5627a97033225feabb Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47766 Malicious code in fuckingnuker (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 ca3eb102d38e2886117259b723d471865369ed7f6b971d10d59e178eae813adb Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

MAL-2025-47770 Malicious code in fuckyoubitch (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 d4b44b0fb797b54e70ce9da891342e05380f0a6aa9ff1c8fb43a3a65e7babe97 Importing the module downloads and executes widely recognized malware --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...