PT-2025-48176

Name of the Vulnerable Software and Affected Versions Classroomio LMS version 0.1.13 Description An authenticated attacker can execute arbitrary code through crafted SVG cover images. The issue is a stored Cross Site Scripting XSS condition. Recommendations Update to a newer version that contains...

CVE-2025-11086

Summary of CVE-2025-11086 (Academy LMS Pro for WordPress) : The plugin up to version 3.3.7 is vulnerable to unauthenticated privilege escalation during user registration via the Social Login addon. The root cause is improper validation of the user’s role before registering the new user, allowing ...

EUVD-2021-11941

Malware in sbrugna...

EUVD-2021-0426

Malware in sbrugna...

EUVD-2021-0327

Malware in sbrugna...

EUVD-2021-22597

Malware in sbrugna...

EUVD-2022-6816

Malicious code in bioql PyPI...

EUVD-2023-1012

Malicious code in bioql PyPI...

EUVD-2024-49095

Malicious code in bioql PyPI...

EUVD-2022-3688

Malicious code in bioql PyPI...

EUVD-2023-44640

Malicious code in bioql PyPI...

EUVD-2024-34292

Malicious code in bioql PyPI...

EUVD-2023-44216

Malicious code in bioql PyPI...

EUVD-2023-45165

Malicious code in bioql PyPI...

EUVD-2025-29910

Malicious code in bioql PyPI...

EUVD-2021-29309

Malicious code in bioql PyPI...

EUVD-2022-6837

Malicious code in bioql PyPI...

vulnerable-website

vulnerable-website This repository contains a deliberately vul...

Pikachu

This is a proof-of-concept PoC exploit for a vulnerable web application system called Pikachu. The system contains a variety of common web security vulnerabilities, including SQL injection, cross-site scripting XSS, cross-site request forgery CSRF, remote code execution RCE, and more. The...

CVE-2025-5214

A vulnerability was found in Kashipara Responsive Online Learing Platform 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /courses/coursedetailusernew.php. The manipulation of the argument ID leads to sql injection. The attack may be launched...