CVE-2026-19047 NocteDefensor LudusMCP ludus_cli_execute cliWrapper.ts executeCommand command injection

A vulnerability was detected in NocteDefensor LudusMCP up to 1.0.24. This affects the function executeArbitraryCommand/executeCommand of the file src/ludusMCP/cliWrapper.ts of the component luduscliexecute. Performing a manipulation of the argument command/args results in command injection. The...

CVE-2025-15211

A flaw has been found in code-projects Refugee Food Management System 1.0. Impacted is an unknown function of the file /home/refugee.php. Executing manipulation of the argument refNo/Fname/Lname/sex/age/contact/nationalitynid can lead to sql injection. The attack can be executed remotely. The...

PT-2025-35803

Name of the Vulnerable Software and Affected Versions: code-projects POS Pharmacy System version 1.0 Description: A weakness exists in code-projects POS Pharmacy System 1.0, potentially leading to cross-site scripting. The issue is related to the manipulation of the product code, gen name, produc...

PT-2025-35393

Name of the Vulnerable Software and Affected Versions: O2OA versions up to 10.0-410 Description: A weakness has been identified in O2OA that allows for cross site scripting. The issue affects unknown code within the /x processplatform assemble designer/jaxrs/script file of the Personal Profile Pa...