PT-2024-19245 · Peepso · Peepso Community

Name of the Vulnerable Software and Affected Versions: PeepSo Community by PeepSo – Social Network, Membership, Registration, User Profiles versions prior to 6.3.1.0 Description: The issue is related to improper neutralization of input during web page generation, which leads to a Cross-site...

Free Open-Source Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by stemword individual developers. A security vulnerability exists in Free Open-Source Inventory Management System version v.1.0. A remote attacker can exploit this vulnerability to execute arbitrary code via the Stafflist parameter in...

GStreamer Security Vulnerability

GStreamer is a set of frameworks for processing streaming media. A security vulnerability exists in GStreamer version 1.0. An attacker could exploit this vulnerability to cause a denial of service in the application and could execute arbitrary code...

Login System with Email Verification Security Vulnerability

Login System with Email Verification is an email verification login system by rems Personal Developer. A security vulnerability exists in Login System with Email Verification version 1.0, which is caused by an SQL injection vulnerability in the user parameter...

Daily Habit Tracker Security Vulnerability

Daily Habit Tracker is a daily habit tracker by rems personal developer. A security vulnerability exists in the Daily Habit Tracker App version 1.0, which stems from an SQL injection vulnerability in the tracker parameters...

Malicious code in scrape-proxy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2530d758bc3aef746b755284c655b0848bae0ae234051ea312ceecf75b13636b The OpenSSF Package Analysis project identified 'scrape-proxy' @ 1.0.0 npm as malicious. It is considered malicious because: - The package...

PT-2024-20150 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A Cross-Site Scripting XSS issue has been reported, resulting from insufficient encoding of user-controlled inputs. This can be exploited via the /cupseasylive/statelist.php endpoint,...

PT-2024-20130 · Cups Easy · Cups Easy

Name of the Vulnerable Software and Affected Versions: Cups Easy Purchase & Inventory version 1.0 Description: A Cross-Site Scripting XSS issue has been reported, where user-controlled inputs are not sufficiently encoded. This issue can be exploited via the /cupseasylive/grndisplay.php endpoint,...

PT-2024-3793 · Linux +4 · Linux Kernel +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.1.0 Description: The vulnerability is related to a global out-of-bounds read in the ksmbd nl policy function. This issue can be exploited to affect the confidentiality, integrity, and availability of protected...

PT-2024-15888 · Unknown · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue was found in the system, affecting the prepare function of the admin/pay.php file. The manipulation of the id argument leads to SQL injection...

Mathtex Security Breach

Mathtex is a CGI program written in C for the Manim community. A security vulnerability exists in Mathtex version 1.05 and prior versions, which stems from a command injection vulnerability. A remote attacker can use this vulnerability to execute arbitrary code via a crafted string in the...

Online Admission System Code Issue Vulnerability

Online Admission System is an online admission system developed by RASHMI KUMARI, an individual developer. A code issue exists in Project Worlds Online Admission System version 1.0, which stems from an unrestricted file upload due to some unknown processing in Documents.php...

CVE-2024-22568

FlyCms v1.0 contains a Cross-Site Request Forgery CSRF vulnerability via /system/score/del...

PT-2024-15151

Name of the Vulnerable Software and Affected Versions WP Recipe Maker plugin for WordPress versions up to, and including, 9.1.0 Description The issue is related to Reflected Cross-Site Scripting via the 'Referer' header due to insufficient input sanitization and output escaping. This allows...

Atlassian Confluence Security Vulnerability

Atlassian Confluence is a suite of specialized enterprise knowledge management and collaboration software from Atlassian Australia that can also be used to build enterprise WiKi. A security vulnerability exists in Atlassian Confluence Data Center and Server that stems from the presence of a remot...

CXBSoft Post-Office SQL Injection Vulnerability

CXBSoft Post-Office is a post office system from CXBSoft. A SQL injection vulnerability exists in CXBSoft Post-Office 1.0 and earlier versions, which originates from a SQL injection vulnerability in the parameter usernamelogin in the file /apps/loginauth.php...

PT-2024-15644 · Unknown · Codeastro Real Estate Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Real Estate Management System versions up to 1.0 Description: A critical vulnerability has been found in the CodeAstro Real Estate Management System. This issue affects an unknown part of the file propertydetail.php. The manipulatio...

CVE-2023-51062

creationtimestamp| type| source ---|---|--- 2024-01-13 05:31:43+00:00| seen| https://t.me/ctinow/167683 2024-01-15 13:09:31+00:00| seen| https://t.me/arpsyndicate/2784 2024-02-03 07:41:23+00:00| seen| https://t.me/ctinow/178412 2025-06-16 19:40:51+00:00| published-proof-of-concept|...

PT-2024-15620 · Unknown · Code-Projects Online Fir System

Name of the Vulnerable Software and Affected Versions: code-projects Online FIR System version 1.0 Description: A vulnerability was found in the code-projects Online FIR System, affecting an unknown part of the file registercomplaint.php. The manipulation of the argument Name/Address leads to...

Austin security breach

Austin is a message push platform. A security vulnerability exists in ZhongFuCheng3y Austin version 1.0, which originates from a security issue in the getFile function in the com/java3y/austin/web/controller/MaterialController.java in the component Upload Material Menu. function in the component...