37130 matches found
Code-Projects Online Product Reservation System 代码注入漏洞
Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A code injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which stems from an incorrect manipulation of the parameter cat in the file...
编号撤回
PHPGurukul Employee Leave Management System is an employee leave management system from PHPGurukul Inc. A security vulnerability exists in version 2.1 of the PHPGurukul Employee Leave Management System, which stems from a cross-site request forgery in the manage-employee.php component that could...
PT-2026-1278
Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A flaw exists in code-projects Online Product Reservation System 1.0 that allows for SQL injection. The issue is located in an unknown function within the...
CVE-2025-67315
CVE-2025-67315 affects the PHPGurukul Employee Leave Management System, version 2.1. The vulnerability is a Cross Site Request Forgery in the manage-employee.php component that can allow a remote attacker to escalate privileges. The available connected documents confirm the issue and its impact b...
EUVD-2026-0808
Cross Site Request Forgery vulnerability in Employee Leave Management System v.2.1 allows a remote attacker to escalate privileges via the manage-employee.php component...
Ubiquiti UniFi Protect Application 安全漏洞
Ubiquiti UniFi Protect Application is a security application from Ubiquiti, Inc. A security vulnerability exists in Ubiquiti UniFi Protect Application version 6.1.79 and earlier, which stems from a flaw in the discovery protocol that could lead to unauthorized access...
PT-2026-1238
Name of the Vulnerable Software and Affected Versions code-projects Online Product Reservation System version 1.0 Description A security flaw exists in code-projects Online Product Reservation System version 1.0. The issue is located in the file app/user/login.php within the User Login component...
PT-2026-1333
Name of the Vulnerable Software and Affected Versions code-projects Online Music Site version 1.0 Description A security issue exists in code-projects Online Music Site 1.0 related to SQL injection. The issue is present in the /login.php file and involves manipulation of the username and password...
Code-Projects Online Product Reservation System 授权问题漏洞
Code-Projects Online Product Reservation System is an open source online product reservation system from Code-Projects. An authorization issue vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from an attacker being able to remotely bypass...
Fedora: Security Advisory (FEDORA-2025-cfdb90b52d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code-Projects Online Product Reservation System SQL注入漏洞
Code-Projects Online Product Reservation System is a Code-Projects open source online product reservation system. A SQL injection vulnerability exists in Code-Projects Online Product Reservation System version 1.0, which originates from the incorrect operation of the parameter ID in the file...
PT-2026-1188
Name of the Vulnerable Software and Affected Versions CRMEB versions up to 5.6.1 Description A flaw exists in CRMEB that could allow for remote code execution. The issue stems from a SQL injection vulnerability within the /adminapi/export/product list file. Specifically, manipulating the cate id...
CVE-2025-64121
Authentication Bypass Using an Alternate Path or Channel vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Authentication Bypass.This issue affects Multi-Stack Controller MSC: from 2.3.8 before 2.5.1...
CVE-2025-64123
Unintended Proxy or Intermediary vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Network Boundary Bridging.This issue affects Multi-Stack Controller MSC: through and including release 2.5.1...
WordPress Don Peppe theme <= 1.3 - Broken Access Control vulnerability
Broken Access Control vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Don Peppe versions = 1.3...
CVE-2026-0546
A vulnerability was determined in code-projects Content Management System 1.0. This impacts an unknown function of the file search.php. This manipulation of the argument Value causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may ...
CVE-2025-15426
A vulnerability was identified in jackying H-ui.admin up to 3.1. This affects an unknown function in the library /lib/webuploader/0.1.5/server/preview.php. The manipulation leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might...
CVE-2025-61321
creationtimestamp| type| source ---|---|--- 2026-01-03 04:02:20+00:00| seen| https://gist.github.com/Professor-mogli/b1d3e5a44cb225ea8ecf5fd51ec149e1...
CVE-2025-64122
Insufficiently Protected Credentials vulnerability in Nuvation Energy Multi-Stack Controller MSC allows Signature Spoofing by Key Theft.This issue affects Multi-Stack Controller MSC: through 2.5.1...