Code-Projects Simple Cafe Ordering System Injection Vulnerabilities

Simple Cafe Ordering System is a simple coffee ordering system. Simple Cafe Ordering System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the parameter ID of the file /portal.php. An attacker can exploit this...

OpenBao Code Injection Vulnerability

OpenBao is OpenBao open source a sensitive data management software . A code injection vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause unauthorized code execution and network access...

OpenBao has an unspecified vulnerability (CNVD-2025-18599)

OpenBao is OpenBao open source a sensitive data management software . OpenBao has a security vulnerability that can be exploited by attackers to cause a brute-force crack...

OpenBao has an unspecified vulnerability (CNVD-2025-18598)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions, which can be exploited by attackers to cause MFA requirements to be bypassed...

OpenBao has an unspecified vulnerability (CNVD-2025-18597)

OpenBao is OpenBao open source a sensitive data management software . A security vulnerability exists in OpenBao 2.3.1 and earlier versions that can be exploited by attackers to cause elevation of privilege...

Malicious code in @zalastax/nolb-o6 (npm)

The package @zalastax/nolb-o6 was found to contain malicious code...

MAL-2025-15981 Malicious code in bootmap (npm)

The package bootmap was found to contain malicious code...

MAL-2025-19281 Malicious code in ejstags (npm)

The package ejstags was found to contain malicious code...

MAL-2025-16633 Malicious code in castdemo (npm)

The package castdemo was found to contain malicious code...

MAL-2025-25556 Malicious code in logsoul (npm)

The package logsoul was found to contain malicious code...

MAL-2025-20944 Malicious code in freeaml (npm)

The package freeaml was found to contain malicious code...

MAL-2025-17819 Malicious code in cucmber (npm)

The package cucmber was found to contain malicious code...

Malicious code in hkaga-ama (npm)

The package hkaga-ama was found to contain malicious code...

CVE-2025-54409

creationtimestamp| type| source ---|---|--- 2025-08-14 17:01:42+00:00| seen| https://seclists.org/oss-sec/2025/q3/110 2025-08-14 19:51:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf4gge6go2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-54389

creationtimestamp| type| source ---|---|--- 2025-08-14 16:58:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/109 2025-08-14 19:26:18+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwf2zpgb5d2r 2025-08-15 18:18:15+00:00| seen|...

CVE-2025-55167

WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. Prior to version 3.4.8, a SQL Injection vulnerability was identified in the /html/funcionario/dependenteremover.php endpoint, specifically in the iddependente parameter. This vulnerability...

Maintainers of Last Resort

Geomys is an organization of professional open source maintainers, focused on a portfolio of critical Go projects. For example, we are two thirds of the Go standard library cryptography maintainers, we provide the FIPS 140-3 validation of the upstream Go Cryptographic Module, and we fund the...

CVE-2025-55675

creationtimestamp| type| source ---|---|--- 2025-08-14 11:23:00+00:00| seen| https://seclists.org/oss-sec/2025/q3/108 2025-08-14 13:55:47+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweikou36f2r...

CVE-2025-55674

creationtimestamp| type| source ---|---|--- 2025-08-14 11:09:23+00:00| seen| https://seclists.org/oss-sec/2025/q3/107 2025-08-14 13:30:43+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lweh5v4hus2o 2025-08-14 15:02:16+00:00| seen|...

CVE-2025-55673

creationtimestamp| type| source ---|---|--- 2025-08-14 10:41:44+00:00| seen| https://seclists.org/oss-sec/2025/q3/105 2025-08-14 13:10:39+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lwefzyvra22p...