55 matches found
EUVD-2023-48269
Malicious code in bioql PyPI...
EUVD-2023-38621
Malicious code in bioql PyPI...
EUVD-2022-40903
Malicious code in bioql PyPI...
CVE-2025-10827 PHPJabbers Restaurant Menu Maker preview.php cross site scripting
A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made availab...
PT-2025-30140 · Unknown · Church Donation System
Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A vulnerability exists in the Church Donation System software. The issue affects an unknown functionality within the /reg.php file. Manipulation of the mobile argument can lead to a SQL injectio...
CVE-2025-50756
Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the setsysadm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-43856
The CVE-2025-43856 entry concerns immich, a self-hosted photo/video management solution. Affected versions are prior to 1.132.0. The root cause is that the OAuth2 state parameter is not validated, which defeats CSRF protection. When immich uses the /user-settings page as a redirect URI, an attack...
CVE-2025-52552
FastGPT is an AI Agent building platform. Prior to version 4.9.12, the LastRoute Parameter on login page is vulnerable to open redirect and DOM-based XSS. Improper validation and lack of sanitization of this parameter allows attackers execute malicious JavaScript or redirect them to...
CVE-2024-41468
Tenda FH1201 v1.2.0.14 was discovered to contain a command injection vulnerability via the cmdinput parameter at /goform/exeCommand...
CVE-2024-7941
An HTTP parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials...
CVE-2023-33481
RemoteClinic 2.0 is vulnerable to a time-based blind SQL injection attack in the 'start' GET parameter of patients/index.php...
CVE-2023-24276
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the country parameter at setting/delStaticDhcpRules...
CVE-2023-24236
TOTOlink A7100RUV7.4cu.2313B20191024 was discovered to contain a command injection vulnerability via the province parameter at setting/delStaticDhcpRules...
CVE-2022-46538
Tenda F1203 V2.0.1.6 was discovered to contain a command injection vulnerability via the mac parameter at /goform/WriteFacMac...
CVE-2022-36509
H3C GR3200 MiniGR1B0V100R014 was discovered to contain a command injection vulnerability via the param parameter at DelL2tpLNSList...
PT-2025-15081 · Code Projects · Code-Projects Blood Bank Management System
Name of the Vulnerable Software and Affected Versions: code-projects Blood Bank Management System version 1.0 Description: A critical issue affects the unknown processing of the file "/don.php". The manipulation of the argument fullname leads to SQL injection. The attack may be initiated remotely...
CVE-2024-8500
The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the several parameters in all versions up to, and including, 7.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers,...
CVE-2024-36735
OneFlow-Inc. Oneflow v0.9.1 does not display an error or warning when the oneflow.eye parameter is floating...
PT-2023-22634 · Unknown · Chatengine
Name of the Vulnerable Software and Affected Versions: ChatEngine version 1.0 Description: The issue allows attackers to gain sensitive information through a SQL Injection vulnerability in the textMessage parameter in the /src/chatbotapp/chatWindow.java file. Recommendations: For ChatEngine versi...
