486 matches found
EUVD-2025-37862
Jellysweep is a cleanup tool for the Jellyfin media server. In versions 0.12.1 and below, /api/images/cache, used to download media posters from the server, accepted a URL parameter that was directly passed to the cache package, which downloaded the poster from this URL. This URL parameter can be...
CVE-2025-11922
CVE-2025-11922: Inactive Logout for WordPress
CVE-2025-12336
A vulnerability was identified in Campcodes Retro Basketball Shoes Online Store 1.0. Affected by this issue is some unknown functionality of the file /admin/adminindex.php. Such manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit is...
EUVD-2025-34077
Liferay Commerce Order Content Web is Vulnerable to Authorization Bypass Through User-Controlled Key...
School-Management-System Code Issues and Vulnerabilities
school-management-system is a school management system developed in PHP for schools or small organizations by Shubham kumar individual developer. A code issue vulnerability exists in school-management-system, which stems from incorrect manipulation of the parameter File in the file...
CVE-2025-11432
CVE-2025-11432 affects itsourcecode Leave Management System 1.0. The vulnerability is in the /reset.php file where manipulating the employid parameter enables an SQL injection. The attack can be performed remotely and the exploit is publicly available. Multiple connected sources corroborate the i...
CVE-2025-11417 Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload
A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/votersadd.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has be...
EUVD-2025-32863
Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command...
EUVD-2007-2140
Malware in sbrugna...
EUVD-2017-13013
Malware in sbrugna...
EUVD-2005-1553
Malware in sbrugna...
EUVD-2014-5916
Malware in sbrugna...
EUVD-2014-3085
Malware in sbrugna...
EUVD-2001-0433
Malware in sbrugna...
EUVD-2005-2179
Malware in sbrugna...
EUVD-2018-3474
Malware in sbrugna...
EUVD-2003-1302
Malware in sbrugna...
EUVD-2017-0216
Malware in sbrugna...