CVE-2025-41335 Missing Authorization vulnerability in CanalDenuncia.app

A lack of authorisation vulnerability has been detected in CanalDenuncia.app. This vulnerability allows an attacker to access other users' information by sending a POST through the parameters 'id' and ' 'idsociedad' in '/api/buscarEmpresaById.php'...

CVE-2025-41335

CVE-2025-41335 concerns CanalDenuncia.app and is tied to an information-disclosure vulnerability caused by missing authorization checks for parameters id and id_sociedad in the endpoint /api/buscarEmpresaById.php. Multiple connected sources (CNVD-2025-30334, RH-CVE-2025-41335, NVD/CVELIST/CNNVD e...

EUVD-2006-3381

Malware in sbrugna...

CVE-2023-41521

CVE-2023-41521 affects Student Attendance Management System v1, which contains multiple SQL injection flaws in createSessionTerm.php reachable via the id, termId, and sessionName parameters. The reported impact is severe (CVSS v3.1 base score 8.8, high confidentiality, integrity, and availability...

itsourcecode Tailoring Management System 注入漏洞

itsourcecode Tailoring Management System is a tailoring management system from itsourcecode open source. An injection vulnerability exists in version 1.0 of itsourcecode Tailoring Management System, which stems from the parameter id/amount/desc/inccat in the file /addpayment.php that can lead to...

Codezips Pet Shop Management System 安全漏洞

Codezips Pet Shop Management System is an open source pet store management system from Codezips. A security vulnerability exists in Codezips Pet Shop Management System version 1.0, which is caused by a SQL injection in the parameter id or name...

Medicine Tracker System SQL Injection Vulnerability

Medicine Tracker System is a medicine tracking system by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Medicine Tracking System version 1.0, which stems from some unknown processing in /classes/Master.php that leads to SQL injection via the parameters...

PT-2023-26479 · Typo3 · Typo3

Name of the Vulnerable Software and Affected Versions: TYPO3 versions 9.4.0 through 9.5.41 ELTS TYPO3 versions 10.4.0 through 10.4.38 ELTS TYPO3 versions 11.5.0 through 11.5.29 TYPO3 versions 12.4.0 through 12.4.3 Description: In multi-site scenarios, enumerating the HTTP query parameters id and ...

Exploit for Cross-site Scripting in Phpmyadmin

phpMyAdmin Exploit Exploit Title : phpMyAdmin 5.1.1 - XSS...