Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.5 views

EUVD-2025-22011

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00174EPSS
Exploits0References4
CVE
CVE
added 2025/09/29 1:32 a.m.9 views

CVE-2025-11135

The CVE-2025-11135 entry concerns pmTicket Project-Management-Software, specifically the Cookie Handler component’s loadLanguage function in file classes/class.database.php. The issue arises from manipulation of the user_id argument that leads to deserialization, with remote exploitability. Publi...

7.5CVSS6.5AI score0.00099EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2025/07/22 12:1 p.m.5 views

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

7.5CVSS7.4AI score0.00174EPSS
Exploits0References1
NVD
NVD
added 2025/07/20 12:15 p.m.4 views

CVE-2025-7886

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

7.5CVSS0.00174EPSS
Exploits0References4
Vulnrichment
Vulnrichment
added 2025/07/20 11:32 a.m.3 views

CVE-2025-7886 pmTicket Project-Management-Software class.database.php getUserLanguage sql injection

A vulnerability, which was classified as critical, was found in pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. This affects the function getUserLanguage of the file classes/class.database.php. The manipulation of the argument userid leads to sql injection. It...

7.5CVSS7.6AI score0.00174EPSS
Exploits0References4
CVE
CVE
added 2025/07/20 11:32 a.m.16 views

CVE-2025-7886

CVE-2025-7886 affects pmTicket Project-Management-Software up to 2ef379da2075f4761a2c9029cf91d073474e7486. The vulnerability is a SQL injection in getUserLanguage of classes/class.database.php caused by manipulation of the user_id argument. Remote exploitation is possible. The documentation indic...

7.5CVSS7.5AI score0.00174EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2025/07/20 12:0 a.m.2 views

PT-2025-30188 · Unknown · Pmticket Project-Management-Software

Name of the Vulnerable Software and Affected Versions: pmTicket Project-Management-Software versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486 Description: A critical issue exists in pmTicket Project-Management-Software. The getUserLanguage function within the classes/class.database.php...

7.5CVSS7.4AI score0.00174EPSS
Exploits0References10
Rows per page
Query Builder