Lucene search
K

1841 matches found

CVE
CVE
added 2025/11/03 1:32 a.m.10 views

CVE-2025-12610

CVE-2025-12610 affects CodeAstro Gym Management System 1.0, with a SQL injection in the /admin/view-progress-report.php file. The vulnerability arises from manipulated the ID parameter, potentially enabling remote exploitation. Public disclosures exist for the exploit. Affected component is the v...

7.2CVSS5AI score0.00045EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/03 1:32 a.m.3 views

CVE-2025-12610 CodeAstro Gym Management System view-progress-report.php sql injection

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

5.8CVSS5AI score0.00045EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/03 1:32 a.m.2 views

EUVD-2025-37468

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and ma...

5.8CVSS6.6AI score0.00045EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/03 1:32 a.m.7 views

CVE-2025-12610 CodeAstro Gym Management System view-progress-report.php sql injection

A vulnerability was determined in CodeAstro Gym Management System 1.0. This affects an unknown part of the file /admin/view-progress-report.php. Executing a manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and...

5.8CVSS0.00045EPSS
Exploits1References6
Cvelist
Cvelist
added 2025/11/03 1:2 a.m.6 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS0.00041EPSS
Exploits1References6
CVE
CVE
added 2025/11/03 1:2 a.m.4 views

CVE-2025-12609

CVE-2025-12609 affects CodeAstro Gym Management System 1.0. The vulnerability exists in /admin/update-progress.php, where manipulating the id/ini_weight argument enables SQL injection. It is a remote issue with publicly available exploit information across multiple sources, indicating real-world ...

8.8CVSS5AI score0.00041EPSS
Exploits1References6Affected Software1
Vulnrichment
Vulnrichment
added 2025/11/03 1:2 a.m.1 views

CVE-2025-12609 CodeAstro Gym Management System update-progress.php sql injection

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing a manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has bee...

5.8CVSS5AI score0.00041EPSS
Exploits1References6
EUVD
EUVD
added 2025/11/03 1:2 a.m.2 views

EUVD-2025-37465

A vulnerability was found in CodeAstro Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/update-progress.php. Performing manipulation of the argument id/iniweight results in sql injection. The attack may be initiated remotely. The exploit has been...

5.8CVSS6.6AI score0.00041EPSS
Exploits1References7
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.1 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter id/iniweight in the file /admin/update-progress.php, which could lead to a SQL...

8.8CVSS5.6AI score0.00041EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.2 views

PT-2025-44743

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System version 1.0 where manipulation of the id/ini weight argument in the file '/admin/update-progress.php' can lead to SQL injection. This issu...

8.8CVSS6.7AI score0.00041EPSS
Exploits1References9
CNNVD
CNNVD
added 2025/11/03 12:0 a.m.3 views

CodeAstro Gym Management System SQL注入漏洞

CodeAstro Gym Management System is a gym management system from CodeAstro. A SQL injection vulnerability exists in CodeAstro Gym Management System version 1.0, which stems from incorrect manipulation of the parameter ID in the file /admin/view-progress-report.php, which could lead to a SQL...

7.2CVSS5.6AI score0.00045EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2025/11/03 12:0 a.m.3 views

PT-2025-44744

Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A flaw exists in CodeAstro Gym Management System 1.0 that could allow for SQL injection. This issue affects the /admin/view-progress-report.php file. Manipulation of the ID argument can...

7.2CVSS7.5AI score0.00045EPSS
Exploits1References8
GithubExploit
GithubExploit
added 2025/10/31 7:2 p.m.142 views

Exploit for HTTP Request Smuggling in Sap Content_Server

CVE-2022-22536 Batch Scanner This is a fast, socket-level bat...

10CVSS9.2AI score0.93833EPSS
Exploits8
EUVD
EUVD
added 2025/10/30 7:39 a.m.1 views

EUVD-2025-36972

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service...

6.7CVSS6.6AI score0.00016EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/10/30 7:39 a.m.4 views

CVE-2025-11906 Privilege escalation via writable configuration files in Progress Flowmon

A vulnerability exists in Progress Flowmon versions prior 12.5.6 where certain system configuration files have incorrect file permissions, allowing a user with access to the default flowmon system user account used for SSH access to potentially escalate privileges to root during service...

6.7CVSS0.00016EPSS
Exploits0References1
OSV
OSV
added 2025/10/24 5:3 p.m.4 views

CLSA-2025-1761325428 golang: Fix of CVE-2025-47907

CVE-2025-47907: avoid closing Rows in database/sql while scanning is in progress...

7CVSS7.2AI score0.00073EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 3:13 p.m.1 views

CVE-2025-48082

Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner allows Privilege Escalation.This issue affects Progress Planner: from n/a through = 1.8.0...

8.8CVSS7AI score0.0006EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/10/23 9:13 a.m.4 views

CVE-2025-11883

The Responsive Progress Bar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's rprogress shortcode in versions less than, or equal to, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

6.4CVSS5.2AI score0.00032EPSS
Exploits0References1
Hacker One
Hacker One
added 2025/10/22 9:13 p.m.9 views

curl: Use of Deprecated strcpy() with Fixed-Size Buffers in Progress Time Formatting

Step 2: Locate Vulnerable Code in Progress.c Find exact strcpy usage in toolprogress.c grep -n "strcpy" ./src/toolprogress.c OUTPUT: 94: strcpyr, "--:--:--"; Step 3: Analyze the Vulnerable Function View complete time2str function sed -n '/^static void time2str/,/^/p' ./src/toolprogress.c Vulnerab...

7.7AI score
Exploits0
EUVD
EUVD
added 2025/10/22 3:31 p.m.2 views

EUVD-2025-35569

Incorrect Privilege Assignment vulnerability in Progress Planner Progress Planner progress-planner allows Privilege Escalation.This issue affects Progress Planner: from n/a through = 1.8.0...

7.5CVSS6.5AI score0.0006EPSS
Exploits0References2
Rows per page
Query Builder