Code-Projects Payroll Management System Injection Vulnerability

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. An injection vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameter bir that can lead to SQL injection...

CVE-2025-2672: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Payroll Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /adddeductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The exploit has be...

Code-Projects Payroll Management System security vulnerabilities

Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect operation of the parameter division that can lead to cross-site scripting...

PT-2025-12509

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A critical issue affects the processing of the file /add deductions.php. The manipulation of the argument bir leads to sql injection. The attack may be initiated remotely. The...

PT-2025-12510

Name of the Vulnerable Software and Affected Versions code-projects Payroll Management System version 1.0 Description A vulnerability has been found in the code-projects Payroll Management System. The issue affects an unknown function of the file /home employee.php. The manipulation of the divisi...

PT-2025-12416

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A critical issue affects the function Index of the file handlerAccount.go. The manipulation of the argument user cookie leads to improper authorization. The exploit has...

Code-Projects Human Resource Management System Security Vulnerabilities

Code-Projects Human Resource Management System is an open source human resource management system from Code-Projects. A security vulnerability exists in Code-Projects Human Resource Management System version 1.0.1, which stems from an improperly authorized Index function in the handlerAccount.go...

PT-2025-12417

Name of the Vulnerable Software and Affected Versions code-projects Human Resource Management System version 1.0.1 Description A vulnerability was found in the code-projects Human Resource Management System. It has been classified as problematic. The function UpdateRecruitmentById of the file...

CVE-2025-2590: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch...

rails-mcp-server

Rails MCP Server A Ruby implementation of a Model Context Pro...

CVE-2024-9099

In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...

CVE-2024-9099

In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...

PT-2025-12268

Name of the Vulnerable Software and Affected Versions lunary-ai/lunary version v1.4.29 Description The GET "/projects" API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This issue allows unauthorized users ...

Lunary security vulnerabilities

lunary is lunary open source a production toolkit for LLM . An information disclosure vulnerability exists in lunary that stems from a GET /projects API endpoint exposing all project public and private API keys to users with least privileges, which can be exploited by an attacker to obtain...

CVE-2024-9099: Exposure of Sensitive Information Through Metadata

In lunary-ai/lunary version v1.4.29, the GET /projects API endpoint exposes both public and private API keys for all projects to users with minimal permissions, such as Viewers or Prompt Editors. This vulnerability allows unauthorized users to retrieve sensitive credentials, which can be used to...

CVE-2025-29425

Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-29426

Code-projects Online Class and Exam Scheduling System V1.0 is vulnerable to Cross Site Scripting XSS in /pages/class.php via the id and cys parameters...

CVE-2025-2393 code-projects Online Class and Exam Scheduling System salut_del.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/salutdel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...