7458 matches found
CVE-2025-1957: Improper Neutralization of Input During Web Page Generation
A vulnerability classified as problematic was found in code-projects Blood Bank System 1.0. This vulnerability affects unknown code of the file /BBfile/Blood/o+.php. The manipulation of the argument Bloodname leads to cross site scripting. The attack can be initiated remotely. The exploit has bee...
GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets
Cybersecurity researchers are calling attention to an ongoing campaign that's targeting gamers and cryptocurrency investors under the guise of open-source projects hosted on GitHub. The campaign, which spans hundreds of repositories, has been dubbed GitVenom by Kaspersky. "The infected projects...
The GitVenom campaign: cryptocurrency theft using GitHub
In our modern world, it's difficult to underestimate the impact that open-source code has on software development. Over the years, the global community has managed to publish a tremendous number of projects with freely accessible code that can be viewed and enhanced by anyone on the planet. Very...
PT-2025-7653
Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical vulnerability was found in the code-projects Real Estate Property Management System. The issue affects an unknown functionality of the file /ajax state.php...
CVE-2025-1576: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajaxstate.php. The manipulation of the argument StateName as part of String leads to sql injection. The attack can ...
PT-2025-7662
Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A vulnerability was found in the Blood Bank System, affecting the processing of the file /admin/user.php. The manipulation of the email argument leads to cross-site scripting. The attack...
PT-2025-7655
Name of the Vulnerable Software and Affected Versions code-projects Blood Bank System version 1.0 Description A vulnerability has been found in the Blood Bank System, affecting some unknown functionality of the file /prostatus.php. The manipulation of the message argument leads to cross-site...
Code-Projects Real Estate Property Management System 注入漏洞
Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. An injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0. An attacker can exploit this vulnerability to perform SQL...
CVE-2025-1379 code-projects Real Estate Property Management System CustomerReport.php sql injection
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument city leads to sql injection. The attack can be...
CVE-2025-1374 code-projects Real Estate Property Management System search.php sql injection
A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /search.php. The manipulation of the argument StateName/CityName/AreaName/CatId leads to sql injection. It is possible to initiate the attack...
CVE-2025-1374: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical has been found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /search.php. The manipulation of the argument StateName/CityName/AreaName/CatId leads to sql injection. It is possible to initiate the attack...
Code-Projects Real Estate Property Management System 注入漏洞
Code-Projects Real Estate Property Management System is an open source real estate property management system from Code-Projects. An injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from an incorrect manipulation of the parameter...
CVE-2025-1381: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been classified as critical. This affects an unknown part of the file /ajaxcity.php. The manipulation of the argument CityName leads to sql injection. It is possible to initiate the attack remotely. The...
Code-Projects Real Estate Property Management System 注入漏洞
Code-Projects Real Estate Property Management System is a Code-Projects open source real estate property management system. An injection vulnerability exists in Code-Projects Real Estate Property Management System version 1.0, which stems from an incorrect manipulation of the parameters...
CVE-2025-1379: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument city leads to sql injection. The attack can be...
PT-2025-6904 · Unknown · Code-Projects Real Estate Property Management System
Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been found in the system, affecting an unknown part of the file /search.php. The manipulation of the StateName, CityName, AreaName, or CatId...
PT-2025-6910 · Unknown · Code-Projects Real Estate Property Management System
Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue was found in the code-projects Real Estate Property Management System. This issue affects an unknown part of the file /ajax city.php. The...
PT-2025-6908 · Unknown · Code-Projects Real Estate Property Management System
Name of the Vulnerable Software and Affected Versions: code-projects Real Estate Property Management System version 1.0 Description: A critical issue has been found in the code-projects Real Estate Property Management System. The problem affects an unknown functionality of the file...
CVE-2025-25296
Label Studio is an open source data labeling tool. Prior to version 1.16.0, Label Studio's "/projects/upload-example" endpoint allows injection of arbitrary HTML through a "GET" request with an appropriately crafted "labelconfig" query parameter. By crafting a specially formatted XML label config...
