CVE-2026-9237: Missing Authorization

The Employee, Leave and Recruitment Management System – Crew HRM plugin for WordPress is vulnerable to authorization bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for...

EUVD-2025-20292

Malicious code in bioql PyPI...

EUVD-2025-21102

Malicious code in bioql PyPI...

EUVD-2025-24677

Malicious code in bioql PyPI...

EUVD-2021-28928

Malicious code in bioql PyPI...

CVE-2025-9920: External Control of File Name or Path

A security flaw has been discovered in Campcodes Recruitment Management System 1.0. This impacts the function include of the file /admin/index.php. The manipulation of the argument page results in file inclusion. It is possible to launch the attack remotely. The exploit has been released to the...

CVE-2025-8950: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown processing of the file /Recruitment/index.php?page=viewvacancy. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has...

CVE-2025-8336 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8334

CVE-2025-8334 describes a SQL injection vulnerability in Campcodes Online Recruitment Management System 1.0. The issue affects a portion of the code handling the file /admin/ajax.php?action=delete_recruitment_status, where the parameter ID can be manipulated to trigger a SQL injection. The vulner...

CVE-2025-8334 Campcodes Online Recruitment Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

PT-2025-31452 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical vulnerability exists in Campcodes Online Recruitment Management System. The vulnerability is due to SQL injection, stemming from manipulation of the ID argumen...

CVE-2025-8334: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/ajax.php?action=deleterecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack m...

CVE-2025-8336: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. This vulnerability affects unknown code of the file /admin/ajax.php?action=saveuser. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploi...

CVE-2025-8274

The CVE-2025-8274 entry concerns Campcodes Online Recruitment Management System 1.0. A SQL injection affects an unknown function exposed at /admin/ajax.php?action=save_recruitment_status via manipulation of the ID parameter. It is remotely exploitable and the exploit has been disclosed publicly. ...

CVE-2025-8274: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in Campcodes Online Recruitment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=saverecruitmentstatus. The manipulation of the argument ID leads to sql injection. The attack can b...

CVE-2025-7436

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=deletevacancy. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

CVE-2025-7436

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=deletevacancy. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

PT-2025-29197 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A vulnerability exists in Campcodes Online Recruitment Management System 1.0. The manipulation of the ID argument in the /admin/ajax.php?action=delete vacancy file leads ...

CVE-2025-7436: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Online Recruitment Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/ajax.php?action=deletevacancy. The manipulation of the argument ID leads to sql injection. The attack can be initiated...

CVE-2025-7136

A vulnerability, which was classified as critical, was found in Campcodes Online Recruitment Management System 1.0. Affected is an unknown function of the file /admin/viewvacancy.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The...