14 matches found
EUVD-2025-29268
Malicious code in bioql PyPI...
CVE-2025-57117
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...
CVE-2025-57117
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...
CVE-2025-57117
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...
Rems Employee Management System 安全漏洞
Rems Employee Management System is an employee management system from Rems, Inc. A security vulnerability exists in Rems Employee Management System version 1.0, which originates from the injection of a malicious payload into the department name field and could lead to a clickjacking attack...
CVE-2025-57117
A Clickjacking vulnerability exists in Rems' Employee Management System version 1.0 . The flaw resides on the department.php page, where a remote attacker can execute arbitrary JavaScript by injecting a malicious payload into the Department Name field under the "Add Department" section. Practical...
CVE-2025-57117: Improper Neutralization of Input During Web Page Generation
A Clickjacking vulnerability exists in Rems' Employee Management System 1.0. This flaw allows remote attackers to execute arbitrary JavaScript on the department.php page by injecting a malicious payload into the Department Name field under Add Department...
CVE-2025-29719
SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...
CVE-2025-29719: Improper Neutralization of Input During Web Page Generation
SourceCodester rems Employee Management System 1.0 is vulnerable to Cross Site Scripting XSS in addemployee.php via the First Name and Address text fields...
CVE-2024-27719
A cross site scripting XSS vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function...
CVE-2024-27719: Improper Neutralization of Input During Web Page Generation
A cross site scripting XSS vulnerability in rems FAQ Management System v.1.0 allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Asked Question field in the Add FAQ function...
Daily Habit Tracker Cross-Site Scripting Vulnerability
Daily Habit Tracker is a daily habit tracker by rems individual developer. A cross-site scripting vulnerability exists in version 1.0 of Daily Habit Tracker, which stems from a cross-site scripting issue in the /endpoint/update-tracker.php file...
Exploit for SQL Injection in Rems School_Task_Manager
CVE-2024-24142: School-Task-Manager-System-SQL-Inject...
Unfixed XSS vulnerability at www.cdu-rems-murr.de
Security researcher Hanno Boeck, has submitted on 27/11/2007 a cross-site-scripting XSS vulnerability affecting www.cdu-rems-murr.de, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 29/11/2007. It is...