83190 matches found
CVE-2025-13172 CodeAstro Gym Management System view-member-report.php sql injection
A security flaw has been discovered in CodeAstro Gym Management System 1.0. Affected is an unknown function of the file /admin/view-member-report.php. Performing a manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been released to the...
Linux Distros Unpatched Vulnerability : CVE-2025-52331
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the generate report functionality in Rarlab WinRAR 7.11, allows attackers to disclose user information such as the...
CodeAstro Gym Management System SQL注入漏洞
Gym Management System is a gym management system from SourceCodester. A SQL injection vulnerability exists in version 1.0 of the Gym Management System, which stems from incorrect manipulation of the parameter ID in the file /admin/view-member-report.php, which could lead to a SQL injection attack...
PT-2025-46990
Name of the Vulnerable Software and Affected Versions CodeAstro Gym Management System version 1.0 Description A security flaw exists in CodeAstro Gym Management System version 1.0. The issue involves a SQL injection impacting an unknown function within the /admin/view-member-report.php file...
EUVD-2025-175349
A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1FW102B02 within the prog.cgi and rc binaries. The sub433188 function in prog.cgi stores user-supplied email configuration parameters EmailFrom, EmailTo, SMTPServerAddress, SMTPServerPort, AccountName in NVRAM v...
Zip Slip Vulnerability in NLTK Downloader Leading to Remote Code Execution
The NLTK downloader component contains a critical vulnerability where the unzipiter function uses zipfile.extractall without path validation or security checks. This allows malicious zip packages to achieve arbitrary code execution when extracted and loaded by NLTK. The vulnerability exists becau...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 3, 2025 to November 9, 2025)
Calling all Vulnerability Researchers and Bug Bounty Hunters! The LFInder Challenge:Refine your LFI hunting skills with an expanded scope. Now through November 24, 2025, all LFI vulnerabilities in software with at least 25 active installs are considered in-scope for all researchers, regardless of...
CVE-2025-40164
In the Linux kernel, the following vulnerability has been resolved: usbnet: Fix using smpprocessorid in preemptible code warnings Syzbot reported the following warning: BUG: using smpprocessorid in preemptible 00000000 code: dhcpcd/2879 caller is usbnetskbreturn+0x74/0x490...
CVE-2025-63892
creationtimestamp| type| source ---|---|--- 2025-11-13 08:35:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/59514 2025-11-13 15:00:08+00:00| published-proof-of-concept| Telegram/d8wD4nyiI6OV0OXzhOtZYCLbRAqpkWgPekubzfScCoXm1wI 2025-11-18 17:49:45+00:00| seen|...
EUVD-2025-176691
Malicious code in report-thread-benchmark-good-fork npm...
EUVD-2025-179185
Malicious code in elara-triton-quasar-async npm...
EUVD-2025-180510
Malicious code in accretion-kastra-nightmare-module npm...
EUVD-2025-179222
Malicious code in dysonswarm-joviology-node-sass-troposphere npm...
EUVD-2025-178026
Malicious code in long-class-report-grep-catch npm...
EUVD-2025-175663
Malicious code in warn-function-assert-report-thread npm...
EUVD-2025-178024
Malicious code in long-module-report-abstract-alpha npm...
EUVD-2025-177827
Malicious code in minify-report-compress-compress-process npm...
EUVD-2025-178982
Malicious code in exobiology-chalk-xml-atlas npm...