CVE-2026-93528 NP Quote Request for WooCommerce < 2.4.16 - Unauthenticated Order Data Disclosure via Quote Request Page

The NP Quote Request for WooCommerce WordPress plugin before 2.4.16 does not verify order ownership before rendering an order's details, allowing unauthenticated attackers to view another customer's order using the order's key...

CVE-2026-93528

The NP Quote Request for WooCommerce WordPress plugin (versions 2.0-2.4.15 ) is vulnerable to unauthenticated order data disclosure . The root cause is located in the gpls_woo_rfq_get_rfq_cart() function within includes/classes/gpls_woo_rfq_functions.php, which fails to validate order ownership w...

EUVD-2018-9289

Malware in sbrugna...

EUVD-2018-0197

Malware in sbrugna...

EUVD-2019-2184

Malware in sbrugna...

EUVD-2025-32123

Malicious code in bioql PyPI...

EUVD-2023-41567

Malicious code in bioql PyPI...

EUVD-2024-48244

Malicious code in bioql PyPI...

CVE-2025-59749

Cross-site scripting XSS vulnerability reflected in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending them a malicious URL. The relationship between parameter and assigned identifier is 'l' parameter in...

CVE-2024-7303

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...

CVE-2023-37689

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page...

CVE-2018-17536

An issue was discovered in GitLab Community and Enterprise Edition before 11.1.7, 11.2.x before 11.2.4, and 11.3.x before 11.3.1. There is stored XSS on the merge request page via project import...

CVE-2024-7303 itsourcecode Online Blood Bank Management System Send Blood Request Page request.php cross site scripting

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...

CVE-2024-7303: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in itsourcecode Online Blood Bank Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /request.php of the component Send Blood Request Page. The manipulation of the argument Address/bloodgroup leads to cross sit...

CVE-2024-3091 PHPGurukul Emergency Ambulance Hiring Portal Search Request Page search.php cross site scripting

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the...

CVE-2024-3091: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/search.php of the component Search Request Page. The manipulation leads to cross site scripting. It is possible to launch the...

Blood Bank & Donor Management SQL Injection Vulnerability

Blood Bank & Donor Management is a blood bank and donor management system. Blood Bank & Donor Management version 5.6 suffers from a SQL injection vulnerability that originates from a flaw in the /admin/request-received-bydonar.php file...

CVE-2023-37689

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page...

CVE-2023-37687

Online Nurse Hiring System v1.0 was discovered to contain a cross-site scripting XSS vulnerability in the View Request of Nurse Page in the Admin portal...

CVE-2023-37689: Improper Neutralization of Input During Web Page Generation

Maid Hiring Management System v1.0 was discovered to contain a SQL injection vulnerability in the Booking Request page...