350 matches found
EUVD-2025-208157
Chamilo is a learning management system. Prior to version 1.11.30, the application performs insufficient validation of data coming from the user from the GET value parameter with the following scripts: /plugin/vchamilo/views/syncparams.php and /plugin/vchamilo/ajax/service.php, which allows an...
CVE-2026-28411 WeGIA Vulnerable to Authentication Bypass via `extract($_REQUEST)`
WeGIA is a web manager for charitable institutions. Prior to version 3.6.5, an unsafe use of the extract function on the $REQUEST superglobal allows an unauthenticated attacker to overwrite local variables in multiple PHP scripts. This vulnerability can be leveraged to completely bypass...
PuneethReddyHC Event Management 安全漏洞
PuneethReddyHCP Event Management is an application developed by Puneeth Reddy H C as a personal developer. It helps users register for events held during university festivals in a simple and secure manner. Version 1.0 of PuneethReddyHCP Event Management contains a security vulnerability. This...
SQL Injection
Parsl is vulnerable to SQL Injection.The vulnerability is due to unsafe construction of SQL queries using user-supplied URL parameters without proper sanitization, which allows an unauthenticated attacker to inject arbitrary SQL commands and potentially exfiltrate data or cause a denial of servic...
CVE-2025-13427 Authentication Bypass in Dialogflow CX Messenger
An authentication bypass vulnerability in Google Cloud Dialogflow CX Messenger allowed unauthenticated users to interact with restricted chat agents, gaining access to the agents' knowledge and the ability to trigger their intents, by manipulating initialization parameters or crafting specific AP...
PT-2025-50762
Name of the Vulnerable Software and Affected Versions APC Network Management Card 4 affected versions not specified Description The software contains a path traversal issue that allows unauthenticated attackers to access sensitive system files. Attackers can manipulate URL parameters to exploit...
CVE-2025-60796
phpPgAdmin 7.13.0 and earlier contains multiple cross-site scripting XSS vulnerabilities across various components. User-supplied input from $REQUEST parameters is reflected in HTML output without proper encoding or sanitization in multiple locations including sequences.php, indexes.php, admin.ph...
CVE-2025-60796
The phpPgAdmin web administration tool (versions 7.13.0 and earlier ) is vulnerable to multiple cross-site scripting (XSS) flaws. The root cause is the improper sanitization and encoding of user-supplied input from 😏_REQUEST parameters, which are reflected in the HTML output across various compon...
CVE-2025-61119: Improper Access Control
Kanova Android App version 1.0.27 package name com.karelane, developed by Karely L.L.C., contains improper access control vulnerabilities. Attackers may gain unauthorized access to user details and obtain group information, including entry codes, by manipulating API request parameters. Successful...
CVE-2024-14003: Improper Neutralization of Special Elements used in an OS Command
Nagios XI versions prior to 2024R1.2 are vulnerable to remote code execution RCE through its NRDP Nagios Remote Data Processor server plugins. Insufficient validation of inbound NRDP request parameters allows crafted input to reach command execution paths, enabling attackers to execute arbitrary...
EUVD-2020-0636
Malware in sbrugna...
EUVD-2020-24582
Malware in sbrugna...
EUVD-2020-13076
Malware in sbrugna...
EUVD-2010-5308
Malware in sbrugna...
EUVD-2016-3954
Malware in sbrugna...
EUVD-2007-0051
Malware in sbrugna...
EUVD-2018-20836
Malware in sbrugna...
EUVD-2020-26255
Malware in sbrugna...