CVE-2025-49058 WordPress SoundSt SEO Search plugin <= 1.2.3 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Sound Strategies SoundSt SEO Search allows Reflected XSS. This issue affects SoundSt SEO Search: from n/a through 1.2.3...

CVE-2025-49058

CVE-2025-49058 is a reflected XSS in the WordPress plugin SoundSt SEO Search (versions up to and including 1.2.3). The vulnerability arises from improper input neutralization during web page generation, enabling an attacker to inject script via user-supplied input that is reflected back to the pa...

Malicious code in search-result (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ddb1c5d5505a20da7fa64201ed64cc4b487447debb5dfac4a7d1398b93bcb1a The OpenSSF Package Analysis project identified 'search-result' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

MAL-2025-6872 Malicious code in search-result (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6ddb1c5d5505a20da7fa64201ed64cc4b487447debb5dfac4a7d1398b93bcb1a The OpenSSF Package Analysis project identified 'search-result' @ 10.11.0 npm as malicious. It is considered malicious because: - The package...

CVE-2025-8951

A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-8951 PHPGurukul Teachers Record Management System search.php sql injection

A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-8951 PHPGurukul Teachers Record Management System search.php sql injection

A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to th...

CVE-2025-8951

PHPGurukul Teachers Record Management System 2.1 is affected by a SQL injection in /admin/search.php arising from manipulation of the searchdata parameter in an unknown function. Attacks can be launched remotely and exploits have been publicly disclosed. As a temporary mitigation, restrict access...

SUSE CVE-2025-22838

Uncontrolled search path for some IntelR RealSenseTM Dynamic Calibrator software before version 2.14.2.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2025-33385 · Creativemindssolutions · Cm On Demand Search/Replace

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM On Demand Search And Replace versions through 1.5.2 Description: The software contains an Improper Neutralization of Input During Web Page Generation issue, which allows for Stored Cross-site Scripting XSS...

WordPress plugin SoundSt SEO Search 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plug-in. A cross-site scripting...

SourceCodester COVID 19 Testing Management System 注入漏洞

SourceCodester COVID 19 Testing Management System is a SourceCodester open source web-based application that provides an online platform for personal and Covid test management to manage individual testing processes and results. ch is a ClickHouse open source Low-level Go client for ClickHouse...

PT-2025-33386 · Creativemindssolutions · Cm On Demand Search/Replace

Name of the Vulnerable Software and Affected Versions: CreativeMindsSolutions CM On Demand Search And Replace versions through 1.5.2 Description: A Cross-Site Request Forgery CSRF issue exists in CreativeMindsSolutions CM On Demand Search And Replace, allowing attackers to perform actions on beha...

PT-2025-33135 · Phpgurukul · Phpgurukul Teachers Record Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Teachers Record Management System version 2.1 Description: A SQL injection issue exists due to the manipulation of the searchdata argument in an unknown function of the /admin/search.php file. The attack can be launched remotely. T...

WordPress plugin CM On Demand Search And Replace 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists...

Searching for Privacy Risks in LLM Agents Via Simulation

The widespread deployment of LLM-based agents is likely to introduce a critical privacy threat: malicious agents that proactively engage others in multi-turn interactions to extract sensitive information. These dynamic dialogues enable adaptive attack strategies that can cause severe privacy...

Seagate Toolkit 安全漏洞

Seagate Toolkit is a software for managing and backing up data from Seagate USA. A security vulnerability exists in Seagate Toolkit versions prior to 2.34.0.33, which originates from an un-referenced search path or element and could result in the execution of a malicious file...

PT-2025-33344 · Seagate · Seagate Toolkit

Name of the Vulnerable Software and Affected Versions: Seagate Toolkit versions prior to 2.34.0.33 Description: The service executable path in Seagate Toolkit allows an attacker with administrator privileges to exploit a vulnerability. An attacker with write permissions to the root directory coul...

PT-2025-33418 · Sourcecodester · Covid19 Testing Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester COVID 19 Testing Management System version 1.0 Description: A vulnerability exists in SourceCodester COVID 19 Testing Management System 1.0, affecting an unknown functionality within the /search-report-result.php file...

PT-2025-33188 · Unknown · Soundst Seo Search

Name of the Vulnerable Software and Affected Versions: SoundSt SEO Search versions through 1.2.3 Description: The software contains a reflected cross-site scripting XSS issue due to improper neutralization of input during web page generation. Recommendations: Versions prior to 1.2.3 should be...