WordPress Premmerce Product Search for WooCommerce plugin <= 2.2.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Premmerce Product Search for WooCommerce versions = 2.2.4...

FreeBSD : Mozilla -- Persisted search terms in the URL bar (6088905c-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 6088905c-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: In some cases search terms persisted in the URL bar even after navigating...

Red Hat Enterprise Linux 安全漏洞

Red Hat Enterprise Linux is a Linux operating system for business users from the American company Red Hat. A security vulnerability exists in Red Hat Enterprise Linux that stems from a DNS search domain removal that could cause connections to be forwarded to an unexpected external server...

JPACookieShop 跨站脚本漏洞

JPACookieShop is a cake mall platform software by Jerryshensjf individual developer. JPACookieShop cross-site scripting vulnerability, the vulnerability stems from the file GoodsCustController.java function goodsSearch parameter keyword leads to cross-site scripting...

SysTrack LsiAgent.exe contains an improper DLL search order, allowing an attacker to execute arbitrary code and priv esc

Overview Lakeside Software, an IT digital employee experience platform, offers a product called SysTrack, intended for endpoint observability. This program uses an executable called LsiAgent.exe, which attempts to load various Dynamic Link Library DLL files when run. The program does not properly...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-8179

A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. Affected by this vulnerability is an unknown functionality of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. The attack can be...

CVE-2025-52360

A Cross-Site Scripting XSS vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user...

SQL Injection

Overview org.xwiki.platform:xwiki-platform-oldcore is a generic wiki platform offering runtime services for applications built on top of it. Affected versions of this package are vulnerable to SQL Injection via the searchDocuments API. An attacker can execute arbitrary SQL queries on the underlyi...

Online Security Guards Hiring System Cross-Site Scripting Vulnerability

Online Security Guards Hiring System is an online security guard hiring system. Online Security Guards Hiring System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter searchdata in the file...

CVE-2025-52360

A Cross-Site Scripting XSS vulnerability exists in the OPAC search feature of Koha Library Management System v24.05. Unsanitized input entered in the search field is reflected in the search history interface, leading to the execution of arbitrary JavaScript in the browser context when the user...

CVE-2025-52360

CVE-2025-52360 affects Koha Library Management System (OPAC search) v24.05. Unfiltered input in the search field is reflected in the search history UI, enabling execution of arbitrary JavaScript in the browser context when users interact with the interface. The connected sources confirm the vulne...

Complaint Management System complaint-search.php file cross-site scripting vulnerability

Complaint Management System is a complaint management system. Complaint Management System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Search in the file /admin/complaint-search.php, which can...

Koha Library Management System 安全漏洞

Koha Library Management System is a library automation management system from Koha open source. A security vulnerability exists in Koha Library Management System version 24.05, which stems from an improperly cleaned search field entry and could lead to cross-site scripting...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039 Privilege Ecalation due to Untrusted Search Path Vulnerability

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

A maliciously crafted binary file, when present while loading files in certain Autodesk applications, could lead to execution of arbitrary code in the context of the current process due to an untrusted search path being utilized...

CVE-2025-5039

The CVE-2025-5039 issue is described as a vulnerability in Autodesk applications where loading files with a maliciously crafted binary can trigger arbitrary code execution in the current process due to an untrusted search path. Affected products include Autodesk Navisworks Manage and other Autode...