CVE-2025-30724

Vulnerability in the Oracle BI Publisher product of Oracle Analytics component: XML Services. Supported versions that are affected are 7.6.0.0.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle BI Publisher...

Security Bulletin: IBM Sterling Connect:Direct Web Services vulnerable to improper authorizations (CVE-2024-49808)

Summary IBM Sterling Connect:Direct Web Services could allow an authenticated user to spoof the identity of another user due to improper authorization which could allow the user to bypass access restrictions. Vulnerability Details CVEID:CVE-2024-49808 DESCRIPTION: IBM Sterling Connect:Direct Web...

GraphQLer: Enhancing GraphQL Security with Context-Aware API Testing

GraphQL is an open-source data query and manipulation language for web applications, offering a flexible alternative to RESTful APIs. However, its dynamic execution model and lack of built-in security mechanisms expose it to vulnerabilities such as unauthorized data access, denial-of-service DoS...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

CVE-2025-29710

SourceCodester Company Website CMS 1.0 is vulnerable to Cross Site Scripting XSS via /dashboard/Services...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

Vulnerabilities fixed in Oracle Financial Services

Oracle fixed vulnerabilities in several Financial Services products The vulnerabilities allow unauthenticated malicious parties to access critical data via HTTP, which can lead to unauthorized data access and other security risks. Malicious parties can also exploit misconfigurations and...

CVE-2025-3690

A vulnerability was found in PHPGurukul Men Salon Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/edit-services.php. The manipulation of the argument cost leads to sql injection. The attack may be initiated remotely. The exploit has...

Security Bulletin: IBM Sterling Connect:Direct Web Services is affected by vulneralibity in netty-common-4.1.114.Final.jar

Summary IBM Connect:Direct Web Services uses netty Jar and is vulnerable to CVE-2024-47535 Vulnerability Details CVEID:CVE-2024-47535 DESCRIPTION: Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients...

CrazyHunter Campaign Targets Taiwanese Critical Sectors

This blog entry details research on emerging ransomware group CrazyHunter, which has launched a sophisticated campaign aimed at Taiwan's essential services...

PT-2025-16891 · Sourcecodester · Sourcecodester Company Website Cms

Name of the Vulnerable Software and Affected Versions: SourceCodester Company Website CMS version 1.0 Description: The issue concerns a file upload vulnerability via the "Create Services" file. This vulnerability can be exploited through the "/dashboard/Services" API endpoint. The Create Services...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

CVE-2025-29708

SourceCodester Company Website CMS 1.0 contains a file upload vulnerability via the "Create Services" file /dashboard/Services...

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from the vulnerability of files/dashboard/Services to cross-site scripting attacks...

SourceCodester Company Website CMS 安全漏洞

SourceCodester Company Website CMS is an open source content management system from SourceCodester. A security vulnerability exists in SourceCodester Company Website CMS version 1.0, which stems from a Services feature that does not properly validate uploaded files, which could lead to arbitrary...

PHPGurukul Men Salon Management System 安全漏洞

PHPGurukul Men Salon Management System is a men's salon management system from PHPGurukul Inc. A security vulnerability exists in version 1.0 of the PHPGurukul Men Salon Management System, which is caused by a SQL injection due to an incorrect manipulation of the parameter cost in file...

CVE-2025-29708

CVE-2025-29708 affects SourceCodester Company Website CMS 1.0. The vulnerability is a file upload flaw in the Create Services endpoint (/dashboard/Services) that could allow arbitrary file uploads due to improper validation. CVSS v3.1 base score 9.8 (network access, no authentication, user intera...

CVE-2025-26930

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alleythemes Home Services home-services allows DOM-Based XSS.This issue affects Home Services: from n/a through = 1.2.6...

CVE-2025-26930

CVE-2025-26930 describes a DOM-based XSS in the alleythemes Home Services WordPress plugin, affecting versions

CVE-2025-26930 WordPress Home Services plugin <= 1.2.6 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in alleythemes Home Services home-services allows DOM-Based XSS.This issue affects Home Services: from n/a through = 1.2.6...