CVE-2025-10100 SourceCodester Simple Forum Discussion System admin_class.php sql injection

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

Duplicate Advisory: Malware in simple-swizzle

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-9g9j-rggx-7fmg. This link is maintained to preserve external references. Original Description Any computer that has this package installed or running should be considered affected by a browser-based interceptor...

Malicious code in simple-swizzle (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 052372c7c31f98ff69d0c555f9b8438dac12a292fa6e1f63d4b6160d6a8376c6 Any computer that has this package installed or running should be considered fully compromised. All...

MAL-2025-46978 Malicious code in simple-swizzle (npm)

The package was compromised and malicious code added. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 052372c7c31f98ff69d0c555f9b8438dac12a292fa6e1f63d4b6160d6a8376c6 Any computer that has this package installed or running should be considered fully compromised. All...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package version contains malicious code that monitors network traffic when run in a browser and targets crypto transactions. The injected malicious code activates a hook whenever a Web3 wallet is present...

GO-2025-3916 simple-admin-core SQL Injection vulnerability in github.com/suyuan32/simple-admin-core

simple-admin-core SQL Injection vulnerability in github.com/suyuan32/simple-admin-core...

CVE-2025-10100: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /adminclass.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is n...

SourceCodester Simple Forum Discussion System SQL Injection Vulnerability

SourceCodester Simple Forum Discussion System is a SourceCodester open source forum system. A SQL injection vulnerability exists in SourceCodester Simple Forum Discussion System version 1.0, which originates from an incorrect manipulation of the parameter Username resulting in SQL injection...

PT-2025-36641

simple-admin-core SQL Injection vulnerability in github.com/suyuan32/simple-admin-core...

PT-2025-36490

Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Forum Discussion System version 1.0 Description: A SQL injection issue exists in the file /admin class.php?action=login. Manipulation of the Username parameter can lead to exploitation. The attack can be initiated...

CVE-2025-58810

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in jimmywb Simple Link List Widget simple-link-list-widget allows Stored XSS.This issue affects Simple Link List Widget: from n/a through = 0.3.2...

CVE-2025-58872

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

CVE-2025-58881

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through = 8.0...

CVE-2025-58882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

CVE-2025-58881

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in gopiplus New Simple Gallery new-simple-gallery allows Blind SQL Injection.This issue affects New Simple Gallery: from n/a through = 8.0...

CVE-2025-58882

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...

CVE-2025-58872

Insertion of Sensitive Information Into Sent Data vulnerability in premiumbizthemes Simple Price Calculator simple-price-calculator-basic allows Retrieve Embedded Sensitive Data.This issue affects Simple Price Calculator: from n/a through = 1.3...

WordPress Simple Text Slider Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Cross Site Scripting XSS Vulnerability discovered by Mika in WordPress Plugin Simple Text Slider versions = 1.0.5...

WordPress New Simple Gallery Plugin <= 8.0 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by Peter Thaleikis in WordPress Plugin New Simple Gallery versions = 8.0...

CVE-2025-58882 WordPress Simple Text Slider Plugin <= 1.0.5 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in w1zzard Simple Text Slider simple-text-slider allows Stored XSS.This issue affects Simple Text Slider: from n/a through = 1.0.5...