15651 matches found
CVE-2025-9026
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9025
The CVE concerns code-projects Simple Cafe Ordering System 1.0. The vulnerability exists in portal.php where the ID parameter is used unsafely, allowing SQL injection. The attack can be launched remotely and the exploit has been publicly disclosed. Connected sources corroborate the same flaw acro...
CVE-2025-9025 code-projects Simple Cafe Ordering System portal.php sql injection
A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
Unspecified Vulnerability in WordPress Simple Local Avatars plugin
WordPress Simple Local Avatars plugin is a WordPress plugin mainly used to allow users to upload and manage local avatars, replacing the default Gravatar service. A security vulnerability exists in the WordPress Simple Local Avatars plugin, which stems from a lack of capability checking, and can ...
PT-2025-33470 · Unknown · Simple Cafe Ordering System
Name of the Vulnerable Software and Affected Versions: Simple Cafe Ordering System version 1.0 Description: A vulnerability exists in the Simple Cafe Ordering System that allows for SQL injection. The issue is located in an unknown functionality within the /portal.php file. Manipulation of the ID...
CVE-2025-9026: Improper Neutralization of Special Elements used in an OS Command
A vulnerability was identified in D-Link DIR-860L 2.04.B04. This affects the function ssdpcgimain of the file htdocs/cgibin of the component Simple Service Discovery Protocol. The manipulation leads to os command injection. It is possible to initiate the attack remotely. The exploit has been...
CVE-2025-9025: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Simple Cafe Ordering System 1.0. Affected by this issue is some unknown functionality of the file /portal.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the...
Linux Distros Unpatched Vulnerability : CVE-2025-37934
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ASoC: simple-card-utils: Fix pointer check in graphutilparselinkdirection Actually check if...
WordPress Simple Responsive Slider plugin cross-site scripting vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. The WordPress Simple Responsive Slider plugin suffers from a cross-site scripting vulnerability that stems from the application's lack of effective filtering and escaping of...
Malicious code in simple-await-zero-pi-async (npm)
The package simple-await-zero-pi-async was found to contain malicious code...
Malicious code in 007007-simple-calculator (npm)
The package 007007-simple-calculator was found to contain malicious code...
Malicious code in simple-runtime-theta-code-sed (npm)
The package simple-runtime-theta-code-sed was found to contain malicious code...
Malicious code in lodash-simple (npm)
The package lodash-simple was found to contain malicious code...
mycoin (1.0.0), simple-blockchain-implement (>=1.0.0, <=1.0.4) potentially affected by unknown CVE via crytpo-js (0.0.1-security)
crytpo-js NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on crytpo-js and may be impacted: - mycoin 1.0.0 - simple-blockchain-implement =1.0.0, =1.0.4 Source cves: unknown CVE Source advisory: OSV:MAL-2025-17770...
simple-basic-react-button (0.1.0) potentially affected by unknown CVE via prpo-types (0.0.1-security)
prpo-types NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on prpo-types and may be impacted: - simple-basic-react-button 0.1.0 Source cves: unknown CVE Source advisory: OSV:MAL-2025-30788...
Malicious code in simple-zero-shell-zeta-decompress (npm)
The package simple-zero-shell-zeta-decompress was found to contain malicious code...
Malicious code in planett-simple-ad-block (npm)
The package planett-simple-ad-block was found to contain malicious code...
Malicious code in simple-js-sha3-512 (npm)
The package simple-js-sha3-512 was found to contain malicious code...
