TECOrange Simple E-Document security vulnerability

TECOrange Simple E-Document is a TECOrange system for bulk email reception. A security vulnerability exists in TECOrange Simple E-Document versions 3.0 through 3.1 that stems from an upload mechanism that does not restrict file types and validate inputs, which could lead to arbitrary file uploads...

CVE-2025-8337

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8337

CVE-2025-8337 affects Code-Projects Simple Car Rental System 1.0. The vulnerability is in the file /admin/add_vehicles.php where manipulation of the car_name argument can lead to a cross-site scripting (XSS) vulnerability. The attack can be initiated remotely and exploits have been publicly discl...

CVE-2025-8337 code-projects Simple Car Rental System add_vehicles.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8337 code-projects Simple Car Rental System add_vehicles.php cross site scripting

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8335

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-8335 code-projects Simple Car Rental System cross-site request forgery

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-8335 code-projects Simple Car Rental System cross-site request forgery

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-8335

The CVE-2025-8335 entry concerns code-projects Simple Car Rental System 1.0, with a cross-site request forgery flaw affecting an unknown part of the software. Connected sources (PT-2025-31451, Red Hat, CVE listings) confirm the vulnerability can be initiated remotely and that an exploit has been ...

Malicious code in vite-simpleparse (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d3836a7e7ded3a3b153bf7f32248516a0568c53e4abd6ecb2003a30197daaa0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-31453 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue has been found in the processing of the /admin/add vehicles.php file. Manipulation of the car name argument can lead to cross site scripting. The attack can be initiated...

CVE-2025-8337: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in code-projects Simple Car Rental System 1.0. This issue affects some unknown processing of the file /admin/addvehicles.php. The manipulation of the argument carname leads to cross site scripting. The attack may be initiated...

CVE-2025-8335: Cross-Site Request Forgery (CSRF)

A vulnerability classified as problematic has been found in code-projects Simple Car Rental System 1.0. This affects an unknown part. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used...

PT-2025-31451 · Unknown · Simple Car Rental System

Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A problematic issue exists in Simple Car Rental System that allows for cross-site request forgery. This issue can be initiated remotely, and the exploit has been publicly disclosed...

WordPress SMTP for Amazon SES SQL Injection Vulnerability

WordPress SMTP for Amazon SES is a plugin or configuration solution for sending emails via Amazon Simple Email Service in WordPress sites. WordPress SMTP for Amazon SES suffers from a SQL injection vulnerability that stems from improper input neutralization, and no detailed vulnerability details...

WordPress Simple Contact Forms plugin <= 1.6.4 - Local File Inclusion vulnerability

Local File Inclusion vulnerability discovered by LVT-tholv2k in WordPress Plugin Simple Contact Forms versions = 1.6.4...

Malware in simple-line-icons-webpack

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-6200 Malicious code in simple-line-icons-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bf593593545cc9181f1cc4b8f5832bc438fe436a6181cc341cc59645a558c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in simple-line-icons-webpack (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5bf593593545cc9181f1cc4b8f5832bc438fe436a6181cc341cc59645a558c4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

📄 WordPress Simple File List 4.2.2 Shell Upload

WordPress Simple File List plugin versions 4.2.2 and below proof of concept remote shell upload exploit. Exploit Title: Simple File List WordPress Plugin 4.2.2 - File Upload to RCE Google Dork: inurl:/wp-content/plugins/simple-file-list/ Date: 2025-07-15 Exploit Author: Md Amanat Ullah xSwads...