16949 matches found
CVE-2024-12364
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...
CVE-2025-53254
Cross-Site Request Forgery CSRF vulnerability in Themeisle Cyrlitera cyrlitera allows Cross Site Request Forgery.This issue affects Cyrlitera: from n/a through = 1.3.0...
GHSA-358M-FQ53-HP87 akka-cluster-metrics uses Java serialization for cluster metrics
In Akka through 2.10.6, akka-cluster-metrics uses Java serialization for cluster metrics...
PT-2025-27339 · Unknown · Position Department Service Quality Evaluation System
Name of the Vulnerable Software and Affected Versions: Conjure Position Department Service Quality Evaluation System versions up to 1.0.11 Description: A critical vulnerability has been found in the Conjure Position Department Service Quality Evaluation System. The issue affects the eval function...
Security Bulletin: IBM MQ Client can send data resulting in SIGSEGV and amqrmppa process ending
Summary IBM MQ has addressed a denial of service vulnerability CVE-2025-3631 Vulnerability Details CVEID:CVE-2025-3631 DESCRIPTION: An IBM MQ Client connecting to an MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it. CWE:CWE-416: Use After Free CVSS Source: IBM...
PT-2025-27327 · Code Projects · Payroll Management System
Name of the Vulnerable Software and Affected Versions: code-projects Payroll Management System version 1.0 Description: A critical issue has been found in the Payroll Management System, affecting some unknown functionality of the file /Payroll Management System/ajax.php?action=save department. Th...
Security Bulletin: IBM Storage Ceph is vulnerable to Race Condition in the RHEL UBI (CVE-2023-3758)
Summary RHEL UBI is used by IBM Storage Ceph as the base operating system. CVE-2023-3758 This bulletin identifies the steps to take to address the vulnerability in the RHEL UBI. Vulnerability Details CVEID:CVE-2023-3758 DESCRIPTION: A race condition flaw was found in sssd where the GPO policy is...
CVE-2024-12364
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mavi Yeşil Software Guest Tracking Software allows SQL Injection. This issue affects Guest Tracking Software. NOTE: The vendor did not inform about the completion of the fixing process within the...
WordPress Cron Logger plugin <= 1.3.0 - Broken Access Control Vulnerability
Broken Access Control Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin Cron Logger versions = 1.3.0...
CVE-2025-53270
Cross-Site Request Forgery CSRF vulnerability in Blend Media WordPress CTA easy-sticky-sidebar allows Cross Site Request Forgery.This issue affects WordPress CTA: from n/a through = 1.7.0...
CVE-2025-24760
CVE-2025-24760 affects the WordPress theme Sofass (Sofass: <= 1.3.4). Described as an unauthenticated Local File Inclusion via Improper Control of Filename for Include/Require, i.e., PHP Remote File Inclusion. CVSS v3.1 base score 8.1 (HIGH) with network attack vector, high impact on confident...
CVE-2025-6688 Simple Payment 1.3.6 - 2.3.8 - Authentication Bypass to Admin
The Simple Payment plugin for WordPress is vulnerable to Authentication Bypass in versions 1.3.6 to 2.3.8. This is due to the plugin not properly verifying a user's identity prior to logging them in through the createuser function. This makes it possible for unauthenticated attackers to log in as...
WordPress BuddyPress Docs plugin < 2.2.5 - Subscriber+ Arbitrary Document Read/Update vulnerability
Subscriber+ Arbitrary Document Read/Update vulnerability discovered by Terrence Bosco, Alexus Bosco, Andrew Risorto in WordPress Plugin BuddyPress Docs versions 2.2.5...
MAL-2025-5362 Malicious code in aquasec-orb-test-project (npm)
The package communicates with a domain associated with malicious activity...
PT-2025-27110 · Unknown · Fw Food Menu
Name of the Vulnerable Software and Affected Versions: FW Food Menu versions n/a through 6.0.0 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal'. This allows for Path Traversal in the FW Food Menu. Recommendations:...
PT-2025-27034 · Flock Safety · Flock Safety Gunshot Detection
Name of the Vulnerable Software and Affected Versions: Flock Safety Gunshot Detection devices versions prior to 1.3 Description: The issue concerns a hard-coded password for a connection in Flock Safety Gunshot Detection devices. This hardcoded password allows for unauthenticated access to the...
PT-2025-27104 · Unknown · Mojoomla School Management
Name of the Vulnerable Software and Affected Versions: mojoomla School Management versions n/a through 92.0.0 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This enables potential...
PT-2025-27107 · Arraytics · Arraytics Eventin
Name of the Vulnerable Software and Affected Versions: Arraytics Eventin versions through 4.0.28 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. Recommendations: For versions through...
PT-2025-27169 · Unknown · Writesonic
Name of the Vulnerable Software and Affected Versions: Writesonic versions 1.0.0 through 1.0.4 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability, which allows an attacker to perform unauthorized actions on a user's account. This is a type of attack where an attacker tricks...
PT-2025-27224 · Unknown · Track Everything
Name of the Vulnerable Software and Affected Versions: Track Everything versions n/a through 2.0.1 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability that allows Stored XSS. This means an attacker can trick a user into performing unintended actions on a web application,...