531 matches found
CVE-2025-63891: Exposure of Sensitive Information to an Unauthorized Actor
Information Disclosure in web-accessible backup file in SourceCodester Simple Online Book Store System allows a remote unauthenticated attacker to disclose full database contents including schema and credential hashes via an unauthenticated HTTP GET request to /obs/database/obsdb.sql...
CVE-2025-63709: Improper Neutralization of Input During Web Page Generation
A Cross-Site Scripting XSS vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" text input. An authenticated user can submit HTML/JavaScript that is not correctly sanitized or encoded on output. The injected script is stored and later rendered in the browser of a...
CVE-2025-63710: Cross-Site Request Forgery (CSRF)
The sendmessage.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery CSRF. The application does not implement any CSRF-protection mechanisms such as tokens, nonces, or same-site cookie restrictions. An attacker can create a malicious HTML page tha...
CVE-2025-11611: Improper Neutralization of Special Elements used in an SQL Command
A weakness has been identified in SourceCodester Simple Inventory System 1.0. Impacted is an unknown function of the file /user.php. This manipulation of the argument uemail causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public...
CVE-2025-11610: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in SourceCodester Simple Inventory System 1.0. This issue affects some unknown processing of the file /brand.php. The manipulation of the argument editBrandName results in sql injection. The attack can be executed remotely. The exploit has been released to the...
CVE-2025-11430
A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-11476: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in SourceCodester Simple E-Commerce Bookstore 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument loginusername leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used...
CVE-2025-11430: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-11480: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was detected in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /register.php. Performing manipulation of the argument registerusername results in sql injection. The attack is possible to be carried out remotely. The exploit ...
EUVD-2021-13049
Malware in sbrugna...
EUVD-2023-23399
Malicious code in bioql PyPI...
EUVD-2025-18477
Malicious code in bioql PyPI...
EUVD-2025-30786
Malicious code in bioql PyPI...
EUVD-2022-43283
Malicious code in bioql PyPI...
EUVD-2024-33622
Malicious code in bioql PyPI...
EUVD-2023-23915
Malicious code in bioql PyPI...
EUVD-2023-43697
Malicious code in bioql PyPI...
EUVD-2022-42449
Malicious code in bioql PyPI...