27470 matches found
PT-2025-37171
Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System is susceptible to SQL Injection attacks. An attacker can potentially retrieve, create, update, and delete database information through the remark, status,...
CVE-2025-40695: Improper Neutralization of Input During Web Page Generation
Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This...
CVE-2025-58984
creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:16+00:00| seen| Telegram/UVd5ImKGdVutPXs9ETT-UeJTFdQIpK1RNM6eIlWgCp4Gs...
CVE-2025-29592
creationtimestamp| type| source ---|---|--- 2025-09-10 16:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiojsqg322m...
CVE-2025-36756
creationtimestamp| type| source ---|---|--- 2025-09-10 09:35:04+00:00| seen| Telegram/WaVWSDDCmA-18Kdlvh15MrvCUdlUM2LfjUaKUiGObZmQ...
SQL Injection
Overview ricardomartins/pagbank-woocommerce is a WooCommerce integration with discount on official rates Affected versions of this package are vulnerable to SQL Injection via the status parameter due to insufficient escaping and lack of proper preparation in the SQL query. An attacker can extract...
CVE-2025-10142
The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
CVE-2025-10142 PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection
The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
CVE-2025-10142 PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection
The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
CVE-2025-10142
The CVE-2025-10142 vulnerability affects the PagBank / PagSeguro Connect para WooCommerce plugin for WordPress. It is a SQL Injection via the status parameter in all versions up to 4.44.3, caused by insufficient escaping and inadequate query preparation. Authenticated attackers with Shop Manager-...
PT-2025-87: Incorrect session expiration in Fastwel PLC web server
The vulnerability was identified in Fastwel programmable controllers, versions 3.4.5.0 CPM810-03, 3.4.9.1 СPM723-01. The discovered vulnerability can be exploited by an attacker to gain unlimited access to a device by brute-forcing or compromising a session token. Vulnerability status: Confirmed ...
CVE-2025-10142: Improper Neutralization of Special Elements used in an SQL Command
The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...
Linux Distros Unpatched Vulnerability : CVE-2025-3085
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the...
Linux Distros Unpatched Vulnerability : CVE-2024-53619
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An authenticated arbitrary file upload vulnerability in the Documents module of SPIP v4.3.3 allows attackers to execute arbitrary code via uploading a crafted P...
WordPress plugin PagBank/PagSeguro Connect for WooCommerce has a SQL injection vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is an application plugin. A SQL injection...
Linux Distros Unpatched Vulnerability : CVE-2025-21626
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a free asset and IT management software package. Starting in version 0.71 and prior to version 10.0.18, an anonymous user can fetch sensitive informatio...
Linux Distros Unpatched Vulnerability : CVE-2025-39733
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: team: replace team lock with rtnl lock syszbot reports various ordering issues for lower...
Linux Distros Unpatched Vulnerability : CVE-2015-8010
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cross-site scripting XSS vulnerability in the Classic-UI with the CSV export link and pagination feature in Icinga before 1.14 allows remote attackers to inject...
Linux Distros Unpatched Vulnerability : CVE-2020-25073
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreedomBox through 20.13 allows remote attackers to obtain sensitive information from the /server-status page of the Apache HTTP Server, because a connection fr...