Projectworlds Online Ordering Food System SQL注入漏洞

Projectworlds Online Ordering Food System is an online ordering food system from Projectworlds. A SQL injection vulnerability exists in Projectworlds Online Ordering Food System version 1.0, which stems from an incorrect manipulation of the parameter Status in the file /all-orders.php, which coul...

PT-2025-41690

Name of the Vulnerable Software and Affected Versions ProjectWorlds Online Ordering Food System version 1.0 Description A SQL injection issue exists due to improper processing of the Status argument in the /all-orders.php file. Remote exploitation is possible. The exploit has been publicly...

CVE-2025-9552 Synchronize composer.json With Contrib Modules - Critical - Unsupported - SA-CONTRIB-2025-102

Vulnerability in Drupal Synchronize composer.Json With Contrib Modules.This issue affects Synchronize composer.Json With Contrib Modules:...

GHSA-HH6W-RMJC-26F6

creationtimestamp| type| source ---|---|--- 2025-10-10 20:14:53+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115351702234048336...

GHSA-8736-PR6R-R9HR

creationtimestamp| type| source ---|---|--- 2025-10-10 17:08:26+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/115350969051297083...

JLSEC-2025-25 curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to...

curl 7.41.0 through 7.73.0 is vulnerable to an improper check for certificate revocation due to insufficient verification of the OCSP response...

Sensitive Information Disclosure

github.com/runatlantis/atlantis is vulnerable to Sensitive Information Disclosure. The vulnerability is due to the /status endpoint publicly exposing detailed version information, which allows an attacker to identify specific software versions and exploit known vulnerabilities to compromise the...

CVE-2025-40640 Stored Cross-Site Scripting (XSS) in Energy CRM by Status Tracker

Stored Cross-Site Scripting XSS vulnerability in Energy CRM v2025 by Status Tracker Ltd, consisting of a stored XSS due to lack of proper validation of user input by sending a POST request to “/crm/createinvoicesubmit.php”, using the “customerName0” parameter. This vulnerability could allow a...

CVE-2025-40640

Energy CRM v2025 (Status Tracker Ltd) contains a stored Cross-Site Scripting (XSS) flaw exploitable via a POST to /crm/create_invoice_submit.php using the customerName_0 parameter. Lack of input validation allows a remote attacker to craft a query that could be processed by an authenticated user,...

PT-2025-41534

Name of the Vulnerable Software and Affected Versions Energy CRM version 2025 Description A stored Cross-Site Scripting XSS issue exists due to insufficient validation of user-supplied data. A remote user can potentially send a malicious query to an authenticated user, potentially leading to the...

CVE-2025-55321

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:22:50+00:00| seen| https://gist.github.com/Darkcrai86/ccf7d32eb7e2809eda6d28d48120f9ae 2025-10-14 16:13:41+00:00| seen|...

CVE-2025-59246

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:22:15+00:00| seen| https://gist.github.com/Darkcrai86/fa5cbfb76080d1cdb2172a8c1e9341d5 2025-10-10 21:00:04+00:00| published-proof-of-concept|...

CVE-2025-59218

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:22:32+00:00| seen| https://gist.github.com/Darkcrai86/9d137f315abf3c2e597c129f601c8054 2025-10-14 16:13:41+00:00| seen|...

CVE-2025-59271

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:21:39+00:00| seen| https://gist.github.com/Darkcrai86/a1d6b4aaa6ecda458d2612b1abdd6244 2025-10-14 16:13:41+00:00| seen|...

CVE-2025-11550

creationtimestamp| type| source ---|---|--- 2025-10-09 18:36:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115345653610777354...

CVE-2025-61577

creationtimestamp| type| source ---|---|--- 2025-10-09 15:48:48+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115344993620445158...

CVE-2025-27041

creationtimestamp| type| source ---|---|--- 2025-10-09 15:10:18+00:00| seen| Telegram/VjGdV2N0fe64GaFhFbBYklwZHx1kizIvtBrs5CMWSqe0vF4...

CVE-2025-10240

creationtimestamp| type| source ---|---|--- 2025-10-09 14:07:49+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115344596566409110 2025-11-05 03:27:16+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3m4u44yqvxk2g...

CVE-2025-59397

creationtimestamp| type| source ---|---|--- 2025-10-09 04:43:05+00:00| seen| https://schleuss.online/users/vulnbot/statuses/115342375987619382 2025-10-09 07:15:30+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m2qmcihrzx23...

CVE-2025-60313

Sourcecodester Link Status Checker 1.0 is vulnerable to a Cross-Site Scripting XSS in the Enter URLs to check input field. This allows a remote attacker to execute arbitrary code...