CVE-2025-45583

creationtimestamp| type| source ---|---|--- 2025-09-12 22:55:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyoeaidaoi2c...

CVE-2025-10142

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2025-9879

creationtimestamp| type| source ---|---|--- 2025-09-12 03:36:22+00:00| seen| Telegram/ziEI-B4lmeYjjRY5LWzE7DCOYXEcUKsFebaxK7C1nMUnC9Q...

CVE-2025-34174

In pfSense CE /usr/local/www/statustraffictotals.php, the value of the start-day parameter is not ensured to be a numeric value or sanitized of HTML-related characters/strings before being directly displayed in the input box. This value can be saved as the default value to be displayed to all use...

GHSA-QHJ8-Q5R6-8Q6J

creationtimestamp| type| source ---|---|--- 2025-09-11 18:39:53+00:00| seen| Telegram/7DPI6OdPZ0QtuwK5DTfjZ1TEDQsYL3VlTpLhcog4ou6s9W0...

CVE-2025-40695

Stored Cross Site Scripting in Online Fire Reporting System v1.2 by PHPGurukul, that consists in a stored authenticated XSS due to the lack of propper validation of user inputs 'remark', 'status' and 'takeaction' parameters via POST at the endpoint '/ofrs/admin/request-details.php'. This...

CVE-2025-40689

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-40689

CVE-2025-40689 affects Online Fire Reporting System v1.2 (PHPGurukul). The vulnerability is a SQL Injection in the /ofrs/admin/request-details.php endpoint, exploitable via the remark, status, and requestid parameters, enabling an attacker to retrieve, create, update, and delete records in the ba...

CVE-2025-40689 SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-40689 SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'...

CVE-2025-9628

creationtimestamp| type| source ---|---|--- 2025-09-11 10:41:27+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lykkqym4ww2c...

Online Fire Reporting System 跨站脚本漏洞

Online Fire Reporting System is an online fire reporting system developed by Carlo Montero, an individual developer. A cross-site scripting vulnerability exists in Online Fire Reporting System version 1.2, which stems from insufficient validation of inputs for the parameters mark, status, and...

PT-2025-37171

Name of the Vulnerable Software and Affected Versions: Online Fire Reporting System version 1.2 Description: The Online Fire Reporting System is susceptible to SQL Injection attacks. An attacker can potentially retrieve, create, update, and delete database information through the remark, status,...

CVE-2025-58984

creationtimestamp| type| source ---|---|--- 2025-09-10 18:38:16+00:00| seen| Telegram/UVd5ImKGdVutPXs9ETT-UeJTFdQIpK1RNM6eIlWgCp4Gs...

CVE-2025-29592

creationtimestamp| type| source ---|---|--- 2025-09-10 16:43:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lyiojsqg322m...

CVE-2025-36756

creationtimestamp| type| source ---|---|--- 2025-09-10 09:35:04+00:00| seen| Telegram/WaVWSDDCmA-18Kdlvh15MrvCUdlUM2LfjUaKUiGObZmQ...

SQL Injection

Overview ricardomartins/pagbank-woocommerce is a WooCommerce integration with discount on official rates Affected versions of this package are vulnerable to SQL Injection via the status parameter due to insufficient escaping and lack of proper preparation in the SQL query. An attacker can extract...

CVE-2025-10142

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2025-10142

The CVE-2025-10142 vulnerability affects the PagBank / PagSeguro Connect para WooCommerce plugin for WordPress. It is a SQL Injection via the status parameter in all versions up to 4.44.3, caused by insufficient escaping and inadequate query preparation. Authenticated attackers with Shop Manager-...

CVE-2025-10142 PagBank / PagSeguro Connect para WooCommerce <= 4.44.3 - Authenticated (Shop Manager+) SQL Injection

The PagBank / PagSeguro Connect para WooCommerce plugin for WordPress is vulnerable to SQL Injection via the 'status' parameter in all versions up to, and including, 4.44.3 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...