21658 matches found
CVE-2025-51506
In the smartLibrary component of the HRForecast Suite 0.4.3, a SQL injection vulnerability was discovered in the valueKey parameter. This flaw enables any authenticated user to execute arbitrary SQL queries, via crafted payloads to valueKey to the api/smartlibrary/v2/en/dictionaries/options/looku...
PT-2025-33814 · Unknown · Smartlibrary +1
Name of the Vulnerable Software and Affected Versions: HRForecast Suite versions 0.4.3 Description: A SQL injection flaw exists in the smartLibrary component. This allows any authenticated user to execute arbitrary SQL queries through crafted payloads to the valueKey parameter. The vulnerability ...
CVE-2025-51506
The CVE-2025-51506 affects HRForecast Suite 0.4.3, specifically the smartLibrary component. A SQL injection flaw resides in the valueKey parameter used by the API endpoint /api/smartlibrary/v2/en/dictionaries/options/lookup, enabling any authenticated user to craft payloads that execute arbitrary...
TalentNeuron Suite 安全漏洞
TalentNeuron Suite is a comprehensive platform for talent layout by TalentNeuron USA. A security vulnerability exists in TalentNeuron Suite version 0.4.3, which stems from a parameter injection and could lead to an SQL injection attack...
Bottinelli Informatical Vedo Suite Access Control Error Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An access control error vulnerability exists in Bottinelli Informatical Vedo Suite, which can be exploited by an attacker to obtain an elevated privilege JWT...
Bottinelli Informatical Vedo Suite Information Disclosure Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. An information disclosure vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from plaintext credentials stored in the...
Bottinelli Informatical Vedo Suite File Upload Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file upload vulnerability exists in Bottinelli Informatical Vedo Suite version 2024.17, which stems from a lack of effective validation of uploaded files by...
Bottinelli Informatical Vedo Suite Cross-Site Scripting Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A cross-site scripting vulnerability exists in Bottinelli Informatical Vedo Suite version 2024.17, which originates from uncleared input in /apivedo/, and can...
Bottinelli Informatical Vedo Suite File Inclusion Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. A file inclusion vulnerability exists in Bottinelli Informatical Vedo Suite, which stems from an uncleaned readfile function call that can be exploited by an...
Bottinelli Informatical Vedo Suite Server-Side Request Forgery Vulnerability
Bottinelli Informatical Vedo Suite is an enterprise software suite for the textile and design industry from Bottinelli Informatica, Italy. Bottinelli Informatical Vedo Suite suffers from a server-side request forgery vulnerability, which originates from the /apivedo/video/preview endpoint that do...
Microsoft Word Information Disclosure Vulnerability (CNVD-2025-18825)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. An information disclosure vulnerability exists in Microsoft Word, which is caused due to a buffer over-read error. An attacker could exploit the vulnerability to obtain sensitive information...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18820)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel that is caused by a heap buffer overflow when opening a specially crafted file. An attacker can exploit this vulnerability to execute arbitrary cod...
Microsoft Excel Code Execution Vulnerability (CNVD-2025-18821)
Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A code execution vulnerability exists in Microsoft Excel, which is caused due to a type confusion error when opening a specially crafted file. An attacker could exploit this vulnerability to execute...
Microsoft Word Code Execution Vulnerability (CNVD-2025-18826)
Microsoft Word is a word processing software in the Office suite of the U.S. company Microsoft Microsoft. Microsoft Word Code Execution Vulnerability, the vulnerability is caused due to incorrect conversion between number types. An attacker could exploit this vulnerability to execute arbitrary co...
MAL-2025-8977 Malicious code in @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot (npm)
The package @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot was found to contain malicious code...
Malicious code in @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot (npm)
The package @malware-test-suite-unsex-beath-spoot/test-mlw3-suite-unsex-beath-spoot was found to contain malicious code...
Malicious code in suite-level-tags (npm)
The package suite-level-tags was found to contain malicious code...
MAL-2025-31794 Malicious code in react-grid-suite (npm)
The package react-grid-suite was found to contain malicious code...