250453 matches found
CVE-2025-69936
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /editmember.php?id=1...
PT-2026-66419
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description The MQTT Service contains a Server-Side Request Forgery SSRF flaw. An unauthenticated remote attacker can send a malicious ID to the MQTT Broker, which allows the...
CVE-2025-65342
code-projects Blood System 1.0 is vulnerable to Cross Site Scripting XSS in /don.php via the city field...
CVE-2025-65342
CVE-2025-65342 affects code-projects Blood System 1.0. The vulnerability is a Cross Site Scripting (XSS) flaw exploitable via the city field in /don.php. The description and connected sources confirm the affected product and the input vector, but do not provide details on root cause, specific pay...
The vulnerability of the nvme_poll() function in the driver/nvme/host/pci.c file of the NVME driver for the Linux operating system allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the nvmepoll function in the nvmem/host/pci.c driver of the Linux operating system’s NVME kernel is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
PT-2026-66157
Name of the Vulnerable Software and Affected Versions Google Chrome on iOS versions prior to 151.0.7922.72 Description An issue in the security user interface allows a remote attacker to perform domain spoofing, which is the act of disguising a website to make it appear as another trusted domain,...
Linux Distros Unpatched Vulnerability : CVE-2026-17735
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient validation of untrusted input in BFCache in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process...
PT-2026-66401
Name of the Vulnerable Software and Affected Versions PCP pmproxy affected versions not specified Description An unauthenticated remote attacker can bypass access controls by sending crafted requests to the '/store' endpoint. This allows the attacker to overwrite any PMDA metric, which can lead t...
EUVD-2025-210556
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /deletemembers.php?id=1...
CVE-2025-69936
CodeAstro Membership Management System 1.0 is affected by a SQL Injection in /edit_member.php?id=1. The CVE entry has a base CVSS v3.1 score of 9.8 (CRITICAL) with network attack vector, no privileges, no user interaction required, and impacts to confidentiality, integrity, and availability. Root...
PT-2026-66434
Name of the Vulnerable Software and Affected Versions Phoenix Contact CHARX SEC-3150 affected versions not specified Description A privilege escalation issue exists in the init-script for user-applications. This flaw allows a low-privileged local user to execute arbitrary commands with root...
Linux Distros Unpatched Vulnerability : CVE-2026-17875
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in PDFium in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted PDF file...
CVE-2025-69937
CodeAstro Membership Management System 1.0 contains an SQL Injection vulnerability in the edit_type.php endpoint via the id parameter. CVSS 3.1 base score 9.8 (CRITICAL) with Confidentiality, Integrity, and Availability impacts all High. Exploitation is network-based, requires no authentication, ...
PT-2026-66589
Name of the Vulnerable Software and Affected Versions SourceCodester Tailor Management System version 1.0 Description An issue exists that allows SQL Injection, a technique where malicious SQL statements are inserted into entry fields for execution. This occurs at the 'customeredit.php' endpoint...
EUVD-2025-210562
SourceCodester Tailor Management System 1.0 is vulnerable to SQL Injection in customeredit.php?id=1...
PT-2026-66586
Name of the Vulnerable Software and Affected Versions CodeAstro Membership Management System version 1.0 Description SQL Injection occurs in the 'edit type.php' endpoint through the id parameter. SQL Injection is a technique where malicious SQL statements are inserted into entry fields for...
EUVD-2025-210558
CodeAstro Membership Management System 1.0 is vulnerable to SQL Injection in /printmembershipcard.php?id=1...
CVE-2025-69931
CVE-2025-69931 affects CodeAstro Membership Management System 1.0. A SQL Injection vulnerability is exposed in the endpoint /delete_membership.php?id=1, enabling an attacker to potentially manipulate the database. The CVSS v3.1 base score is 9.8 (CRITICAL), with impact on confidentiality, integri...