22471 matches found
Medical Store Management System MainPanel.java File SQL Injection Vulnerability
Medical Store Management System is a pharmacy management system. Medical Store Management System has a SQL injection vulnerability that originates from improper filtering of searchTxt parameters in the MainPanel.java file, which can be exploited by an attacker to obtain sensitive information...
Linux Distros Unpatched Vulnerability : CVE-2016-3486
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect availability via vectors related...
Linux Distros Unpatched Vulnerability : CVE-2019-11841
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A message-forgery issue was discovered in crypto/openpgp/clearsign/clearsign.go in supplementary Go cryptography libraries 2019-03-25. According to the OpenPGP...
PT-2025-33664 · Unknown · Namelessmc
Name of the Vulnerable Software and Affected Versions: NamelessMC versions prior to 2.2.3 Description: NamelessMC is a website software for Minecraft servers. A cross-site scripting XSS issue exists in the dashboard text editor component, potentially allowing remote authenticated attackers to...
Threat Actor Claims to Sell 15.8 Million Plain-Text PayPal Credentials
A seller named ChuckyBF is offering 15.8M PayPal logins with emails, passwords, and URLs. The data may come…...
CVE-2025-49051
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in biscia7 Hide Text Shortcode hide-text-shortcode allows Stored XSS.This issue affects Hide Text Shortcode: from n/a through = 1.1...
CVE-2025-43983
KuWFi CPF908-CP5 WEB5.0LCD20210125 devices have multiple unauthenticated access control vulnerabilities within goform/goformsetcmdprocess and goform/goformgetcmdprocess. These allow an unauthenticated attacker to retrieve sensitive information including the device admin username and password,...
Design and Implementation of a Controlled Ransomware Framework for Educational Purposes Using Flutter Cryptographic APIs on Desktop PCs and Android Devices
This study focuses on the creation and implementation of ransomware for educational purposes that leverages Python's native cryptographic APIs in a controlled environment. Additionally, an Android version of the framework is implemented using Flutter and Dart. For both versions, open-source...
0day-buffer-overflow-in-exiv2
PoC and patch for heap-buffer-overflow in PngChunk::readRawProf...
Police Bust Crypto Scammers, Nab Smishing SMS Blaster Operator
Thai police arrest SMS Blaster operator in smishing scam and bust crypto laundering gang moving $30M monthly through…...
WordPress SMS Alert Order Notifications plugin <= 3.8.5 - SQL Injection vulnerability
SQL Injection vulnerability discovered by ChuongVN in WordPress Plugin SMS Alert Order Notifications versions = 3.8.5...
Linux Distros Unpatched Vulnerability : CVE-2023-6858
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Firefox was susceptible to a heap buffer overflow in nsTextFragment due to insufficient OOM handling. This vulnerability affects Firefox ESR 115.6, Thunderbird...
Linux Distros Unpatched Vulnerability : CVE-2020-35474
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In MediaWiki before 1.35.1, the combination of Html::rawElement and Message::text leads to XSS because the definition of...
MAL-2025-19647 Malicious code in endgame-ui-input-text (npm)
The package endgame-ui-input-text was found to contain malicious code...
MAL-2025-29368 Malicious code in planett-go-back-to-top-text (npm)
The package planett-go-back-to-top-text was found to contain malicious code...
Malicious code in format-text (npm)
The package format-text was found to contain malicious code...
Malicious code in ladder-text-js (npm)
The package ladder-text-js was found to contain malicious code...
Malicious code in planett-go-back-to-top-text (npm)
The package planett-go-back-to-top-text was found to contain malicious code...