PHPGurukul Zoo Management System 安全漏洞

Zoo Management System is a zoo management system. Zoo Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter cnum in the file /admin/add-animals.php. An attacker can exploit this vulnerability ...

Code-Projects Jonnys Liquor 注入漏洞

jonnys Liquor is a content and management system. jonnys Liquor suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter drink in file /admin/admin-area.php. An attacker can exploit this vulnerability to execute...

code-projects Library System 安全漏洞

Library System is a library system. The Library System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter Username in the file /add-student.php for externally entered SQL statements. An attacker can exploit this vulnerability to execute illegal SQL...

Simple forum register1.php file SQL Injection Vulnerability

Simple forum is a simple forum. Simple forum suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter User in the file /register1.php. An attacker can exploit this vulnerability to execute illegal SQL commands to...

GStreamer 安全漏洞

GStreamer is a GStreamer open source set of frameworks for processing streaming media. A security vulnerability exists in GStreamer that stems from parsing H266 sei messages without properly validating the length of user-supplied data, which could lead to remote code execution...

WeGIA SQL注入漏洞

WeGIA is a web manager for welfare organizations. WeGIA suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements by the almox parameter. An attacker can exploit this vulnerability to execute illegal SQL commands to steal sensitive databa...

Library System student-issue-book.php File SQL Injection Vulnerability

Library System is a library system. The Library System suffers from an SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter reg in the file /student-issue-book.php. An attacker can exploit this vulnerability to execute illeg...

CVE-2025-53483

The CVE-2025-53483 issue affects the MediaWiki SecurePoll extension and is triggered by pages ArchivePage.php, UnarchivePage.php, and VoterEligibilityPage::executeClear() not validating request methods or CSRF tokens. The vulnerability enables CSRF to trigger sensitive admin actions when an admin...

Staff Audit System /search_index.php File SQL Injection Vulnerability

Staff Audit System is an employee audit system. Staff Audit System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter Search in the file /searchindex.php. An attacker can exploit this vulnerability to execut...

Daily Expense Manager User Enumeration Vulnerability

Daily Expense Manager is a daily expense management system. Daily Expense Manager suffers from a user enumeration vulnerability that stems from the unvalidated parameter name in the file /check.php, no details of the vulnerability are available at this time...

Student Record System register.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter session in the file /register.php. An attacker can exploit this vulnerability to execute...

Student Record System manage-students.php File SQL Injection Vulnerability

Student Record System is a software application. Student Record System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter del in the file /manage-students.php. An attacker can exploit this vulnerability to...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from unvalidated userspace parameters, which could lead to resource management issues...

Simple Pizza Ordering System editcus.php File SQL Injection Vulnerability

Simple Pizza Ordering System is a simple pizza ordering system. Simple Pizza Ordering System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the parameter ID of the file /editcus.php. An attacker can exploit this vulnerabilit...

OP-TEE Trusted OS 安全漏洞

OP-TEE Trusted OS is an OP-TEE open source Trusted Execution Environment TEE that implements Arm TrustZone technology. A security vulnerability exists in OP-TEE Trusted OS version 4.5.0, which stems from an unvalidated Secure Storage API return code that could cause the TA to crash...

Linkwarden 安全漏洞

Linkwarden is a self-hosted collaborative bookmark manager from Linkwarden Open Source. A security vulnerability exists in Linkwarden version 2.10.2, which stems from an unvalidated file:// link and could lead to a data leak...

Cinnamon kotaemon 路径遍历漏洞

Cinnamon kotaemon is a RAG-based open source tool from Cinnamon Open Source. A path traversal vulnerability exists in Cinnamon kotaemon version 0.10.6 and earlier, which stems from unvalidated URLs and local file paths, and could lead to directory traversal and data disclosure...

CVE-2025-53107

CVE-2025-53107 affects the Serverless/MCP server package used by cyanheads/git-mcp-server. The vulnerability is a command injection in which input parameters are unsafely incorporated into shell commands via child_process.exec, enabling an attacker to inject arbitrary commands and potentially ach...

PT-2025-27539 · Avtech · Avtech Dvr +2

Name of the Vulnerable Software and Affected Versions: AVTECH DVR, NVR, and IP camera devices affected versions not specified Description: An OS command injection issue exists within the "adcommand.cgi" endpoint, which interfaces with the ActionD daemon. Authenticated users can invoke the...

GHSA-3Q26-F695-PP76 @cyanheads/git-mcp-server vulnerable to command injection in several tools

Summary A command injection vulnerability exists in the git-mcp-server MCP Server. The vulnerability is caused by the unsanitized use of input parameters within a call to childprocess.exec, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code...