3403 matches found
EUVD-2025-205359
A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...
CVE-2025-15073
A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...
CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection
A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...
CVE-2025-15073 itsourcecode Online Frozen Foods Ordering System contact_us.php sql injection
A vulnerability was determined in itsourcecode Online Frozen Foods Ordering System 1.0. This affects an unknown part of the file /contactus.php. This manipulation of the argument Name causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and...
itsourcecode Online Frozen Foods Ordering System SQL注入漏洞
itsourcecode Online Frozen Foods Ordering System is itsourcecode open source online frozen food ordering system . A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Frozen Foods Ordering System, which stems from an incorrect manipulation of the parameter Name in the file...
PT-2025-53382
Name of the Vulnerable Software and Affected Versions itsourcecode Online Frozen Foods Ordering System version 1.0 Description A SQL injection issue exists in itsourcecode Online Frozen Foods Ordering System version 1.0. The issue is located in the /contact us.php file. Manipulation of the Name...
CVE-2025-20384
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...
CVE-2025-20384
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...
CVE-2025-20384: Improper Output Neutralization for Logs
In Splunk Enterprise versions below 10.0.1, 9.4.6, 9.3.8, and 9.2.10, and Splunk Cloud Platform versions below 10.1.2507.4, 10.0.2503.6, and 9.3.2411.117.125, an unauthenticated attacker can inject American National Standards Institute ANSI escape codes into Splunk log files due to improper...
EUVD-2025-135012
Malicious code in us-setya-rusmaya npm...
EUVD-2025-135013
Malicious code in us-setya-rusmaya npm...
Malicious code in us-setya-rusmaya (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 689984e4351fb193f70b7c0a51fdd2b804621220342dabd64d8390dd1f8973d8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-146496
Malicious code in verify-ain-us npm...
Malicious code in verify-ain-us (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-170316 Malicious code in verify-ain-us (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 744ca877baa45f737af0da700786e4c08b94bcce8b2e82790e2571fcf56b805c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Multi-Vendor BIOS Security Vulnerabilities (November, 2025) - Lenovo Support US
No description provided...
MediaTek 2025-11 WLAN Vulnerabilities - Lenovo Support US
No description provided...
Malicious code in agus-serabi22-riris (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 70d390bd8adb47eb7346b4d5525c3b7d8e86eb0172f291f1d8d764c4e68c3a89 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Investigating targeted “payroll pirate” attacks affecting US universities
Microsoft Threat Intelligence has observed a financially motivated threat actor that we track as Storm-2657 compromising employee accounts to gain unauthorized access to employee profiles and divert salary payments to attacker-controlled accounts. These types of attacks have been dubbed “payroll...