CVE-2025-23384

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2.1, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2.1, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2.1, SCALANCE M812-1 ADSL-Router family All versions V8.2.1, SCALANCE M816...

Username Disclosure

Web Applications can sometimes expose web applications users in various places such as HTML comments, JavaScript code or API requests. By leveraging this information, an attacker can gather information and build further attacks against the target application. No source data...

Restaurant Table Booking System /admin/check_availability.php File SQL Injection Vulnerability

Restaurant Table Booking System is a restaurant table reservation system. Restaurant Table Booking System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter username in the /admin/checkavailability.php file, which can lead to SQL injection. An...

Siemens RUGGEDCOM和Siemens SCALANCE 缓冲区错误漏洞

Siemens RUGGEDCOM and Siemens SCALANCE are both products of Siemens, Germany.Siemens RUGGEDCOM is a communications device. Siemens RUGGEDCOM is a communications device that provides fast and reliable communications for the power, transportation, oil and gas, and other industries.Siemens SCALANCE ...

keycloak-services: Improper Authorization in Keycloak Organization Mapper Allows Unauthorized Organization Claims

A flaw was found in the Keycloak organization feature, which allows the incorrect assignment of an organization to a user if their username or email matches the organization’s domain pattern. This issue occurs at the mapper level, leading to misrepresentation in tokens. If an application relies o...

Username Enumeration

Flask-AppBuilder is vulnerable to Username Enumeration. The vulnerability is due to differences in server response time when brute forcing login requests, allowing unauthenticated users to enumerate existing usernames...

Quantico Tecnologia PRMV 注入漏洞

Quantico Tecnologia PRMV is an application from Quantico Tecnologia, Inc. An injection vulnerability exists in Quantico Tecnologia PRMV version 6.48, which stems from the fact that incorrect manipulation of the parameter username can lead to SQL injection...

CVE-2025-2118: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack...

PT-2025-10446

Name of the Vulnerable Software and Affected Versions Quantico Tecnologia PRMV version 6.48 Description A critical vulnerability was found in Quantico Tecnologia PRMV, affecting an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the username argument...

CVE-2025-24924

Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username...

Human Metapneumovirus Testing Management System /login.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System is vulnerable to a SQL injection vulnerability that affects the username parameter in the /login.php file. No details of the vulnerability are...

CVE-2025-24023

Flask-AppBuilder is an application development framework. Prior to 4.5.3, Flask-AppBuilder allows unauthenticated users to enumerate existing usernames by timing the response time from the server when brute forcing requests to login. This vulnerability is fixed in 4.5.3...

CVE-2025-1966

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The...

CVE-2025-24924

Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username...

PHPGurukul Pre-School Enrollment System 安全漏洞

PHPGurukul Pre-School Enrollment System is a web-based preschool enrollment system from PHPGurukul, Inc. A security vulnerability exists in PHPGurukul Pre-School Enrollment System version 1.0, which stems from an incorrect manipulation of the parameter username that can lead to SQL injection...

CVE-2025-1966: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/index.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The...

Webmin 2.202 Remote Code Execution

Webmin version 2.202 suffers from a remote code execution vulnerability. Exploit Title: Webmin RCE Leading to Privilege Escalation Google Dork: N/A Date: 05-03-2025 Exploit Author: Buğra Enis Dönmez Vendor Homepage: https://webmin.com/ Software Link: https://webmin.com/ Version: 2.202 Tested on:...

CVE-2025-24924: Missing Authentication for Critical Function

Certain functionality within GMOD Apollo does not require authentication when passed with an administrative username...

PT-2025-9732

Name of the Vulnerable Software and Affected Versions PHPGurukul Pre-School Enrollment System version 1.0 Description A critical vulnerability was found in PHPGurukul Pre-School Enrollment System. The issue affects an unknown functionality of the file /admin/index.php. Manipulation of the usernam...

Linux Distros Unpatched Vulnerability : CVE-2024-28820

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow in the extractopenvpncr function in openvpn-cr.c in openvpn-auth-ldap aka the Three Rings Auth-LDAP plugin for OpenVPN 2.0.4 allows attackers wi...