GHSA-G5X8-V2CH-GJ2G Vaultwarden HTML injection vulnerability

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...

Vaultwarden HTML injection vulnerability

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...

CVE-2024-55224

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...

PT-2025-3102 · Unknown · Vaultwarden

Name of the Vulnerable Software and Affected Versions: Vaultwarden versions prior to 1.32.5 Description: The issue allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message. This is an HTML injection vulnerability. Recommendations: For...

CVE-2024-55224

The Vaultwarden server (an unofficial Bitwarden compatible server) is vulnerable to an HTML injection vulnerability in versions prior to v1.32.5 . Attackers can exploit this by injecting a crafted payload into the username field of an e-mail message, which may lead to arbitrary code execution . R...

CVE-2024-55224

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...

CVE-2024-55224: Improper Neutralization of Input During Web Page Generation

An HTML injection vulnerability in Vaultwarden prior to v1.32.5 allows attackers to execute arbitrary code via injecting a crafted payload into the username field of an e-mail message...

Vaultwarden 安全漏洞

Vaultwarden is an alternative implementation of the Bitwarden server API written in Rust by Daniel García Personal Developer. A security vulnerability exists in Vaultwarden versions prior to v1.32.5. An attacker exploiting this vulnerability could execute arbitrary code by injecting a specially...

DRUPAL-CONTRIB-2025-001

This module enables you to do Two-Factor Authentication by email, using a user registered email to send a verification code to the user's email every time the user tries to log in to your site. The module did not sufficiently protect against brute force attacks, allowing an attacker to bypass the...

Campcodes School Faculty Scheduling System 注入漏洞

Campcodes School Faculty Scheduling System is a school faculty scheduling system from Campcodes. An injection vulnerability exists in Campcodes School Faculty Scheduling System version 1.0, which stems from the parameter username in the file /admin/ajax.php?action=login that can cause SQL injecti...

PT-2025-3774 · Code Projects · Code-Projects Point Of Sales/Inventory Management System

Name of the Vulnerable Software and Affected Versions: code-projects Point of Sales and Inventory Management System version 1.0 Description: A critical issue was found in the system, affecting some unknown functionality of the file /user/update account.php. The manipulation of the username argume...

Code-Projects Point of Sales and Inventory Management System 注入漏洞

Code-Projects Point of Sales and Inventory Management System is an open source point of sale and inventory management system from Code-Projects. An injection vulnerability exists in Code-Projects Point of Sales and Inventory Management System version 1.0, which originates from an SQL injection...

CVE-2025-0210: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes School Faculty Scheduling System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the argument username leads to sql injection. The attack can be...

CVE-2025-0201: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Point of Sales and Inventory Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user/updateaccount.php. The manipulation of the argument username leads to sql injection. The attack may be...

PT-2025-3782

Name of the Vulnerable Software and Affected Versions Campcodes School Faculty Scheduling System version 1.0 Description A critical issue has been found in the system, affecting an unknown functionality of the file /admin/ajax.php?action=login. The manipulation of the username argument leads to S...

PT-2025-51216

Name of the Vulnerable Software and Affected Versions allauth-django versions prior to 65.13.0 Description An issue exists in allauth-django where Okta and NetIQ were utilizing the preferred username value as an identifier for third-party provider accounts. This value is mutable and should not be...

PT-2024-17929 · Unknown · Phpgurukul Land Record System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Land Record System version 1.0 Description: A critical issue has been found in the PHPGurukul Land Record System, affecting some unknown functionality of the file /admin/login.php. The manipulation of the username argument leads to...

PHPGurukul Land Record System 安全漏洞

PHPGurukul Land Record System is a land management system from PHPGurukul Inc. A security vulnerability exists in PHPGurukul Land Record System version 1.0 due to a SQL injection in the parameter username...

CVE-2024-13085: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in PHPGurukul Land Record System 1.0. Affected by this issue is some unknown functionality of the file /admin/login.php. The manipulation of the argument username leads to sql injection. The attack may be launched remotely. The...

CVE-2024-13028 Antabot White-Jotter login observable response discrepancy

A vulnerability, which was classified as problematic, has been found in Antabot White-Jotter up to 0.2.2. This issue affects some unknown processing of the file /login. The manipulation of the argument username leads to observable response discrepancy. The attack may be initiated remotely. The...