Lucene search
K

46 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/26 1:0 a.m.8 views

Malicious code in weavedb-offchain (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d267c34e35dca7091a9ab01d22a9c0a4cfde364531b8017f15f4a09785381198 package.json declares scripts.preinstall: "./.github/scripts/precheck", where precheck is a 976,568-byte stripped Linux ELF binary sha256...

5.9AI score
Exploits0References1
CNVD
CNVD
added 2025/12/31 12:0 a.m.5 views

College Notes Uploading System Code Issue Vulnerability

College Notes Uploading System is a college notes uploading system. College Notes Uploading System has a code issue vulnerability that stems from an unknown function in the /dashboard/userprofile.php file that mishandles the image parameter. An attacker can exploit this vulnerability to upload...

8.8CVSS6.7AI score0.00034EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/29 9:30 p.m.2 views

EUVD-2025-205637

A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprofile.php. The manipulation of the argument image leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit h...

6.5CVSS6.2AI score0.00034EPSS
Exploits0References6
Cvelist
Cvelist
added 2025/12/29 6:2 p.m.22 views

CVE-2025-15199 code-projects College Notes Uploading System userprofile.php unrestricted upload

A security vulnerability has been detected in code-projects College Notes Uploading System 1.0. Impacted is an unknown function of the file /dashboard/userprofile.php. The manipulation of the argument image leads to unrestricted upload. Remote exploitation of the attack is possible. The exploit h...

6.5CVSS0.00034EPSS
Exploits0References5
CVE
CVE
added 2025/12/29 6:2 p.m.5 views

CVE-2025-15199

CVE-2025-15199 affects code-projects College Notes Uploading System 1.0. The vulnerability exists in an unknown function handling the image parameter in /dashboard/userprofile.php, enabling unrestricted file upload. Remote exploitation is possible; exploits have been publicly disclosed and may be...

8.8CVSS6.2AI score0.00034EPSS
Exploits0References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/12/29 12:0 a.m.2 views

PT-2025-53773

Name of the Vulnerable Software and Affected Versions code-projects College Notes Uploading System version 1.0 Description A security issue exists in code-projects College Notes Uploading System 1.0. The manipulation of the image argument in an unknown function within the /dashboard/userprofile.p...

8.8CVSS6.1AI score0.00034EPSS
Exploits0References11
EUVD
EUVD
added 2025/11/07 6:30 p.m.2 views

EUVD-2025-38264

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

6.5CVSS6.3AI score0.0006EPSS
Exploits1References5
OSV
OSV
added 2025/11/07 5:15 p.m.1 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS5.5AI score0.0006EPSS
Exploits1References5
NVD
NVD
added 2025/11/07 5:15 p.m.2 views

CVE-2025-12862

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

9.8CVSS0.0006EPSS
Exploits1References5
Cvelist
Cvelist
added 2025/11/07 4:32 p.m.9 views

CVE-2025-12862 projectworlds Online Notes Sharing Platform userprofile.php unrestricted upload

A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of the file /dashboard/userprofile.php. Such manipulation of the argument image leads to unrestricted upload. The attack may be performed from remote. The exploi...

6.5CVSS0.0006EPSS
Exploits1References5
CVE
CVE
added 2025/11/07 4:32 p.m.20 views

CVE-2025-12862

CVE-2025-12862 affects projectworlds Online Notes Sharing Platform 1.0. The vulnerability is in the file /dashboard/userprofile.php where manipulation of the image argument enables unrestricted file uploads. The issue is exploitable remotely and an exploit is publicly available. Multiple connecte...

9.8CVSS6.3AI score0.0006EPSS
Exploits1References5Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45467

Name of the Vulnerable Software and Affected Versions projectworlds Online Notes Sharing Platform version 1.0 Description A flaw exists in projectworlds Online Notes Sharing Platform that allows for unrestricted file uploads. This issue is related to the manipulation of the image argument within...

6.5CVSS6.1AI score0.0006EPSS
Exploits1References6
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.1 views

Projectworlds Online Notes Sharing Platform 安全漏洞

Projectworlds Online Notes Sharing Platform is an online notes sharing platform from Projectworlds India. A security vulnerability exists in Projectworlds Online Notes Sharing Platform version 1.0, which stems from an incorrect manipulation of the parameter image in the file...

9.8CVSS6.5AI score0.0006EPSS
Exploits1References5
RedhatCVE
RedhatCVE
added 2025/09/05 12:34 a.m.3 views

CVE-2025-57151

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...

8.8CVSS6.3AI score0.00144EPSS
Exploits1References1
CNVD
CNVD
added 2025/09/05 12:0 a.m.0 views

Complaint Management System userprofile.php file cross-site scripting vulnerability

Complaint Management System is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the fullname parameter of admin/userprofile.php, for which no detailed...

8.8CVSS6.2AI score0.00144EPSS
Exploits1References1
CNNVD
CNNVD
added 2025/09/03 12:0 a.m.1 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System is a complaint management system. A cross-site scripting vulnerability exists in Complaint Management System, which stems from a lack of effective filtering and escaping of user-supplied data in the fullname parameter of admin/userprofile.php, for which no detailed...

8.8CVSS6.2AI score0.00144EPSS
Exploits1References2
CVE
CVE
added 2025/09/03 12:0 a.m.9 views

CVE-2025-57151

CVE-2025-57151 affects phpgurukul Complaint Management System 2.0. The vulnerability is a reflected/stored Cross-Site Scripting (XSS) in admin/userprofile.php triggered via the fullname parameter due to insufficient filtering/escaping of user-supplied data. CVSSv3.1 base score 8.8 (HIGH) with net...

8.8CVSS5.7AI score0.00144EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2025/09/03 12:0 a.m.5 views

CVE-2025-57151

phpgurukul Complaint Management System 2.0 is vulnerable to Cross Site Scripting XSS in admin/userprofile.php via the fullname parameter...

0.00144EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2025/09/03 12:0 a.m.1 views

PT-2025-35727

Name of the Vulnerable Software and Affected Versions: phpgurukul Complaint Management System version 2.0 Description: The phpgurukul Complaint Management System is susceptible to a Cross-Site Scripting XSS issue in the admin/userprofile.php file. The vulnerability is triggered through the fullna...

8.8CVSS5.7AI score0.00144EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/07/07 12:0 a.m.1 views

Code-Projects Online Note Sharing 代码问题漏洞

Code-Projects Online Note Sharing is an online note sharing software from Code-Projects open source. A code issue vulnerability exists in Code-Projects Online Note Sharing version 1.0, which stems from improper handling of the parameter image in the file /dashboard/userprofile.php, which could le...

8.8CVSS6.6AI score0.00384EPSS
Exploits1References6
Rows per page
Query Builder