Lucene search
+L

6522 matches found

CNVD
CNVD
•added 2025/08/28 12:00 a.m.•21 views

Apartment Management System add_owner_utility.php File SQL Injection Vulnerability

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /ownerutility/addownerutility.php. An attacker can exploit...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References1
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•11 views

Linux Distros Unpatched Vulnerability : CVE-2023-35962

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Multiple OS command injection vulnerabilities exist in the decompression functionality of GTKWave 3.3.115. A specially crafted wave file can lead to arbitrary...

7.8CVSS7.4AI score0.01481EPSS
SaveExploits1References2
Snyk
Snyk
•added 2025/08/26 9:35 a.m.•11 views

Malicious Package

Overview acloud-client-uses is a malicious package. This package contains malicious code disguised as a legitimate cloud client utility, and its content has been removed from the official package manager. Its primary purpose is to steal cloud-related secrets, such as API keys and access tokens. T...

9.8CVSS7.1AI score
SaveExploits0References3
OSV
OSV
•added 2025/08/26 5:15 a.m.•17 views

CVE-2025-9472

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /ownerutility/addownerutility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public...

9.8CVSS5.8AI score0.00421EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/26 5:15 a.m.•17 views

CVE-2025-9472

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /ownerutility/addownerutility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public...

9.8CVSS0.00421EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/26 4:32 a.m.•41 views

CVE-2025-9472

CVE-2025-9472 affects itsourcecode Apartment Management System 1.0. A SQL injection flaw exists in /owner_utility/add_owner_utility.php where the ID parameter is manipulated, allowing remote exploitation. Public exploits exist per multiple sources, indicating potential real-world abuse. Connected...

9.8CVSS7.5AI score0.00421EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/26 4:32 a.m.•28 views

CVE-2025-9472 itsourcecode Apartment Management System add_owner_utility.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /ownerutility/addownerutility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public...

7.5CVSS0.00421EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/08/26 4:32 a.m.•12 views

CVE-2025-9472 itsourcecode Apartment Management System add_owner_utility.php sql injection

A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /ownerutility/addownerutility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public...

7.5CVSS7.7AI score0.00421EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2025/08/26 12:00 a.m.•17 views

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in parameter ID in file /ownerutility/addownerutility.php. An attacker can exploit...

9.8CVSS7.9AI score0.00421EPSS
SaveExploits1References6
Tenable Nessus
Tenable Nessus
•added 2025/08/26 12:00 a.m.•7 views

RHEL 10 : aide (RHSA-2025:14592)

The remote Redhat Enterprise Linux 10 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:14592 advisory. Advanced Intrusion Detection Environment AIDE is a utility that creates a database of files on the system, and then uses that database to ensure fi...

6.2CVSS7.5AI score0.00238EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2025/08/26 12:00 a.m.•18 views

PT-2025-34739

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists due to the manipulation of the ID argument in the processing of the /owner utility/add owner utility.php file. This can be exploited remotely. The...

7.5CVSS7.4AI score0.00421EPSS
SaveExploits1References11
Redos
Redos
•added 2025/08/25 12:00 a.m.•10 views

ROS-20250825-01

Vulnerability of Srio archiving utility is related to errors in TAR file header verification. Exploitation of the vulnerability could allow an attacker to escalate his privileges...

7.3CVSS6.7AI score0.00686EPSS
SaveExploits1
Packet Storm News
Packet Storm News
•added 2025/08/25 12:00 a.m.•19 views

$AutoGuardX$: a Comprehensive Cybersecurity Framework for Connected Vehicles

The rapid integration of Internet of Things IoT and interconnected systems in modern vehicles not only introduced a new era of convenience, automation, and connected vehicles but also elevated their exposure to sophisticated cyber threats. This is especially evident in US and Canada, where...

7.3AI score
SaveExploits0
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•18 views

Moxa Utility for DRP-A100 Series 安全漏洞

Moxa Utility for DRP-A100 Series is a software tool from Moxa Corporation, Taiwan, China, that simplifies the configuration and management of the device. A security vulnerability exists in Moxa Utility for DRP-A100 Series, which stems from an un-referenced path configuration in...

7.3CVSS8.4AI score0.0015EPSS
SaveExploits0References2
Packet Storm News
Packet Storm News
•added 2025/08/22 12:00 a.m.•10 views

Retrieval-Augmented Defense: Adaptive and Controllable Jailbreak Prevention for Large Language Models

Large Language Models LLMs remain vulnerable to jailbreak attacks, which attempt to elicit harmful responses from LLMs. The evolving nature and diversity of these attacks pose many challenges for defense systems, including 1 adaptation to counter emerging attack strategies without costly...

7.2AI score
SaveExploits0
Cvelist
Cvelist
•added 2025/08/20 3:39 p.m.•35 views

CVE-2011-10028 RealNetworks Arcade Games StubbyUtil.ProcessMgr ActiveX Arbitrary Code Execution

The RealNetworks RealArcade platform includes an ActiveX control InstallerDlg.dll, version 2.6.0.445 that exposes a method named Exec via the StubbyUtil.ProcessMgr COM object. This method allows remote attackers to execute arbitrary commands on a victim's Windows machine without proper validation...

8.7CVSS0.0163EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
•added 2025/08/20 8:29 a.m.•17 views

Important: Red Hat Security Advisory: libarchive security update

An update for libarchive is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

7.8CVSS6.7AI score0.00444EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2025/08/20 12:00 a.m.•12 views

Apache EventMesh 安全漏洞

Apache EventMesh is a new generation of serverless event middleware from the Apache Foundation for building distributed event-driven applications. A security vulnerability exists in Apache EventMesh, which stems from a server-side request forgery vulnerability in WebhookUtil.java that could resul...

6.3CVSS6.6AI score0.00404EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2025/08/20 12:00 a.m.•10 views

The vulnerability of the gf_isom_vp_config_new function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomvpconfignew function in the MP4Box utility of the GPAC multimedia platform is related to buffer overflow attacks. Exploiting this vulnerability can allow attackers to cause service failures...

5.5CVSS6.1AI score
SaveExploits0References3Affected Software2
BDU FSTEC
BDU FSTEC
•added 2025/08/20 12:00 a.m.•9 views

The vulnerability of the gf_isom_get_user_data_count function in the MP4Box utility of the GPAC multimedia platform allows a hacker to cause a service failure.

The vulnerability of the gfisomgetuserdatacount function in the MP4Box utility of the GPAC multimedia platform is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...

5.5CVSS5.8AI score
SaveExploits0References3Affected Software2
Rows per page
Query Builder