DVWA-Web-Vulnerability-Project

...

CVE-2021-22792

A CWE-476: NULL Pointer Dereference vulnerability that could cause a Denial of Service on the Modicon PLC controller / simulator when updating the controller application with a specially crafted project file exists in Modicon M580 CPU part numbers BMEP and BMEH, all versions, Modicon M340 CPU par...

EUVD-2016-3092

Malware in sbrugna...

EUVD-2020-5565

Malware in sbrugna...

EUVD-2022-26442

Malicious code in bioql PyPI...

EUVD-2022-51500

Malicious code in bioql PyPI...

CVE-2024-33832

creationtimestamp| type| source ---|---|--- 2025-07-17 11:51:46+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-33832.yaml 2025-07-18 21:02:27+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lubdsqw3eh2q...

CVE-2024-0726

A vulnerability was found in Project Worlds Student Project Allocation System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file adminlogin.php of the component Admin Login Module. The manipulation of the argument msg with the input...

CVE-2024-0650

A vulnerability was found in Project Worlds Visitor Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file dataset.php of the component URL Handler. The manipulation of the argument name with the input " leads to cross site scripting. It is...

CVE-2023-30550

MeterSphere is an open source continuous testing platform, covering functions such as test tracking, interface testing, UI testing, and performance testing. This IDOR vulnerability allows the administrator of a project to modify other projects under the workspace. An attacker can obtain some...

CVE-2019-15732

An issue was discovered in GitLab Community and Enterprise Edition 12.2 through 12.2.1. The project import API could be used to bypass project visibility restrictions...

CVE-2024-2473

creationtimestamp| type| source ---|---|--- 2025-05-15 07:24:21+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-2473.yaml 2025-05-15 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpafxtmgqd2a 2026-01-27...

CVE-2025-3174 Project Worlds Online Lawyer Management System searchLawyer.php sql injection

A vulnerability has been found in Project Worlds Online Lawyer Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /searchLawyer.php. The manipulation of the argument experience leads to sql injection. The attack can be launched...

CVE-2024-10432

A vulnerability has been found in Project Worlds Simple Web-Based Chat Application 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument username leads to sql injection. The attack can be launched...

CVE-2021-34630

creationtimestamp| type| source ---|---|--- 2024-12-02 11:23:41+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-34630.yaml...

CVE-2024-50334

creationtimestamp| type| source ---|---|--- 2024-10-29 17:17:22+00:00| seen| https://t.me/cvedetector/9337 2025-07-05 02:03:26+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2024/CVE-2024-50334.yaml 2025-07-07 21:02:22+00:00| seen|...

CVE-2021-45422

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-45422.yaml 2025-03-19 20:18:09+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8140 2025-06-05...

CVE-2021-24316

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24316.yaml...

CVE-2021-37304

creationtimestamp| type| source ---|---|--- 2023-02-03 20:20:57+00:00| seen| https://t.me/cibsecurity/57478 2023-05-18 01:00:13+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-37304.yaml 2025-03-26 16:25:31+00:00| published-proof-of-concept...

CVE-2022-2896 Measuresoft ScadaPro Server Use After Free

Measuresoft ScadaPro Server All Versions allows use after free while processing a specific project file...