CVE-2025-13561: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in SourceCodester Company Website CMS 1.0. This vulnerability affects unknown code of the file /admin/index.php. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...

CVE-2025-13560: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in sql injection. The attack may be launched remotely. The exploit has been made public and could be used...

SourceCodester Company Website CMS SQL注入漏洞

SourceCodester Company Website CMS is a SourceCodester open source content management system. A SQL injection vulnerability exists in SourceCodester Company Website CMS version 1.0, which originates from the incorrect operation of the parameter email in the file /admin/reset-password.php, which m...

The vulnerability of the KeeneticOS operating system, related to the lack of protection for website structures, allows attackers to perform cross-site scripting attacks and gain full control over the device.

The vulnerability of the KeeneticOS operating system is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor, operating remotely, to perform cross-site scripting attacks and gain full control over the device...

The vulnerability of the Business Process Intelligence (BPI) module of the Nagios XI monitoring tool allows a hacker to perform cross-site scripting attacks.

The vulnerability of the Business Process Intelligence BPI module of the Nagios XI monitoring tool is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Bandwidth Report component in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Bandwidth Report component in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Graph Explorer module in the Nagios XI monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Graph Explorer module in the Nagios XI monitoring tool relates to the lack of security measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Scam USPS and E-Z Pass Texts and Websites

Google has filed a complaint in court that details the scam: In a complaint filed Wednesday, the tech giant accused "a cybercriminal group in China" of selling "phishing for dummies" kits. The kits help unsavvy fraudsters easily “execute a large-scale phishing campaign,” tricking hordes of...

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool allows a hacker to execute arbitrary code.

The vulnerability of the Core Command Expansion module in the Nagios XI IT infrastructure monitoring tool is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the SAP E-Recruiting BSP software platform, which allows a hacker to redirect users to a malicious website.

The vulnerability of the SAP E-Recruiting BSP software platform in SAP S/4HANA is related to the redirection to an unreliable website. Exploitation of this vulnerability allows a malicious actor to redirect users to a malicious web site from a remote location...

The vulnerability of the Graph Explorer tool for creating custom visualizations in the Nagios XI IT infrastructure monitoring tool allows a perpetrator to perform cross-site scripting attacks.

The vulnerability of the Graph Explorer tool for creating custom visualizations in the Nagios XI monitoring infrastructure relates to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks...

The vulnerability of the Mavo web application platform, related to the lack of measures taken to protect the website structure, allows attackers to carry out XSS attacks.

The vulnerability of the Mavo web application platform is related to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to redirecting users to an unreliable website, allows a hacker to redirect users to a malicious website.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, involves redirecting users to an unreliable website. Exploiting this vulnerability allows a malicious actor to redirect users to a malicious web page remotely...

The vulnerability of the SAP Business Connector (SAP BC) application, which is related to the lack of protective measures for the website structure, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the SAP Business Connector SAP BC application, which is used for automating business processes and data processing, is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting...

The vulnerability of Nagios XI, a monitoring tool for IT infrastructure, arises due to the lack of measures taken to protect the website structure. This vulnerability allows attackers to execute XSS attacks.

The vulnerability of the Nagios XI monitoring tool exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks...

PT-2025-47464

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

CVE-2025-63878

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...

CVE-2025-63878: Improper Neutralization of Special Elements used in an SQL Command

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page...