MAL-2025-25136 Malicious code in lemon-xray-romeo-qundn (npm)

The package lemon-xray-romeo-qundn was found to contain malicious code...

MAL-2025-39968 Malicious code in xray-sierra-fyfv (npm)

The package xray-sierra-fyfv was found to contain malicious code...

MAL-2025-14397 Malicious code in alpha-xray-mango-onsij (npm)

The package alpha-xray-mango-onsij was found to contain malicious code...

MAL-2025-39941 Malicious code in xray-golf-uniform-rukmr (npm)

The package xray-golf-uniform-rukmr was found to contain malicious code...

MAL-2025-26369 Malicious code in mike-xray-kanv (npm)

The package mike-xray-kanv was found to contain malicious code...

MAL-2025-38131 Malicious code in vanilla-xray-0kbw (npm)

The package vanilla-xray-0kbw was found to contain malicious code...

MAL-2025-24181 Malicious code in kale-xray-0qcg (npm)

The package kale-xray-0qcg was found to contain malicious code...

MAL-2025-39939 Malicious code in xray-ginkgo-tttz (npm)

The package xray-ginkgo-tttz was found to contain malicious code...

Patient Record Management System xray_form.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2025-7754

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /xrayform.php. The manipulation of the argument itrno leads to sql injection. The attack can be initiated remotely. The exploit ha...

Code-Projects Patient Record Management System 注入漏洞

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from improper handling of the parameter itrno in the file /xrayform.php, which can be exploited by an attacker to bypass authenticati...

CVE-2023-41595

An issue in xui-xray v1.8.3 allows attackers to obtain sensitive information via default password...

CVE-2022-41950

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...

CVE-2022-41945

super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ​​into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...

CVE-2021-21652

A cross-site request forgery CSRF vulnerability in Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2021-21653

Jenkins Xray - Test Management for Jira Plugin 2.4.0 and earlier does not perform a permission check in an HTTP endpoint, allowing with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...

CVE-2019-19679

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue...

CVE-2019-19678

In "Xray Test Management for Jira" prior to version 3.5.5, remote authenticated attackers can cause XSS in the generic field entry point via the Generic Test Definition field of a new Generic Test issue...

Patient Record Management System xray_print.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that originates from a missing validation of externally entered SQL statements in the parameter itrno of the xrayprint.php file. The vulnerability ca...

CVE-2025-3208

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /xrayprint.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack remotely. The exploit...