2025

A vulnerability classified as critical was found in SourceCodester Online Hotel Reservation System 1.0. This vulnerabili

A vulnerability classified as critical has been found in SourceCodester Online Hotel Reservation System 1.0. This affect

A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as critical. Affected by this issue is s

A vulnerability was found in code-projects Wazifa System 1.0. It has been declared as critical. Affected by this vulnera

A vulnerability was found in code-projects Online Farm System 1.0. It has been classified as critical. Affected is an un

The SEO Metrics plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks in both t

Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "repor

Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows

Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remo

Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and per

1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server

An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware ver

An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware ve

An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmwa

An OS command injection vulnerability exists in multiple D-Link routers (confirmed on DIR-300 rev A v1.05 and DIR-615 re

An authenticated SQL injection vulnerability exists in OpenEMR ≤ 4.1.1 Patch 14 that allows a low-privileged attacker to

Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

Alpine iLX-507 TIDAL Improper Certificate Validation Vulnerability. This vulnerability allows network-adjacent attackers

Alpine iLX-507 AVRCP Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-

Alpine iLX-507 vCard Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows

A privileged Vault operator with write permissions to the root namespace’s identity endpoint could escalate their own or

Pearcleaner is a free, source-available and fair-code licensed mac app cleaner. The PearcleanerHelper is a privileged he

FreshRSS is a free, self-hostable RSS aggregator. In versions 1.26.1 and below, an authenticated administrator user can

uploadsm in ChargePoint Home Flex 5.5.4.13 does not validate a user-controlled string for bz2 decompression, which allow

MaterialX is an open standard for the exchange of rich material and look-development content across applications and ren

MaterialX is an open standard for the exchange of rich material and look-development content across applications and ren

MaterialX is an open standard for the exchange of rich material and look-development content across applications and ren

MaterialX is an open standard for the exchange of rich material and look-development content across applications and ren

IBM Operational Decision Manager 8.11.0.1, 8.11.1.0, 8.12.0.1, 9.0.0.1, and 9.5.0 could allow a remote attacker to condu

A flaw was found in the Linux kernel's ksmbd component. A race condition between smb2 close operation and logoff in mult

Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last n

Insecure permissions in the script /etc/init.d/lighttpd in AK-Nord USB-Server-LXL Firmware v0.0.16 Build 2023-03-13 allo

SQL Injection vulnerability in Restaurant Order System 1.0 allows a local attacker to obtain sensitive information via t

Emlog Pro V2.5.7 is vulnerable to Unrestricted Upload of File with Dangerous Type via /emlog/admin/plugin.php?action=upl

jose v6.0.10 was discovered to contain weak encryption. NOTE: this is disputed by a third party because the claim of "do

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A SQL injection vulnerability has been found in Gandia Integra Total of TESI from version 2.1.2217.3 to v4.4.2236.1. The

A vulnerability was found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this issue

A vulnerability has been found in code-projects Online Medicine Guide 1.0 and classified as critical. Affected by this v

A vulnerability, which was classified as critical, was found in code-projects Online Medicine Guide 1.0. Affected is an

A vulnerability, which was classified as critical, has been found in code-projects Wazifa System 1.0. This issue affects

A vulnerability classified as critical was found in code-projects Wazifa System 1.0. This vulnerability affects unknown

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown par

A vulnerability was found in projectworlds Online Admission System 1.0. It has been rated as critical. Affected by this

A vulnerability was found in code-projects Online Movie Streaming 1.0. It has been declared as critical. Affected by thi

The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Str