2025

Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The

The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malici

Stored cross-site scripting (XSS) vulnerability in the notifications widget in Liferay Portal 7.4.0 through 7.4.3.112, a

A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unk

A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unkno

Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary fil

Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users

Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared

AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access

The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability. By sending a crafted POS

Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This s

Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When access

IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute co

IBM webMethods Integration 10.15 and 11.1 is vulnerable to server-side request forgery (SSRF). This may allow an authe

Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Ins

Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A r

A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of

A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknow

Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Es

A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of

A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administr

A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing

A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticket

Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function i

A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unkno

A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function

Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URL

The txtai framework allows the loading of compressed tar files as embedding indices. While the validate function is inte

A security flaw has been discovered in code-projects Hostel Management System 1.0. The affected element is an unknown fu

A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the fil

A vulnerability was determined in code-projects Hostel Management System 1.0. This issue affects some unknown processing

A vulnerability was found in code-projects Hostel Management System 1.0. This vulnerability affects unknown code of the

GALAYOU G2 cameras stream video output via RTSP streams. By default these streams are protected by randomly generated cr

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger NULL pointer derefe

A vulnerability has been found in code-projects Online Bidding System 1.0. This affects an unknown part of the file /adm

A flaw has been found in PHPGurukul Car Rental Project 3.0. Affected by this issue is some unknown functionality of the

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Horato Inte

Software installed and run as a non-privileged user may conduct improper GPU system calls to trigger use-after-free kern

A vulnerability was detected in code-projects E-Commerce Website 1.0. Affected by this vulnerability is an unknown funct

A security vulnerability has been detected in D-Link DIR-513 A1FW110. Affected is an unknown function of the file /gofor

Incorrect handling of uploaded files in the admin "Restore" function in Invoice Ninja <= 5.11.72 allows attackers with a

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Akıllı Tica

A weakness has been identified in code-projects Online Bidding System 1.0. This impacts an unknown function of the file

A security flaw has been discovered in SourceCodester Simple Forum Discussion System 1.0. This affects an unknown functi

A flaw was found in the Lightspeed history service. Insufficient access controls allow a local, unprivileged user to acc

A vulnerability was identified in SourceCodester Online Hotel Reservation System 1.0. The impacted element is an unknown

A vulnerability was determined in SourceCodester Online Hotel Reservation System 1.0. The affected element is an unknown

Authorization Bypass Through User-Controlled Key vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. C

A vulnerability was found in MuYuCMS up to 2.7. Impacted is an unknown function of the file /index/index.html of the com

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of th