2025

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt FoodMenu al

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ZoomIt WooCommerce

Server-Side Request Forgery (SSRF) vulnerability in PressForward PressForward pressforward allows Server Side Request Fo

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in redqteam Alike - W

Missing Authorization vulnerability in stefanoai Advanced Google Universal Analytics advanced-google-universal-analytics

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Unrestricted Upload of File with Dangerous Type vulnerability in Made I.T. Forms forms-by-made-it allows Upload a Web Sh

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

A vulnerability was found in D-Link DIR‑818L up to 1.05B01. This issue affects the function getenv of the file /htdocs/c

A vulnerability has been found in PHPGurukul Hospital Management System 4.0. This vulnerability affects unknown code of

The Custom MCPs feature is designed to execute OS commands, for instance, using tools like `npx` to spin up local MCP Se

The disable-right-click-powered-by-pixterme through v1.2 and pixter-image-digital-license thtough v1.0 WordPress plugins

Lepszy BIP is vulnerable to Reflected Cross-Site Scripting (XSS). Improper input validation in index.php form in one of

User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to

A vulnerability was identified in PHPGurukul Hospital Management System 4.0. This affects an unknown part of the file /a

A vulnerability was determined in SourceCodester COVID 19 Testing Management System 1.0. Affected by this issue is some

A vulnerability was found in Campcodes Online Flight Booking Management System 1.0. Affected by this vulnerability is an

The PPWP – Password Protect Pages WordPress plugin before version 1.9.11 allows to put the site content behind a passwor

Unlimited memory allocation in redis protocol parser in Apache bRPC (all versions < 1.14.1) on all platforms allows atta

Ambiguous wording in the web interface of the ctrlX OS setup mechanism could lead the user to believe that the backup fi

A vulnerability in the Task API endpoint of the ctrlX OS setup mechanism allowed a remote, unauthenticated attacker to a

A vulnerability in the web application of the ctrlX OS setup mechanism facilitated an authenticated (low privileged) att

A vulnerability has been found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of t

A vulnerability was identified in Campcodes Online Recruitment Management System 1.0. This issue affects some unknown pr

Loading arbitrary external URLs through WebView components introduces malicious JS code that can steal arbitrary user to

A vulnerability was identified in D-Link DIR-825 2.10. Affected by this vulnerability is the function get_ping_app_stat

A vulnerability was determined in projectworlds Visitor Management System 1.0. Affected is an unknown function of the fi

A vulnerability was found in projectworlds Visitor Management System 1.0. This issue affects some unknown processing of

A vulnerability has been found in projectworlds Online Notes Sharing Platform 1.0. This vulnerability affects unknown co

A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this vulnerability is the function strcpy of

A vulnerability was determined in Tenda AC20 up to 16.03.08.12. Affected is an unknown function of the file /goform/Wifi

The Injection Guard WordPress plugin before 1.2.8 does not escape the $_SERVER['REQUEST_URI'] parameter before outputtin

The WP Shopify WordPress plugin before 1.5.4 does not sanitise and escape a parameter before outputting it back in the p

The Quiz and Survey Master (QSM) WordPress plugin before 10.2.3 does not have CSRF check in place when updating its set

The Structured Content (JSON-LD) #wpsc WordPress plugin before 1.7.0 does not validate and escape some of its block opti

A vulnerability was found in TOTOLINK N350R 1.2.3-B20130826. This issue affects the function formSysTel of the file /boa

A vulnerability has been found in TOTOLINK N350R 1.2.3-B20130826. This vulnerability affects unknown code of the file /b

A vulnerability was determined in 1000 Projects Sales Management System 1.0. Affected by this issue is some unknown func

Netskope was notified about a potential gap in its agent (NS Client) on Windows systems. If this gap is successfully ex

Netskope is notified about a potential gap in its agent (NS Client) in which a malicious actor could trigger a memory le

An insufficient validation on the server connection endpoint in Netskope Client allows local users to elevate privileges

Netskope has identified a potential gap in its agent (Netskope Client) in which a malicious insider can potentially tamp

A vulnerability was found in 1000 Projects Sales Management System 1.0. Affected by this vulnerability is an unknown fun

A vulnerability has been found in 1000 Projects Sales Management System 1.0. Affected is an unknown function of the file

A vulnerability was identified in 1000 Projects Sales Management System 1.0. This issue affects some unknown processing

A vulnerability was determined in 1000 Projects Sales Management System 1.0. This vulnerability affects unknown code of

A vulnerability was determined in code-projects Medical Store Management System 1.0. Affected is an unknown function of

A vulnerability was found in code-projects Medical Store Management System 1.0. This issue affects some unknown processi