Dotkliwość: Krytyczna

Wstrzyknięcie SQL w Jonnys Liquor umożliwia zdalne wykonanie ataku.

Wstrzyknięcie SQL w systemie bibliotecznym Code-Projects umożliwia zdalne ataki.

Wstrzyknięcie SQL w Advanced Library Management System umożliwia zdalne wykonanie ataku.

Słaba procedura odzyskiwania hasła w SourceCodester Inventory Management System umożliwia zdalne ataki.

Wstrzyknięcie SQL w CMS SourceCodester Company Website umożliwia zdalne wykonanie ataku.

Wstrzyknięcie poleceń w D-Link DIR-852 umożliwia zdalne wykonanie kodu.

A vulnerability has been found in Campcodes Online Polling System 1.0. Affected by this issue is some unknown functionality of the file /registeracc.php. The manipulation of the argument…

A vulnerability was found in SourceCodester Company Website CMS 1.0. This affects an unknown part of the file /admin/reset-password.php. The manipulation of the argument email results in…

A flaw has been found in Campcodes Online Polling System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/checklogin.php. Executing a manipulation of the…

A vulnerability was detected in Campcodes School File Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the…

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. This impacts an unknown function of the file /index.php of the component Login. Such manipulation of…

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected by this issue is some unknown functionality of the file /results.php of…

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Affected is an unknown function of the file /customer_register.php. Executing…

md-to-pdf is a CLI tool for converting Markdown files to PDF using Node.js and headless Chrome. Prior to version 5.2.5, a Markdown front-matter block that contains JavaScript delimiter…

hpke-js is a Hybrid Public Key Encryption (HPKE) module built on top of Web Cryptography API. Prior to version 1.7.5, the public SenderContext Seal() API has a race condition which allows…

Przepełnienie bufora w MLX umożliwia ujawnienie informacji lub awarię aplikacji.

Wazuh is a free and open source platform used for threat prevention, detection, and response. Prior to version 4.13.0, a vulnerability in Wazuh Agent allows authenticated attackers to…

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle…

Błąd w Vault Terraform Provider może prowadzić do obejścia uwierzytelnienia w LDAP.

The Mstoreapp Mobile App WordPress plugin through 2.08 and Mstoreapp Mobile Multivendor through 9.0.1 do not properly verify users identify when using an AJAX action, allowing…

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post()…

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a…

Brak nagłówków antycache w AuthKit dla Next.js pozwala na ujawnienie tokenów sesji wielu użytkownikom.

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to…

Wstrzyknięcie SQL w itsourcecode Online File Management System umożliwia zdalne ataki.