Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2025-03-25
Low
dolphin.prov7.4.2 Stored XSS via Send Message Functionality
 Remote Andrey Stoykov
Med.
dolphin.prov7.4.2 SQL Injection in Admin Functionality
 Remote Andrey Stoykov
Med.
University Registration System - IDOR Leads to Information Disclosure
 Remote wa0_3
Med.
Wordpress Modal Popup Box Plugin - Multiple Vulnerabilities
 Remote bRpsd
Low
Wordpress Plugin Iron Security - IP Spoofing
 Remote bRpsd
Med.
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
 CWE Remote Amir Hossein Jamshidi
Med.
AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.
 CVE CWE Remote Aslam Anwar Mahimkar
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
High
Jasmin Ransomware - (Authenticated) Arbitrary File Download
 Remote bRpsd
Med.
Jasmin Ransomware SQL Injection Login Bypass
 CWE Remote Buğra Enis Dönmez
2025-03-20
Med.
Tours and travels PHP Multiple Vulnerabilities
 Remote mehrdadr13
High
Chamilo LMS 1.11.24 Remote Code Execution (RCE)
 CVE Remote 0x00-null - Mohamed Ka...
2025-03-13
High
WordPress Th Shop Mania Theme 1.4.9 Missing Authorization
 CVE Remote Nxploited
Med.
WordPress NextMove Lite 2.17.0 Missing Authorization
 CVE Remote Nxploited
Med.
Agile Solutio - Blind Sql Injection Vulnerability
 Remote behrouz mansoori
Med.
TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication
 Remote nu11secur1ty
Med.
VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path
 Local Dogukan Orhan
2025-03-10
Low
FluxBB 1.5.11 Cross Site Scripting
 Remote Chokri Hammedi
Med.
JUX Real Estate 3.4.0 - SQL Injection
 CVE CWE Remote CraCkEr
Low
JUX Real Estate 3.4.0 - Multiple RXSS
 CVE CWE Remote CraCkEr
2025-03-08
Med.
OpenPanel 0.3.4 - Insecure Permission Modification via Fix Permission Function
 CVE Remote Multiple
Med.
Zontal Arcade HTML 5 Game Portal PHP Script - SQL Injection
 Remote Buğra Enis Dönmez
Med.
Identified Security Concerns: Database Credentials in Plain Text
 Remote E1.CODERS
2025-03-05
Med.
Teachers Record Management System 2.1 SQL Injection
 Remote Mehmet Can Kadıoğlu
High
OpenPanel 0.3.4 Remote Code Execution
 CVE Remote Multiple
Med.
Webmin RCE Leading to Privilege Escalation
 Local Buğra Enis Dönmez
Med.
IdoDesigns - Multiple Vulnerabilities
 Remote bRpsd
2025-03-04
Low
Crest Engine CMS 1.0 Cross Site Scripting
 Remote wa-3
Med.
Teachers Record Management System v2.1 SQLi
 Remote mao7un
Low
Crest Engine CMS - Reflected Cross-Site Scripting (XSS)
 wa0_3
2025-02-28
High
Adobe Reader CoolType Out-Of-Bounds Read
 Remote Mjurczyk
Low
SeedDMS 6.0.29 Cross Site Scripting
 CVE Remote Athul S
Low
Firefox 135.0.1 bypass Download protections (PoC)
 Remote Emiliano
2025-02-27
Med.
Library-Card-System V 1.0 | Add Picture/Signature - signup.php | Unrestricted File Upload | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Med.
Needyamin | Library-Card-System 1.0 | card.php?id= SQL Injection | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
2025-02-24
Low
needyamin Library Card System Registration Page signup.php cross site scripting
 CVE CWE Remote Maloy Roy Orko
Low
Image_Gallery | Add Gallery- admin/gallery.php | Unrestricted File Upload | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Low
Image_Gallery | view.php?username= | Cross Site Scripting (Reflected XSS) | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
Med.
Library-Card-System | SQL Injection Admin Login Bypass In admin.php | Found By Maloy Roy Orko
 CVE CWE Remote Maloy Roy Orko
2025-02-19
Med.
Zabbix SQL Multiple Vulns
 CVE Remote godylockz
High
InvokeAI Remote Code Execution
 Remote Local Takahiro Yokoyama
High
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) unauthenticated Remote Code Execution
 CVE Remote sfewer
2025-02-18
Med.
WordPress Plugin A/B Image Optimizer 3.3 Arbitrary File Download
 Remote Random
Med.
OpenSSH 9.9p1 Denial of Service / Man-In-The-Middle
 Remote Qualys
2025-02-13
Med.
ABB Cylon FLXeon 9.3.4 Default Credentials
 Remote Gjoko 'LiquidWorm...
Med.
Wattsense Bridge 6.x Remote Root / Information Disclosure
 Remote SEC
Med.
SolarView Compact 6.00 - Command Injection
 Remote parsa rezaie khiabanlo...
2025-02-10
Med.
ABB Cylon FLXeon 9.3.4 (serialConfig.js) JSON Object Flooding DoS
 Remote Local Gjoko 'LiquidWorm...
2025-02-01
High
MySchool 1.0 SQL Injection / Code Injection / XSS / CSRF
 Remote bRpsd
Low
Quorum onQ OS 6.0.0.5.2064 Cross Site Scripting
 Remote _striv3r_
Med.
Xinet Elegant 6 Asset Lib Web UI 6.1.655 / SQL Injection / Exploit Update
 CVE Remote hyp3rlinx
2025-01-29
High
OpenPanel 0.3.4 Command Injection
 Remote Multiple
Med.
MySchool System - Multiple Vulnerabilities
 Remote bRpsd
High
NEXT-EMP v1.0-Copyright © 2024. All rights reserved. File Upload-FU and Remote Code Execution-RCE
 Remote nu11secur1ty
2025-01-28
Low
SpagoBI 3.5.1 Cross Site Scripting
 CVE Remote Local MarioTesoro
Low
SpagoBI 3.5.1 Cross Site Request Forgery
 Remote MarioTesoro
Low
AutoLib Software Systems OPAC 20.10 Secret Disclosure
 CVE Local  Shahnawaz Shaikh
Low
Wind River Software VxWorks 6.9 Weak Password Hashing Algorithms
 Local Steffen Robertz
High
Netman 204 - Broken Access Control Remote command
 Remote parsa rezaie khiabanlo...
2025-01-26
Med.
DNN CMS remote File Upload
 Remote  Mostafa.akbarzadeh
Copyright 2025, cxsecurity.com

 

Back to Top