Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2025-04-24
Med.
KiviCare Clinic & Patient Management System 3.6.4 Unauthenticated SQL Injection
 CVE CWE Remote  Gözet
Low
ProConf 6.0 Insecure Direct Object Reference
 CVE Remote S. M. Zia Ur Rashid
Med.
WordPress 123pan Cloud Storage Plugin - Multiple Vulnerabilities
 Remote bRpsd
Med.
WordPress Easy Restaurant Manager Plugin - Multiple Vulnerabilities
 Remote bRpsd
High
Online Shopping System Advanced - Remote Code Execution
 Remote bRpsd
Med.
Aom Web Designer - Sql Injection
 Remote behrouz mansoori
Med.
Money Transfer Management System - MTMS- PHP 1.0 SQLi-Bypass Authentication
 Remote Local nu11secur1ty
2025-04-22
High
TP-Link VN020 F3v(T) TT_V6.2.1021 Buffer Overflow Memory Corruption
 CVE CWE Remote Mohamed Maatallah
High
FoxCMS 1.2.5 Remote Code Execution
 CVE Remote VeryLazyTech
Med.
Clothing Store Management System-1.0 SQLi Bypass Authentication
 Remote nu11secur1ty
Low
ASUS ASMB8 iKVM 1.14.51 Remote Code Execution
 CVE Remote d1g@segfault
High
Tatsu 3.3.11 Unauthenticated RCE
 CVE Remote Milad Karimi
Med.
NagVis 1.9.33 Arbitrary File Read
 CVE CWE Remote xerosec
2025-04-16
Low
CodeAstro Online Railway Reservation System 1.0 Cross Site Scripting (XSS)
 CVE CWE Remote Raj Nandi
2025-04-15
High
Intelight X-1L Traffic controller Maxtime 1.9.6 Remote Code Execution (RCE)
 CVE Remote Andrew Lemon
Med.
Gnuboard5 5.3.2.8 SQL Injection
 CVE CWE Remote CodeSecLab
Med.
IBMi Navigator 7.5 HTTP Security Token Bypass
 CVE CWE Remote hyp3rlinx
High
GestioIP 3.5.7 Remote Command Execution (RCE)
 CVE CWE Remote m4xth0r
High
Cacti 1.2.26 Remote Code Execution (RCE)
 CVE Remote D3Ext
2025-04-10
Med.
Feng Office 3.11.1.2 SQL Injection
 CWE Remote Andrey Stoykov
High
Apache HugeGraph Server 1.2.0 Remote Code Execution (RCE)
 Remote Yesith Alvarez
2025-04-09
Med.
INVOICE-1.0-Copyright©2025-SQLi-Bypass-Authentication+FU+RCE
 Remote Local nu11secur1ty
High
DocsGPT 0.12.0 Remote Code Execution
 CVE Remote Shreyas Malhotra
Low
PZ Frontend Manager WordPress Plugin 1.0.5 Cross Site Request Forgery (CSRF)
 CWE Remote Vuln Seeker Cybersecur...
2025-04-06
Med.
WordPress Pipe Audio Video and Screen Recorder 1.0.6 - Multiple Vulnerabilities
 Remote bRpsd
Med.
AC Repair and Services System - ARSS-1.0-Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
Low
Exclusive Addons for Elementor 2.6.9 Stored Cross-Site Scripting
 CVE CWE Remote Wordfence Security Tea...
Low
Gitea 1.22.0 Stored XSS
 CVE CWE Remote Catalin Iovita
High
Royal Elementor Addons and Templates 1.3.78 Unauthenticated Arbitrary File Upload
 CVE CWE Remote Sheikh Mohammad Hasan
Med.
ollama 0.6.4 Server Side Request Forgery (SSRF)
 Remote sud0
Low
Reservit Hotel 2.1 Stored Cross-Site Scripting (XSS)
 CVE CWE Remote Ilteris Kaan Pehlivan
2025-04-01
Med.
Litespeed unauthorized account takeover
 CVE Remote Gnzls
High
Ksenia Security Lares 4.0 Home Automation Remote Code Execution
 Remote ShadeLock
Low
Ksenia Security Lares 4.0 Home Automation URL Redirection
 Remote ShadeLock
Med.
thevision - SQL Injection vulnerability
 Remote Mahdi Karimi
Med.
kyaan - Multiple Vulnerabilities
 Remote wa0_3
Med.
WEBWORX TECHNOLOGIES- Multiple Vulnerabilities - Multiple Vulnerabilities
 Remote wa0_3
Low
Zoltrix Modem - 'tools_admin_1' Cross site request forgery
 CWE Remote Amir Hossein Jamshidi
2025-03-30
Low
openweb-ui 0.5.20 Client-Side Path Traversal (CSPT)
 Remote CXSECURITY
Med.
NVIDIA Container Toolkit 1.16.1 Time-of-check Time-of-Use (TOCTOU)
 CVE Local r0binak
High
PHP < 8.3.8 Remote Code Execution
 CVE Remote Yesith Alvarez
High
Litespeed Cache 6.5.0.1 Authentication Bypass
 CVE Remote Gnzls
Med.
OMOS-1.0-Copyright©2025-Multiple-SQLi
 Remote Local nu11secur1ty
High
XWiki Standard 14.10 Remote Code Execution (RCE)
 CVE Remote Mehran Seifalinia
2025-03-25
Low
dolphin.prov7.4.2 Stored XSS via Send Message Functionality
 Remote Andrey Stoykov
Med.
dolphin.prov7.4.2 SQL Injection in Admin Functionality
 Remote Andrey Stoykov
Med.
University Registration System - IDOR Leads to Information Disclosure
 Remote wa0_3
Med.
Wordpress Modal Popup Box Plugin - Multiple Vulnerabilities
 Remote bRpsd
Low
Wordpress Plugin Iron Security - IP Spoofing
 Remote bRpsd
Med.
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
 CWE Remote Amir Hossein Jamshidi
Med.
AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.
 CVE CWE Remote Aslam Anwar Mahimkar
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
High
Jasmin Ransomware - (Authenticated) Arbitrary File Download
 Remote bRpsd
Med.
Jasmin Ransomware SQL Injection Login Bypass
 CWE Remote Buğra Enis Dönmez
2025-03-20
Med.
Tours and travels PHP Multiple Vulnerabilities
 Remote mehrdadr13
High
Chamilo LMS 1.11.24 Remote Code Execution (RCE)
 CVE Remote 0x00-null - Mohamed Ka...
2025-03-13
High
WordPress Th Shop Mania Theme 1.4.9 Missing Authorization
 CVE Remote Nxploited
Med.
WordPress NextMove Lite 2.17.0 Missing Authorization
 CVE Remote Nxploited
Med.
Agile Solutio - Blind Sql Injection Vulnerability
 Remote behrouz mansoori
Med.
TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication
 Remote nu11secur1ty
Copyright 2025, cxsecurity.com

 

Back to Top