Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2025-04-16
Low
CodeAstro Online Railway Reservation System 1.0 Cross Site Scripting (XSS)
 CVE CWE Remote Raj Nandi
2025-04-15
High
Intelight X-1L Traffic controller Maxtime 1.9.6 Remote Code Execution (RCE)
 CVE Remote Andrew Lemon
Med.
Gnuboard5 5.3.2.8 SQL Injection
 CVE CWE Remote CodeSecLab
Med.
IBMi Navigator 7.5 HTTP Security Token Bypass
 CVE CWE Remote hyp3rlinx
High
GestioIP 3.5.7 Remote Command Execution (RCE)
 CVE CWE Remote m4xth0r
High
Cacti 1.2.26 Remote Code Execution (RCE)
 CVE Remote D3Ext
2025-04-10
Med.
Feng Office 3.11.1.2 SQL Injection
 CWE Remote Andrey Stoykov
High
Apache HugeGraph Server 1.2.0 Remote Code Execution (RCE)
 Remote Yesith Alvarez
2025-04-09
Med.
INVOICE-1.0-Copyright©2025-SQLi-Bypass-Authentication+FU+RCE
 Remote Local nu11secur1ty
High
DocsGPT 0.12.0 Remote Code Execution
 CVE Remote Shreyas Malhotra
Low
PZ Frontend Manager WordPress Plugin 1.0.5 Cross Site Request Forgery (CSRF)
 CWE Remote Vuln Seeker Cybersecur...
2025-04-06
Med.
WordPress Pipe Audio Video and Screen Recorder 1.0.6 - Multiple Vulnerabilities
 Remote bRpsd
Med.
AC Repair and Services System - ARSS-1.0-Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
Low
Exclusive Addons for Elementor 2.6.9 Stored Cross-Site Scripting
 CVE CWE Remote Wordfence Security Tea...
Low
Gitea 1.22.0 Stored XSS
 CVE CWE Remote Catalin Iovita
High
Royal Elementor Addons and Templates 1.3.78 Unauthenticated Arbitrary File Upload
 CVE CWE Remote Sheikh Mohammad Hasan
Med.
ollama 0.6.4 Server Side Request Forgery (SSRF)
 Remote sud0
Low
Reservit Hotel 2.1 Stored Cross-Site Scripting (XSS)
 CVE CWE Remote Ilteris Kaan Pehlivan
2025-04-01
Med.
Litespeed unauthorized account takeover
 CVE Remote Gnzls
High
Ksenia Security Lares 4.0 Home Automation Remote Code Execution
 Remote ShadeLock
Low
Ksenia Security Lares 4.0 Home Automation URL Redirection
 Remote ShadeLock
Med.
thevision - SQL Injection vulnerability
 Remote Mahdi Karimi
Med.
kyaan - Multiple Vulnerabilities
 Remote wa0_3
Med.
WEBWORX TECHNOLOGIES- Multiple Vulnerabilities - Multiple Vulnerabilities
 Remote wa0_3
Low
Zoltrix Modem - 'tools_admin_1' Cross site request forgery
 CWE Remote Amir Hossein Jamshidi
2025-03-30
Low
openweb-ui 0.5.20 Client-Side Path Traversal (CSPT)
 Remote CXSECURITY
Med.
NVIDIA Container Toolkit 1.16.1 Time-of-check Time-of-Use (TOCTOU)
 CVE Local r0binak
High
PHP < 8.3.8 Remote Code Execution
 CVE Remote Yesith Alvarez
High
Litespeed Cache 6.5.0.1 Authentication Bypass
 CVE Remote Gnzls
Med.
OMOS-1.0-Copyright©2025-Multiple-SQLi
 Remote Local nu11secur1ty
High
XWiki Standard 14.10 Remote Code Execution (RCE)
 CVE Remote Mehran Seifalinia
2025-03-25
Low
dolphin.prov7.4.2 Stored XSS via Send Message Functionality
 Remote Andrey Stoykov
Med.
dolphin.prov7.4.2 SQL Injection in Admin Functionality
 Remote Andrey Stoykov
Med.
University Registration System - IDOR Leads to Information Disclosure
 Remote wa0_3
Med.
Wordpress Modal Popup Box Plugin - Multiple Vulnerabilities
 Remote bRpsd
Low
Wordpress Plugin Iron Security - IP Spoofing
 Remote bRpsd
Med.
Aztech DSL5005EN Router - 'sysAccess.asp' Admin Password Change (Unauthenticated)
 CWE Remote Amir Hossein Jamshidi
Med.
AEGON LIFE v1.0 Life Insurance Management System SQL injection vulnerability.
 CVE CWE Remote Aslam Anwar Mahimkar
2025-03-22
Med.
TeamPass 3.0.0.21 SQL Injection
 CVE CWE Remote Max Meyer
High
Jasmin Ransomware - (Authenticated) Arbitrary File Download
 Remote bRpsd
Med.
Jasmin Ransomware SQL Injection Login Bypass
 CWE Remote Buğra Enis Dönmez
2025-03-20
Med.
Tours and travels PHP Multiple Vulnerabilities
 Remote mehrdadr13
High
Chamilo LMS 1.11.24 Remote Code Execution (RCE)
 CVE Remote 0x00-null - Mohamed Ka...
2025-03-13
High
WordPress Th Shop Mania Theme 1.4.9 Missing Authorization
 CVE Remote Nxploited
Med.
WordPress NextMove Lite 2.17.0 Missing Authorization
 CVE Remote Nxploited
Med.
Agile Solutio - Blind Sql Injection Vulnerability
 Remote behrouz mansoori
Med.
TENANT LIMITED-1.0-Multiple-SQLi + SQLi Bypass Authentication
 Remote nu11secur1ty
Med.
VeeVPN 1.6.1 - 'VeePNService' Unquoted Service Path
 Local Dogukan Orhan
2025-03-10
Low
FluxBB 1.5.11 Cross Site Scripting
 Remote Chokri Hammedi
Med.
JUX Real Estate 3.4.0 - SQL Injection
 CVE CWE Remote CraCkEr
Low
JUX Real Estate 3.4.0 - Multiple RXSS
 CVE CWE Remote CraCkEr
2025-03-08
Med.
OpenPanel 0.3.4 - Insecure Permission Modification via Fix Permission Function
 CVE Remote Multiple
Med.
Zontal Arcade HTML 5 Game Portal PHP Script - SQL Injection
 Remote Buğra Enis Dönmez
Med.
Identified Security Concerns: Database Credentials in Plain Text
 Remote E1.CODERS
2025-03-05
Med.
Teachers Record Management System 2.1 SQL Injection
 Remote Mehmet Can Kadıoğlu
High
OpenPanel 0.3.4 Remote Code Execution
 CVE Remote Multiple
Med.
Webmin RCE Leading to Privilege Escalation
 Local Buğra Enis Dönmez
Med.
IdoDesigns - Multiple Vulnerabilities
 Remote bRpsd
2025-03-04
Low
Crest Engine CMS 1.0 Cross Site Scripting
 Remote wa-3
Med.
Teachers Record Management System v2.1 SQLi
 Remote mao7un
Copyright 2025, cxsecurity.com

 

Back to Top