An issue has been discovered in GitLab EE affecting all versions starting from 16.0 before 16.3.6, all versions starting from 16.4 before 16.4.2, all versions starting from 16.5 before 16.5.1. Arbitrary access to the titles of an private specific references could be leaked through the service-desk custom email template.
OS command injection in TOTOLINK N150RT firmware 3.4.0-B20190525 allows remote authenticated attackers to execute arbitrary commands via the targetAPSsid parameter in /boa/formWSC. Public exploit code is available, and EPSS score of 1.65% (82nd percentile) indicates moderate exploitation likelihood, though no active exploitation in CISA KEV has been reported.
Authorization bypass in ScriptAndTools Real Estate Management System 1.0 allows remote authenticated attackers to delete arbitrary users by manipulating the ID parameter in userdelete.php. A public exploit exists, but no active exploitation has been confirmed. The EPSS score is low (0.13%), indicating limited exploitation likelihood.
Cross-site request forgery in code-projects School Fees Payment System 1.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. A publicly available exploit exists, but no active exploitation has been reported. The EPSS score is low (0.09%), indicating low exploitation likelihood.
SQL injection in itsourcecode Employee Record Management System 1.0 allows remote authenticated attackers to manipulate the emp1name parameter in /editprofile.php, potentially leading to data breach or modification. A public exploit exists, but no active exploitation has been confirmed (EPSS 0.06%).
SQL injection in SourceCodester Advance Charity Management System 1.0 allows authenticated attackers to extract or manipulate database contents via the m06 parameter in /members/fundDetails.php. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Directory Management System 2.0 allows authenticated attackers to manipulate the adminname parameter in /admin/admin-profile.php, potentially leading to unauthorized data access or modification. A public exploit is available, but no active exploitation has been confirmed.
SQL injection in PHPGurukul Directory Management System 2.0 allows remote authenticated attackers to execute arbitrary SQL commands via the 'del' parameter in /admin/manage-directory.php. A public exploit is available, increasing the risk of exploitation, though EPSS score is low (0.06%).
SQL injection in PHPGurukul Directory Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the searchdata parameter in /admin/search-directory.php. A public exploit is available, but no active exploitation has been reported and EPSS risk is low.
SQL injection in PHPGurukul Pre-School Enrollment System 1.0 allows authenticated attackers with sub-admin privileges to execute arbitrary SQL commands via the sadminusername parameter in /admin/add-subadmin.php. Public exploit code is available, increasing risk for unpatched installations.
SQL injection in PHPGurukul Pre-School Enrollment System 1.0 allows authenticated attackers to manipulate the classname parameter in /admin/add-class.php, potentially leading to data leakage or modification. Public exploit code is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), indicating low exploitation likelihood.
SQL injection in PHPGurukul Pre-School Enrollment System 1.0 allows authenticated attackers to manipulate the tsubject parameter in /admin/add-teacher.php, potentially leading to unauthorized data access or modification. A public exploit is available, but no active exploitation has been reported.
SQL injection in PHPGurukul Emergency Ambulance Hiring Portal 1.0 allows authenticated attackers to execute arbitrary SQL commands via the 'ambregnum' parameter in /admin/add-ambulance.php. A public exploit exists, but no active exploitation has been confirmed. The EPSS score is low (0.06%), indicating limited exploitation likelihood.
SQL injection in PHPGurukul Emergency Ambulance Hiring Portal 1.0 allows authenticated attackers to manipulate database queries via the fromdate/todate parameters in /admin/bwdates-request-report-details.php. Public exploit code exists, but EPSS score is low (0.06%) and no active exploitation has been reported.
Command injection in DedeCMS up to 5.7.2 allows remote authenticated attackers to execute arbitrary commands via the 'notes' parameter in /include/dedetag.class.php. A public exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.17%), indicating limited exploitation likelihood.
Cross-site scripting (XSS) in Responsive Blog 1.0 allows an authenticated attacker to inject arbitrary JavaScript via the keyword parameter in /search.php. A public exploit exists, but no active exploitation has been reported and EPSS risk is low (0.06%).
Stored cross-site scripting in SourceCodester My Food Recipe 1.0 allows an authenticated attacker to inject arbitrary JavaScript via the Name parameter on the Add Recipe page. A public exploit exists, but EPSS score is low (0.05%) and no active exploitation has been reported.
Cross-site scripting (XSS) in code-projects School Fees Payment System 1.0 allows an authenticated attacker to inject arbitrary web scripts via the Branch/Address/Detail parameters in /branch.php. A public exploit exists, but no active exploitation has been reported. The EPSS score is low (0.05%), indicating low exploitation likelihood.
Cross-site scripting (XSS) in Responsive Blog 1.0/1.12.4/3.3.4 via the admin pageViewMembers.php allows authenticated attackers with high privileges to inject malicious scripts. A public exploit exists, but EPSS score is low (0.04%) and no active exploitation in CISA KEV.
PowSyBl (Power System Blocks) is a framework to build power system oriented software. In com.powsybl:powsybl-iidm-criteria versions 6.3.0 to before 6.7.2 and com.powsybl:powsybl-contingency-api versions 5.0.0 to before 6.3.0, there is a a potential polynomial Regular Expression Denial of Service (ReDoS) vulnerability in the RegexCriterion class. This class compiles and evaluates an unvalidated, user-supplied regular expression against the identifier of an Identifiable object via Pattern.compile(regex).matcher(id).find(). If successfully exploited, a malicious actor can cause significant CPU exhaustion through repeated or recursive filter(...) calls - especially if performed over large network models or filtering operations. This issue has been patched in com.powsybl:powsybl-iidm-criteria 6.7.2.
A security vulnerability in RISC Zero (CVSS 2.7). Remediation should follow standard vulnerability management procedures.
A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information.
A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross site scripting. The attack may be launched remotely.
Stored cross-site scripting in PHPGurukul COVID19 Testing Management System 1.0 allows authenticated attackers with low privileges to inject arbitrary JavaScript via the 'remark' parameter in /test-details.php. Public exploit code exists, but no active exploitation has been reported and EPSS score is low (0.04%).
Stored cross-site scripting (XSS) in PHPGurukul Notice Board System 1.0 allows an authenticated admin to inject arbitrary JavaScript via the Title or Description fields in the Add Notice functionality. The attack is remotely exploitable with high privileges (admin) and requires user interaction. A public exploit exists, but no active exploitation has been reported.