-Infinity
0

iceCMSIceCMS v3.4.7 and before was discovered to contain a hardcoded JWT key, allowing an attacker to forg…

First published (updated )

Dedecms v6dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via file_manage_control.php.

First published (updated )

Dedecms v6dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.

First published (updated )

Billing Management SystemSQL Injection

First published (updated )

Sourcecodester Online Medicine Ordering SystemSourcecodester Online Medicine Ordering System 1.0 is vulnerable to Incorrect Access Control. There …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

composer/craftcms/cmsCraft CMS Allows Remote Code Execution

First published (updated )

Best House Rental Management SystemSQL Injection, Code Injection

First published (updated )

phpgurukul Men Salon Management SystemPHPGurukul Men Salon Management System forgot-password.php sql injection

EPSS
0.04%
First published (updated )

phpgurukul Men Salon Management SystemPHPGurukul Men Salon Management System view-appointment.php sql injection

EPSS
0.04%
First published (updated )

phpgurukul Men Salon Management SystemPHPGurukul Men Salon Management System sales-reports-detail.php sql injection

EPSS
0.04%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

LyLme SpageSQL Injection

First published (updated )

LinqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is LDAP injection.

First published (updated )

ClasscmsMalicious File Upload

First published (updated )

LinqiAn issue was discovered in linqi before 1.4.0.1 on Windows. There is /api/Cdn/GetFile local file inc…

First published (updated )

OvaledgeOvalEdge 5.2.8.0 and earlier is affected by an Account Takeover vulnerability via a POST request to …

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

GDidees CMSMalicious File Upload

First published (updated )

NebulaGraphAn issue was discovered in vesoft NebulaGraph through 3.8.0. It allows bypassing authentication.

First published (updated )

NebulaGraphCommand Injection, Code Injection

First published (updated )

Qualitia Active! MailQualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

First published (updated )

MikroTik devicesMikroTik Router OS Directory Traversal Vulnerability

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Raisecom Msg1200 FirmwarePath Traversal

First published (updated )

Raisecom Msg1200 FirmwarePath Traversal

First published (updated )

Raisecom Msg1200 FirmwarePath Traversal

First published (updated )

Kashipara Music Management SystemAn Incorrect Access Control vulnerability was found in /music/ajax.php?action=delete_playlist in Kas…

First published (updated )

Veeam ONEA vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credent…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Oracle E-Business Suite (iSurvey Module)Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module)…

First published (updated )

Yii FrameworkCode Injection

First published (updated )

Webmin UserminUsermin 0.980 through 1.x before 1.660 allows uconfig_save.cgi sig_file_free remote code execution b…

First published (updated )

SparkshopMalicious File Upload

First published (updated )

ThinksaasSQL Injection

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203