Skip to content
OpenAdvisories

Archive

2 May 2025

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-2812 Public exploit

    SQLi in Mydata Informatics' Ticket Sales Automation

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Mydata Informatics Ticket Sales Automation allows Blind SQL Injection. This issue affects Ticket Sales Automation: before 03.04.2025 (DD.MM.YYYY).

  • High 8.8
    CVE-2024-11142 Public exploit

    CSRF in Gosoft Software's Proticaret E-Commerce

    Cross-Site Request Forgery (CSRF) vulnerability in Gosoft Software Proticaret E-Commerce allows Cross Site Request Forgery. This issue affects Proticaret E-Commerce: before v6.0 NOTE: According to the vendor, fixing process is still ongoing for v4.05.

  • Medium 5.0
    CVE-2025-47226 Public exploit

    Grokability Snipe-IT has incorrect authorization for accessing asset information

    Grokability Snipe-IT before 8.1.0 has incorrect authorization for accessing asset information.