Skip to content
OpenAdvisories

Archive

29 August 2025

Vulnerabilities first published on this day (UTC), newest first.

53 results · Clear filters · Feed

  • High 7.3

    itsourcecode Apartment Management System employee_salary_setup.php sql injection

    A vulnerability was detected in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /setting/employee_salary_setup.php. The manipulation of the argument ddlEmpName results in sql injection. The attack may be launched remotel…

  • High 7.3

    itsourcecode Apartment Management System member_type_setup.php sql injection

    A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection.…

  • High 7.3

    itsourcecode Apartment Management System month_setup.php sql injection

    A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The…

  • High 7.8

    This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.6, macOS Sonoma 14.7.…

  • High 7.8

    A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A malicious …

  • High 7.3

    CGI::Simple versions 1.281 and earlier for Perl has a HTTP response splitting flaw

    CGI::Simple versions before 1.282 for Perl has a HTTP response splitting flaw This vulnerability is a confirmed HTTP response splitting flaw in CGI::Simple that allows HTTP response header injection, which can be used for reflected XSS or open redirect under …

  • High 7.3

    itsourcecode Apartment Management System year_setup.php sql injection

    A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated re…

  • High 7.3

    itsourcecode Apartment Management System rented_all_info.php sql injection

    A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack re…

  • High 7.8

    Cross Site Scripting vulnerability in copyparty before 1.9.2 allows a local attacker to execute arbitrary code via a cr…

  • High 8.1

    Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR01 does not validate file attributes or the contents of /root du…

  • High 8.1

    Diebold Nixdorf Vynamic Security Suite through 4.3.0 SR06 contains functionality that allows the removal of critical sy…

  • High 7.5
    CVE-2025-55763 Public exploit

    Buffer Overflow in the URI parser of CivetWeb 1.14 through 1.16 (latest) allows a remote attacker to achieve remote cod…

  • High 8.4

    An issue in Evope Core v.1.1.3.20 allows a local attacker to obtain sensitive information via the use of hard coded cry…