Aggregator

A vulnerability, which was classified as problematic, was found in webcraftic Cyrlitera Plugin up to 1.2.0 on WordPress. Affected is an unknown function. The manipulation leads to cross-site request forgery. This vulnerability is traded as CVE-2025-53254. It is possible to launch the attack remotely. There is no exploit available.

将隐蔽性、可靠性、易用性这三个攻防场景下的核心需求，通过严谨的逻辑分层和流程设计，实现高度统一

Cloudflare сигналит о масштабных сбоях, но никто не спешит их чинить.

Теперь вам не нужно раздеваться, чтобы примерить одежду.

看花眼、数不清、混淆属性、胡编乱造 —— 多模态大模型究竟能否“看清”图像？

A vulnerability was found in code-projects Online Bidding System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /details.php. The manipulation of the argument ID leads to sql injection. The identification of this vulnerability is CVE-2025-6469. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /bidlog.php. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-6470. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in code-projects Online Bidding System 1.0. Affected by this vulnerability is an unknown functionality of the file /administrator. The manipulation of the argument aduser leads to sql injection. This vulnerability is known as CVE-2025-6471. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in code-projects Online Bidding System 1.0. Affected by this issue is some unknown functionality of the file /showprod.php. The manipulation of the argument ID leads to sql injection. This vulnerability is handled as CVE-2025-6472. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /changeUsername.php. The manipulation of the argument user_id leads to sql injection. This vulnerability was named CVE-2025-6474. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/admin/manage_students of the component Manage Students Module. The manipulation leads to cross site scripting. The identification of this vulnerability is CVE-2025-6475. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability has been found in code-projects Simple Online Hotel Reservation System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_room.php. The manipulation of the argument room_id leads to sql injection. This vulnerability is known as CVE-2025-6448. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Simple Online Hotel Reservation System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/confirm_reserve.php. The manipulation of the argument transaction_id leads to sql injection. This vulnerability is uniquely identified as CVE-2025-6450. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.