🚨 CVE-2025-45236
A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Nickname parameter.
🎖@cveNotify
A stored cross-site scripting (XSS) vulnerability in the Edit Profile feature of DBSyncer v2.0.6 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Nickname parameter.
🎖@cveNotify
🚨 CVE-2025-45237
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
🎖@cveNotify
Incorrect access control in the component /config/download of DBSyncer v2.0.6 allows attackers to access the JSON file containing sensitive account information, including the encrypted password.
🎖@cveNotify
Gist
gist:11cd0cc46f0c806856f375f9f3f410c6
GitHub Gist: instantly share code, notes, and snippets.
🚨 CVE-2025-38369
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can
trigger a call trace or even a kernel panic when the parent process of the
container is terminated.
This issue occurs because, under certain configurations, Docker does not
properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it
still calls destroy_workqueue() attempting to completes all pending work.
It's necessary to check wq->wq and skip the drain if it no longer exists.
🎖@cveNotify
In the Linux kernel, the following vulnerability has been resolved:
dmaengine: idxd: Check availability of workqueue allocated by idxd wq driver before using
Running IDXD workloads in a container with the /dev directory mounted can
trigger a call trace or even a kernel panic when the parent process of the
container is terminated.
This issue occurs because, under certain configurations, Docker does not
properly propagate the mount replica back to the original mount point.
In this case, when the user driver detaches, the WQ is destroyed but it
still calls destroy_workqueue() attempting to completes all pending work.
It's necessary to check wq->wq and skip the drain if it no longer exists.
🎖@cveNotify
🚨 CVE-2021-25779
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
🎖@cveNotify
Baby Care System v1.0 is vulnerable to SQL injection via the 'id' parameter on the contentsectionpage.php page.
🎖@cveNotify
GitHub
Baby-Care-System/README.md at main · TCSWT/Baby-Care-System
Baby Care System in PHP/MySQLi with Full Source Code The Baby Care System is a web based system that is made up of PHP, JavaScript, CSS and MySQL for the database. - TCSWT/Baby-Care-System
🚨 CVE-2021-25780
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.
🎖@cveNotify
An arbitrary file upload vulnerability has been identified in posts.php in Baby Care System 1.0. The vulnerability could be exploited by an remote attacker to upload content to the server, including PHP files, which could result in command execution and obtaining a shell.
🎖@cveNotify
GitHub
Baby-Care-System/README.md at main · TCSWT/Baby-Care-System
Baby Care System in PHP/MySQLi with Full Source Code The Baby Care System is a web based system that is made up of PHP, JavaScript, CSS and MySQL for the database. - TCSWT/Baby-Care-System
🚨 CVE-2020-35752
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
🎖@cveNotify
Baby Care System 1.0 is affected by a cross-site scripting (XSS) vulnerability in the Edit Page tab through the Post title parameter.
🎖@cveNotify
Exploit Database
Baby Care System 1.0 - 'Post title' Stored XSS
Baby Care System 1.0 - 'Post title' Stored XSS.. webapps exploit for PHP platform
🚨 CVE-2022-28420
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via BabyCare/admin.php?id=theme&setid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-1.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28421
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=posts&action=display&value=1&postid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-2.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28422
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=edit.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-3.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28423
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&action=delete.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-4.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28424
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/posts.php&find=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-5.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28425
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=display&value=1&roleid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-6.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28426
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/pagerole.php&action=edit&roleid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-7.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28427
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=read&msgid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-9.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28429
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/inbox.php&action=delete&msgid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-10.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28431
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&social=remove&sid=2.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-12.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28432
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=display&value=0&sid=2.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-13.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28433
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Show&userid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-16.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28434
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin.php?id=siteoptions&social=edit&sid=2.
🎖@cveNotify
GitHub
k0xx11 - Overview
k0xx11 has 12 repositories available. Follow their code on GitHub.
🚨 CVE-2022-28435
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/siteoptions.php&action=displaygoal&value=1&roleid=1.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-15.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.
🚨 CVE-2022-28436
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
🎖@cveNotify
Baby Care System v1.0 was discovered to contain a SQL injection vulnerability via /admin/uesrs.php&action=display&value=Hide&userid=.
🎖@cveNotify
GitHub
bug_report/vendors/janobe/baby-care-system/SQLi-17.md at main · k0xx11/bug_report
Contribute to k0xx11/bug_report development by creating an account on GitHub.