Security Intel Hub 221+

Curated security advisories, vulnerability analyses, and exploit write-ups — auto-cleaned and translated to English. Updated continuously.

Filter

KEV only

Verified PoC

Clear filters

CVSS 4.3

CSRF Vulnerability in SourceCodester Gym Management System V1.0 with PoC

github.com · 2025-07-06

### Key Information #### Vulnerability Title - SourceCodester Gym Management System V1.0 /admin/student_action.php - Cross-Site Request Forgery (CSRF) #### Vulnerability Type - Cross-Site Request Forg…

CVSS 7.3

Best Salon Management System SQL Injection Vulnerability Analysis

github.com · 2025-07-06

### Critical Vulnerability Information #### Vulnerability Type - SQL Injection Vulnerability #### Affected System - Best Salon Management System #### Vulnerability Description - Attackers can exploit …

CVSS 6.3

The Best Salon Management System SQL Injection Vulnerability in bwdates-reports-details.php

github.com · 2025-07-06

### Critical Vulnerability Information #### Vulnerability Type - SQL Injection Vulnerability #### Affected System - The Best Salon Management System #### Vulnerability Location - File: `/barbarbaba/pa…

CVSS 6.3

Best Salon Management System SQL Injection Vulnerability Analysis

github.com · 2025-07-06

### Key Information - **Vulnerability Type**: SQL Injection - **Affected System**: Best Salon Management System - **Vulnerable Location**: In the file `barbarbaba/panel/pro_sale.php`, the handling of …

CVSS 6.3

SQL Injection in Best Salon Management System

github.com · 2025-07-06

### Key Information - **Vulnerability Type**: SQL Injection - **Affected System**: Best Salon Management System - **Vulnerable Location**: `barbarbaba/panel/add-category.php` file - **Issue Descriptio…

CVSS 6.3

Best salon management system SQL Injection in add_subscribe.php

github.com · 2025-07-06

### Critical Vulnerability Information #### Vulnerability Type - SQL Injection Vulnerability #### Affected System - Best Salon Management System #### Vulnerability Location - File: `barbarbaba/panel/a…

CVSS 6.3

Best salon management system SQL Injection in edit-subscription.php

github.com · 2025-07-06

### Key Information #### Vulnerability Description - **Vulnerability Type**: SQL Injection - **Affected System**: Best Salon Management System - **Impact**: Authenticated users can exploit this vulner…

CVSS 6.3

Best Salon Management System SQL Injection Vulnerability Analysis

github.com · 2025-07-06

### Critical Vulnerability Information #### Vulnerability Description - **System**: Best Salon Management System - **Vulnerability Type**: SQL Injection - **Impact**: Authenticated users can exploit t…

CVSS 6.3

Best salon management system SQL Injection in edit-tax.php

github.com · 2025-07-06

CVSS 6.3

Best Salon Management System SQL Injection Vulnerability Analysis

github.com · 2025-07-06

### Key Information #### Vulnerability Type - SQL Injection Vulnerability #### Affected System - Best Salon Management System #### Vulnerability Description - If an attacker has already authenticated,…

CVSS 4.7

SQL Injection in Simple Company Website V1.0 Admin Panel (Pre-Auth Bypass via Session)

github.com · 2025-07-06

### Key Information #### Affected Product - **Name**: Simple Company Website with an Admin Panel - **Version**: V1.0 - **Link**: [https://www.sourcecodester.com/php/14905/simple-company-website-admin-…

CVSS 4.7

Simple Company Website V1.0 Arbitrary File Upload Leading to RCE with POC

github.com · 2025-07-06

### Critical Vulnerability Information #### Affected Product - **Product Name**: Simple Company Website with an Admin Panel Project V1.0 - **Version**: V1.0 - **Affected File**: /classes/Content.php #…

CVSS 4.7

Arbitrary File Upload Vulnerability in SourceCodester Simple Company Website V1.0 with POC

github.com · 2025-07-06

### Critical Vulnerability Information #### Affected Product - SourceCodester Simple Company Website with an Admin Panel Project V1.0 #### Vulnerability Type - Arbitrary File Upload #### Affected Vers…

CVSS 4.7

Sample Company Website V1.0 Arbitrary File Upload Vulnerability Analysis

github.com · 2025-07-06

### Critical Vulnerability Information #### Affected Product - **Name**: Sample Company Website with an Admin Panel Project V1.0 - **Version**: V1.0 - **Link**: [Vendor Homepage](https://www.sourcecod…

CVSS 7.3

Simple Food Ordering System V1.0 Arbitrary File Upload Leading to RCE with POC

github.com · 2025-06-18

From this webpage screenshot, the following key vulnerability information can be obtained: - **Affected Product**: Simple Food Ordering System Project V1.0 - **Vulnerability Type**: Arbitrary File Upl…

CVSS 7.3

Unauthenticated File Upload Vulnerability in Sourcecodester Client Database Management System V1.0

github.com · 2025-06-09

### Critical Vulnerability Information #### Affected Product - **Name**: Sourcecodester Client Database Management System V1.0 - **Vendor Homepage**: https://www.sourcecodester.com/project/1754/client…

CVSS 7.3

SQL Injection in Open Source Clinic Management System V1.0 via mail_port

github.com · 2025-06-07

### Critical Vulnerability Information #### Affected Product - Open Source Clinic Management System #### Affected Version - V1.0 #### Vulnerable File - /email_config.php #### Vulnerability Type - SQL …

CVSS 2.4

DOM-XSS Vulnerability in Multiple Fields with PoC

github.com · 2025-06-07

From this webpage screenshot, the following key information about the vulnerability can be obtained: ### Vulnerability Overview - **Type**: DOM-based Cross-Site Scripting (DOM-XSS) - **Impact**: This …

CVSS 2.4

DOM-based XSS Vulnerability Report: Multiple Fields, Payloads, and PoC

github.com · 2025-06-07

### Critical Vulnerability Information #### Vulnerability Type - **DOM-based XSS**: Cross-site scripting attack within the Document Object Model (DOM). #### Affected Scope - **Multiple fields vulnerab…

CVSS 2.4

Moodle Stored XSS in Multiple Fields (CVE-2021-43587)

github.com · 2025-06-07

From this webpage screenshot, the following key information about the vulnerability can be obtained: ### Vulnerability Overview - **CVE ID**: CVE-2021-43587 - **Vulnerability Type**: Cross-Site Script…

All articles are auto-cleaned (markdown extraction + LLM noise removal) and translated to English by our offline pipeline. Source URL is always preserved at the bottom of each article.

Want a specific source covered? Email us — we add new feeds weekly.

Goal Reached Thanks to every supporter — we hit 100%!

Security Intel Hub 221+