CVE-2025-14536: High SQL Injection in Code-projects Timetable System
CVE-2025-14536 is a high SQL injection in code-projects Class and Exam Timetable Management. No fix is confirmed. Limit access and fix the input handling.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-14536 is a high SQL injection in code-projects Class and Exam Timetable Management. No fix is confirmed. Limit access and fix the input handling.
CVE-2025-14529 is a high SQL injection in Campcodes Retro Basketball Shoes Online Store. No fix is confirmed. Limit access and fix the input handling.
CVE-2025-14527 is a high SQL injection in projectworlds Advanced Library Management System. No fix is confirmed. Limit access and fix the input handling.
CVE-2025-14522: Medium unrestricted file upload in baowzh hfly. No fix is confirmed. Find your copies, limit access and fix the input handling.
CVE-2025-14520 is a medium path traversal in baowzh hfly. No fix is confirmed, so find your copies, limit access and fix the input handling.
CVE-2025-14518 is a medium SSRF in PowerJob up to 5.1.2. No fix is named in the record, so check the project issue and release notes and limit access.
CVE-2025-14515: High SQL injection in Campcodes Supplier Management System. No fix is confirmed. Find your copies, limit access and fix the input handling.
CVE-2025-14514: High SQL injection in Campcodes Supplier Management System. No fix is confirmed. Find your copies, limit access and fix the input handling.
CVE-2025-1446 is a critical SQL injection in the Pods WordPress plugin before 3.2.8.2. Update to 3.2.8.2 or later and review your admin accounts.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.