CVE-2025-11529: High API Authentication Bypass in ChurchCRM
ChurchCRM up to 5.18.0 has a missing authentication flaw in its API middleware, fixed in commit 3a1cffd. Upgrade to a current release and review API logs.
Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
ChurchCRM up to 5.18.0 has a missing authentication flaw in its API middleware, fixed in commit 3a1cffd. Upgrade to a current release and review API logs.
High SQL injection in code-projects E-Commerce Website via supp_id. No fixed version is confirmed, so limit access and switch to prepared statements.
Medium SQL injection in code-projects E-Commerce Website via supp_email. No fixed version is confirmed, so limit access and switch to prepared statements.
Medium SQL injection in code-projects E-Commerce Website via prod_name. No fixed version is confirmed, so limit access and switch to prepared statements.
Medium unrestricted file upload in code-projects Voting System 1.0 via the photo argument. No fix is confirmed; restrict admin access and validate uploads.
High SQL injection in Beauty Parlour Management System. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
High SQL injection in Beauty Parlour Management System. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
High SQL injection in Beauty Parlour Management System. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
High SQL injection in Beauty Parlour Management System. No fix is confirmed, so limit access, use prepared statements and check the vendor for updates.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.