Deep dives, practical guides, and incident analyses from engineers who build Safeguard. No fluff, no vendor FUD — just what you need to ship secure software.
CVE-2025-1963 is a high SQL injection in projectworlds Online Hotel Booking. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1962 is a high SQL injection in projectworlds Online Hotel Booking. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1959 is a high SQL injection in Codezips Gym Management System. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1958 is a medium SQL injection in aaluoxiang oa_system 1.0. No fix is named, so use bound parameters in the query and restrict access to the page.
CVE-2025-1956: high SQL injection in code-projects Shopping Portal 1.0. No fixed version is named. Use prepared statements and restrict access to the page.
CVE-2025-1954 is a high SQL injection in PHPGurukul HMPV Testing System. No fix is named; use prepared statements and limit access to the page.
CVE-2025-1952: high SQL injection in PHPGurukul Restaurant Booking 1.0. No fixed version is named. Use prepared statements and restrict access to the page.
CVE-2025-1947 is a medium severity command injection in the scorm function of hzmanyun Education and Training System 2.1.3. No fix is named; limit access.
CVE-2025-1946 is a medium severity command injection in exportPDF in hzmanyun Education and Training System 2.1. No fix is named, so limit access now.
Weekly insights on software supply chain security, delivered to your inbox.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.
