Lucene search
+L

3628 matches found

Positive Technologies
Positive Technologies
•added 2025/12/21 12:00 a.m.•30 views

PT-2026-43769

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free issue exists in the bq256xx power supply driver. The problem occurs because the devm variant for requesting an IRQ is used before the devm variant for allocating or...

7.8CVSS6.3AI score0.00171EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/12/18 10:37 p.m.•16 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/18 12:34 a.m.•22 views

EUVD-2025-204018

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
OSV
OSV
•added 2025/12/17 10:15 p.m.•19 views

CVE-2025-14832

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS5.8AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
•added 2025/12/17 10:02 p.m.•28 views

CVE-2025-14832

The affected software is itsourcecode Online Cake Ordering System v1.0. The vulnerability lies in the file /updateproduct.php?action=edit where manipulation of the ID parameter enables SQL injection, enabling remote exploitation. Multiple connected sources corroborate a publicly available exploit...

9.8CVSS7.1AI score0.00387EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/12/17 10:02 p.m.•42 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS0.00387EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
•added 2025/12/17 10:02 p.m.•8 views

CVE-2025-14832 itsourcecode Online Cake Ordering System updateproduct.php sql injection

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

7.5CVSS7.1AI score0.00387EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
•added 2025/12/17 8:07 a.m.•15 views

CVE-2025-9612

An issue was discovered in the PCI Express PCIe Integrity and Data Encryption IDE specification, where insufficient guidance on Transaction Layer Packet TLP ordering and tag uniqueness may allow encrypted packets to be replayed or reordered without detection. This can enable local or physical...

5.1CVSS6.5AI score0.00137EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/12/17 12:00 a.m.•20 views

itsourcecode Online Cake Ordering System SQL注入漏洞

itsourcecode Online Cake Ordering System is an online cake ordering system of itsourcecode open source. A SQL injection vulnerability exists in version 1.0 of itsourcecode Online Cake Ordering System, which stems from incorrect manipulation of the parameter ID in the file...

9.8CVSS7.7AI score0.00387EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2025/12/17 12:00 a.m.•20 views

PT-2025-51933

Name of the Vulnerable Software and Affected Versions itsourcecode Online Cake Ordering System version 1.0 Description A flaw exists in itsourcecode Online Cake Ordering System that could allow for remote code execution. The issue is related to the manipulation of the ID argument in the...

9.8CVSS8AI score0.00387EPSS
SaveExploits1References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/12/17 12:00 a.m.•6 views

CVE-2025-14832: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Online Cake Ordering System 1.0. The affected element is an unknown function of the file /updateproduct.php?action=edit. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicl...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
NVD
NVD
•added 2025/12/16 4:16 p.m.•38 views

CVE-2025-68319

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

0.00176EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/12/16 3:39 p.m.•56 views

CVE-2025-68319 netconsole: Acquire su_mutex before navigating configs hierarchy

In the Linux kernel, the following vulnerability has been resolved: netconsole: Acquire sumutex before navigating configs hierarchy There is a race between operations that iterate over the userdata cgchildren list and concurrent add/remove of userdata items through configfs. The updateuserdata...

0.00176EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2025/12/15 9:34 a.m.•21 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 8:10 a.m.•26 views

CVE-2025-14650

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS6.8AI score0.00401EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/12/15 7:35 a.m.•22 views

CVE-2025-14649

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

9.8CVSS7AI score0.00387EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•16 views

EUVD-2025-203287

A vulnerability was detected in itsourcecode Online Cake Ordering System 1.0. Affected by this issue is some unknown functionality of the file /cakeshop/supplier.php. Performing manipulation of the argument supplier results in sql injection. The attack can be initiated remotely. The exploit is no...

7.5CVSS6.6AI score0.00387EPSS
SaveExploits1References6
EUVD
EUVD
•added 2025/12/14 9:30 a.m.•18 views

EUVD-2025-203291

A flaw has been found in itsourcecode Online Cake Ordering System 1.0. This affects an unknown part of the file /cakeshop/product.php. Executing manipulation of the argument Product can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used...

7.5CVSS6.4AI score0.00401EPSS
SaveExploits1References6
OSV
OSV
•added 2025/12/14 9:15 a.m.•15 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS6.9AI score0.00387EPSS
SaveExploits1References5
NVD
NVD
•added 2025/12/14 9:15 a.m.•17 views

CVE-2025-14652

A vulnerability was found in itsourcecode Online Cake Ordering System 1.0. This issue affects some unknown processing of the file /admindetail.php?action=edit. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and...

9.8CVSS0.00387EPSS
SaveExploits1References5
Rows per page
Query Builder