CVE-2024-13088

An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later...

CVE-2025-5785 TOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack ma...

CVE-2025-22484

CVE-2025-22484 affects QNAP File Station 5. It is a resource management error caused by unrestricted allocation, which can allow a user with an account to exhaust resources and prevent other systems, applications, or processes from accessing the same resource. Affected versions are prior to 5.5.6...

CVE-2025-29877 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-49442

creationtimestamp| type| source ---|---|--- 2025-06-06 15:20:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx553whgg2r...

CVE-2025-49453

creationtimestamp| type| source ---|---|--- 2025-06-06 15:15:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4u5f3hj2r...

CVE-2025-27531

Deserialization of Untrusted Data vulnerability in Apache InLong. This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the...

CVE-2025-38002

creationtimestamp| type| source ---|---|--- 2025-06-06 15:06:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4djdbhw2e 2025-06-26 15:52:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19622...

CVE-2025-5782

CVE-2025-5782 concerns PHPGurukul Employee Record Management System v1.3, where the vulnerability is a SQL injection in the /resetpassword.php file via the manipulated newpassword parameter. Descriptions across sources indicate an unknown functionality is affected, with remote exploitation possib...

CVE-2025-5780 code-projects Patient Record Management System view_dental.php sql injection

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /viewdental.php. The manipulation of the argument itrno leads to sql injection. The attack may be launched remotely. The...

CVE-2025-49449

creationtimestamp| type| source ---|---|--- 2025-06-06 14:56:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx3rh4vjr2s...

CVE-2025-5779 code-projects Patient Record Management System birthing.php sql injection

A vulnerability has been found in code-projects Patient Record Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /birthing.php. The manipulation of the argument itrno/compid leads to sql injection. The attack can be launched...

CVE-2025-38000

creationtimestamp| type| source ---|---|--- 2025-06-06 13:31:10+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114636663684698818 2025-06-19 00:33:38+00:00| seen| https://bsky.app/profile/omo.bsky.social/post/3lrwbmp62fk2d 2025-07-02 15:38:50+00:00| seen|...

CVE-2025-49236

Missing Authorization vulnerability in raychat Raychat raychat allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Raychat: from n/a through = 2.1.0...

CVE-2025-30636

Missing Authorization vulnerability in Ability, Inc Accessibility Suite online-accessibility allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accessibility Suite: from n/a through = 4.19...

CVE-2025-29003

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in mva7 The Holiday Calendar the-holiday-calendar allows Stored XSS.This issue affects The Holiday Calendar: from n/a through = 1.18.2.1...

CVE-2025-27334

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ángel C. Simple Google Static Map simple-google-static-map allows DOM-Based XSS.This issue affects Simple Google Static Map: from n/a through = 1.0.1...

CVE-2025-49419 WordPress Foxit eSign for WordPress plugin <= 2.0.3 - Other Vulnerability Type Vulnerability

Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability in esigngenie Foxit eSign for WordPress esign-genie-for-wp allows Retrieve Embedded Sensitive Data.This issue affects Foxit eSign for WordPress: from n/a through = 2.0.3...

CVE-2025-49429 WordPress Video Embeds <= 0.1.1 - Cross Site Scripting (XSS) Vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Ryan Burnette Video Embeds allows Stored XSS. This issue affects Video Embeds: from n/a through 0.1.1...

CVE-2025-24776 WordPress Responsive Flipbooks <= 1.0 - Broken Access Control Vulnerability

Missing Authorization vulnerability in codelobster Responsive Flipbooks allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Responsive Flipbooks: from n/a through 1.0...