1029 matches found
CVE-2025-55521
An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2025-55521
An issue in the component /settings/localisation of Akaunting v3.1.18 allows authenticated attackers to cause a Denial of Service DoS via a crafted POST request...
CVE-2025-55521
This CVE affects Akaunting v3.1.18, with the vulnerability located in the /settings/localisation component. A crafted POST request can trigger a Denial of Service when authenticated. The public documents do not specify a fixed version; PT-2025-34253 notes no available fix at that time. Monitor fo...
CVE-2025-50902
CVE-2025-50902 describes a CSRF vulnerability in the old-peanut Open-Shop project (aka old-peanut/wechat_applet__open_source) up to version 1.0.0. The underlying issue is a CSRF flaw that could allow an attacker to obtain sensitive information via crafted HTTP POST requests. Affected software is ...
PT-2025-33282 · Kuwfi · Kuwfi Gc111
Name of the Vulnerable Software and Affected Versions: KuWFi GC111 versions GC111-GL-LM321 V3.0 20191211 Description: The KuWFi GC111 device is susceptible to unauthorized command execution. A crafted POST request to the /goform/goform set cmd process API endpoint, utilizing the SSID parameter,...
The vulnerability of the wirelessBasic() function in the mod_form.so script of Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code or cause a service failure.
The vulnerability of the wirelessBasic function in the modform.so microprogramming system for Linksys routers such as RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output escapes the buffer in memory when processing the submitSSID1 parameter. Exploiting...
The vulnerability of the um_rp_autochannel() function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 allows a hacker to execute arbitrary code.
The vulnerability of the umrpautochannel function in the microprogramming software for Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 lies in the fact that the operation’s output escapes the buffer and is stored in memory when processing the apcliAuthMode2G and apcliAuthMode5G...
The vulnerability of the FUN_00425fd8() function (/biurl_grou) of the D-Link DIR-632 router’s microprogramming software allows a hacker to induce a service failure.
The vulnerability of the FUN00425fd8 function /biurlgrou of the D-Link DIR-632 router’s microprogramming system is related to the output of operations that go beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause a service failure by sending a specially...
CVE-2012-10033
Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configureimage function. This function invokes PHP’s passthru with the unsanitize...
CVE-2025-52078
File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to gain escalated privileges via a crafted POST request to the /file-upload endpoint...
CVE-2025-52078
CVE-2025-52078 concerns a file upload vulnerability in Writebot AI Content Generator SaaS React Template (versions through 4.0.0). Connected sources confirm an unauthenticated arbitrary file upload via the /file-upload endpoint (and PoC references suggesting an /upload path) that could enable ele...
CVE-2025-25692
A PHAR deserialization vulnerability in the getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request...
CVE-2025-25692
CVE-2025-25692 affects PrestaShop v8.2.0 with a PHAR deserialization vulnerability in the _getHeaders function. A crafted POST request can lead to arbitrary code execution. The incident is tied to the getHeaders implementation in PrestaShop’s codebase, enabling an attacker to run code on the serv...
The vulnerability of the AutoGRAPH Web monitoring software platform lies in its lack of measures to protect the structure of web pages, allowing attackers to execute arbitrary code.
The vulnerability of the AutoGRAPH Web monitoring software platform lies in the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted POST request...
The vulnerability of the built-in web server boa (/boafrm/formIpQoS) of TOTOLINK A702R router’s microprogramming software allows a intruder to cause a service failure.
The vulnerability of the built-in web server boa /boafrm/formIpQoS of TOTOLINK A702R router software is related to the issue of the operation exceeding the buffer in memory when processing the mac parameter. Exploiting this vulnerability allows a malicious actor to cause service failure by sendin...
The vulnerability of the built-in web server boa (/boafrm/formOneKeyAccessButton) of the TOTOLINK A702R router’s microprogramming software allows a intruder to trigger a service failure.
The vulnerability of the built-in web server boa /boafrm/formOneKeyAccessButton of the TOTOLINK A702R router’s microprogramming software is related to the issue of data being written outside the buffer in memory when processing the submit-url parameter. Exploiting this vulnerability allows a...
The vulnerability of the fromWizardHandle()/goform/WizardHandle function in the Tenda FH451 router software allows a hacker to induce a service failure.
The vulnerability of the fromWizardHandle/goform/WizardHandle function in the Tenda FH451 router’s microprogramming system is related to reading data beyond the buffer boundaries in memory when processing the PPW parameter. Exploiting this vulnerability can allow a malicious actor to cause servic...
The vulnerability of the setDiagnosisCfg() function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software allows a intruder to execute arbitrary code.
The vulnerability of the setDiagnosisCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the issue of the operation exceeding the buffer boundaries in memory when processing the ip parameter. Exploiting this vulnerability allows a remote attacker to execut...
The vulnerability of the setTracerouteCfg() function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software allows a intruder to execute arbitrary code.
The vulnerability of the setTracerouteCfg function in the cstecgi.cgi script of the mesh-system TOTOLink T6 software is related to the failure to eliminate special elements during the processing of the command parameter. Exploiting this vulnerability allows a malicious actor to execute arbitrary...
The vulnerability of the sub_410DDC() function in the web interface of the D-Link DIR-825 router’s microprogramming software allows a hacker to execute arbitrary code.
The vulnerability of the sub410DDC function in the web interface of the D-Link DIR-825 router’s microprogramming software is related to the reading of data beyond the buffer boundaries in memory during the processing of the language parameter. Exploiting this vulnerability allows a remote attacke...