24854 matches found
CVE-2025-40708
OpenAtlas v8.9.0 is affected by a Cross-Site Scripting (XSS) flaw triggered by insufficient validation of the name field in the POST /insert/event API. An attacker could craft queries to an authenticated user and potentially steal session cookie details. The issue is corroborated by multiple sour...
CVE-2025-54777
creationtimestamp| type| source ---|---|--- 2025-08-29 10:39:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lxjum2hok72m...
CVE-2025-9610
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...
CVE-2025-9610 code-projects Online Event Judging System create_account.php sql injection
A vulnerability was determined in code-projects Online Event Judging System 1.0. This issue affects some unknown processing of the file /createaccount.php. This manipulation of the argument fname causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicl...
CVE-2025-9610
The CVE-2025-9610 entry relates to code-projects Online Event Judging System 1.0 with a SQL injection in /create_account.php. The fname parameter manipulation leads to SQL injection, enabling remote exploitation. Multiple connected sources confirm the vulnerability and public exploitation discuss...
CVE-2025-58323
creationtimestamp| type| source ---|---|--- 2025-08-29 02:21:44+00:00| seen| Telegram/9S4R1cEncaT7DTb7qJdBfMELWam38iSHfsE-I850vIaP1Xc...
PT-2025-35209
Name of the Vulnerable Software and Affected Versions: OpenAtlas version 8.9.0 Description: A Cross-Site Scripting XSS issue exists in OpenAtlas due to insufficient validation of user input received through POST requests. This could allow a remote user to send crafted queries to an authenticated...
CVE-2025-9586
creationtimestamp| type| source ---|---|--- 2025-08-28 21:11:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108447341555170...
CVE-2025-57217
creationtimestamp| type| source ---|---|--- 2025-08-28 17:31:15+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107579489501260...
CVE-2025-31977
creationtimestamp| type| source ---|---|--- 2025-08-28 17:18:19+00:00| seen| Telegram/-BB4jtweCzquKc6ot1EGZTwTmdVAm9a5NfB1rxjNqyll2Bs...
CVE-2025-54725
creationtimestamp| type| source ---|---|--- 2025-08-28 13:18:55+00:00| seen| Telegram/nYYJQkYW-GbkIGKuIy1oCrSYxmpL81Q1RTPS4s5TH7sbxTc...
PT-2025-35111
Name of the Vulnerable Software and Affected Versions: NeuVector versions prior to 5.4.6 Description: NeuVector process handling can lead to the leakage of sensitive arguments, such as passwords, within security event logs. The software uses regular expressions to detect and redact sensitive data...
CVE-2018-25115
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2018-25115
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2018-25115
Multiple D-Link DIR-series routers (DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, DIR-815) are affected by a remote code execution vulnerability in the /service.cgi endpoint. The flaw stems from improper input handling in the EVENT=CHECKFW parameter, which is passed directly to the system...
CVE-2018-25115 D-Link DIR-110/412/600/615/645/815 RCE via service.cgi
Multiple D-Link DIR-series routers, including DIR-110, DIR-412, DIR-600, DIR-610, DIR-615, DIR-645, and DIR-815 firmware version 1.03, contain a vulnerability in the service.cgi endpoint that allows remote attackers to execute arbitrary system commands without authentication. The flaw stems from...
CVE-2025-58204
creationtimestamp| type| source ---|---|--- 2025-08-27 18:16:37+00:00| seen| Telegram/dZoi5DBwQA8dCNI2w0aUw39mYFTpDKt4AjZVpzyoFlD1ag...
CVE-2025-34161
creationtimestamp| type| source ---|---|--- 2025-08-27 17:04:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115101811324852634 2025-08-28 14:12:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/49385 2025-08-30 21:02:29+00:00| seen|...