9575 matches found
CVE-2025-12854 newbee-mall-plus seckillExecution executeSeckill authorization
A vulnerability was identified in newbee-mall-plus up to 2.4.1. This vulnerability affects the function executeSeckill of the file /seckillExecution/. The manipulation of the argument userid leads to authorization bypass. It is possible to initiate the attack remotely. The attack is considered to...
Fuji Electric Monitouch V-SFT-6 (Update A)
RISK EVALUATION Successful exploitation of these vulnerabilities could crash the accessed device; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive...
CVE-2025-12201
A vulnerability was identified in ajayrandhawa User-Management-PHP-MYSQL up to fedcf58797bf2791591606f7b61fdad99ad8bff1. This affects an unknown part of the file /admin/edit-user.php of the component User Management Interface. Such manipulation of the argument image leads to unrestricted upload. ...
CVE-2025-12279 code-projects Client Details System welcome.php cross site scripting
A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of the file /welcome.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used...
The vulnerability of the `run_jq-tests()` function in the `jq_test.c` file of the jq JSON processor allows a attacker to cause a service failure.
The vulnerability of the runjq-tests function in the jqtest.c file of the jq JSON processor involves an uncontrolled and exploitable assertion. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-62421
DataEase CVE-2025-62421 affects DataEase 2.10.13 and earlier. A stored Cross-Site Scripting vulnerability arises from improper file upload validation and authentication bypass, where the StaticResourceApi route upload/{fileId} allows user-controlled filename/extension. During permission checks, a...
The vulnerability of the qed_mcpTraceDump() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the qedmcpTraceDump function in the Linux operating system’s kernel is related to an uncontrolled, exploitable assertion. Exploiting this vulnerability could allow a attacker to cause a service failure...
EUVD-2025-33407
A vulnerability has been found in Tenda W12 3.0.0.63948. The affected element is the function wifiMacFilterSet of the file /goform/modules of the component HTTP Request Handler. The manipulation of the argument mac leads to stack-based buffer overflow. The attack is possible to be carried out...
EUVD-2020-27952
Malware in sbrugna...
EUVD-2016-6496
Malware in sbrugna...
EUVD-2016-6492
Malware in sbrugna...
EUVD-2018-0926
Malware in sbrugna...
EUVD-2019-12474
Malware in sbrugna...
EUVD-2017-12408
Malware in sbrugna...
EUVD-2017-12431
Malware in sbrugna...
EUVD-2017-12441
Malware in sbrugna...
EUVD-2017-12449
Malware in sbrugna...
EUVD-2017-12484
Malware in sbrugna...