CVE-2025-57064

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the bindDhcpIndex parameter in the modifyDhcpRule function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57063

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-5005 Shanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery

A vulnerability was detected in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. This affects an unknown function of the file crm/WeiXinApp/dingtalk/indexevent.php. The manipulation of the argument corpurl results in server-side request forgery. The attack can be launched...

CVE-2025-5005

CVE-2025-5005 affects Lingdang CRM up to 8.6.5.4. The vulnerability is a server-side request forgery (SSRF) in an unknown function of the file crm/WeiXinApp/dingtalk/index_event.php, caused by manipulation of the corpurl argument. Reports indicate the attack can be launched remotely and that the ...

CVE-2025-10112

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10112

A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The...

CVE-2025-10113

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-10113

CVE-2025-10113 affects itsourcecode Student Information Management System 1.0. The vulnerability is a SQL injection in /admin/modules/room/index.php caused by manipulation of the ID argument. Remote exploitation is possible, and the exploit has been publicly disclosed. Some sources note a workaro...

CVE-2025-10113 itsourcecode Student Information Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...

CVE-2025-10113 itsourcecode Student Information Management System index.php sql injection

A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has...

PT-2025-36770

Name of the Vulnerable Software and Affected Versions: Lingdang CRM versions through 8.6.5.4 Description: A server-side request forgery SSRF issue exists in Shanghai Lingdang Information Technology Lingdang CRM. The vulnerability is due to the manipulation of the corpurl argument within an unknow...

CVE-2025-57078

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57063

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the portMappingIndex parameter in the formDelPortMapping function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

CVE-2025-57078

Tenda G3 v3.0brV15.11.0.17 was discovered to contain a stack overflow in the pppoeServerWhiteMacIndex parameter in the formModifyPppAuthWhiteMac function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted request...

PT-2025-36906

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0br V15.11.0.17 Description: The Tenda G3 router contains a stack overflow in the pppoeServerWhiteMacIndex parameter within the formModifyPppAuthWhiteMac function. This issue allows attackers to cause a Denial of Service Do...

CVE-2025-57064

CVE-2025-57064 affects Tenda G3, specifically v3.0br_V15.11.0.17, which contains a stack overflow in the bindDhcpIndex parameter of the modifyDhcpRule function. The vulnerability can cause a Denial of Service (DoS) when a crafted request is sent. Exploitation details are not provided in the avail...

CVE-2025-57059

Affected product: Tenda G3 router (v3.0br_V15.11.0.17). The issue is a stack overflow in the dhcpIndex parameter of the addDhcpRule function, caused by insufficient input validation of length/size. Impact: Denial of Service via a crafted request. Root cause: buffer/stack overflow in a DHCP rule c...

PT-2025-36534

Name of the Vulnerable Software and Affected Versions: itsourcecode Student Information Management System version 1.0 Description: A security issue exists in itsourcecode Student Information Management System 1.0. Manipulation of the ID argument in the file /admin/modules/room/index.php can lead ...

CVE-2025-57078

CVE-2025-57078 affects Tenda G3 router (version 3.0br_V15.11.0.17). A stack overflow exists in the pppoeServerWhiteMacIndex parameter within the formModifyPppAuthWhiteMac function. Exploitation could yield a Denial of Service via a crafted request. The CVSS 3.1 metrics indicate network access, no...

PT-2025-36789

Name of the Vulnerable Software and Affected Versions: Tenda G3 version 3.0br V15.11.0.17 Description: The Tenda G3 version 3.0br V15.11.0.17 contains a stack overflow in the portMappingIndex parameter within the formDelPortMapping function. This issue allows attackers to cause a Denial of Servic...