MAL-2025-41511 Malicious code in @twork-data-services/proxy-invest-v2-api-v2-broker-account-customer-info (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41506 Malicious code in @twork-data-services/proxy-invest-api-v1-futures-info-single (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-41485 Malicious code in @twork-data-services/company-tariff-info (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2025-35149

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A vulnerability exists in the processing of the file /report/bill info.php. Manipulation of the vid argument results in SQL injection. Remote exploitation is possible. The...

PT-2025-35152

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A SQL injection issue exists in itsourcecode Apartment Management System version 1.0. The issue is located in the /report/complain info.php file, within an unknown function...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/billinfo.php. An attacker can exploit this vulnerability...

itsourcecode Apartment Management System 安全漏洞

Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in parameter vid in file /report/complaininfo.php. An attacker can exploit this...

Important: Red Hat Security Advisory: kernel-rt security update

An update for kernel-rt is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...

CVE-2025-9523

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...

CVE-2025-30060

The CVE-2025-30060 entry describes a SQL injection vulnerability in the ReturnUserUnitsXML.pl service, where the getUserInfo function is exploitable through the UserID parameter. Root cause: unsanitized user input in a SQL query (UserID) leading to unauthorized data access or modification. Impact...

CVE-2025-9508

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...

CVE-2025-9509 itsourcecode Apartment Management System fair_info_all.php sql injection

A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...

CVE-2025-9508

The CVE-2025-9508 entry concerns itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /report/rented_info.php caused by manipulation of the rsid parameter. It is exploitable remotely and public exploits exist. Multiple connected sources confirm the same i...

CVE-2025-9508 itsourcecode Apartment Management System rented_info.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...

CVE-2025-9507

A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitorinfo.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...

CVE-2025-9507

A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitorinfo.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...

CVE-2025-9507

The CVE-2025-9507 entry concerns itsourcecode Apartment Management System 1.0. A SQL injection vulnerability exists in /report/visitor_info.php via the vid parameter due to lack of input validation. Exploitation is remote and publicly reported, with potential to access or exfiltrate database data...

PT-2025-34859

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger the vulnerability,...

PT-2025-34831

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A vulnerability exists in itsourcecode Apartment Management System version 1.0. The issue is a SQL injection affecting an unknown function within the /report/rented info.php...