CVE-2025-9233

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

CVE-2025-55606

The CVE-2025-55606 entry pertains to the Tenda AX3 router (firmware v16.03.12.10_CN). A buffer overflow in the fromAdvSetMacMtuWan function is triggered by the serverName parameter, due to improper validation of input length/size. This can cause a denial-of-service condition. CVSS metrics indicat...

CVE-2025-55606

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter...

CVE-2025-55605

CVE-2025-55605 affects Tenda AX3 (V16.03.12.10_CN). A buffer overflow in saveParentControlInfo is triggered via the deviceName parameter, enabling potential denial of service. Public sources (CNVD/CNVD-related entries, Red Hat, NVD, CVE list, PT-Security) confirm the fault originates in saveParen...

PT-2025-34440 · Tenda · Tenda Ax3

Name of the Vulnerable Software and Affected Versions: Tenda AX3 version 16.03.12.10 CN Description: The Tenda AX3 device is susceptible to a buffer overflow issue in the saveParentControlInfo function. The vulnerability is triggered through the deviceName parameter. Recommendations: Update to a...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-9144

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisheredit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be...

CVE-2025-51488

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

PT-2025-34254 · Unknown · Akaunting 3.1.18

Name of the Vulnerable Software and Affected Versions: Akaunting version 3.1.18 Description: A cross-site scripting XSS issue exists in the /common/reports component of the software. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the name parameter...

CVE-2025-55522

Akaunting 3.1.18 contains a Cross-site Scripting (XSS) vulnerability in the /common/reports component. The flaw allows an attacker to inject arbitrary web scripts or HTML via the name parameter, leading to potential user–level impact consistent with XSS. Root cause is improper handling/encoding o...

CVE-2025-9235

CVE-2025-9235 affects Scada-LTS up to 2.7.8.1, where manipulation of the Name parameter in the file compound_events.shtm causes cross-site scripting. The vulnerability can be exploited remotely, and an exploit/public PoC has been published. Root cause: improper handling of the Name argument in th...

CVE-2025-9233

CVE-2025-9233 affects Scada-LTS up to version 2.7.8.1. The vulnerability is a stored/ reflected cross-site scripting flaw in the view_edit.shtm file, triggered by manipulating the Name parameter in an unspecified function. Remote exploitation is possible, and public PoCs/exploit details have circ...

CVE-2025-9233 Scada-LTS view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

CVE-2025-9233 Scada-LTS view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

Medical Store Management System UpdateCompany.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter companyNameTxt in the file UpdateCompany.java. An...

CVE-2025-55503

The CVE covers Tenda AC6 routers with firmware 15.03.06.23_multi, where the saveParentControlInfo function is vulnerable to a stack overflow via the deviceName parameter due to insufficient input validation. This can lead to denial of service. Public technical details in connected sources confirm...

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter Name in the file viewedit.shtm...

Zoo Management System admin/add-foreigner-ticket.php File Cross-Site Scripting Vulnerability

Zoo Management System is a zoo management system. Zoo Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter visitorname in the file /admin/add-foreigner-ticket.php, which can be...