CVE-2025-55606

Tenda AX3 V16.03.12.10CN is vulnerable to Buffer Overflow in the fromAdvSetMacMtuWan function via the serverName parameter...

CVE-2025-55606

The Tenda AX3 home dual-band Gigabit wireless router (firmware version V16.03.12.10_CN ) is vulnerable to a Buffer Overflow in the fromAdvSetMacMtuWan function. The root cause is the failure to properly validate the length and size of the input data when processing the serverName parameter, leadi...

CVE-2025-55605

The Tenda AX3 Wi-Fi router (firmware version V16.03.12.10_CN ) is vulnerable to a buffer overflow in the saveParentControlInfo function. The root cause is the copying of buffers without verifying the size of the input data during processing of the deviceName parameter. An attacker could exploit t...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-9144

A weakness has been identified in Scada-LTS 2.7.8.1. This vulnerability affects unknown code of the file publisheredit.shtm. This manipulation of the argument Name causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be...

CVE-2025-51488

A Stored Cross-Site Scripting XSS vulnerability exists in MoonShine version 3.12.4, allowing remote attackers to store and execute arbitrary JavaScript by including a malicious HTML payload in the Name parameter when creating a new Admin...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-55522

A cross-site scripting (XSS) vulnerability exists in the /common/reports component of Akaunting v3.1.18 . The root cause is the improper neutralization of input, which allows an attacker to inject a crafted payload into the name parameter to execute arbitrary web scripts or HTML. To mitigate this...

CVE-2025-55522: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

CVE-2025-55522

Cross-site scripting XSS vulnerability in the component /common/reports of Akaunting v3.1.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter...

PT-2025-34254 · Unknown · Akaunting 3.1.18

Name of the Vulnerable Software and Affected Versions: Akaunting version 3.1.18 Description: A cross-site scripting XSS issue exists in the /common/reports component of the software. Attackers can execute arbitrary web scripts or HTML by injecting a crafted payload into the name parameter...

CVE-2025-9235

CVE-2025-9235 affects Scada-LTS up to 2.7.8.1, where manipulation of the Name parameter in the file compound_events.shtm causes cross-site scripting. The vulnerability can be exploited remotely, and an exploit/public PoC has been published. Root cause: improper handling of the Name argument in th...

CVE-2025-9233 Scada-LTS view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

CVE-2025-9233

CVE-2025-9233 affects Scada-LTS up to version 2.7.8.1. The vulnerability is a stored/ reflected cross-site scripting flaw in the view_edit.shtm file, triggered by manipulating the Name parameter in an unspecified function. Remote exploitation is possible, and public PoCs/exploit details have circ...

CVE-2025-9233 Scada-LTS view_edit.shtm cross site scripting

A security vulnerability has been detected in Scada-LTS up to 2.7.8.1. Impacted is an unknown function of the file viewedit.shtm. The manipulation of the argument Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be...

Medical Store Management System UpdateCompany.java File SQL Injection Vulnerability

Medical Store Management System is a pharmacy management system. The Medical Store Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter companyNameTxt in the file UpdateCompany.java. An...

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from a cross-site scripting attack due to incorrect manipulation of the parameter Name in the file viewedit.shtm...

CVE-2025-55503

The Tenda AC6 dual-band wireless router (specifically version V15.03.06.23_multi ) is vulnerable to a stack-based buffer overflow . The issue resides in the saveParentControlInfo function, where the deviceName parameter is processed without proper validation of the input data's length and size. A...

The vulnerability of the `setUpgradeFW` function in TOTOLINK EX1200T router microprogramming software allows a hacker to execute arbitrary commands.

The vulnerability of the setUpgradeFW function in TOTOLINK EX1200T router microprogramming software is related to the lack of measures taken to neutralize special elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands through the FileName parameter...