Lucene search
+L

1483 matches found

Cvelist
Cvelist
•added 2025/07/25 7:32 a.m.•52 views

CVE-2025-8137 TOTOLINK A702R HTTP POST Request formIpQoS buffer overflow

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The...

9CVSS0.0105EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•18 views

PT-2025-30929 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: code-projects Church Donation System version 1.0 Description: A critical vulnerability exists in code-projects Church Donation System 1.0. The issue is a SQL injection affecting an unknown function within the /admin/index.php file of the HTTP...

9.8CVSS7.5AI score0.00547EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•8 views

CVE-2025-8137: Buffer Copy without Checking Size of Input

A vulnerability has been found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formIpQoS of the component HTTP POST Request Handler. The manipulation of the argument mac leads to buffer overflow. The...

9CVSS5.9AI score0.0105EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•7 views

CVE-2025-8140: Buffer Copy without Checking Size of Input

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been declared as critical. This vulnerability affects unknown code of the file /boafrm/formWlanMultipleAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The...

9CVSS5.9AI score0.08835EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•37 views

PT-2025-31023 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability exists in the HTTP POST Request Handler component of TOTOLINK X15. The vulnerability is located in the unknown code of the /boafrm/formFilter file and results in ...

9CVSS8.9AI score0.01122EPSS
SaveExploits1References17
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•24 views

PT-2025-31026 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability exists in the TOTOLINK X15 router's built-in boa server. The issue is a buffer overflow within the memory during the processing of the devicemac1 parameter via an...

9CVSS8.8AI score0.01079EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•19 views

PT-2025-31028 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability exists in the TOTOLINK X15 router's built-in boa server. The issue is a buffer overflow within the memory during the processing of the submit-url parameter. This...

9CVSS8.7AI score0.01088EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•4 views

CVE-2025-8166: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to...

9.8CVSS5.5AI score0.00547EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•4 views

CVE-2025-8136: Buffer Copy without Checking Size of Input

A vulnerability, which was classified as critical, was found in TOTOLINK A702R 4.0.0-B20230721.1521. Affected is an unknown function of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument ip6addr leads to buffer overflow. It is possible to laun...

9CVSS5.9AI score0.01051EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•7 views

CVE-2025-8138: Buffer Copy without Checking Size of Input

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521 and classified as critical. Affected by this issue is some unknown functionality of the file /boafrm/formOneKeyAccessButton of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer...

9CVSS5.9AI score0.08835EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•4 views

CVE-2025-8159: Stack-based Buffer Overflow

A vulnerability was found in D-Link DIR-513 1.0. It has been rated as critical. This issue affects the function formLanguageChange of the file /goform/formLanguageChange of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to stack-based buffer overflow. The...

9.8CVSS6AI score0.16688EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•22 views

PT-2025-30934 · D Link · Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 version 1.10 Description: A critical vulnerability exists due to a buffer overflow in the formSetWanPPTPcallback function within the /goform/formSetWanPPTPpath file of the HTTP POST Request Handler component. The vulnerability ...

9.8CVSS8.9AI score0.01679EPSS
SaveExploits1References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•6 views

CVE-2025-8169: Buffer Copy without Checking Size of Input

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPPTPpath of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. It is possible to...

9.8CVSS5.9AI score0.01679EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/25 12:00 a.m.•9 views

CVE-2025-8139: Buffer Copy without Checking Size of Input

A vulnerability was found in TOTOLINK A702R 4.0.0-B20230721.1521. It has been classified as critical. This affects an unknown part of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument servicetype leads to buffer overflow. It is possible to...

9CVSS5.9AI score0.0105EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/25 12:00 a.m.•18 views

PT-2025-31027 · Totolink · Totolink X15

Name of the Vulnerable Software and Affected Versions: TOTOLINK X15 version 1.0.0-B20230714.1105 Description: A critical vulnerability exists in the TOTOLINK X15 device. The issue is a buffer overflow within an unknown function of the HTTP POST Request Handler component, specifically in the file...

9.8CVSS9.1AI score0.0123EPSS
SaveExploits1References12
RedhatCVE
RedhatCVE
•added 2025/07/24 12:23 a.m.•19 views

CVE-2025-7946

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search-visitor.php of the component HTTP POST Request Handler. The manipulation of the argument searchdata leads to cross sit...

6.1CVSS4.3AI score0.00463EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•31 views

PT-2025-30741 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability exists in the TOTOLINK A702R device. The issue is related to a buffer overflow within the HTTP POST Request Handler component, specifically in the file...

9CVSS8.8AI score0.08835EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/07/22 12:00 a.m.•5 views

CVE-2025-7946: Improper Neutralization of Input During Web Page Generation

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /search-visitor.php of the component HTTP POST Request Handler. The manipulation of the argument searchdata leads to cross sit...

6.1CVSS3.8AI score0.00463EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•21 views

PT-2025-30739 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability exists in TOTOLINK A702R. The issue is related to a buffer overflow within the HTTP POST Request Handler component, specifically in the file...

9CVSS8.8AI score0.08835EPSS
SaveExploits1References12
Positive Technologies
Positive Technologies
•added 2025/07/22 12:00 a.m.•26 views

PT-2025-30740 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability exists in the HTTP POST Request Handler component of the affected software. The issue is a buffer overflow triggered by manipulating the service type argument...

9CVSS8.7AI score0.0105EPSS
SaveExploits1References12
Rows per page
Query Builder