CVE-2025-11426

A security flaw has been discovered in projectworlds Advanced Library Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /editbook.php. The manipulation of the argument image results in unrestricted upload. It is possible to launch the attack remotely. T...

CVE-2025-11423

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and...

CVE-2025-11423

A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing a manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and...

PT-2025-41262

Name of the Vulnerable Software and Affected Versions SourceCodester Farm Management System version 1.0 Description A flaw exists in SourceCodester Farm Management System 1.0 related to the processing of the /myCart.php file. Manipulation of the pid argument can lead to SQL injection. Remote...

PT-2025-41311

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A security flaw exists in PHPGurukul Beauty Parlour Management System 1.1. The issue involves SQL injection due to manipulation of the searchdata argument within an unknown...

PT-2025-41217

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A flaw exists in projectworlds Advanced Library Management System version 1.0, specifically within the file /edit admin.php. Manipulation of the firstname argument can le...

PT-2025-41218

Name of the Vulnerable Software and Affected Versions projectworlds Advanced Library Management System version 1.0 Description A security flaw exists in projectworlds Advanced Library Management System 1.0. The issue involves an unrestricted upload capability due to the manipulation of the image...

PT-2025-41224

Name of the Vulnerable Software and Affected Versions itsourcecode Leave Management System version 1.0 Description A SQL injection issue exists in itsourcecode Leave Management System version 1.0. The issue is related to the manipulation of the employid argument in the /reset.php file. This...

PT-2025-41251

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0, specifically within the /edit booking.php file. Manipulation of the Name argument can lead to a SQL...

PT-2025-41320

Name of the Vulnerable Software and Affected Versions code-projects Voting System version 1.0 Description A cross site scripting issue exists due to the manipulation of the Firstname, Lastname, and Platform arguments in the file '/admin/voters add.php'. The attack can be executed remotely. The...

PT-2025-41242

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A flaw exists in SourceCodester Hotel and Lodge Management System 1.0. Manipulation of the Contact argument in an unknown function within the /pages/save customer.php fil...

PT-2025-41310

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System version 1.1, specifically within the file /admin/new-appointment.php. Manipulation of the delid argument can lead ...

PT-2025-41226

Name of the Vulnerable Software and Affected Versions itsourcecode Student Transcript Processing System version 1.0 Description A weakness exists in itsourcecode Student Transcript Processing System 1.0. The issue involves the potential for SQL injection through manipulation of the uname argument...

PT-2025-41211

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System version 1.0 that could allow for remote code execution. The issue is related to a SQL injection...

PT-2025-41296

Name of the Vulnerable Software and Affected Versions D-Link DIR-852 versions prior to 20251003 Description A flaw exists in D-Link DIR-852. This issue affects an unspecified component of the /HNAP1/ file. Successful manipulation can result in command injection. The attack can be initiated...

PT-2025-41304

Name of the Vulnerable Software and Affected Versions GNU Binutils version 2.45 Description An issue exists in GNU Binutils that involves an out-of-bounds read within the bfd x86 elf late size sections function, located in the bfd/elfxx-x86.c file of the Linker component. The vulnerability is...

CVE-2025-11417 Campcodes Advanced Online Voting Management System voters_add.php unrestricted upload

A weakness has been identified in Campcodes Advanced Online Voting Management System 1.0. This vulnerability affects unknown code of the file /admin/votersadd.php. Executing manipulation of the argument photo can lead to unrestricted upload. The attack can be launched remotely. The exploit has be...

CVE-2025-11409 Campcodes Advanced Online Voting Management System index.php sql injection

A vulnerability was detected in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /index.php. Performing manipulation of the argument voter results in sql injection. Remote exploitation of the attack is possible. The exploit is now...

CVE-2025-11408

The CVE-2025-11408 entry concerns D-Link DI-7001 MINI (firmware 24.04.18B1). The root cause is a buffer overflow caused by manipulation of the str argument in an unknown function within /dbsrv.asp. The issue can be exploited remotely and is publicly disclosed, with multiple sources describing the...

CVE-2025-11407

A weakness has been identified in D-Link DI-7001 MINI 24.04.18B1. Impacted is an unknown function of the file /upgradefilter.asp. This manipulation of the argument path causes os command injection. The attack may be initiated remotely. The exploit has been made available to the public and could b...