ROS-20251219-7305

Vulnerability in mongodb-org related to incorrect input of configuration data. The vulnerability can be exploited remotely...

PT-2025-52503

Name of the Vulnerable Software and Affected Versions code-projects Simple Blood Donor Management System version 1.0 Description A security issue exists in code-projects Simple Blood Donor Management System 1.0. The issue involves a SQL injection affecting an unknown function within the...

CVE-2025-14836

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-68381

Packetbeat (Elastic Beats) Vulnerability CVE-2025-68381 stems from an improper bounds check (CWE-787) in processing UDP fragments, enabling a remote, unauthenticated attacker to trigger a buffer overflow and cause a crash or significant resource exhaustion with a crafted UDP packet containing an ...

EUVD-2025-204301

A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addretailer.php. The manipulation of the argument cmbAreaCode leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly availabl...

CVE-2025-14879 Tenda WH450 HTTP Request onSSIDChange stack-based overflow

A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssidindex causes stack-based buffer overflow. It is possible to initiate the attack remotely. The explo...

CVE-2025-14877 Campcodes Supplier Management System add_retailer.php sql injection

A vulnerability was identified in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/addretailer.php. The manipulation of the argument cmbAreaCode leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly availabl...

PT-2025-52261

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A security flaw exists in Tenda WH450 version 1.0.0.18. The issue is related to the manipulation of the GO argument within the HTTP Request Handler component, specifically in the file...

PT-2025-53672

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A stack-based buffer overflow exists in the Tenda WH450 router. The issue is related to the manipulation of the ip1 argument within an unknown function of the /goform/PPTPServer file. This allows for...

PT-2025-52601

Name of the Vulnerable Software and Affected Versions Tenda WH450 version 1.0.0.18 Description A stack-based buffer overflow issue exists in the processing of the file /goform/SafeUrlFilter within Tenda WH450 version 1.0.0.18. Manipulation of the page argument in this file can lead to the overflo...

CVE-2025-14834

A weakness has been identified in code-projects Simple Stock System 1.0. This affects an unknown function of the file /checkuser.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public...

CVE-2025-14836

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-14836

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

EUVD-2025-204007

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-14836 ZZCMS User Data Storage user_save.php cleartext storage in file

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-14836 ZZCMS User Data Storage user_save.php cleartext storage in file

A flaw has been found in ZZCMS 2025. Affected by this vulnerability is an unknown functionality of the file /reg/usersave.php of the component User Data Storage Module. This manipulation causes cleartext storage in a file or on disk. Remote exploitation of the attack is possible. The exploit has...

CVE-2025-14836

CVE-2025-14836 concerns ZZCMS 2025. The vulnerability affects the User Data Storage Module, specifically the file path "/reg/user_save.php". The issue enables cleartext storage of data on disk due to an unknown functionality manipulation. Remote exploitation is possible, and an exploit has been p...

CVE-2025-14834

A weakness has been identified in code-projects Simple Stock System 1.0. This affects an unknown function of the file /checkuser.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public...

Two Chrome flaws could be triggered by simply browsing the web: Update now

Google issued an extra patch addressing two security vulnerabilities in Chrome, both of which can be triggered remotely by an attacker when a user visits a specially crafted, malicious web page. Chrome is by far the world’s most popular browser, with an estimated 3.4 billion users. That makes it ...

CVE-2025-14801

A security vulnerability has been detected in xiweicheng TMS up to 2.28.0. This affects the function createComment of the file /admin/blog/comment/create. Such manipulation of the argument content leads to cross site scripting. The attack may be performed from remote. The exploit has been disclos...