CVE-2025-10634

A weakness has been identified in D-Link DIR-823X 240126/240802/250416. The impacted element is the function sub412E7C of the file /usr/sbin/goahead of the component Environment Variable Handler. This manipulation of the argument terminaladdr/serverip/serverport causes command injection. The atta...

CVE-2025-10631

A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of the file addcnp.php of the component Available Products Page. The manipulation of the argument name/description leads to cross site scripting. It is possible to initiate the...

CVE-2025-10632

The CVE-2025-10632 entry concerns itsourcecode Online Petshop Management System 1.0, Admin Dashboard, file availableframe.php. The vulnerability is a cross-site scripting flaw caused by manipulation of the name/address parameter, enabling remote exploitation. Public PoC/exploit has been released....

CVE-2025-10631 itsourcecode Online Petshop Management System Available Products addcnp.php cross site scripting

A vulnerability was identified in itsourcecode Online Petshop Management System 1.0. Impacted is an unknown function of the file addcnp.php of the component Available Products Page. The manipulation of the argument name/description leads to cross site scripting. It is possible to initiate the...

CVE-2025-10626

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/updates3.php. This manipulation of the argument credits causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2025-10626

A flaw has been found in SourceCodester Online Exam Form Submission 1.0. Affected by this issue is some unknown functionality of the file /admin/updates3.php. This manipulation of the argument credits causes sql injection. Remote exploitation of the attack is possible. The exploit has been...

CVE-2025-10628 D-Link DIR-852 Web Management hedwig.cgi command injection

A vulnerability was found in D-Link DIR-852 1.00CN B09. This vulnerability affects unknown code of the file /htdocs/cgibin/hedwig.cgi of the component Web Management Interface. Performing manipulation results in command injection. The attack is possible to be carried out remotely. The exploit has...

PT-2025-38320

Name of the Vulnerable Software and Affected Versions kidaze CourseSelectionSystem versions prior to 42cd892b40a18d50bd4ed1905fa89f939173a464 Description A vulnerability exists in kidaze CourseSelectionSystem. The manipulation of the argument csem in an unknown function of the file...

PT-2025-38402

Name of the Vulnerable Software and Affected Versions Tor versions 0.4.7.16 through 0.4.8.17 Description A security flaw exists in Tor within the Onion Service Descriptor Handler component. Manipulation of this component can lead to resource consumption. The issue is potentially exploitable...

PT-2025-38401

Name of the Vulnerable Software and Affected Versions itsourcecode E-Logbook with Health Monitoring System for COVID-19 version 1.0 Description A flaw exists in itsourcecode E-Logbook with Health Monitoring System for COVID-19, potentially allowing for SQL injection. The issue is related to the...

PT-2025-38475

Name of the Vulnerable Software and Affected Versions SourceCodester Pet Grooming Management Software version 1.0 Description A SQL injection issue exists in SourceCodester Pet Grooming Management Software. The vulnerability is located in the file /admin/operation/paid.php. Manipulation of the...

PT-2025-38295

Name of the Vulnerable Software and Affected Versions wangchenyi1996 chat forum up to 80bdb92f5b460d36cab36e530a2c618acef5afd2 Description A flaw exists in wangchenyi1996 chat forum, potentially allowing for cross site scripting. The issue is related to the manipulation of the path argument withi...

PT-2025-38382

Name of the Vulnerable Software and Affected Versions Airsonic-Advanced versions prior to 10.6.1 Description A vulnerability exists in Airsonic-Advanced up to version 10.6.0 within the Playlist Upload Handler component. Manipulation of the component allows for unrestricted file uploads, and the...

PT-2025-38467

Name of the Vulnerable Software and Affected Versions fuyang lipengjun platform version 1.0 Description A security flaw exists in the AttributeController function within the /attribute/queryAll file of the fuyang lipengjun platform. Manipulation of this function leads to improper authorization...

PT-2025-38411

Name of the Vulnerable Software and Affected Versions itsourcecode Student Information Management System version 1.0 Description A vulnerability exists in itsourcecode Student Information Management System version 1.0. The issue is a SQL injection affecting an unknown function within the...

PT-2025-38322

Name of the Vulnerable Software and Affected Versions itsourcecode Online Discussion Forum version 1.0 Description A SQL injection weakness exists in the file /members/compose msg.php due to the manipulation of the ID argument. This issue is exploitable remotely. The exploit has been made publicl...

KLA88208 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Windows Bluetooth Service can be exploited remotely to gain privileges. 2. An...

CVE-2025-10626

CVE-2025-10626 affects SourceCodester Online Exam Form Submission 1.0. A flaw in the file /admin/update_s3.php allows manipulation of the credits parameter, causing a SQL injection. Remote exploitation is possible, and the exploit has been published. Connected sources corroborate the SQL injectio...

CVE-2025-10623

A vulnerability was identified in SourceCodester Hotel Reservation System 1.0. The impacted element is an unknown function of the file deleteuser.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and...

CVE-2025-10481

A security vulnerability has been detected in SourceCodester Online Student File Management System 1.0. This impacts an unknown function of the file /removefile.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been...