CVE-2025-9812

A vulnerability was determined in Tenda CH22 1.0.0.1. This vulnerability affects the function formexeCommand of the file /goform/exeCommand. Executing manipulation of the argument cmdinput can lead to buffer overflow. The attack may be performed from remote. The exploit has been publicly disclose...

CVE-2025-9811 Campcodes Farm Management System reviewInput.php sql injection

A vulnerability was found in Campcodes Farm Management System 1.0. This affects an unknown part of the file /reviewInput.php. Performing manipulation of the argument rating results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be...

PT-2025-35614

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Farm Management System version 1.0 Description: A SQL injection issue exists in the /Login/login.php file due to manipulation of the uname argument. This allows for remote exploitation. The exploit is publicly available...

PT-2025-35604

Name of the Vulnerable Software and Affected Versions: PHPGurukul Beauty Parlour Management System version 1.1 Description: A SQL injection issue exists in PHPGurukul Beauty Parlour Management System 1.1. The vulnerability is located in the /signup.php file, within an unknown function. Manipulati...

Linux Distros Unpatched Vulnerability : CVE-2015-2571

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknow...

PT-2025-35642

Name of the Vulnerable Software and Affected Versions: itsourcecode Sports Management System version 1.0 Description: A weakness exists in itsourcecode Sports Management System 1.0. The issue involves SQL injection due to manipulation of the code argument within an unknown function of the...

CVE-2025-50565

Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker...

PT-2025-35591

Name of the Vulnerable Software and Affected Versions: Doubo ERP version 1.0 Description: Doubo ERP version 1.0 contains an SQL injection flaw resulting from insufficient user input validation. This issue is remotely exploitable by an attacker. Recommendations: At the moment, there is no...

CVE-2025-50565

Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker...

CVE-2025-9802

CVE-2025-9802 affects RemoteClinic 2.0, with a SQL injection in the /staff/profile.php file caused by manipulating the ID parameter. The vulnerability can be exploited remotely. Multiple sources corroborate the issue and specify the affected component as RemoteClinic 2.0, with the injection affec...

CVE-2025-9801

The CVE-2025-9801 issue affects SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af, where manipulating the filePath argument enables path traversal. Remote exploitation is possible and the exploit has been publicly disclosed. A patch is identified as 45372aece5e05e04b417442417416a52e9...

CVE-2025-9801 SimStudioAI sim path traversal

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...

CVE-2025-9801 SimStudioAI sim path traversal

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...

CVE-2025-9801 SimStudioAI sim path traversal

A security vulnerability has been detected in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. This affects an unknown part. The manipulation of the argument filePath leads to path traversal. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and...

CVE-2025-9800 SimStudioAI sim HTML File route.ts import unrestricted upload

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricte...

CVE-2025-9800 SimStudioAI sim HTML File route.ts import unrestricted upload

A weakness has been identified in SimStudioAI sim up to ed9b9ad83f1a7c61f4392787fb51837d34eeb0af. Affected by this issue is the function Import of the file apps/sim/app/api/files/upload/route.ts of the component HTML File Parser. Executing manipulation of the argument File can lead to unrestricte...

CVE-2025-9705

A weakness has been identified in SourceCodester Water Billing System 1.0. Affected is an unknown function of the file /paybill.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and coul...

CVE-2025-9795

A vulnerability has been found in xujeff tianti 天梯 up to 2.3. The impacted element is the function ajaxUploadFile of the file src/main/java/com/jeff/tianti/controller/UploadController.java. The manipulation of the argument upfile leads to unrestricted upload. It is possible to initiate the attack...

CVE-2025-9793

The CVE-2025-9793 entry concerns itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the Setting Handler, exposed via /setting/admin.php, where manipulating the ddlBranch parameter enables remote exploitation. Public exploit appears available, and multiple connec...

CVE-2025-9792

The CVE-2025-9792 entry describes a SQL injection in itsourcecode Apartment Management System 1.0, via parameter mid in /e_dashboard/e_all_info.php. The vulnerability is usable remotely and reportedly has a publicly disclosed exploit. Connected documents from CNVD/CNNVD/Red Hat/CIRCL/PTSecurity c...