PT-2025-35304

Name of the Vulnerable Software and Affected Versions: Jinher OA version 1.0 Description: A vulnerability exists in the processing of the GetTreeDate.aspx file within Jinher OA. Manipulation of the ID argument results in a SQL injection. Remote exploitation is possible. The exploit has been...

PT-2025-35246

Name of the Vulnerable Software and Affected Versions: O2OA versions prior to 10.0-410 Description: A flaw has been found in O2OA that allows for cross site scripting. The issue is related to the manipulation of the argument name/alias/description within an unknown function of the file /x portal...

PT-2025-35216

Name of the Vulnerable Software and Affected Versions: mtons mblog versions up to 3.5.0 Description: A weakness exists in mtons mblog due to cross site scripting. The issue affects unknown processing of the file /admin/role/list. Manipulation of the Name argument causes the issue. The exploit has...

PT-2025-35230

Name of the Vulnerable Software and Affected Versions: PHPGurukul Directory Management System version 2.0 Description: A security issue has been identified in PHPGurukul Directory Management System 2.0. The vulnerability affects unknown code within the /admin/add-directory.php file. Manipulation ...

The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird, related to the use of a zero pointer, allows attackers to compromise the confidentiality of protected information.

The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are related to the use of a null pointer dereferencing. Exploiting these vulnerabilities can allow an attacker to compromise the confidentiality of protected information from a remote location...

CVE-2025-9594 itsourcecode Apartment Management System complain_info.php sql injection

A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complaininfo.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been...

CVE-2025-9594

The CVE-2025-9594 entry concerns itsourcecode Apartment Management System v1.0. A SQL injection vulnerability exists in the /report/complain_info.php file, triggered by manipulating the vid parameter in an unknown function. This allows remote attackers to execute SQL commands, as the vulnerabilit...

CVE-2025-9592

CVE-2025-9592 affects itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /report/bill_info.php, caused by unsafely processing the vid parameter. Remote exploitation is possible, and the exploit is public. Affected behavior and impact are described as en...

CVE-2025-9592 itsourcecode Apartment Management System bill_info.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/billinfo.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

CVE-2025-9592 itsourcecode Apartment Management System bill_info.php sql injection

A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/billinfo.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public...

CVE-2025-9591 ZrLog Theme Configuration Form config cross site scripting

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotel...

CVE-2025-9591 ZrLog Theme Configuration Form config cross site scripting

A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotel...

CVE-2025-9590 Weaver E-Mobile Mobile Management Platform cross site scripting

A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The manipulation of the argument gohome leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available a...

CVE-2025-9583

A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function pingconfig of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used...

CVE-2025-9583

CVE-2025-9583 affects Comfast CF-N1 (firmware 2.6.0). The vulnerability resides in the ping_config function of /usr/bin/webmgnt, enabling command injection with remote exploitation; the exploit has been publicly disclosed. Mitigation guidance in the sources includes restricting access to /usr/bin...

CVE-2025-9581 Comfast CF-N1 webmgnt multi_pppoe command injection

A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multipppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phyinterface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used...

CVE-2025-9575

A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function cgiMain of the file /cgi-bin/upload.cgi. Executing manipulation of the argument filename can lead to os command...

PT-2025-35149

Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A vulnerability exists in the processing of the file /report/bill info.php. Manipulation of the vid argument results in SQL injection. Remote exploitation is possible. The...

PT-2025-35854

Name of the Vulnerable Software and Affected Versions: D-Link DI-8400 version 16.07.26A1 Description: A stack-based buffer overflow vulnerability exists in the yyxz dlink asp function within the /yyxz.asp file of the D-Link DI-8400. Manipulation of the ID argument can trigger the overflow. This...

CVE-2024-13979 St. Joe ERP System SingleRowQueryConverter SQL Injection

A SQL injection vulnerability exists in the St. Joe ERP system "圣乔ERP系统" that allows unauthenticated remote attackers to execute arbitrary SQL commands via crafted HTTP POST requests to the login endpoint. The application fails to properly sanitize user-supplied input before incorporating it into...