PT-2025-30188 · Unknown · Pmticket Project-Management-Software

Name of the Vulnerable Software and Affected Versions: pmTicket Project-Management-Software versions prior to 2ef379da2075f4761a2c9029cf91d073474e7486 Description: A critical issue exists in pmTicket Project-Management-Software. The getUserLanguage function within the classes/class.database.php...

PT-2025-30414 · Tenda · Tenda Ac7

Name of the Vulnerable Software and Affected Versions: Tenda AC7 version 15.03.06.44 Description: A critical issue exists in the httpd component of Tenda AC7. The vulnerability is due to a stack-based buffer overflow in the formSetMacFilterCfg function within the /goform/setMacFilterCfg file. The...

PT-2025-30158 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical vulnerability exists in Church Donation System 1.0. The vulnerability is due to a SQL injection flaw within the /members/update password admin.php file. Manipulation of the new passwo...

PT-2025-30355 · D Link · D-Link Dir-513

Name of the Vulnerable Software and Affected Versions: D-Link DIR-513 versions up to 20190831 Description: A critical issue exists in D-Link DIR-513. The vulnerability is due to a buffer overflow in the formSetWanDhcpplus function within the /goform/formSetWanDhcpplus file. The curTime argument c...

PT-2025-30161 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical vulnerability exists in Church Donation System 1.0. The issue involves a SQL injection vulnerability in the /members/search.php file. The Username parameter is susceptible to...

CVE-2025-7837

The affected product is TOTOLINK T6 router (version 4.1.5cu.748_B20211015) with the MQTT Service — specifically the recvSlaveStaInfo function. The vulnerability is a buffer overflow triggered by manipulating the dest argument, allowing remote exploitation. Multiple sources (NVD/NVD-derived entrie...

CVE-2025-7837 TOTOLINK T6 MQTT Service recvSlaveStaInfo buffer overflow

A vulnerability was found in TOTOLINK T6 4.1.5cu.748B20211015 and classified as critical. Affected by this issue is the function recvSlaveStaInfo of the component MQTT Service. The manipulation of the argument dest leads to buffer overflow. The attack may be launched remotely. The exploit has bee...

CVE-2025-7836 D-Link DIR-816L Environment Variable cgibin lxmldbc_system command injection

A vulnerability has been found in D-Link DIR-816L up to 2.06B01 and classified as critical. Affected by this vulnerability is the function lxmldbcsystem of the file /htdocs/cgibin of the component Environment Variable Handler. The manipulation leads to command injection. The attack can be launche...

CVE-2025-7832

A vulnerability classified as critical was found in code-projects Church Donation System 1.0. This vulnerability affects unknown code of the file /members/offering.php. The manipulation of the argument trcode leads to sql injection. The attack can be initiated remotely. The exploit has been...

Exploit for Incorrect Type Conversion or Cast in Kunbus Revpi_Status

CVE-2025-41646 - RevPi Webstatus request/response ⚠️ D...

CVE-2025-7829

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The...

CVE-2025-7829 code-projects Church Donation System login.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The...

PT-2025-30137 · Jinher Oa · Jinher Oa

Name of the Vulnerable Software and Affected Versions: Jinher OA version 1.2 Description: A vulnerability exists in Jinher OA 1.2 related to xml external entity reference within the ProjectScheduleDelete.aspx file. This issue can be exploited remotely. The exploit has been publicly disclosed...

PT-2025-30141 · Unknown · Church Donation System

Name of the Vulnerable Software and Affected Versions: Church Donation System version 1.0 Description: A critical vulnerability exists in Church Donation System 1.0. The issue is a SQL injection vulnerability located in the /members/Tithes.php file. Manipulation of the trcode argument allows for...

PT-2025-30151 · Tenda · Tenda Fh451

Name of the Vulnerable Software and Affected Versions: Tenda FH451 version 1.0.0.9 Description: A critical issue exists in the fromVirtualSer function within the /goform/VirtualSer file. Manipulation of the page argument can trigger a stack-based buffer overflow, allowing for remote exploitation...

PT-2025-30154 · Phpgurukul · Phpgurukul Apartment Visitors Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Apartment Visitors Management System version 1.0 Description: A vulnerability exists in the HTTP POST Request Handler component of PHPGurukul Apartment Visitors Management System. The visname argument within the...

CVE-2025-7807

CVE-2025-7807 affects Tenda FH451 1.0.0.9 in the fromSafeUrlFilter function of /goform/SafeUrlFilter. The issue is a stack-based buffer overflow triggered by manipulating the Go/page argument, with a network-reachable vector and an exploit that has been disclosed publicly. Some connected sources ...

GHSA-F8VW-8VGH-22R9 XXL-JOB is vulnerable to SSRF attacks

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...

XXL-JOB is vulnerable to SSRF attacks

A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch...

CVE-2025-7788 Xuxueli xxl-job SampleXxlJob.java commandJobHandler os command injection

A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to os command injection. The attac...