PT-2025-26558 · Unknown · Simple Pizza Ordering System

Name of the Vulnerable Software and Affected Versions: code-projects Simple Pizza Ordering System version 1.0 Description: A critical issue was found in the code, affecting the /addcatexec.php file. The manipulation of the textfield argument leads to SQL injection. This issue can be initiated...

PT-2025-26541 · Unknown · Code-Projects Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: code-projects Online Hotel Reservation System version 1.0 Description: A critical issue has been found in the code-projects Online Hotel Reservation System. The problem affects some unknown functionality of the file /reservation/order.php. Th...

CVE-2025-6417

A vulnerability has been found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-artist.php. The manipulation of the argument awarddetails leads to sql injection. The attack can be launched...

CVE-2025-6416

A vulnerability, which was classified as critical, was found in PHPGurukul Art Gallery Management System 1.1. Affected is an unknown function of the file /admin/changeimage4.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The...

CVE-2025-6417

The CVE-2025-6417 entry concerns PHPGurukul Art Gallery Management System v1.1. Affected is an unknown functionality in /admin/add-artist.php where the awarddetails parameter is vulnerable to SQL injection. This vulnerability can be exploited remotely and the exploit has been disclosed publicly, ...

CVE-2025-6409 PHPGurukul Art Gallery Management System forgot-password.php sql injection

A vulnerability was found in PHPGurukul Art Gallery Management System 1.1 and classified as critical. This issue affects some unknown processing of the file /admin/forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be initiated remotely. The exploit...

CVE-2025-6399 TOTOLINK X15 HTTP POST Request formIPv6Addr buffer overflow

A vulnerability, which was classified as critical, was found in TOTOLINK X15 1.0.0-B20230714.1105. Affected is an unknown function of the file /boafrm/formIPv6Addr of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6374

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

CVE-2025-6374 D-Link DIR-619L formSetACLFilter stack-based overflow

A vulnerability was found in D-Link DIR-619L 2.06B01 and classified as critical. This issue affects the function formSetACLFilter of the file /goform/formSetACLFilter. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit...

PT-2025-26526 · Unknown · Campcodes Online Recruitment Management System

Name of the Vulnerable Software and Affected Versions: Campcodes Online Recruitment Management System version 1.0 Description: A critical issue was found in the system, affecting an unknown functionality of the file /admin/ajax.php?action=save settings, specifically the About Content Page...

PT-2025-26513 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue has been found in the system, affecting an unknown functionality of the file /admin/changepropic.php. The manipulation of the imageid argument leads to SQL...

PT-2025-26499 · Code Projects · School Fees Payment System

Name of the Vulnerable Software and Affected Versions: code-projects School Fees Payment System version 1.0 Description: A critical issue affects the processing of the file /student.php in the School Fees Payment System. The manipulation of the ID argument leads to SQL injection. This issue can b...

PT-2025-26517 · Unknown · Phpgurukul Art Gallery Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Art Gallery Management System version 1.1 Description: A critical issue was found in the PHPGurukul Art Gallery Management System. The problem affects the file /admin/changeimage2.php and is related to the manipulation of the editi...

PT-2025-26525 · Unknown · Simple Online Hotel Reservation System

Name of the Vulnerable Software and Affected Versions: Simple Online Hotel Reservation System version 1.0 Description: A critical issue affects the processing of the file /admin/add account.php, where the manipulation of the admin id argument leads to SQL injection. This issue can be exploited...

CVE-2025-6373

The CVE-2025-6373 entry concerns D-Link DIR-619L (firmware 2.06B01). The vulnerability is in the function formSetWizard1 of /goform/formWlSiteSurvey, where the curTime argument is not properly validated, causing a stack-based buffer overflow. It is described as remotely exploitable with public ex...

CVE-2025-6371

CVE-2025-6371 affects the D-Link DIR-619L device (firmware 2.06B01). The vulnerability is in the function formSetEnableWizard of /goform/formSetEnableWizard, where manipulating the argument curTime causes a stack-based buffer overflow. It can be triggered remotely and the exploit has been disclos...

CVE-2025-6370 D-Link DIR-619L formWlanGuestSetup stack-based overflow

A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-6370 D-Link DIR-619L formWlanGuestSetup stack-based overflow

A vulnerability classified as critical was found in D-Link DIR-619L 2.06B01. Affected by this vulnerability is the function formWlanGuestSetup of the file /goform/formWlanGuestSetup. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-6367 D-Link DIR-619L formSetDomainFilter stack-based overflow

A vulnerability was found in D-Link DIR-619L 2.06B01. It has been declared as critical. This vulnerability affects unknown code of the file /goform/formSetDomainFilter. The manipulation of the argument curTime/schedname%d/url%d leads to stack-based buffer overflow. The attack can be initiated...

CVE-2025-34029

An OS command injection vulnerability exists in the Edimax EW-7438RPn Mini firmware version 1.13 and prior via the syscmd.asp form handler. The /goform/formSysCmd endpoint exposes a system command interface through the sysCmd parameter. A remote authenticated attacker can submit arbitrary shell...