PT-2025-23913 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue has been discovered, affecting an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the fromdate and todate arguments lea...

PT-2025-23887 · Unknown · Code-Projects/Anirbandutta9 Content Management System/News-Buzz

Name of the Vulnerable Software and Affected Versions: code-projects/anirbandutta9 Content Management System and News-Buzz version 1.0 Description: A critical issue was found in the code-projects/anirbandutta9 Content Management System and News-Buzz. The problem affects an unknown functionality o...

PT-2025-23978 · Unknown · Phpgurukul Human Metapneumovirus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Human Metapneumovirus Testing Management System version 1.0 Description: A critical issue has been discovered, affecting some unknown functionality of the file /search-report-result.php. The manipulation of the serachdata argument...

PT-2025-23918 · Unknown · Phpgurukul Complaint Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Complaint Management System version 2.0 Description: A critical issue has been discovered, affecting the file /admin/edit-category.php. The manipulation of the description argument leads to SQL injection. This issue can be exploite...

PT-2025-23938 · Unknown · Freefloat Ftp Server

Name of the Vulnerable Software and Affected Versions: FreeFloat FTP Server version 1.0 Description: A critical issue has been found in the REIN Command Handler component of FreeFloat FTP Server, leading to a buffer overflow. This can be exploited remotely. The issue affects some unknown...

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system allows a attacker to gain access to read and delete any files they desire.

The vulnerability of the deletePackages method in the HPE StoreOnce VSA virtual storage system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to read and...

CVE-2025-5607

CVE-2025-5607 affects Tenda AC18 15.03.05.05. A buffer overflow exists in the formSetPPTPUserList function of /goform/setPptpUserList, due to improper handling of the list argument. This can potentially be exploited remotely to execute arbitrary commands. Multiple connected sources confirm the is...

CVE-2025-5600

The CVE-2025-5600 entry concerns TOTOLINK EX1200T (firmware 4.1.2cu.5232_B20210713). The vulnerability exists in the setLanguageCfg function within /cgi-bin/cstecgi.cgi, where manipulating the LangType argument causes a stack-based buffer overflow. Exploitation appears to be remote and publicly d...

CVE-2025-5595 FreeFloat FTP Server PROGRESS Command buffer overflow

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component PROGRESS Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-5592

CVE-2025-5592 affects FreeFloat FTP Server 1.0, targeting the PASSIVE Command Handler. The issue is described as a buffer overflow in that component, with remote exploitation possible and the exploit publicly disclosed. Multiple sources corroborate a critical impact. The Red Hat/CNVD/CNNVD entrie...

CVE-2025-5582 CodeAstro Real Estate Management System profile.php sql injection

A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-5578

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can ...

CVE-2025-5433

A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php?c=account=settimezone. The manipulation of the argument tzoffset leads to sql injection. The attack may be launched remotely. The...

CVE-2025-5572

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched...

CVE-2025-5562

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/edit-category-detail.php. The manipulation of the argument editid leads to sql injection. The attack may be launched...

CVE-2025-5562

The CVE-2025-5562 entry relates to PHPGurukul Curfew e-Pass Management System 1.0 and a SQL injection in /admin/edit-category-detail.php via the editid parameter. Root cause is unsanitized/external input, enabling remote exploitation with publicly disclosed exploit information. Impact as describe...

CVE-2025-5561

CVE-2025-5561 affects PHPGurukul Curfew e-Pass Management System 1.0. The vulnerability is an SQL injection in the file /admin/view-pass-detail.php, exploitable by manipulating the viewid parameter. It is described as remote and was publicly disclosed. Multiple connected sources corroborate a cri...

CVE-2025-5561 PHPGurukul Curfew e-Pass Management System view-pass-detail.php sql injection

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. The attack can be...

CVE-2025-5557 PHPGurukul Teacher Subject Allocation Management System edit-course.php sql injection

A vulnerability has been found in PHPGurukul Teacher Subject Allocation Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/edit-course.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotel...

CVE-2025-5424

A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical. This issue affects some unknown processing of the file /admin-cp/media of the component Media Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been...