Lucene search
+L

6613 matches found

NVD
NVD
added 2025/10/08 12:15 p.m.10 views

CVE-2025-11471

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

9.8CVSS0.00441EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/08 11:32 a.m.22 views

CVE-2025-11471 SourceCodester Hotel and Lodge Management System edit_customer.php sql injection

A vulnerability was detected in SourceCodester Hotel and Lodge Management System 1.0. This affects an unknown function of the file /editcustomer.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used...

7.5CVSS0.00441EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/10/08 7:21 a.m.9 views

CVE-2025-11356

A vulnerability was found in Tenda AC23 up to 16.03.07.52. Affected by this issue is the function sscanf of the file /goform/SetStaticRouteCfg. The manipulation of the argument list results in buffer overflow. It is possible to launch the attack remotely. The exploit has been made public and coul...

9CVSS7.4AI score0.00742EPSS
SaveExploits1References1
CVE
CVE
added 2025/10/08 5:32 a.m.26 views

CVE-2025-11435

The CVE-2025-11435 issue affects JhumanJ OpnForm up to version 1.9.3. A cross-site scripting vulnerability exists in an unknown functionality of the file /show/submissions. The attack can be initiated remotely and the exploit has been publicly disclosed. A patch is identified by the patch ID a2af...

6.1CVSS5.5AI score0.00364EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2025/10/08 4:16 a.m.9 views

CVE-2025-11430

A vulnerability was found in SourceCodester Simple E-Commerce Bookstore 1.0. The affected element is an unknown function of the file /cart.php. The manipulation of the argument remove results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...

9.8CVSS5.7AI score0.00387EPSS
SaveExploits1References5
CVE
CVE
added 2025/10/08 3:32 a.m.19 views

CVE-2025-11430

The CVE affects SourceCodester Simple E-Commerce Bookstore 1.0 and specifically the /cart.php file where manipulating the remove parameter enables SQL injection. The issue’s root cause is improper handling/validation of the remove argument, allowing remote attacker input that can influence databa...

9.8CVSS7.2AI score0.00387EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2025/10/08 12:00 a.m.8 views

Desktop Commander MCP 安全漏洞

Desktop Commander MCP is an MCP server by the individual developer Eduard Ruzga. A security vulnerability exists in Desktop Commander MCP version 0.2.13 and earlier, which stems from os command injection in the extractBaseCommand function of the src/command-manager.ts file in the Absolute Path...

9.8CVSS6.8AI score0.03542EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
added 2025/10/07 10:27 a.m.21 views

CVE-2025-11330

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit ha...

8.8CVSS6.4AI score0.0031EPSS
SaveExploits1References1
OSV
OSV
added 2025/10/07 10:15 a.m.10 views

CVE-2025-11386

A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit...

8.7CVSS6.5AI score0.00762EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/10/07 9:32 a.m.20 views

CVE-2025-11385 Tenda AC20 fast_setting_wifi_set sscanf buffer overflow

A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The affected element is the function sscanf of the file /goform/fastsettingwifiset. The manipulation of the argument timeZone leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the publi...

9CVSS0.00739EPSS
SaveExploits1References6
OSV
OSV
added 2025/10/07 9:02 a.m.8 views

CVE-2025-11360 jakowenko double-take API app.js app.use cross site scripting

A vulnerability was detected in jakowenko double-take up to 1.13.1. The impacted element is the function app.use of the file api/src/app.js of the component API. The manipulation of the argument X-Ingress-Path results in cross site scripting. The attack can be executed remotely. Upgrading to...

5.3CVSS4.4AI score
SaveExploits0References7
OSV
OSV
added 2025/10/07 3:15 a.m.9 views

CVE-2025-11347

A vulnerability was found in code-projects Student Crud Operation up to 3.3. This vulnerability affects the function moveuploadedfile of the file add.php of the component Add Student Page/Edit Student Page. Performing manipulation results in unrestricted upload. The attack can be initiated...

9.8CVSS5.4AI score0.0049EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.9 views

EUVD-2017-17910

Malware in sbrugna...

5.3CVSS5.5AI score0.03166EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2011-0375

Malware in sbrugna...

7.8CVSS6.1AI score0.04086EPSS
SaveExploits0References8
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2018-2557

Malware in sbrugna...

6.5CVSS7.1AI score0.02504EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-6404

Malware in sbrugna...

4.3CVSS4.6AI score0.01979EPSS
SaveExploits0References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2016-9383

Malware in sbrugna...

3.5CVSS4.7AI score0.00598EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2015-6333

Malware in sbrugna...

7.8CVSS6.4AI score0.01908EPSS
SaveExploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.7 views

EUVD-2016-6735

Malware in sbrugna...

7.5CVSS7.8AI score0.0202EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.11 views

EUVD-2007-6443

Malware in sbrugna...

4.3CVSS6.3AI score0.01284EPSS
SaveExploits0References7
Rows per page
Query Builder