CVE-2025-8164

CVE-2025-8164 affects code-projects Public Chat Room 1.0. The vulnerability is in the file send_message.php, where manipulation of the ID argument enables SQL injection. Exploitation is possible remotely and has been disclosed publicly. Multiple connected sources (NVD, Red Hat, CVE lists, and vul...

CVE-2025-34136 Commvault CommServe Web Server Unauthenticated SQL Injection

An SQL injection vulnerability exists in Commvault 11.32.0 - 11.32.93, 11.36.0 - 11.36.51, and 11.38.0 - 11.38.19 Web Server component that allows a remote, unauthenticated attacker to perform SQL Injection. The vulnerability impacts systems where the CommServe and Web Server roles are installed...

PT-2025-30732 · Phpgurukul · Phpgurukul Bp Monitoring Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul BP Monitoring Management System version 1.0 Description: A critical issue exists in PHPGurukul BP Monitoring Management System 1.0. The vulnerability is due to a SQL injection flaw within the /bwdates-report-result.php file...

CVE-2025-7950

A vulnerability was found in code-projects Public Chat Room 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been...

PT-2025-30958 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.13 Description: A critical vulnerability exists in Tenda AC10 version 16.03.10.13. The issue is a heap-based buffer overflow triggered by manipulating the device1D argument in the /goform/RequestsProcessLaid file...

CVE-2025-7920

WinMatrix3 Web package developed by Simopro Technology has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing attacks...

PT-2025-30509 · Tenda · Tenda Ac23

Name of the Vulnerable Software and Affected Versions: Tenda AC23 version 16.03.07.52 Description: A critical vulnerability exists in the Tenda AC23. The vulnerability is located in the httpd component, specifically within the sub 46C940 function of the /goform/setMacFilterCfg file. Manipulation ...

PT-2025-30739 · Totolink · Totolink A702R

Name of the Vulnerable Software and Affected Versions: TOTOLINK A702R version 4.0.0-B20230721.1521 Description: A critical vulnerability exists in TOTOLINK A702R. The issue is related to a buffer overflow within the HTTP POST Request Handler component, specifically in the file...

CVE-2025-7920

CVE-2025-7920 describes a reflected Cross-site Scripting vulnerability in the WinMatrix3 Web package from Simopro Technology. The issue arises from lack of proper filtering/escaping of user-supplied data, enabling unauthenticated attackers to induce a user to execute arbitrary JavaScript in the b...

PT-2025-30727 · Tenda · Tenda Ac20

Name of the Vulnerable Software and Affected Versions: Tenda AC20 version 16.03.08.05 Description: A stack-based buffer overflow vulnerability exists in the processing of the list parameter within the /goform/SetStaticRouteCfg file. Remote attackers can exploit this issue to execute arbitrary cod...

CVE-2025-54352

WordPress 3.5 through 6.8.2 allows remote attackers to guess titles of private and draft posts via pingback.ping XML-RPC requests. NOTE: the Supplier is not changing this behavior...

PT-2025-30227

Name of the Vulnerable Software and Affected Versions Chanjet CRM version 1.0 Description A critical vulnerability exists in Chanjet CRM 1.0. The issue is related to SQL injection within an unknown functionality of the file /mail/mailinactive.php of the Login Page component. This allows for remot...

PT-2025-30350 · Unknown · Phpgurukul Time Table Generator System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Time Table Generator System version 1.0 PHPGurukul Taxi Stand Management System version 1.0 Description: A problematic vulnerability exists due to cross site scripting. Manipulation of the adminname argument in the /admin/profile.p...

PT-2025-30274 · Unknown · Phpgurukul Online Banquet Booking System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Online Banquet Booking System version 1.0 Description: A cross-site scripting issue exists due to the manipulation of the searchdata argument in the /admin/booking-search.php file. This allows for remote attacks. The exploit has be...

PT-2025-30317 · D Link · Dir-817

Name of the Vulnerable Software and Affected Versions: D-Link DIR‑817L versions up to 1.04B01 Description: A critical issue exists in D-Link DIR‑817L. The lxmldbc system function within the ssdpcgi file is susceptible to command injection, allowing for remote attacks. The exploit for this issue h...

ROS-20250721-02

A vulnerability in the assert function of the GNU C Library system library is related to incorrect calculations of the the size of the allocated buffer. Exploitation of the vulnerability could allow an attacker acting remotely, affect the availability of protected information...

CVE-2025-7862

A vulnerability has been found in TOTOLINK T6 4.1.5cu.748B20211015 and classified as critical. Affected by this vulnerability is the function setTelnetCfg of the file /cgi-bin/cstecgi.cgi of the component Telnet Service. The manipulation of the argument telnetenabled with the input 1 leads to...

PT-2025-30207 · Yangzongzhuan · Ruoyi

Name of the Vulnerable Software and Affected Versions: yangzongzhuan RuoYi versions up to 4.8.1 Description: A cross-site scripting issue exists due to the addSave function within the com/ruoyi/web/controller/system/SysNoticeController.java file. This allows for remote attacks. The exploit detail...

PT-2025-30171 · Portabilis · I-Educar

Name of the Vulnerable Software and Affected Versions: Portabilis i-Educar version 2.9.0 Description: A cross-site scripting issue exists due to the manipulation of the nm tipo argument in the file intranet/educar turma tipo det.php?cod turma tipo=ID of the Turma Module. The attack can be launche...

PT-2025-30178 · Metacrm · Metacrm

Name of the Vulnerable Software and Affected Versions: Metasoft MetaCRM versions through 6.4.2 Description: A critical vulnerability exists in Metasoft MetaCRM. The vulnerability affects the AnalyzeParam function within the download.jsp file. Manipulation of the p argument leads to deserializatio...