68 matches found
EUVD-2025-16590
Malicious code in bioql PyPI...
WordPress plugin USS Upyun 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin ... A cross-site...
CVE-2025-7898 Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload
A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part of the file /clinica/profile/updateSetting of the component Account Setting Page. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate...
CVE-2025-7898
CVE-2025-7898 concerns Codecanyon iDentSoft 2.0. The vulnerability lies in the Account Setting Page function, specifically the file path /clinica/profile/updateSetting, where manipulation of the parameter photo enables an unrestricted file upload. This can be initiated remotely and is described a...
CVE-2025-7898 Codecanyon iDentSoft Account Setting Page updateSetting unrestricted upload
A vulnerability was found in Codecanyon iDentSoft 2.0. It has been classified as critical. This affects an unknown part of the file /clinica/profile/updateSetting of the component Account Setting Page. The manipulation of the argument photo leads to unrestricted upload. It is possible to initiate...
CVE-2025-5721
A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/updateprofile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possibl...
CVE-2025-5721 SourceCodester Student Result Management System Profile Setting Page update_profile cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/updateprofile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possibl...
CVE-2025-5721 SourceCodester Student Result Management System Profile Setting Page update_profile cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /script/academic/core/updateprofile of the component Profile Setting Page. The manipulation leads to cross site scripting. It is possibl...
PT-2025-24009 · Sourcecodester · Sourcecodester Student Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Student Result Management System version 1.0 Description: A problematic issue was found in the Profile Setting Page component, specifically affecting an unknown part of the file /script/academic/core/update profile. This leads ...
CVE-2025-5423
A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...
CVE-2025-5423 juzaweb CMS General Setting Page general access control
A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...
CVE-2025-5423
Juzaweb CMS up to version 3.4.2 has a vulnerability in the General Setting Page at /admin-cp/setting/system/general. The issue is improper access controls, enabling remote exploitation and is publicly disclosed. Vendor did not respond. As a temporary mitigation, PT-2025-23446 recommends restricti...
CVE-2025-5423 juzaweb CMS General Setting Page general access control
A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotel...
CVE-2024-12414
The Themify Store Locator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.1.9. This is due to missing or incorrect nonce validation on the settingpage function. This makes it possible for unauthenticated attackers to modify the plugin's...
CVE-2024-51187
TRENDnet TEW-651BR 2.04B1, TEW-652BRP 3.04b01, and TEW-652BRU 1.00b12 devices contain a Store Cross-site scripting XSS vulnerability via the firewallRuleName1.1.1.0.0 parameter on the /firewallsetting.htm page...
PT-2024-34554 · Trendnet · Trendnet Tew-652Brp +1
Name of the Vulnerable Software and Affected Versions: TRENDnet TEW-651BR version 2.04B1 TRENDnet TEW-652BRP version 3.04b01 TRENDnet TEW-652BRU version 1.00b12 Description: The issue concerns a Store Cross-site scripting XSS vulnerability. This vulnerability can be exploited via the firewallRule...
CVE-2024-47045
Privilege chaining issue exists in the installer of e-Tax softwarecommon program. If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed with higher privileges than the application privilege...
CVE-2024-7614
A vulnerability was found in Tenda FH1206 1.2.0.88155. It has been classified as critical. Affected is the function fromqossetting of the file /goform/qossetting. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit...