4416 matches found
Exploit for SQL Injection in Fortinet Fortiweb
Table of Contents - Overview - Vulnerability D...
PT-2025-29328 · Unknown · Simple Car Rental System
Name of the Vulnerable Software and Affected Versions: Simple Car Rental System version 1.0 Description: A critical issue has been identified in the processing of the /admin/add cars.php file. Manipulation of the image argument allows for unrestricted file upload. This issue can be exploited...
CBL Mariner 2.0 Security Update: redis / valkey (CVE-2025-32023)
The version of redis / valkey installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-32023 advisory. - Redis is an open source, in-memory database that persists on disk. From 2.8 to before 8.0.3, 7.4.5,...
BIT-MARIADB-2024-27766
An issue in MariaDB v.11.1 allows a remote attacker to execute arbitrary code via the libmysqludfsys.so function. NOTE: this is disputed by the MariaDB Foundation because no privilege boundary is crossed...
CVE-2025-7419 Tenda O3V2 httpd setRateTest fromSpeedTestSet stack-based overflow
A vulnerability was found in Tenda O3V2 1.0.0.123880. It has been classified as critical. This affects the function fromSpeedTestSet of the file /goform/setRateTest of the component httpd. The manipulation of the argument destIP leads to stack-based buffer overflow. It is possible to initiate the...
CVE-2025-3946 Incorrect response generation during FTEB protocol processing
The Honeywell Experion PKS and OneWireless WDM contains a Deployment of Wrong Handler vulnerability in the component Control Data Access CDA. An attacker could potentially exploit this vulnerability, leading to Input Data Manipulation, which could result in incorrect handling of packets leading t...
CVE-2025-2521
CVE-2025-2521 concerns a memory buffer vulnerability in the Control Data Access (CDA) component of Honeywell’s Experion PKS and OneWireless WDM . The issue is an overread of buffers due to lack of proper index validation against buffer borders, which could lead to remote code execution . Affected...
CVE-2025-7410
Summary: CVE-2025-7410 affects LifeStyle Store 1.0 from Code-Projects. The issue is a vulnerability in the /cart_remove.php file where manipulating the ID argument enables SQL injection. The vulnerability is remote and the exploit has been disclosed publicly. Affected component: LifeStyle Store 1...
CVE-2025-7165
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely...
CVE-2025-7220 Campcodes Payroll Management System ajax.php sql injection
A vulnerability was found in Campcodes Payroll Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=savedeductions. The manipulation of the argument ID leads to sql injection. The attack can be launched...
CVE-2023-51232
Directory Traversal vulnerability in dagster-webserver Dagster thru 1.5.11 allows remote attackers to obtain sensitive information via crafted request to the /logs endpoint. This may be restricted to certain file names that start with a dot '.'...
CVE-2025-47988 Azure Monitor Agent Remote Code Execution Vulnerability
...
CVE-2025-49729 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability
...
CVE-2025-49703 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-49698 Microsoft Word Remote Code Execution Vulnerability
...
CVE-2025-49697 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-49695 Microsoft Office Remote Code Execution Vulnerability
...
CVE-2025-48822 Windows Hyper-V Discrete Device Assignment (DDA) Remote Code Execution Vulnerability
...