PLANET FW-WGS-804HPT 安全漏洞

Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the hostip parameter in the websnmpnotifyv3addpost function failing to correctly validate the length of the input data, which can be...

Projectworlds Online Time Table Generator SQL注入漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. Projectworlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from improper handling of parameter e in file /admin/addteacher.php, which could lead t...

Projectworlds Online Time Table Generator SQL注入漏洞

Projectworlds Online Time Table Generator is an online time table generator from Projectworlds India. Projectworlds Online Time Table Generator version 1.0 suffers from a SQL injection vulnerability that stems from improper handling of the parameter c/subname in the file /admin/addcourse.php, whi...

PT-2025-22286 · Intelbras · Intelbras Rf 301K

Name of the Vulnerable Software and Affected Versions: Intelbras RF 301K version 1.1.5 Description: A problematic issue has been found in the component Add Static IP, where the manipulation of the Description argument leads to cross-site scripting. This issue can be exploited remotely...

CVE-2025-48254

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Change Add to Cart Button Text for WooCommerce allows Stored XSS. This issue affects Change Add to Cart Button Text for WooCommerce: from n/a through 2.2.2...

CVE-2025-48250

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPFactory Coupons & Add to Cart by URL Links for WooCommerce url-coupons-for-woocommerce-by-algoritmika allows Stored XSS.This issue affects Coupons & Add to Cart by URL Links for WooCommerce: from...

CVE-2025-48254

CVE-2025-48254 affects the WordPress plugin Change Add to Cart Button Text for WooCommerce. Connected sources confirm an improper input neutralization leading to a stored XSS vulnerability in web page generation, applicable to versions n/a through 2.2.2. Public details list CVSS metrics (several ...

WordPress plugin Coupons & Add to Cart by URL Links for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress plugin is an application plugin that supports personal blog sites on PHP and MySQL servers. A cross-site scripting vulnerability exists in WordPress plugin Coupons...

📄 Magnolia DX Core 6.3.8 Command Injection

Magnolia DX Core version 6.3.8 suffers from a remote command injection vulnerability. Exploit Title: Magnolia DX Core 6.3.8 - Command Injection Date: 05/16/2025 Exploit Author: tmrswrr Version: 6.3.8 Vendor home page: https://docs.magnolia-cms.com/home/ Product:...

WordPress plugin Change Add to Cart Button Text for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers. WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the...

CVE-2025-4897

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. It has been classified as critical. This affects an unknown part of the file /goform/multimodalAdd of the component HTTP POST Request Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely...

CVE-2025-4889

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. This vulnerability affects the function AddUser of the component User Registration. The manipulation of the argument username/password leads to buffer overflow. Local access is required to...

CVE-2025-4888

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::takeorder of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has be...

CVE-2025-4888 code-projects Pharmacy Management System Add Order Details take_order buffer overflow

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. This affects the function medicineType::takeorder of the component Add Order Details. The manipulation leads to buffer overflow. An attack has to be approached locally. The exploit has be...

CVE-2025-4885 itsourcecode Sales and Inventory System product_add.php sql injection

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Affected is an unknown function of the file /pages/productadd.php. The manipulation of the argument serial leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

Tenda A15 安全漏洞

The Tenda A15 is a dual-band gigabit wireless router. A buffer overflow vulnerability exists in the Tenda A15. The vulnerability stems from improper handling of the /goform/multimodalAdd file by the HTTP POST request processor component and can be exploited by an attacker to remotely execute...

PT-2025-21856 · Code Projects · Pharmacy Management System

Name of the Vulnerable Software and Affected Versions: code-projects Pharmacy Management System version 1.0 Description: A critical vulnerability was found in the code-projects Pharmacy Management System. This affects the function medicineType::take order of the component "Add Order Details". The...

itsourcecode Sales and Inventory System 注入漏洞

itsourcecode Sales and Inventory System is itsourcecode open source a sales and inventory system . An injection vulnerability exists in itsourcecode Sales and Inventory System version 1.0, which results from SQL injection due to incorrect manipulation of the parameter serial in the file...

CVE-2025-4814

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /pages/supplieradd.php. The manipulation of the argument Name leads to sql injection. The attack can be launched remotely...

CampCodes Sales and Inventory System 注入漏洞

CampCodes Sales and Inventory System is a sales and inventory system from CampCodes, Inc. The CampCodes Sales and Inventory System suffers from a SQL injection vulnerability that stems from the lack of validation of the parameter Name in the file /pages/supplieradd.php for externally entered SQL...