CVE-2025-59271

creationtimestamp| type| source ---|---|--- 2025-10-09 21:38:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115346367137866366 2025-10-10 06:21:39+00:00| seen| https://gist.github.com/Darkcrai86/a1d6b4aaa6ecda458d2612b1abdd6244 2025-10-14 16:13:41+00:00| seen|...

EUVD-2025-33409

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

CVE-2025-60266

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

CVE-2025-60266

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

CVE-2025-39961

CVE-2025-39961 (AMD IOMMU race in page tables) The Linux kernel AMD IOMMU host page table implementation could race when increasing page table levels. In iommu_v1_unmap_pages(), fetch_pte() could read pgtable->[root/mode] without a lock while increase_address_space() updates pgtable->[root/...

[SECURITY] Fedora 42 Update: turbo-attack-0.1.0-4.fc42

A turbo traffic generator pentesting tool to generate random traffic with random mac and ip addresses in addition to random sequence numbers to a particular ip and port...

CVE-2025-57457

An OS Command Injection vulnerability in the Admin panel in Curo UC300 5.42.1.7.1.63R1 allows local attackers to inject arbitrary OS Commands via the "IP Addr" parameter...

PT-2025-41414

Name of the Vulnerable Software and Affected Versions Tenda W12 version 3.0.0.63948 Description A flaw exists in the Tenda W12 router firmware that allows for a remote stack-based buffer overflow. The issue is located in the wifiMacFilterSet function within the HTTP Request Handler component,...

PT-2025-46866

Name of the Vulnerable Software and Affected Versions Cisco Linksys E1200 v2 routers versions prior to E1200 v2.0.11.001 us.tar.gz Description A stack-based buffer overflow exists in the libshared.so library. The get mac from ip and get ip from mac functions utilize sscanf with an overly permissi...

Tenda AC7 命令注入漏洞

Tenda AC7 is a wireless router from Tenda, a Chinese company. A command injection vulnerability exists in Tenda AC7 version 15.03.06.44, which originates from the failure to properly filter the parameter lanIp in the file /goform/AdvSetLanip to construct command special characters, commands, etc...

CVE-2025-60266

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

CVE-2025-60266

CVE-2025-60266 affects xckk v9.6. The vulnerability is a SQL injection in the orderBy parameter of the /address/list endpoint, caused by insufficient filtering. This is described across multiple sources in the connected documents as enabling SQL injection without secure input handling. The PT-202...

PT-2025-41443

Name of the Vulnerable Software and Affected Versions xckk version 9.6 Description The software contains a SQL injection issue due to insufficient filtering of the orderBy parameter within the ''/address/list'' API endpoint. This allows for potential unauthorized database access or modification...

CVE-2025-60266

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

xckk 安全漏洞

xckk small dishes low-code development platform is a low-code development platform open source by China Cloud Network Software bestfeng. A security vulnerability exists in xckk v9.6, which stems from the orderBy parameter in address/list is not securely filtered, which may lead to SQL injection...

CVE-2025-60266: Improper Neutralization of Special Elements used in an SQL Command

In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a SQL injection vulnerability...

PT-2025-41394

Name of the Vulnerable Software and Affected Versions BBOT affected versions not specified Description The git clone module in BBOT may allow an attacker to disclose a GitHub API key to a server they control by using a maliciously formatted git URL. The issue involves the potential exposure of th...

VulnCheck KEV: CVE-2017-18369

The Billion 5200W-T 1.02b.rc5.dt49 router distributed by TrueOnline has a command injection vulnerability in the Remote System Log forwarding function, which is accessible by an unauthenticated user. The vulnerability is in the advremotelog.asp page and can be exploited through the syslogServerAd...

The vulnerability of the strcpy() function in the microprogramming device routerjd Tenda AC20, which allows a hacker to cause a service failure.

The vulnerability of the strcpy function in the microprogramming router Tenda AC20 is related to the operation of writing data beyond the buffer boundaries during the processing of the MAC parameter. Exploiting this vulnerability can allow an attacker to cause a service failure...

SUSE CVE-2022-50533

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: mlme: fix null-ptr deref on failed assoc If association to an AP without a link 0 fails, then we crash in tracing because it assumes that either apmldaddr or link 0 BSS is valid, since we clear sdata-vif.validlink...