CVE-2025-65212

An issue was discovered in NJHYST HY511 POE core before 2.1 and plugins before 0.1. The vulnerability stems from the device's insufficient cookie verification, allowing an attacker to directly request the configuration file address and download the core configuration file without logging into the...

Logic Flaw Vulnerability in Tanto CMS V1.2

Skyway CMS is a simple website management system. A logic flaw exists in Tanto CMS V1.2, which can be exploited by an attacker to log in to the back-end of a website without an account password...

EasyTalk SQL注入导致后台登录绕过

简要描述： EasyTalk SQL注入导致后台登录绕过 详细说明： 漏洞存在文件：/Admin/Lib/Action/LoginAction.class.php： public function dologin parent::toadmin; $username=$POST'username'; $password=$POST'password'; $authcode=trim$POST'authcode'; if !$username || !$password || !$authcode || $authcode!=$SESSION'authcode'...