CVE-2025-6406

CVE-2025-6406 affects Campcodes Online Hospital Management System 1.0. The file /hms/forgot-password.php contains a vulnerability where manipulating the fullname argument leads to SQL injection. Documents describe remote exploitation and public disclosure of the exploit. Affected functionality is...

CVE-2025-6373 D-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflow

A vulnerability has been found in D-Link DIR-619L 2.06B01 and classified as critical. This vulnerability affects the function formSetWizard1 of the file /goform/formWlSiteSurvey. The manipulation of the argument curTime leads to stack-based buffer overflow. The attack can be initiated remotely. T...

CVE-2025-6351 itsourcecode Employee Record Management System editprofile.php sql injection

A vulnerability was found in itsourcecode Employee Record Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /editprofile.php. The manipulation of the argument emp1name leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6336 TOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflow

A vulnerability was found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. It has been classified as critical. Affected is an unknown function of the file /boafrm/formTmultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possibl...

CVE-2025-6315

CVE-2025-6315 impacts code-projects Online Shoe Store 1.0. The vulnerability is in the /cart2.php file where the ID parameter is unsafely used, allowing SQL injection that can be triggered remotely. Multiple connected sources corroborate a SQL-injection issue originating from the ID argument, wit...

CVE-2025-6282 xlang-ai OpenAgents file.py create_upload_file path traversal

A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function createuploadfile of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the publ...

GHSA-8JF4-FCJR-68C2 Upsonic is vulnerable to Path Traversal attack through its os.path.join function

A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used...

CVE-2025-6279 Upsonic Pickle add_tool cloudpickle.loads deserialization

A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/addtool of the component Pickle Handler. The manipulation leads to deserialization. The exploit has been disclosed to the public and may ...

CVE-2025-6270

A vulnerability, which was classified as critical, has been found in HDF5 up to 1.14.6. Affected by this issue is the function H5FSsectfindnode of the file H5FSsection.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has...

CVE-2025-6162

CVE-2025-6162 affects TOTOLINK EX1200T (4.1.2cu.5232_B20210713). The vulnerability exists in the HTTP POST Request Handler’s file path /boafrm/formMultiAP, where manipulating the submit-url argument causes a buffer overflow. This can be exploited remotely and is described as a high-severity issue...

CVE-2025-6132

CVE-2025-6132 affects Chanjet CRM 1.0. A vulnerability exists in the file /sysconfig/departmentsetting.php where manipulating the gblOrgID parameter leads to SQL injection. The issue can be exploited remotely and has been disclosed publicly. Exploitation details and the affected component are doc...

CVE-2025-6128 TOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This affects an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6128 TOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflow

A vulnerability classified as critical has been found in TOTOLINK EX1200T 4.1.2cu.5232B20210713. This affects an unknown part of the file /boafrm/formWirelessTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

CVE-2025-6005 kiCode111 like-girl aboutPost.php sql injection

A vulnerability classified as critical was found in kiCode111 like-girl 5.2.0. This vulnerability affects unknown code of the file /admin/aboutPost.php. The manipulation of the argument...

CVE-2025-5852

A vulnerability classified as critical has been found in Tenda AC6 15.03.05.16. Affected is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-5853 Tenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

A vulnerability classified as critical was found in Tenda AC6 15.03.05.16. Affected by this vulnerability is the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg. The manipulation of the argument remoteIp leads to stack-based buffer overflow. The attack can be launched remotely...

CVE-2025-5849 Tenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow

A vulnerability was found in Tenda AC15 15.03.05.19multi. It has been classified as critical. This affects the function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg of the component HTTP POST Request Handler. The manipulation of the argument remoteIp leads to stack-based buffer...

CVE-2025-5847

CVE-2025-5847 affects Tenda AC9 firmware 15.03.02.13. The vulnerability is in the HTTP POST Request Handler function formSetSafeWanWebMan of the file /goform/SetRemoteWebCfg; processing the remoteIp argument can trigger a stack-based buffer overflow. This allows a remote attacker to potentially e...

CVE-2025-5779

The CVE-2025-5779 entry concerns code-projects Patient Record Management System 1.0. A SQL injection vulnerability exists in the /birthing.php file, triggered by unsafely handling the itr_no/comp_id parameters. The exact impact stated across sources is manipulation of these inputs, enabling remot...

CVE-2025-5739 TOTOLINK X15 HTTP POST Request formSaveConfig buffer overflow

A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate...