234 matches found
PT-2025-48382
Name of the Vulnerable Software and Affected Versions taosir WTCMS versions prior to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665 Description A flaw exists in taosir WTCMS related to the delete function within the SlideController.class.php file of the SlideController component. Manipulation of the id...
CVE-2025-13443 macrozheng mall delete access control
A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Performing manipulation of the argument ids results in improper access controls. Remote exploitation of the attack is possible. The exploit is now...
PT-2025-45418
Name of the Vulnerable Software and Affected Versions SourceCodester Best House Rental Management System version 1.0 Description A flaw exists in the delete house function within the /admin class.php file of the software. Manipulation of the ID argument can result in a SQL injection. This issue c...
CVE-2023-53649
In the Linux kernel, the following vulnerability has been resolved: perf trace: Really free the evsel-priv area In 3cb4d5e00e037c70 "perf trace: Free syscall tp fields in evsel-priv" it only was freeing if strcmpevsel-tpformat-system, "syscalls" returned zero, while the corresponding initializati...
EUVD-2006-7092
Malware in sbrugna...
The vulnerability of the uci_del() function in the /goform/delete_prohibiting subroutine of D-Link DIR-823X router’s microprogramming software allows a intruder to execute arbitrary commands.
The vulnerability of the ucidel function in the /goform/deleteprohibiting function of the D-Link DIR-823X router’s microprogramming software is related to the failure to take appropriate data cleaning measures at the control level when processing the delvalue parameter. Exploitation of this...
CVE-2025-11272
CVE-2025-11272 affects SeriaWei ZKEACMS up to version 4.3. The issue resides in the Delete function of src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs (POST Request Handler) and results in improper authorization with remote exploitation possible. Public exploit details have been d...
CVE-2025-11272 SeriaWei ZKEACMS POST Request UrlRedirectionController.cs Delete improper authorization
A vulnerability has been found in SeriaWei ZKEACMS up to 4.3. This affects the function Delete of the file src/ZKEACMS.Redirection/Controllers/UrlRedirectionController.cs of the component POST Request Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is...
ZKEACMS 授权问题漏洞
ZKEACMS is a visually designed, WYSIWYG content management system from ZKEASOFT open source. An authorization issue vulnerability exists in ZKEACMS 4.3 and earlier versions, which stems from improper authorization of the Delete function in the file...
EUVD-2025-18242
Malicious code in bioql PyPI...
EUVD-2022-53240
Malicious code in bioql PyPI...
EUVD-2024-32186
Malicious code in bioql PyPI...
EUVD-2022-52851
Malicious code in bioql PyPI...
EUVD-2025-27621
Malicious code in bioql PyPI...
EUVD-2023-38314
Malicious code in bioql PyPI...
EUVD-2023-42746
Malicious code in bioql PyPI...
EUVD-2023-42747
Malicious code in bioql PyPI...
EUVD-2023-38313
Malicious code in bioql PyPI...
WordPress plugin Custom Searchable Data Entry System 安全漏洞
WordPress Custom Searchable Data Entry System plugin is a plugin for creating a searchable data entry system in your website that allows users to fill in information based on specific criteria and enables data matching queries. The WordPress Custom Searchable Data Entry System plugin suffers from...
D-Link DIR-823X Command Injection Vulnerability (CNVD-2025-23368)
The D-Link DIR-823X is a wireless router from China's AUO D-Link. The D-Link DIR-823X suffers from a command injection vulnerability, which originates from the incorrect operation of the function ucidel on the parameter delvalue in the file /goform/deleteprohibiting, which can be exploited by an...