CVE-2025-42929

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database...

CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...

CVE-2025-42916

CVE-2025-42916 concerns a missing input validation in SAP S/4HANA/ABAP reports that could allow an attacker with high privileges to delete contents of arbitrary database tables not protected by an authorization group. The impact is high on integrity and availability with no confidentiality impact...

CVE-2025-42916 Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)

Due to missing input validation, an attacker with high privilege access to ABAP reports could delete the content of arbitrary database tables, if the tables are not protected by an authorization group. This leads to a high impact on integrity and availability of the database but no impact on...

[SECURITY] Fedora 41 Update: buildah-1.41.4-1.fc41

The buildah package provides a command line tool which can be used to create a working container from scratch or create a working container from an image as a starting point mount/umount a working container's root file system for manipulation save container's root file system layer to create a ne...

PT-2025-36994

Name of the Vulnerable Software and Affected Versions: Infrahub versions prior to 1.3.9 Infrahub versions prior to 1.4.5 Description: Infrahub provides a central hub for managing data, templates, and playbooks. A flaw in the authentication logic allows deleted or expired API tokens to be consider...

PT-2025-36558

Name of the Vulnerable Software and Affected Versions: SAP ABAP affected versions not specified Description: The issue involves a missing input validation in ABAP reports. An attacker with high privilege access could delete the content of arbitrary database tables not protected by an authorizatio...

PT-2025-36549

Name of the Vulnerable Software and Affected Versions: SAP ABAP Reports affected versions not specified Description: Due to missing input validation in ABAP reports, an attacker with high privilege access could delete the content of arbitrary database tables if the tables are not protected by an...

SAP NetWeaver Application Server 安全漏洞

SAP NetWeaver Application Server is an application server from SAP, Germany. A security vulnerability in SAP NetWeaver Application Server can be exploited by an attacker to potentially cause sensitive information to be read, modified, or deleted...

PT-2025-36907

Name of the Vulnerable Software and Affected Versions: Tenda W30E version V16.01.0.19 Description: The Tenda W30E router contains a stack overflow in the formDeleteMeshNode function due to a vulnerability in the String parameter. This issue allows attackers to cause a Denial of Service DoS via a...

CVE-2025-10109

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10109

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10109 Campcodes Online Loan Management System ajax.php sql injection

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10109

CVE-2025-10109 affects Campcodes Online Loan Management System version 1.0. The vulnerability arises from improper handling of the parameter ID in the file /ajax.php?action=delete_payment, allowing remote attackers to execute SQL injection. Public exploitation has been disclosed. Affected product...

CVE-2025-10109 Campcodes Online Loan Management System ajax.php sql injection

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

CVE-2025-10108

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...

CVE-2025-10108

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...

CVE-2025-10108

CVE-2025-10108 affects Campcodes Online Loan Management System 1.0. The vulnerability is a SQL injection in the /ajax.php?action=delete_loan handler triggered by manipulating the ID parameter. It is exploitable remotely and an exploit is public, implying potential for unauthorized data access or ...

CVE-2025-10108 Campcodes Online Loan Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...

CVE-2025-10108 Campcodes Online Loan Management System ajax.php sql injection

A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteloan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public an...