14 matches found
EUVD-2025-25766
Malicious code in bioql PyPI...
EUVD-2022-48374
Malicious code in bioql PyPI...
CVE-2025-9443
A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and m...
Tenda CH22 /goform/editUserName Buffer Overflow Vulnerability
Tenda CH22 is an enterprise-grade wireless router from Tenda brand. The Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the parameter newaccount in file /goform/editUserName failing to correctly validate the length and size of the input data, which can be exploited ...
CVE-2025-9443
A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and m...
CVE-2025-9443 Tenda CH22 editUserName formeditUserName buffer overflow
A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument newaccount can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and m...
CVE-2025-9443
CVE-2025-9443 affects the Tenda CH22 router (version 1.0.0.1). The vulnerability exists in the function formeditUserName in the file /goform/editUserName , where manipulating the argument new_account can trigger a buffer overflow . Remote exploitation is possible, and the exploit has been publish...
Tenda CH22 安全漏洞
Tenda CH22 is an enterprise-grade wireless router from Tenda brand. The Tenda CH22 suffers from a buffer overflow vulnerability, which originates from the parameter newaccount in file /goform/editUserName failing to correctly validate the length and size of the input data, which can be exploited ...
Inventory Management System editUser.php File SQL Injection Vulnerability
Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter edituserName in the file /phpaction/editUser.php. An attacker can...
CVE-2025-6902
A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /phpaction/editUser.php. The manipulation of the argument edituserName leads to sql injection. It is possible to launch the attack remotely...
code-projects Inventory Management System 安全漏洞
Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter edituserName in the file /phpaction/editUser.php. An attacker can...
CVE-2022-45508
Tenda W30E V1.0.1.25633 was discovered to contain a stack overflow via the newaccount parameter at /goform/editUserName...
CVE-2022-45508
CVE-2022-45508 affects Tenda W30E, version 1.0.1.25(633). The vulnerability is a stack overflow in the /goform/editUserName endpoint triggered via the new_account parameter. The CVSSv3.1 base metrics indicate NETWORK attack vector, LOW complexity, no privileges required, user interaction not requ...
Tenda W30E 缓冲区错误漏洞
Tenda W30E is a router from Tenda China. A security vulnerability exists in Tenda W30E version V1.0.1.25633, which originates from a stack overflow in the newaccount parameter of /goform/editUserName...