14254 matches found
CVE-2025-9523
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...
CVE-2025-9523 Tenda AC1206 GetParentControlInfo stack-based overflow
A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public an...
CVE-2025-30060
The CVE-2025-30060 entry describes a SQL injection vulnerability in the ReturnUserUnitsXML.pl service, where the getUserInfo function is exploitable through the UserID parameter. Root cause: unsanitized user input in a SQL query (UserID) leading to unauthorized data access or modification. Impact...
CVE-2025-9508
A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...
CVE-2025-9509 itsourcecode Apartment Management System fair_info_all.php sql injection
A security flaw has been discovered in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/fairinfoall.php. Performing manipulation of the argument fid results in sql injection. The attack can be initiated remotely. The exploit has been...
CVE-2025-9508
The CVE-2025-9508 entry concerns itsourcecode Apartment Management System 1.0. The vulnerability is a SQL injection in the file /report/rented_info.php caused by manipulation of the rsid parameter. It is exploitable remotely and public exploits exist. Multiple connected sources confirm the same i...
CVE-2025-9508 itsourcecode Apartment Management System rented_info.php sql injection
A vulnerability was detected in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /report/rentedinfo.php. The manipulation of the argument rsid results in sql injection. The attack may be launched remotely. The exploit is now public and may be...
CVE-2025-9507
A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitorinfo.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...
CVE-2025-9507
A weakness has been identified in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/visitorinfo.php. Executing manipulation of the argument vid can lead to sql injection. The attack can be launched remotely. The exploit has been made available to th...
CVE-2025-9507
The CVE-2025-9507 entry concerns itsourcecode Apartment Management System 1.0. A SQL injection vulnerability exists in /report/visitor_info.php via the vid parameter due to lack of input validation. Exploitation is remote and publicly reported, with potential to access or exfiltrate database data...
Linux Distros Unpatched Vulnerability : CVE-2022-42969
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expression Denial of Service attack via a Subversion repository with...
Linux Distros Unpatched Vulnerability : CVE-2020-15564
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.13.x, allowing Arm guest OS users to cause a hypervisor crash because of a missing alignment check in...
Linux Distros Unpatched Vulnerability : CVE-2020-16269
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - radare2 4.5.0 misparses DWARF information in executable files, causing a segmentation fault in parsetypedef in typedwarf.c via a malformed DWATname in the...
PT-2025-34859
Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version 15.03.06.23 Description: A stack-based buffer overflow vulnerability exists in the GetParentControlInfo function of the /goform/GetParentControlInfo file. Manipulation of the mac argument can trigger the vulnerability,...
Linux Distros Unpatched Vulnerability : CVE-2020-27794
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A double free issue was discovered in radare2 in cmdinfo.c:cmdinfo. Successful exploitation could lead to modification of unexpected memory locations and...
PT-2025-34831
Name of the Vulnerable Software and Affected Versions: itsourcecode Apartment Management System version 1.0 Description: A vulnerability exists in itsourcecode Apartment Management System version 1.0. The issue is a SQL injection affecting an unknown function within the /report/rented info.php...
Itsourcecode Apartment Management System security vulnerabilities
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter fid in the file /report/fairinfoall.php. An attacker can exploit this...
PT-2025-34855 · Unknown · Returnuserunitsxml.Pl
Name of the Vulnerable Software and Affected Versions: ReturnUserUnitsXML.pl affected versions not specified Description: The getUserInfo function within the ReturnUserUnitsXML.pl service is susceptible to SQL injection via the UserID parameter. Recommendations: As a temporary workaround, conside...
Linux Distros Unpatched Vulnerability : CVE-2021-40540
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ulfiusurilogger in Ulfius HTTP Framework before 2.7.4 omits coninfo initialization and a coninfo-request NULL check for certain malformed HTTP requests...
