CVE-2025-26157

A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter...

CVE-2025-26157: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter...

CVE-2024-39768

Multiple buffer overflow vulnerabilities exist in the internet.cgi setqos functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This...

PT-2023-17638

Name of the Vulnerable Software and Affected Versions Buy Me a Coffee – Button and Widget Plugin versions up to, and including, 3.7 Description The issue is related to Cross-Site Request Forgery due to missing nonce validation on the recieve post, bmc disconnect, name post, and widget post...

PT-2023-17636

Name of the Vulnerable Software and Affected Versions Buy Me a Coffee – Button and Widget Plugin versions up to 3.7 Description The issue allows unauthorized modification of data due to missing capability checks on the recieve post, bmc disconnect, name post, and widget post functions. This enabl...

NETGEAR DGN2200 Remote Code Execution Vulnerability

The NETGEAR DGN2200 is an ADSL router device. A remote code execution vulnerability in dnslookup.cgi in the NETGEAR DGN2200 version 10.0.0.50 allows remote attackers to execute arbitrary operating system commands via shell metacharacters in the hostname field of an HTTP POST request...

PT-2012-2184

Name of the Vulnerable Software and Affected Versions TheCartPress plugin for WordPress versions prior to 1.1.6 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the tcp name post XXXXX parameter in the...

PT-2012-4352

Name of the Vulnerable Software and Affected Versions Artiphp CMS version 5.5.0 Neo r422 Description The issue allows remote attackers to inject arbitrary web script or HTML via vulnerable parameters. The parameters add img name post, asciiart post, expediteur, titre sav, or...