CVE-2025-26157

A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter...

CVE-2025-26157: Improper Neutralization of Special Elements used in an SQL Command

A SQL Injection vulnerability was found in /bpms/index.php in Source Code and Project Beauty Parlour Management System V1.1, which allows remote attackers to execute arbitrary code via the name POST request parameter...

CVE-2024-39768

Multiple buffer overflow vulnerabilities exist in the internet.cgi setqos functionality of Wavlink AC3000 M33A8.V5030.210505. A specially crafted HTTP request can lead to stack-based buffer overflow. An attacker can make an authenticated HTTP request to trigger these vulnerabilities.This...

NETGEAR DGN2200 Remote Code Execution Vulnerability

The NETGEAR DGN2200 is an ADSL router device. A remote code execution vulnerability in dnslookup.cgi in the NETGEAR DGN2200 version 10.0.0.50 allows remote attackers to execute arbitrary operating system commands via shell metacharacters in the hostname field of an HTTP POST request...