8304 matches found
CVE-2025-10352
The CVE-2025-10352 entry details an unauthenticated vulnerability in Melis Platform’s melis-core, allowing an attacker to create an administrator account via /melis/MelisCore/ToolUser/addNewUser. Affected: Melis Platform melis-core module; impact is unauthorized admin creation with potential full...
tty: add the option to have a tty reject a new ldisc
...
PT-2025-41245
Name of the Vulnerable Software and Affected Versions Melis Platform affected versions not specified Description A flaw exists in the melis-core module that allows an unauthenticated attacker to create an administrator account. This is achieved by sending a request to the...
PT-2025-41310
Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System version 1.1, specifically within the file /admin/new-appointment.php. Manipulation of the delid argument can lead ...
Melis Platform 安全漏洞
Melis Platform is an open source cross-framework digital platform from Melis Platform Open Source. A security vulnerability exists in Melis Platform, which originates in the melis-core module and allows an unauthenticated attacker to create an administrator account by requesting...
PHPGurukul Beauty Parlour Management System SQL注入漏洞
Beauty Parlour Management System is an application system. Beauty Parlour Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/new-appointment.php. An attacker can...
Subscription Health Dashboard 2025 Update
Deployment health is mission-critical in today’s digital environment. Duplicate records, ghost hosts, and stale data obscure insights, slow decisions, and erode confidence. Building on last year’s Subscription Health Dashboard blog and best practices, the 2025 update delivers cleaner visibility,...
CVE-2025-54404
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54403
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54404
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54404
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54404
Talos reports CVE-2025-54404 affecting Planet WGR-500 v1.3411b190912. The flaw resides in the swctrl service, which over UDP processes a PLANETut message; when the 0x90 (CHANGE_SETTINGS) path is taken, attacker-controlled fields (notably new_device_name) are incorporated into a shell command (fla...
CVE-2025-54404
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
EUVD-2025-32860
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
EUVD-2025-32858
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54403
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
CVE-2025-54403
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabilities.This command injection is related ...
EUVD-2010-1532
Malware in sbrugna...