Lucene search
+L

1126 matches found

Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.11 views

PT-2025-35795

Name of the Vulnerable Software and Affected Versions: Campcodes Recruitment Management System version 1.0 Description: A security flaw has been discovered that allows for remote file inclusion. The flaw impacts the include function of the file /admin/index.php. Manipulation of the page argument...

5.8CVSS4.7AI score0.00458EPSS
SaveExploits1References8
NVD
NVD
added 2025/08/27 2:15 p.m.14 views

CVE-2025-9529

A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...

7.5CVSS0.00534EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2025/08/27 1:32 p.m.7 views

CVE-2025-9529 Campcodes Payroll Management System index.php include file inclusion

A weakness has been identified in Campcodes Payroll Management System 1.0. The affected element is the function include of the file /index.php. This manipulation of the argument page causes file inclusion. The attack is possible to be carried out remotely. The exploit has been made available to t...

7.5CVSS7AI score0.00534EPSS
SaveExploits1References5
RedhatCVE
RedhatCVE
added 2025/08/24 12:13 a.m.15 views

CVE-2025-55611

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter...

9.8CVSS7.2AI score0.00435EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/22 4:15 p.m.14 views

CVE-2025-55611

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter...

7.5CVSS5.8AI score0.00435EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/22 4:15 p.m.14 views

CVE-2025-55611

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter...

9.8CVSS0.00435EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2025/08/22 12:00 a.m.30 views

CVE-2025-55611

D-Link DIR-619L 2.06B01 is vulnerable to Buffer Overflow in the formLanguageChange function via the nextPage parameter...

0.00435EPSS
SaveExploits1References1
NVD
NVD
added 2025/08/16 4:15 a.m.12 views

CVE-2025-3671

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrar...

8.8CVSS0.00754EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/16 3:38 a.m.7 views

CVE-2025-3671 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrar...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/08/16 3:38 a.m.20 views

CVE-2025-3671 WPGYM - Wordpress Gym Management System <= 67.7.0 - Authenticated (Subscriber+) Local File Inclusion to Privilege Escalation via Password Update

The WPGYM - Wordpress Gym Management System plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 67.7.0 via the 'page' parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to include and execute arbitrar...

8.8CVSS0.00754EPSS
SaveExploits0References2
CVE
CVE
added 2025/08/16 3:38 a.m.38 views

CVE-2025-3671

CVE-2025-3671 concerns the WPGYM WordPress plugin (Gym Management System) with a Local File Inclusion vulnerability exploitable via the vulnerable parameter “page.” According to the primary sources, this affects all versions up to 67.7.0 and requires authentication at Subscriber level or higher; ...

8.8CVSS8.3AI score0.00754EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2025/08/16 12:00 a.m.16 views

PT-2025-33521 · WordPress · Wpgym - Wordpress Gym Management System

Name of the Vulnerable Software and Affected Versions: WPGYM - Wordpress Gym Management System plugin versions prior to 67.7.1 Description: The WPGYM - Wordpress Gym Management System plugin for WordPress is susceptible to Local File Inclusion via the page parameter. This allows authenticated...

8.8CVSS7.3AI score0.00754EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2025/07/29 12:00 a.m.12 views

The vulnerability of the frmL7ProtForm() function in the HTTP POST Request Handler component of the Tenda FH451 router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the frmL7ProtForm function in the HTTP POST Request Handler component of the Tenda FH451 microprogramming router software is related to buffer overflows in the stack when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...

9CVSS8.3AI score0.00863EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2025/07/25 12:00 a.m.10 views

Tenda FH451 formSafeClientFilter Function Buffer Overflow Vulnerability

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from the parameter Go/page in file /goform/SafeClientFilter that fails to properly validate the length of the input data, which can be exploited...

9CVSS8.3AI score0.0082EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:00 a.m.17 views

The vulnerability of the fromP2pListFilter() function in the software for Tenda FH451 routers allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function in the Tenda FH451 router’s software lies in the fact that the operation exceeds the buffer limits in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause service failures...

9CVSS8.3AI score0.02958EPSS
SaveExploits4References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/24 12:00 a.m.11 views

The vulnerability of the formSafeEmailFilter() function in the microprogramming software for Tenda FH451 allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of the formSafeEmailFilter function in the Tenda FH451 router software lies in the issue of the operation being executed outside the buffer in memory when processing the page parameter. Exploiting this vulnerability can allow a malicious actor to cause service failures or execut...

9CVSS8.1AI score0.0102EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/23 12:00 a.m.14 views

The vulnerability of the fromSetIpBind() function in the /goform/SetIpBind library of the Tenda FH451 router software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the fromSetIpBind function in the /goform/SetIpBind microprogramming system for Tenda FH451 routers is related to buffer overflows when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code or cause service failures...

9CVSS8.3AI score0.00808EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.11 views

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of the input data for the parameter page in the file /goform/SafeEmailFilter, which can be...

9CVSS8.1AI score0.0102EPSS
SaveExploits1References7
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.10 views

WordPress plugin School Management System for Wordpress 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A path traversal vulnerability exis...

8.8CVSS6.4AI score0.00716EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2025/07/18 12:00 a.m.15 views

Tenda FH451 安全漏洞

The Tenda FH451 is a router from the Chinese company Tenda. The Tenda FH451 version 1.0.0.9 suffers from a buffer overflow vulnerability that originates from a failure to properly validate the length of input data for the parameter Go/page in the file /goform/SafeUrlFilter, which could be exploit...

9CVSS8.1AI score0.0082EPSS
SaveExploits1References8
Rows per page
Query Builder