PT-2025-49771

SAP BusinessObjects Business Intelligence Platform lets an unauthenticated remote attacker send crafted requests through the URL parameter that controls the login page error message. This can cause the server to fetch attacker-supplied URLs, resulting in low impact to confidentiality and integrit...

EUVD-2025-198586

A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Affected is an unknown function of the file /admin/?page=city. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

Online Voting System /index.php File Code Problem Vulnerability

Online Voting System is an online voting system. Online Voting System has a code issue vulnerability that stems from a lack of validation of uploaded files in the page parameter of file /index.php. An attacker can exploit this vulnerability to upload malicious files...

itsourcecode Inventory Management System SQL注入漏洞

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that stems from improper handling of the ID parameter in the /admin/products/index.php?view=edit file. No details of the vulnerability are available at this time...

CVE-2025-57310

A Cross-Site Request Forgery CSRF vulnerability in Salmen2/Simple-Faucet-Script v1.07 via crafted POST request to admin.php?p=ads&c=1 allowing attackers to execute arbitrary code...

itsourcecode Online Voting System 代码问题漏洞

Online Voting System is an online voting system. Online Voting System has a code issue vulnerability that stems from a lack of validation of uploaded files in the page parameter of file /index.php. An attacker can exploit this vulnerability to upload malicious files...

SourceCodester Farm Management System SQL注入漏洞

SourceCodester Farm Management System is a SourceCodester open source farm management system. A SQL injection vulnerability exists in SourceCodester Farm Management System version 1.0, which stems from an incorrect manipulation of the parameter pid in the file /review.php, which could lead to a S...

The vulnerability of the fromAddressNat() function (/goform/addressNat) in the Tenda CH22 router software allows a attacker to execute arbitrary code or cause service failures.

The vulnerability of the fromAddressNat function /goform/addressNat in the Tenda CH22 router’s microprogramming system is related to the issue of the operation going beyond the buffer boundaries in memory when processing the page parameter. Exploiting this vulnerability could allow a remote...

The vulnerability of the fromP2pListFilter() function (/goform/P2pListFilter) in the Tenda CH22 router software allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the fromP2pListFilter function /goform/P2pListFilter of the Tenda CH22 router’s software is related to the issue where the operation exceeds the buffer boundaries in memory when processing the page parameter. Exploiting this vulnerability allows an attacker to execute arbitra...

The vulnerability of the formDeviceReboot() function in D-Link DIR600L router microprogramming software allows a intruder to trigger a service failure.

The vulnerability of the formDeviceReboot function in D-Link DIR600L router microprogramming software is related to the copying of buffers without checking the size of the input data when processing the nextpage parameter. Exploiting this vulnerability could allow a malicious actor to cause servi...

Tenda CH22 fromSafeUrlFilter function buffer overflow vulnerability

Tenda CH22 is a network device from Tenda, China. Tenda CH22 version 1.0.0.1 suffers from a buffer overflow vulnerability, which originates from the parameter page of the function fromSafeUrlFilter in the file /goform/SafeUrlFilter fails to correctly validate the length of the input data, and can...

The vulnerability of the fromDhcpListClient() function in the Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromDhcpListClient function in the Tenda CH22 router’s microprogramming software is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary...

The vulnerability of the fromNatStaticSetting() function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system allows a hacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromNatStaticSetting function in the /goform/NatStaticSetting file of the Tenda CH22 router microprogramming system is related to the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could all...

The vulnerability of the fromVirtualSer() function in the Tenda CH22 router’s microprogramming software allows a perpetrator to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromVirtualSer function in Tenda CH22 router microprogramming software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability can allow an attacker to execute arbitrary code, gain...

The vulnerability of the fromSetIpBind() function in Tenda CH22 router software allows a attacker to execute arbitrary code, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the fromSetIpBind function in Tenda CH22 router software lies in the copying of buffers without checking the size of the input data when processing the page parameter. Exploiting this vulnerability could allow an attacker to execute arbitrary code, gain unauthorized access to...

EUVD-2025-36167

A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been...

CVE-2025-12233

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-12233

A flaw has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function fromSafeUrlFilter of the file /goform/SafeUrlFilter. Executing a manipulation of the argument page can lead to buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-12232

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromSafeClientFilter of the file /goform/SafeClientFilter. Performing a manipulation of the argument page results in buffer overflow. The attack can be initiated remotely. The exploit is now public...

CVE-2025-12234 Tenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow

A vulnerability has been found in Tenda CH22 1.0.0.1. This affects the function fromSafeMacFilter of the file /goform/SafeMacFilter. The manipulation of the argument page leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used...