CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1375 matches found

Rapid7 Vulnerability Database (full)•added 2025/10/07 12:00 a.m.•7 views

CVE-2025-11390: Improper Neutralization of Input During Web Page Generation

A weakness has been identified in PHPGurukul Cyber Cafe Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /search.php of the component POST Parameter Handler. Executing a manipulation of the argument searchdata can lead to cross site scripting. The atta...

6.1CVSS3.6AI score0.00359EPSS

SaveExploits1References6

Rapid7 Vulnerability Database (full)•added 2025/10/07 12:00 a.m.•4 views

CVE-2025-11386: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC15 15.03.05.18. The impacted element is an unknown function of the file /goform/SetDDNSCfg of the component POST Parameter Handler. The manipulation of the argument ddnsEn results in stack-based buffer overflow. The attack can be launched remotely. The exploit...

9CVSS8.2AI score0.00827EPSS

SaveExploits1References6

Positive Technologies•added 2025/10/05 12:00 a.m.•55 views

PT-2025-40801

Name of the Vulnerable Software and Affected Versions CRMEB versions prior to 5.7 Description A security flaw exists in CRMEB that allows for SQL injection. The issue is related to the processing of the cate id argument within the GET Parameter Handler component, specifically in the file...

8.8CVSS6.3AI score0.00332EPSS

SaveExploits0References9

Rapid7 Vulnerability Database (full)•added 2025/10/05 12:00 a.m.•5 views

CVE-2025-11288: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in CRMEB up to 5.6. This issue affects some unknown processing of the file /adminapi/product/product of the component GET Parameter Handler. Performing a manipulation of the argument cateid results in sql injection. Remote exploitation of the attack is possible...

8.8CVSS6.2AI score0.00332EPSS

SaveExploits0References1