CVE-2025-3999

A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. Th...

CVE-2025-3999

CVE-2025-3999 affects Seeyon Zhiyuan OA Web Application System 8.1 SP2. The vulnerability lies in the URL Parameter Handler, specifically processing the file seeyonuild mp ootused? (as described) date.jsp under addDate, enabling cross-site scripting. The issue can be exploited remotely and has h...

CVE-2025-3999: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. This issue affects some unknown processing of the file seeyon\opt\Seeyon\A8\ApacheJetspeed\webapps\seeyon\common\js\addDate\date.jsp of the component URL Parameter Handler. Th...

PT-2025-18037 · Unknown · Seeyon Zhiyuan Oa Web Application System

Name of the Vulnerable Software and Affected Versions: Seeyon Zhiyuan OA Web Application System version 8.1 SP2 Description: A problematic issue has been found in the Seeyon Zhiyuan OA Web Application System, affecting some unknown processing of the file...

CVE-2025-3612: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, was found in Demtec Graphytics 5.0.7. This affects an unknown part of the file /visualization of the component HTTP GET Parameter Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The...

PT-2025-16285 · Demtec · Demtec Graphytics

Name of the Vulnerable Software and Affected Versions: Demtec Graphytics version 5.0.7 Description: A vulnerability was found in Demtec Graphytics, affecting an unknown part of the file/visualization of the component HTTP GET Parameter Handler. The manipulation leads to cross-site scripting. It i...

CVE-2025-2353

A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...

CVE-2025-2384 code-projects Real Estate Property Management System Parameter InsertCustomer.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...

CVE-2025-2384

CVE-2025-2384 affects code-projects’ Real Estate Property Management System 1.0. The vulnerability lies in the Parameter Handler’s InsertCustomer.php, where manipulation of inputs such as txtName, txtAddress, cmbCity, txtEmail, cmbGender, txtBirthDate, txtUserName2, and txtPassword2 enables SQL i...

PT-2025-11512

Name of the Vulnerable Software and Affected Versions code-projects Real Estate Property Management System version 1.0 Description A critical issue was found in the Parameter Handler component of the file /InsertCustomer.php. The manipulation of the txtName, txtAddress, cmbCity, txtEmail,...

CVE-2025-2384: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in code-projects Real Estate Property Management System 1.0. This affects an unknown part of the file /InsertCustomer.php of the component Parameter Handler. The manipulation of the argument...

CVE-2025-2353: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, was found in VAM Virtual Airlines Manager up to 2.6.2. Affected is an unknown function of the file /vam/index.php of the component HTTP GET Parameter Handler. The manipulation of the argument ID/registryid/planeicao leads to sql injection. It is...

PT-2025-10454

Name of the Vulnerable Software and Affected Versions JoomlaUX JUX Real Estate version 3.4.0 Description A critical issue was found in the processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of...

CVE-2025-2126: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the...

CVE-2025-1853

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-1853 Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-1853

The CVE-2025-1853 entry concerns Tenda AC8 firmware 16.03.34.06. Affected component: Parameter Handler, function sub_49E098 in /goform/SetIpMacBind. Root cause: manipulation of the argument list causes a stack-based buffer overflow. Impact: remote attacker may exploit to take control of the devic...

CVE-2025-1853 Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated...

CVE-2025-1853: Stack-based Buffer Overflow

A vulnerability was found in Tenda AC8 16.03.34.06 and classified as critical. This issue affects the function sub49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to stack-based buffer overflow. The attack may be initiated...

PT-2025-9255

Name of the Vulnerable Software and Affected Versions Tenda AC8 version 16.03.34.06 Description A critical issue affects the function sub 49E098 of the file /goform/SetIpMacBind of the component Parameter Handler. The manipulation of the argument list leads to a stack-based buffer overflow. The...