BrowserPilot 安全漏洞

BrowserPilot is an intelligent web browsing agent controlled by natural language from the individual developer Andrew Han. A security vulnerability exists in BrowserPilot 0.2.51 and earlier versions, which stems from code injection due to incorrect manipulation of the parameter instructions...

TOTOLINK N150RT Buffer Overflow Vulnerability

The TOTOLINK N150RT is a wireless router from TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that stems from improper handling of the parameter submit-url in the file /boafrm/formWsc. No details of the vulnerability are provided at this time...

CVE-2025-29180

In FOXCMS =1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The urlprefix, domain, and mywebsite POST parameters are directly concatenated into SQL statements without filtering...

Demtec Graphytics 代码注入漏洞

Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of HTTP GET parameters in the /visualization file, which could lead to a cross-site scripting attack...

StudentManager 代码问题漏洞

StudentManager is a student management system developed by huanfenz. A code issue exists in StudentManager version 1.0, the vulnerability stems from improper manipulation of the parameter File in the file /upload/uploadArticle.do, which may result in arbitrary file uploads...

CicadasCMS 安全漏洞

CicadasCMS is a content management framework developed based on SpringBoot Mybatis SpringSecurity Vue by westboy Individual Developer in China. A security vulnerability exists in CicadasCMS version 1.0, which stems from improper manipulation of the parameter File in file/upload, which could lead ...

uzy-ssm-mall 代码问题漏洞

uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh personal developer for building e-commerce, bookstore mall, customer management and so on. A code issue vulnerability exists in uzy-ssm-mall version 1.0.0, which stems from improper manipulation of the parameter File in the file...

oa_system 安全漏洞

oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from an incorrect manipulation of the parameter menu can le...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of parameter IDs in the /admin/assignsave.php file, which can lead ...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in version 1.0 of the Online Restaurant Management System, which stems from improper handling of parameter IDs in the /admin/comboupdate.php file, which can le...

admintwo 代码问题漏洞

admintwo is an application by the individual developer xujiangfei. A code issue vulnerability exists in admintwo version 1.0, which stems from an incorrect manipulation of the parameter description that can lead to server-side request forgery...

Code-Projects Bus Reservation System 安全漏洞

Code-Projects Bus Reservation System is an open source bus reservation system from Code-Projects. A security vulnerability exists in Code-Projects Bus Reservation System version 1.0, which stems from an incorrect manipulation of the parameter Str1 that can lead to a buffer overflow...

Project Worlds Online Doctor Appointment Booking System 注入漏洞

Project Worlds Online Doctor Appointment Booking System is an online doctor appointment booking system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Doctor Appointment Booking System version 1.0, which stems from an incorrect manipulation of a parameter ID...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29063

CVE-2025-29063 affects BL-AC2100 (V1.0.4 and earlier). The issue arises from improper handling of the enable parameter in /goform/set_hidessid_cfg, allowing a remote attacker to execute arbitrary code. The metric in the entry shows a high-severity impact (CVSS 3.1: 9.8, Critical; Attack Vector: N...

Apartment Visitor Management System 注入漏洞

Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. An injection vulnerability exists in Apartment Visitor Management System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in SQL injection...

CodeCanyon Perfex CRM 代码注入漏洞

CodeCanyon Perfex CRM is a self-hosted customer relationship management software from CodeCanyon. A code injection vulnerability exists in CodeCanyon Perfex CRM 3.2.1 and prior versions, which stems from the fact that incorrect manipulation of the parameter content can lead to cross-site scriptin...

Bluestar Micro Mall 代码问题漏洞

Bluestar Micro Mall is a shopping mall system from Bluestar, Inc. A code issue vulnerability exists in Bluestar Micro Mall version 1.0, which stems from an incorrect manipulation of the parameter File that can lead to unlimited uploads...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the mdio unvalidated phy address parameter...

CVE-2024-9770

CVE-2024-9770 concerns the WordPress plugin WP-Recall (before version 16.26.12). The issue stems from not sanitizing/escaping a parameter before using it in a SQL statement, enabling an admin-level SQL injection as described across multiple sources (NVD/Red Hat/CVE records). The vulnerability aff...