Brilliance Golden Link Secondary System 安全漏洞

Brilliance Golden Link Secondary System is a management system from Brilliance, China. A security vulnerability exists in Brilliance Golden Link Secondary System version 20250424 and earlier, which is caused by a SQL injection due to incorrect manipulation of the parameter dictCn1 in the file...

MRCMS 代码注入漏洞

MRCMS is a content management system by the individual developer of marker. A code injection vulnerability exists in MRCMS version 3.1.2, which stems from the improper handling of the parameter Name in the file /admin/category/add.do in the component Category Management Page, which could lead to ...

BrowserPilot 安全漏洞

BrowserPilot is an intelligent web browsing agent controlled by natural language from the individual developer Andrew Han. A security vulnerability exists in BrowserPilot 0.2.51 and earlier versions, which stems from code injection due to incorrect manipulation of the parameter instructions...

TOTOLINK N150RT Buffer Overflow Vulnerability

The TOTOLINK N150RT is a wireless router from TOTOLINK. The TOTOLINK N150RT suffers from a buffer overflow vulnerability that stems from improper handling of the parameter submit-url in the file /boafrm/formWsc. No details of the vulnerability are provided at this time...

CVE-2025-29180

In FOXCMS =1.25, the installdb.php file has a time - based blind SQL injection vulnerability. The urlprefix, domain, and mywebsite POST parameters are directly concatenated into SQL statements without filtering...

Demtec Graphytics 代码注入漏洞

Demtec Graphytics is an application from Demtec Corporation. A code injection vulnerability exists in Demtec Graphytics version 5.0.7 that stems from improper handling of HTTP GET parameters in the /visualization file, which could lead to a cross-site scripting attack...

CicadasCMS 安全漏洞

CicadasCMS is a content management framework developed based on SpringBoot Mybatis SpringSecurity Vue by westboy Individual Developer in China. A security vulnerability exists in CicadasCMS version 1.0, which stems from improper manipulation of the parameter File in file/upload, which could lead ...

StudentManager 代码问题漏洞

StudentManager is a student management system developed by huanfenz. A code issue exists in StudentManager version 1.0, the vulnerability stems from improper manipulation of the parameter File in the file /upload/uploadArticle.do, which may result in arbitrary file uploads...

uzy-ssm-mall 代码问题漏洞

uzy-ssm-mall yuzu cloud e-commerce is an SSM framework by ghostxbh personal developer for building e-commerce, bookstore mall, customer management and so on. A code issue vulnerability exists in uzy-ssm-mall version 1.0.0, which stems from improper manipulation of the parameter File in the file...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in version 1.0 of the Online Restaurant Management System, which stems from improper handling of parameter IDs in the /admin/comboupdate.php file, which can le...

Online Restaurant Management System 注入漏洞

Online Restaurant Management System is a Code-projects open source online restaurant management system. An injection vulnerability exists in Online Restaurant Management System version 1.0, which originates from improper handling of parameter IDs in the /admin/assignsave.php file, which can lead ...

oa_system 安全漏洞

oasystem is a hailey individual developer's application for the day-to-day operation and management of organizations, used by employees and managers. A security vulnerability exists in oasystem version 2025.01.01 and earlier, which stems from an incorrect manipulation of the parameter menu can le...

admintwo 代码问题漏洞

admintwo is an application by the individual developer xujiangfei. A code issue vulnerability exists in admintwo version 1.0, which stems from an incorrect manipulation of the parameter description that can lead to server-side request forgery...

Code-Projects Bus Reservation System 安全漏洞

Code-Projects Bus Reservation System is an open source bus reservation system from Code-Projects. A security vulnerability exists in Code-Projects Bus Reservation System version 1.0, which stems from an incorrect manipulation of the parameter Str1 that can lead to a buffer overflow...

Project Worlds Online Doctor Appointment Booking System 注入漏洞

Project Worlds Online Doctor Appointment Booking System is an online doctor appointment booking system from Project Worlds, Inc. An injection vulnerability exists in Project Worlds Online Doctor Appointment Booking System version 1.0, which stems from an incorrect manipulation of a parameter ID...

CVE-2025-29063

An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/sethidessidcfg is not handled properly...

CVE-2025-29063

The LB-LINK BL-AC2100 wireless Wi-Fi 6 router is vulnerable to remote code execution (RCE) in versions V1.0.4 and earlier . The root cause is the improper handling of the enable parameter passed to the /goform/set_hidessid_cfg endpoint, specifically due to improper neutralization of special eleme...

Apartment Visitor Management System 注入漏洞

Apartment Visitor Management System is an Apartment Visitor Management System by Carlo Montero Personal Developer. An injection vulnerability exists in Apartment Visitor Management System version 1.0, which stems from an incorrect manipulation of a parameter ID resulting in SQL injection...

CodeCanyon Perfex CRM 代码注入漏洞

CodeCanyon Perfex CRM is a self-hosted customer relationship management software from CodeCanyon. A code injection vulnerability exists in CodeCanyon Perfex CRM 3.2.1 and prior versions, which stems from the fact that incorrect manipulation of the parameter content can lead to cross-site scriptin...

Bluestar Micro Mall 代码问题漏洞

Bluestar Micro Mall is a shopping mall system from Bluestar, Inc. A code issue vulnerability exists in Bluestar Micro Mall version 1.0, which stems from an incorrect manipulation of the parameter File that can lead to unlimited uploads...