Lucene search
+L

982 matches found

CNNVD
CNNVD
added 2025/09/01 12:0 a.m.6 views

CampCodes Hospital Management System 安全漏洞

CampCodes Hospital Management System is a hospital management system from CampCodes, Inc. A security vulnerability exists in CampCodes Hospital Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Password in the component Admin...

9.8CVSS7.7AI score0.00437EPSS
SaveExploits2References7
NVD
NVD
added 2025/08/31 7:15 p.m.6 views

CVE-2025-9742

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

7.5CVSS0.0041EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2025/08/31 12:0 a.m.6 views

Code-Projects Human Resource Integrated System 安全漏洞

Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter user/pass in the file /login.php. An attacker can...

7.5CVSS8.1AI score0.0041EPSS
SaveExploits1References7
CNVD
CNVD
added 2025/08/31 12:0 a.m.5 views

Tenda AC10 R7WebsSecurityHandler function stack buffer overflow vulnerability

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 has a stack buffer overflow vulnerability, the vulnerability stems from the R7WebsSecurityHandler function in the Password parameter...

5.3CVSS7.5AI score0.00479EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:20 p.m.6 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

5.3CVSS7.8AI score0.00479EPSS
SaveExploits0References1
CVE
CVE
added 2025/08/30 2:2 p.m.25 views

CVE-2025-9691

CVE-2025-9691 affects Campcodes Online Shopping System 1.0; in /login.php, manipulating the Password argument enables SQL injection. This remote flaw is supported by multiple sources (NVD/Red Hat and others) and, per PT-2025-35361, a temporary mitigation is to restrict access to /login.php. Explo...

9.8CVSS7.3AI score0.00379EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2025/08/30 2:2 p.m.14 views

CVE-2025-9691 Campcodes Online Shopping System login.php sql injection

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

7.5CVSS0.00379EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/30 12:0 a.m.4 views

CampCodes Online Shopping System 安全漏洞

CampCodes Online Shopping System is an online shopping system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Shopping System, which is caused by a SQL injection due to an incorrect manipulation of the parameter Password in file /login.php...

9.8CVSS7.7AI score0.00379EPSS
SaveExploits1References7
NVD
NVD
added 2025/08/28 6:15 p.m.5 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

5.3CVSS0.00479EPSS
SaveExploits0References1
OSV
OSV
added 2025/08/28 6:15 p.m.4 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

5.3CVSS5.9AI score0.00479EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/28 12:0 a.m.4 views

Tenda AC10 安全漏洞

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 has a stack buffer overflow vulnerability, the vulnerability stems from the R7WebsSecurityHandler function in the Password parameter...

5.3CVSS7.4AI score0.00479EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/08/28 12:0 a.m.2 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

7.2AI score0.00479EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2025/08/28 12:0 a.m.9 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

0.00479EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/08/28 12:0 a.m.6 views

PT-2025-35118

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.09 multi TDE01 Description: The Tenda AC10 firmware contains a stack overflow issue. The issue is located in the R7WebsSecurityHandler function and is triggered via the Password parameter. Recommendations: Update t...

5.3CVSS6.7AI score0.00479EPSS
SaveExploits0References7
CVE
CVE
added 2025/08/28 12:0 a.m.22 views

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 contains a stack overflow in the R7WebsSecurityHandler when processing the Password parameter, leading to a potential denial-of-service. The issue is confirmed across multiple sources (CNVD/CNNVD/Red Hat/NVD entries) with no explicit exploitation ...

5.3CVSS7.2AI score0.00479EPSS
SaveExploits0References1Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/23 1:35 p.m.8 views

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

9.8CVSS8.8AI score0.01084EPSS
SaveExploits1References1
OSV
OSV
added 2025/08/23 10:15 a.m.7 views

CVE-2025-9359

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RPcheckCredentialsByBBS of the file /goform/RPcheckCredentialsByBBS. This manipulation of the argument ssidhex/pwd...

8.7CVSS6.5AI score0.009EPSS
SaveExploits1References6
CVE
CVE
added 2025/08/21 12:32 p.m.29 views

CVE-2025-9298

CVE-2025-9298 affects Tenda M3 1.0.0.12. The stack-based buffer overflow stems from the /goform/QuickIndex function formQuickIndex when processing the PPPOEPassword parameter. The vulnerability is exploitable remotely over the network and an exploit has been published. Multiple sources (CNVD/Red ...

9.8CVSS8.8AI score0.01084EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2025/08/21 12:32 p.m.12 views

CVE-2025-9298 Tenda M3 QuickIndex formQuickIndex stack-based overflow

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

9CVSS0.01084EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2025/08/21 12:0 a.m.5 views

Tenda M3 安全漏洞

Tenda M3 is a wireless controller AC from Tenda, which is aimed at scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. Tenda M3 has a stack buffer overflow vulnerability, the vulnerability stems from the file /goform/QuickIndex function formQuickIndex parameter...

9.8CVSS7.8AI score0.01084EPSS
SaveExploits1References6
Rows per page
Query Builder