CVE-2025-9770

A weakness has been identified in Campcodes Hospital Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ of the component Admin Dashboard Login. This manipulation of the argument Password causes sql injection. It is possible to initiate the attack...

CVE-2025-9691

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CampCodes Hospital Management System 安全漏洞

CampCodes Hospital Management System is a hospital management system from CampCodes, Inc. A security vulnerability exists in CampCodes Hospital Management System version 1.0, which originates from a SQL injection due to incorrect manipulation of the parameter Password in the component Admin...

CVE-2025-9742

A vulnerability was identified in code-projects Human Resource Integrated System 1.0. This issue affects some unknown processing of the file /login.php. Such manipulation of the argument user/pass leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly...

Code-Projects Human Resource Integrated System 安全漏洞

Human Resource Integrated System is a human resource management system. Human Resource Integrated System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter user/pass in the file /login.php. An attacker can...

Tenda AC10 R7WebsSecurityHandler function stack buffer overflow vulnerability

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 has a stack buffer overflow vulnerability, the vulnerability stems from the R7WebsSecurityHandler function in the Password parameter...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-9691 Campcodes Online Shopping System login.php sql injection

A vulnerability has been found in Campcodes Online Shopping System 1.0. This impacts an unknown function of the file /login.php. Such manipulation of the argument Password leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used...

CVE-2025-9691

CVE-2025-9691 affects Campcodes Online Shopping System 1.0; in /login.php, manipulating the Password argument enables SQL injection. This remote flaw is supported by multiple sources (NVD/Red Hat and others) and, per PT-2025-35361, a temporary mitigation is to restrict access to /login.php. Explo...

CampCodes Online Shopping System 安全漏洞

CampCodes Online Shopping System is an online shopping system from CampCodes, Inc. A security vulnerability exists in version 1.0 of the CampCodes Online Shopping System, which is caused by a SQL injection due to an incorrect manipulation of the parameter Password in file /login.php...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09_multi_TDE01 contains a stack overflow in the R7WebsSecurityHandler when processing the Password parameter, leading to a potential denial-of-service. The issue is confirmed across multiple sources (CNVD/CNNVD/Red Hat/NVD entries) with no explicit exploitation ...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

Tenda AC10 安全漏洞

Tenda AC10 is a dual-band Gigabit wireless router launched by Shenzhen Jixiang Tenda Technology Co., Ltd, mainly for 200M and above fiber optic users. Tenda AC10 has a stack buffer overflow vulnerability, the vulnerability stems from the R7WebsSecurityHandler function in the Password parameter...

PT-2025-35118

Name of the Vulnerable Software and Affected Versions: Tenda AC10 version 16.03.10.09 multi TDE01 Description: The Tenda AC10 firmware contains a stack overflow issue. The issue is located in the R7WebsSecurityHandler function and is triggered via the Password parameter. Recommendations: Update t...

CVE-2025-57217

Tenda AC10 v4.0 firmware v16.03.10.09multiTDE01 was discovered to contain a stack overflow via the Password parameter in the function R7WebsSecurityHandler...

CVE-2025-9298

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...

CVE-2025-9359

A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RPcheckCredentialsByBBS of the file /goform/RPcheckCredentialsByBBS. This manipulation of the argument ssidhex/pwd...

CVE-2025-9298 Tenda M3 QuickIndex formQuickIndex stack-based overflow

A flaw has been found in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. The attack can be launched remotely. The exploit has been published and may be used...