262 matches found
EUVD-2021-26603
Malware in sbrugna...
EUVD-2006-2218
Malware in sbrugna...
EUVD-2010-4973
Malware in sbrugna...
EUVD-2025-26638
Malicious code in bioql PyPI...
EUVD-2025-21370
Malicious code in bioql PyPI...
EUVD-2025-21371
Malicious code in bioql PyPI...
EUVD-2022-0452
Malicious code in bioql PyPI...
EUVD-2023-33341
Malicious code in bioql PyPI...
TOTOLINK X5000R Command Injection Vulnerability
TOTOLINK X5000R is a wireless router supporting Wi-Fi 6 technology with full coverage mesh system and dual-band transmission for home and business network environments. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the parameter pid in the file...
Travel Management System SQL Injection Vulnerability
Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /detail.php. An attacker can exploit this vulnerability to...
CVE-2025-9934
A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415B20250515. This affects the function sub410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and...
CVE-2025-9934
A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415B20250515. This affects the function sub410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and...
TOTOLINK X5000R 命令注入漏洞
TOTOLINK X5000R is a wireless router supporting Wi-Fi 6 technology with full coverage mesh system and dual-band transmission for home and business network environments. The TOTOLINK X5000R suffers from a command injection vulnerability that stems from the parameter pid in the file...
CVE-2025-9934 TOTOLINK X5000R cstecgi.cgi sub_410C34 command injection
A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415B20250515. This affects the function sub410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. Remote exploitation of the attack is possible. The exploit has been made public and...
CVE-2025-9925
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-9925
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
CVE-2025-9925
CVE-2025-9925 : In projectworlds Travel Management System 1.0, the pid parameter in /detail.php is vulnerable to SQL injection due to improper validation. This enables remote attackers to execute arbitrary SQL, with public exploit availability. Remediation guidance from PT Security suggests restr...
CVE-2025-9925 projectworlds Travel Management System detail.php sql injection
A vulnerability was found in projectworlds Travel Management System 1.0. This issue affects some unknown processing of the file /detail.php. The manipulation of the argument pid results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used...
Projectworlds Travel management System SQL注入漏洞
Travel Management System is a travel management system. Travel Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the parameter pid in the file /detail.php. An attacker can exploit this vulnerability to...
PT-2025-35829
Name of the Vulnerable Software and Affected Versions: projectworlds Travel Management System version 1.0 Description: A SQL injection issue exists due to the manipulation of the pid argument in the processing of the /detail.php file. This can be exploited remotely. The exploit has been made...