PT-2025-41185

Name of the Vulnerable Software and Affected Versions Campcodes Advanced Online Voting Management System version 1.0 Description A flaw exists in Campcodes Advanced Online Voting Management System that allows for SQL injection. The issue is located in a file named /index.php and involves...

PT-2025-40971

Name of the Vulnerable Software and Affected Versions Simple Banking System version 1.0 Description A flaw exists in Simple Banking System 1.0, specifically within the /removeuser.php file. Manipulation of the ID argument can lead to SQL injection. This issue may be exploited remotely. The exploi...

PT-2025-40982

Name of the Vulnerable Software and Affected Versions PHPGurukul Cyber Cafe Management System version 1.0 Description A cross site scripting issue exists in PHPGurukul Cyber Cafe Management System. The issue is located in the /search.php file, specifically within the POST Parameter Handler...

PT-2025-41179

Name of the Vulnerable Software and Affected Versions D-Link DI-7001 MINI version 24.04.18B1 Description A flaw exists in D-Link DI-7001 MINI version 24.04.18B1. The issue involves manipulation of the path argument within the file /upgrade filter.asp, leading to os command injection. This...

PT-2025-40964

Name of the Vulnerable Software and Affected Versions Online Hotel Reservation System version 1.0 Description A flaw exists in Online Hotel Reservation System version 1.0 that allows for unrestricted file upload. This is possible through manipulation of the image argument in the...

PT-2025-41168

Name of the Vulnerable Software and Affected Versions kaifangqian kaifangqian-base affected versions not specified Description A security flaw exists in kaifangqian kaifangqian-base. The issue involves information disclosure resulting from manipulation of the getAllUsers function located in the...

PT-2025-40969

Name of the Vulnerable Software and Affected Versions code-projects Simple Banking System version 1.0 Description A security flaw exists in code-projects Simple Banking System 1.0 related to the processing of the /createuser.php file. Manipulation of the Name argument can lead to SQL injection...

PT-2025-40994

Name of the Vulnerable Software and Affected Versions SourceCodester Hotel and Lodge Management System version 1.0 Description A security flaw exists in SourceCodester Hotel and Lodge Management System 1.0. The issue involves SQL injection, potentially initiated remotely, through manipulation of...

SUSE CVE-2025-11274

A vulnerability was determined in Open Asset Import Library Assimp 6.0.2. Affected is the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. This manipulation causes allocation of resources. The attack is restricted to local execution. The exploit has been...

CVE-2025-11306

A vulnerability was found in qianfox FoxCMS up to 1.2. This affects an unknown part of the file /index.php/Search of the component Search Page. The manipulation of the argument keyword results in cross site scripting. The attack can be executed remotely. The exploit has been made public and could...

CVE-2025-11300

A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of the argument ateFunc results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public...

CVE-2025-11297

A vulnerability was found in Belkin F9K1015 1.00.10. This issue affects some unknown processing of the file /goform/formSetLanguage. Performing a manipulation of the argument webpage results in buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public an...

CVE-2025-11342

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

CVE-2025-11342

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

EUVD-2025-32556

A weakness has been identified in code-projects Online Course Registration 1.0. This impacts an unknown function of the file /admin/edit-course.php. Executing manipulation of the argument coursecode can lead to sql injection. The attack can be executed remotely. The exploit has been made availabl...

CVE-2025-11342

Summary (CVE-2025-11342): Multiple connected sources confirm a SQL injection vulnerability in code-projects Online Course Registration 1.0, arising from lack of validation of the coursecode parameter in /admin/edit-course.php. The vulnerability is exploitable remotely and has publicly available e...

CVE-2025-11341 Jinher OA type xml external entity reference

A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. Th...

EUVD-2025-32537

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

CVE-2025-11337 Four-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversal

A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is...

CVE-2025-11335

A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub46409C of the file /mspinfo.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out...