PT-2025-38684

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A vulnerability exists in Campcodes Online Learning Management System that allows for SQL injection. The issue is located in the /admin/edit class.php file, where manipulati...

PT-2025-39073

Name of the Vulnerable Software and Affected Versions code-projects Hostel Management System version 1.0 Description A flaw exists in code-projects Hostel Management System 1.0 where manipulation of the Home argument in a file, /justines/admin/mod reports/index.php, leads to a SQL injection. This...

PT-2025-38688

Name of the Vulnerable Software and Affected Versions Campcodes Grocery Sales and Inventory System version 1.0 Description A flaw exists in Campcodes Grocery Sales and Inventory System 1.0 that allows for remote SQL injection. The issue is located in the /manage user.php file, where manipulation ...

PT-2025-38747

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A security flaw exists in Campcodes Online Beauty Parlor Management System. The issue involves SQL injection due to the manipulation of the editid argument in the...

PT-2025-39080

Name of the Vulnerable Software and Affected Versions Tenda AC20 versions up to 16.03.08.12 Description A flaw exists in Tenda AC20 that allows for remote buffer overflow. The issue is related to the strcpy function within the /goform/SetPptpServerCfg file of the HTTP POST Request Handler...

PT-2025-38715

A vulnerability was identified in code-projects Hostel Management System 1.0. Impacted is an unknown function of the file /justines/admin/mod roomtype/index.php?view=view. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly...

PT-2025-39084

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A weakness exists in Campcodes Online Learning Management System. Manipulation of the firstname argument in the /admin/admin user.php file can lead to SQL injection. The attac...

PT-2025-38728

Name of the Vulnerable Software and Affected Versions Campcodes Online Beauty Parlor Management System version 1.0 Description A flaw exists in Campcodes Online Beauty Parlor Management System 1.0, specifically within the file /admin/add-customer.php. Manipulation of the mobilenum argument can le...

PT-2025-38686

Name of the Vulnerable Software and Affected Versions: Campcodes Online Learning Management System version 1.0 Description: A weakness exists in Campcodes Online Learning Management System that may allow for remote SQL injection. The issue is related to the manipulation of the subject code argume...

PT-2025-38706

Name of the Vulnerable Software and Affected Versions code-projects E-Commerce Website version 1.0 Description A flaw exists in code-projects E-Commerce Website 1.0 where manipulation of the user id argument in the file '/pages/admin account delete.php' can lead to SQL injection. This issue is...

PT-2025-38675

Name of the Vulnerable Software and Affected Versions LionCoders SalePro POS versions prior to 5.5.1 Description A security issue exists in LionCoders SalePro POS that involves the cleartext transmission of sensitive information during some unknown processing related to the Login component. This...

PT-2025-38698

Name of the Vulnerable Software and Affected Versions SourceCodester Online Hotel Reservation System version 1.0 Description A flaw exists in SourceCodester Online Hotel Reservation System 1.0. The issue is related to the manipulation of the ID argument within an unknown function of the...

CVE-2025-10718

A vulnerability was found in Ooma Office Business Phone App up to 7.2.2 on Android. This affects an unknown part of the component com.ooma.office2. The manipulation results in improper export of android application components. The attack needs to be approached locally. The exploit has been made...

CVE-2025-10712

A vulnerability was found in 07FLYCMS, 07FLY-CMS and 07FlyCRM up to 20250831. This issue affects some unknown processing of the file /index.php/Login/login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has...

CVE-2025-10715

A security flaw has been discovered in APEUni PTE Exam Practice App up to 10.8.0 on Android. The impacted element is an unknown function of the file AndroidManifest.xml of the component com.apeedication. The manipulation results in improper export of android application components. The attack...

CVE-2025-10707

A weakness has been identified in JeecgBoot up to 3.8.2. Affected is an unknown function of the file /message/sysMessageTemplate/sendMsg. Executing manipulation can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be...

CVE-2025-10766

A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file EventViewerController.cs. Executing manipulation of the argument ID can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to t...

CVE-2025-10766 SeriaWei ZKEACMS EventViewerController.cs Download path traversal

A weakness has been identified in SeriaWei ZKEACMS up to 4.3. This issue affects the function Download of the file EventViewerController.cs. Executing manipulation of the argument ID can lead to path traversal. It is possible to launch the attack remotely. The exploit has been made available to t...

CVE-2025-10765

The CVE-2025-10765 entry concerns SeriaWei ZKEACMS up to version 4.3. The vulnerability resides in the SEOSuggestions component, specifically the CheckPage/Suggestions function within cms-v4.3\wwwroot\Plugins\ZKEACMS.SEOSuggestions\ZKEACMS.SEOSuggestions.dll, where manipulated input can trigger a...

CVE-2025-10765 SeriaWei ZKEACMS SEOSuggestions ZKEACMS.SEOSuggestions.dll server-side request forgery

A security flaw has been discovered in SeriaWei ZKEACMS up to 4.3. This vulnerability affects the function CheckPage/Suggestions in the library cms-v4.3\wwwroot\Plugins\ZKEACMS.SEOSuggestions\ZKEACMS.SEOSuggestions.dll of the component SEOSuggestions. Performing manipulation results in server-sid...