CVE-2025-14117

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure...

EUVD-2025-201668

A vulnerability was detected in SourceCodester Online Banking System 1.0. This impacts an unknown function of the file /?page=user. The manipulation of the argument First Name/Last Name results in cross site scripting. The attack can be launched remotely. The exploit is now public and may be used...

CVE-2025-14218

CVE-2025-14218 affects code-projects Currency Exchange System version 1.0, specifically the /editotheraccount.php file. The vulnerability arises from an injectable ID parameter in an unknown function, enabling SQL injection that can be exploited remotely. Multiple connected sources reiterate that...

EUVD-2025-201666

A security flaw has been discovered in code-projects Currency Exchange System 1.0. The affected element is an unknown function of the file /editotheraccount.php. Performing manipulation of the argument ID results in sql injection. It is possible to initiate the attack remotely. The exploit has be...

EUVD-2025-201654

A vulnerability was identified in tushar-2223 Hotel-Management-System up to bb1f3b3666124b888f1e4bcf51b6fba9fbb01d15. The impacted element is an unknown function of the file /admin/invoiceprint.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack...

PT-2025-49572

Name of the Vulnerable Software and Affected Versions itsourcecode Student Management System version 1.0 Description A flaw exists in itsourcecode Student Management System 1.0, specifically within the file /newrecord.php. Manipulation of the ID argument can lead to SQL injection. The attack can ...

PT-2025-49510

Name of the Vulnerable Software and Affected Versions ORICO CD3510 version 1.9.12 Description A security issue exists in the File Upload component of the software that allows for path traversal. This manipulation can be initiated remotely. The exploit for this issue has been publicly disclosed, a...

PT-2025-49558

Name of the Vulnerable Software and Affected Versions code-projects Online Ordering System version 1.0 Description A flaw exists in code-projects Online Ordering System 1.0. The issue is related to the manipulation of the Name argument in the file /user contact.php, leading to a SQL injection...

PT-2025-49546

Name of the Vulnerable Software and Affected Versions SourceCodester Inventory Management System version 1.0 Description A security issue exists in SourceCodester Inventory Management System version 1.0 related to csv injection. The issue is located in an unknown function of the SVC Report Export...

PT-2025-49556

Name of the Vulnerable Software and Affected Versions code-projects Online Ordering System version 1.0 Description A security flaw exists in code-projects Online Ordering System 1.0. The issue involves SQL injection due to manipulation of the product id argument within an unknown function of the...

EUVD-2025-201606

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

CVE-2025-14197 Verysync 微力同步 Web Administration f96956469e7be39d information disclosure

A security vulnerability has been detected in Verysync 微力同步 up to 2.21.3. The impacted element is an unknown function of the file /rest/f/api/resources/f96956469e7be39d of the component Web Administration Module. Such manipulation leads to information disclosure. The attack can be executed...

PT-2025-49412

Name of the Vulnerable Software and Affected Versions Verysync versions up to 2.21.3 Description A flaw exists in Verysync that allows for unrestricted file upload. This impacts an unknown function within the Web Administration Module, specifically related to the file...

PT-2025-49396

Name of the Vulnerable Software and Affected Versions Yonyou U8 Cloud versions 5.0, 5.0sp, 5.1, and 5.1sp Description A SQL injection issue exists in Yonyou U8 Cloud. The issue is due to manipulation of the usercode argument within an unknown function of the file...

EUVD-2025-201538

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure...

CVE-2025-14117

CVE-2025-14117 affects fit2cloud Halo 2.21.10. The vulnerability is a cross-site request forgery in an unknown function, exploitable remotely with the exploit publicly disclosed. Multiple sources (NVD, Red Hat, EUVD, OSV, CVE List) confirm the same impact and remote vector. No version fixes are d...

CVE-2025-14117 fit2cloud Halo cross-site request forgery

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure...

CVE-2025-14117 fit2cloud Halo cross-site request forgery

A vulnerability has been found in fit2cloud Halo 2.21.10. Impacted is an unknown function. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure...

PT-2025-49329

Name of the Vulnerable Software and Affected Versions fit2cloud Halo version 2.21.10 Description A cross-site request forgery issue exists in fit2cloud Halo version 2.21.10. The issue is related to an unknown function. The attack can be initiated remotely and the exploit has been publicly...

CVE-2025-13790

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function. This manipulation causes cross-site request forgery. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure...