13759 matches found
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. (A configuration file that provides a complete literal username is not categorized as an untrusted source.)
...
CVE-2025-11348
A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-11422
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...
CVE-2025-11422 Campcodes Advanced Online Voting Management System login.php sql injection
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...
CVE-2025-11422
The CVE-2025-11422 entry concerns Campcodes Advanced Online Voting Management System 1.0. The vulnerability is a SQL injection in an unknown function of /admin/login.php, triggered by manipulating the Username parameter. It is exploitable remotely and the exploit has been disclosed publicly. Seve...
PT-2025-41269
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Commerce Bookstore version 1.0 Description A flaw exists that allows for remote manipulation of the register username argument in the /register.php file, leading to SQL injection. The exploit is publicly available...
CVE-2025-11422: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability has been found in Campcodes Advanced Online Voting Management System 1.0. The impacted element is an unknown function of the file /admin/login.php. Such manipulation of the argument Username leads to sql injection. The attack can be executed remotely. The exploit has been disclose...
PT-2025-41258
Name of the Vulnerable Software and Affected Versions SourceCodester Simple E-Commerce Bookstore version 1.0 Description A flaw exists in SourceCodester Simple E-Commerce Bookstore version 1.0 related to the manipulation of the login username argument within the /index.php file. This can lead to ...
SourceCodester Simple E-Commerce Bookstore SQL注入漏洞
SourceCodester Simple E-Commerce Bookstore is SourceCodester open source a simple e-commerce bookstore . A SQL injection vulnerability exists in SourceCodester Simple E-Commerce Bookstore version 1.0, which stems from an incorrect manipulation of the parameter registerusername in the file...
Linux Distros Unpatched Vulnerability : CVE-2025-61984
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution...
CampCodes Advanced Online Voting Management System SQL注入漏洞
CampCodes Advanced Online Voting Management System is an advanced online voting management system from CampCodes Philippines, Inc. A SQL injection vulnerability exists in CampCodes Advanced Online Voting Management System version 1.0, which stems from an incorrect manipulation of the parameter...
The vulnerability of the ProxyCommand component of the OpenSSH cryptographic protection tool, which allows a hacker to execute arbitrary code.
The vulnerability of the ProxyCommand component in the OpenSSH cryptographic security tool is related to the insertion of a zero byte %00 into the username string. Exploiting this vulnerability allows an attacker to execute arbitrary code...
SUSE CVE-2025-61984
ssh in OpenSSH before 10.1 allows control characters in usernames that originate from certain possibly untrusted sources, potentially leading to code execution when a ProxyCommand is used. The untrusted sources are the command line and %-sequence expansion of a configuration file. A configuration...
CVE-2025-11325
A security flaw has been discovered in Tenda AC18 15.03.05.196318. Affected by this issue is some unknown functionality of the file /goform/fastsettingpppoeset. Performing a manipulation of the argument Username results in stack-based buffer overflow. The attack is possible to be carried out...
CVE-2025-11323
A vulnerability was determined in UTT 1250GW up to v2v3.2.2-200710. Affected is the function strcpy of the file /goform/formUserStatusRemark. This manipulation of the argument Username causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been publicly disclosed a...
CVE-2025-11348
A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-11348
A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been...
CVE-2025-11348
CVE-2025-11348 affects Campcodes Online Apartment Visitor Management System 1.0. The issue arises from improper processing of the /index.php file, where manipulating the Username parameter enables a SQL injection. This is a network-facing vulnerability with remote exploitation; the exploit has be...
CVE-2025-11348
A vulnerability was determined in Campcodes Online Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /index.php. Executing a manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been...
