Tenda AC18 /goform/SetIPTVCfg Command Injection Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter list in the file /goform/SetIPTVCfg. No details of the vulnerability are available at this time...

Unspecified vulnerability in Huawei HarmonyOS and EMUI (CNVD-2025-16596)

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A security vulnerability exists in Huawei HarmonyOS an...

WordPress Abbie Expander plugin cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress plugin is an application plugin. A cross-site scripting vulnerability exists in the WordPress Abbie Expander plugin that stems from improper handling of input during page generation and can be exploited by an...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15524)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS version 5.0.0 suffers from a security vulnerability, no details of the vulnerability are provided at this time...

Tenda AC15 /goform/setPptpUserList file buffer overflow vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 suffers from a buffer overflow vulnerability, which originates from the parameter list in the file /goform/setPptpUserList that fails to correctly validate the length of the input data, which can be exploited by an...

TOTOLINK X15 /boafrm/formWlanRedirect File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formWlanRedirect parameter redirect-url to correctly validate the length and size of the input dat...

TOTOLINK N302R Plus service_type parameter buffer overflow vulnerability

The TOTOLINK N300R Plus is a wireless router. The TOTOLINK N302R Plus buffer overflow vulnerability, which stems from a misuse of the parameter servicetype, can be exploited by an attacker to execute arbitrary code...

Laundry System insert_type.php file cross-site scripting vulnerability

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Type in the file /data/inserttype.php, which can be exploited by an attacker to execute arbitrar...

Patient Record Management System birthing.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter itrno/compid in the file /birthing.php. An attacker can...

TOTOLINK EX1200T /boafrm/formPortFw File Buffer Overflow Vulnerability

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from the parameter servicetype in the file /boafrm/formPortFw that fails to correctly validate the length and size of the input data...

Laundry System Cross-Site Request Forgery Vulnerability

Laundry System is a laundry system. The Laundry System suffers from a cross-site request forgery vulnerability that arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker could exploit this vulnerability to spoof a malicious reque...

Employee Record Management System /myexp.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter emp3ctc in the file /myexp.php. An attacker can...

Laundry System edit_laundry.php file cross-site scripting vulnerability

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Customer in the file /data/editlaundry.php, which can be exploited by an attacker to execute...

TOTOLINK X15 /boafrm/formWirelessTbl File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the parameter submit-url in the file /boafrm/formWirelessTbl that fails to correctly validate the length and size of the input dat...

TOTOLINK X15 /boafrm/formDMZ file buffer overflow vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability, which originates from the failure of the parameter submit-url in the file /boafrm/formDMZ to correctly validate the length and size of the input data,...

TOTOLINK X15 /boafrm/formIpQoS File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the parameter mac in the file /boafrm/formIpQoS that fails to correctly validate the length and size of the input data, which can ...

Tenda AC9 Command Injection Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability that stems from the parameter list in the file /goform/SetIPTVCfg failing to properly filter constructed command special characters, commands, and so on. No details of the...

TOTOLINK X15 /boafrm/formNtp File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formNtp parameter submit-url to correctly validate the length and size of the input data in the...

Tenda AC9 /goform/SetRemoteWebCfg File Buffer Overflow Vulnerability

Tenda AC9 is a wireless router from Tenda, a Chinese company. A buffer overflow vulnerability exists in Tenda AC9 version 15.03.02.13, which originates from the parameter remoteIp in the file /goform/SetRemoteWebCfg that fails to correctly validate the length of the input data, and can be exploit...

Patient Record Management System view_hematology.php File SQL Injection Vulnerability

Patient Record Management System is a medical record management system. Patient Record Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter itrno in the file viewhematology.php. An attacker can...

TOTOLINK X15 /boafrm/formStats file buffer overflow vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formStats parameter submit-url to correctly validate the length and size of the input data in the...

TOTOLINK X2000R devicemac1 Command Injection Vulnerability

TOTOLINK X2000R is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK X2000R suffers from a command injection vulnerability that stems from incorrect manipulation of the parameter devicemac1, no details of the vulnerability are provided at this time...

TOTOLINK X15 /boafrm/formSetLg File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the failure of the file /boafrm/formSetLg parameter submit-url to properly validate the length and size of the input data in the...

Employee Record Management System /admin/allemployees.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter delid in the file /admin/allemployees.php. An...

Tenda AC18 /goform/setPptpUserList Buffer Overflow Vulnerability

The Tenda AC18 is a router from the Chinese company Tenda. The Tenda AC18 suffers from a buffer overflow vulnerability that originates from a misuse of the parameter list in the file /goform/setPptpUserList, which can be exploited by an attacker to submit a special request and execute arbitrary...

Laundry System edit_type.php file cross-site scripting vulnerability

Laundry System is a laundry system. Laundry System suffers from a cross-site scripting vulnerability that stems from the lack of effective filtering and escaping of user-supplied data in the parameter Type in the file /data/edittype.php, which can be exploited by an attacker to execute arbitrary...

BP Monitoring Management System edit-family-member.php File SQL Injection Vulnerability

BP Monitoring Management System is a bp monitoring management system. BP Monitoring Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter memberage in the file /edit-family-member.php. An...

Tenda AC8 /goform/WifiExtraSet File Buffer Overflow Vulnerability

Tenda AC8 is a wireless router from Tenda, a Chinese company. Tenda AC8 suffers from a buffer overflow vulnerability, which originates from the parameter wpapskcrypto in the file /goform/WifiExtraSet that fails to correctly validate the length and size of the input data, which can be exploited by...

Employee Record Management System /resetpassword.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter newpassword in the file /resetpassword.php. An...

Employee Record Management System /editmyexp.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally-entered SQL statements in the parameter emp3workduration in the file /editmyexp.php. An...

TOTOLINK EX1200T redirect-url buffer overflow vulnerability

The TOTOLINK EX1200T is a wireless router from China's Gion Electronics TOTOLINK. The TOTOLINK EX1200T suffers from a buffer overflow vulnerability that originates from a misuse of the parameter redirect-url in the file /boafrm/formWlanRedirect, which can be exploited by an attacker to cause an...

TOTOLINK X15 /boafrm/formWsc File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file /boafrm/formWsc failing to properly validate the length and size of the input data, which can be...

TOTOLINK X15 /boafrm/formReflashClientTbl File Buffer Overflow Vulnerability

TOTOLINK X15 is a network wireless extender from China's Gion Electronics TOTOLINK. The TOTOLINK X15 suffers from a buffer overflow vulnerability that originates from the parameter submit-url in file /boafrm/formReflashClientTbl failing to properly validate the length and size of the input data,...

Tenda CP3 Command Injection Vulnerability

Tenda CP3 is a smart camera from Tenda, a Chinese company. A command injection vulnerability exists in Tenda CP3 version 11.10.00.2311090948, which stems from the failure of the function subF3C8C in the file apollo to correctly filter constructed command special characters, commands, and so on. A...

QNAP QTS and QNAP QuTS hero buffer overflow vulnerability

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

WordPress Accessibility Suite plugin authorization issue vulnerability

WordPress Accessibility Suite plugin is a plugin designed to enhance the accessibility of your website. WordPress Accessibility Suite plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no detailed vulnerability details are provided at this time...

Tenda AC15 Buffer Overflow Vulnerability

The Tenda AC15 is a wireless router from the Chinese company Tenda. Tenda AC15 suffers from a buffer overflow vulnerability, which originates from the parameter lanMask in the file /goform/AdvSetLanip that fails to correctly validate the length and size of the input data, which can be exploited b...

SQL Injection Vulnerability in Multimedia Integrated Service Display System of Beijing Shenzhou Vision Han Technology Co., Ltd (CNVD-C-2025-319811)

Ltd. is a deep-rooted enterprise in the field of visualization. A SQL injection vulnerability exists in the multimedia integrated business display system of Beijing Divine Vision Han Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

Huawei HarmonyOS Buffer Overflow Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A buffer overflow vulnerability exists in Huawei HarmonyOS version 5.0.0 and 4.3.0, which originates from a program that fails to correctly validate the leng...

WordPress 6Storage Rentals plugin authorization issue vulnerability

WordPress 6Storage Rentals plugin is an easy to use plugin that allows tenants to book the desired storage facility on your website. WordPress 6Storage Rentals plugin suffers from an authorization issue vulnerability that stems from a lack of authorization, no details of the vulnerability are...

Employee Record Management System /admin/adminprofile.php File SQL Injection Vulnerability

Employee Record Management System is an employee record management system. Employee Record Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter AdminName in the file /admin/adminprofile.php. ...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15522)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS version 5.0.0, which can be exploited by an attacker to cause certain exception types to go uncaught...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15523)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS version 5.0.2 suffers from a security vulnerability, no details of the vulnerability are provided at this time...

QNAP QTS and QNAP QuTS hero command injection vulnerabilities

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

Unspecified vulnerability in Huawei HarmonyOS (CNVD-2025-15554)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS version 5.0.0 suffers from a security vulnerability, no details of the vulnerability are provided at this time...

Traffic Offense Reporting System save-reported.php file cross-site scripting vulnerability

Traffic Offense Reporting System is a traffic violation reporting system. Traffic Offense Reporting System has a cross-site scripting vulnerability that originates from the parameter offenseid/vehicleno/driverlicense/name/address/gender/officer in the file /save-reported.php. The lack of effectiv...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14379)

FreeFloat FTP Server is a FTP Server software developed by FreeFloat Inc. FreeFloat FTP Server suffers from a BINARY command buffer overflow vulnerability. The vulnerability is caused due to incorrect boundary checking in the component BINARY command handler, and no detailed vulnerability details...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14378)

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server. The vulnerability is due to incorrect boundary checking of the component MKDIR command handler, no details of the vulnerability are provided at this time...

Unauthorized Access Vulnerability in ioLogik E1210 of Mosaic Technology (Shanghai) Co.

The ioLogik E1210 is an Ethernet I/O module that supports daisy-chain topology and is mainly used in industrial automation and device monitoring scenarios. Mosa Technologies Shanghai Co. ioLogik E1210 suffers from an unauthorized access vulnerability, which can be exploited by attackers to obtain...

FreeFloat FTP Server Buffer Overflow Vulnerability (CNVD-2025-14382)

FreeFloat FTP Server is an FTP service from FreeFloat. A buffer overflow vulnerability exists in FreeFloat FTP Server, which stems from the failure of the component PWD Command Handler to properly validate the length size of input data, no details of the vulnerability are provided at this time...