Aggregator

A vulnerability described as critical has been identified in PHP 4.2.0/4.2.1. This impacts an unknown function of the component HTTP POST Request Handler. Executing manipulation can lead to memory corruption. This vulnerability appears as CVE-2002-0717. The attack may be performed from remote. There is no available exploit. Upgrading the affected component is recommended.

A vulnerability was found in Campcodes Computer Sales and Inventory System 1.0. It has been rated as critical. The impacted element is an unknown function of the file /pages/sup_searchfrm.php?action=edit. This manipulation of the argument ID causes sql injection. The identification of this vulnerability is CVE-2025-10436. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Campcodes Computer Sales and Inventory System 1.0. It has been declared as critical. The affected element is an unknown function of the file /pages/cust_edit1.php. The manipulation of the argument ID results in sql injection. This vulnerability was named CVE-2025-10435. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in IbuyuCMS up to 2.6.3. It has been classified as problematic. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-10434. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #647616 / VDB-323870

Submit #647615 / VDB-323869

A vulnerability was found in 1Panel-dev MaxKB up to 2.0.2/2.1.0 and classified as critical. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. This vulnerability is handled as CVE-2025-10433. The attack can be executed remotely. Additionally, an exploit exists. It is suggested to upgrade the affected component.

Submit #647590 / VDB-323868

Submit #647589 / VDB-323867

A vulnerability has been found in Tenda AC1206 15.03.06.23 and classified as critical. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow. This vulnerability is known as CVE-2025-10432. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability, which was classified as critical, was found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-10431. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.php. This manipulation of the argument ID causes sql injection. This vulnerability appears as CVE-2025-10430. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as critical was found in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument drop_services results in sql injection. This vulnerability is reported as CVE-2025-10429. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setting.php of the component Setting Handler. The manipulation of the argument website_image leads to unrestricted upload. This vulnerability is documented as CVE-2025-10428. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability described as critical has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. This vulnerability is registered as CVE-2025-10427. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #647527 / VDB-323866

Submit #647493 / VDB-323865

Submit #647488 / VDB-323864

Submit #647470 / VDB-323863

Submit #647464 / VDB-323862