Aggregator

A vulnerability, which was classified as critical, has been found in ImageMagick up to 7.1.2-0. Impacted is an unknown function. Performing manipulation results in heap-based buffer overflow. This vulnerability is cataloged as CVE-2025-55005. It is possible to initiate the attack remotely. There is no exploit available. It is advisable to upgrade the affected component.

A vulnerability, which was classified as critical, was found in ImageMagick up to 7.1.2-0. The affected element is the function ReadOneMNGIMage. Executing manipulation can lead to heap-based buffer overflow. This vulnerability is registered as CVE-2025-55004. It is possible to launch the attack remotely. No exploit is available. You should upgrade the affected component.

От дата-центра до истребителя: он готов к любой нагрузке.

A vulnerability marked as critical has been reported in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. This vulnerability is cataloged as CVE-2025-10426. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability labeled as critical has been found in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. This vulnerability is listed as CVE-2025-10425. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability identified as critical has been detected in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. This vulnerability is tracked as CVE-2025-10424. The attack is possible to be carried out remotely. Moreover, an exploit is present.

Submit #647210 / VDB-323860

A vulnerability categorized as problematic has been discovered in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. This vulnerability is identified as CVE-2025-10423. The attack can be executed remotely. Additionally, an exploit exists.

Submit #647177 / VDB-323859

Submit #647175 / VDB-323859

Submit #647176 / VDB-323858

Submit #647173 / VDB-323858

A vulnerability was found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. It has been rated as critical. This issue affects the function paySuccess of the file /paySuccess of the component Order Status Handler. The manipulation of the argument orderNo leads to improper authorization. This vulnerability is referenced as CVE-2025-10422. Remote exploitation of the attack is possible. Furthermore, an exploit is available. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.

Submit #647066 / VDB-323857

A vulnerability was found in SourceCodester Student Grading System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /update_account.php. Executing manipulation of the argument ID can lead to sql injection. The identification of this vulnerability is CVE-2025-10421. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in SourceCodester Student Grading System 1.0. It has been classified as critical. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql injection. This vulnerability was named CVE-2025-10420. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in SourceCodester Student Grading System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /del_promote.php. Such manipulation of the argument sy leads to sql injection. This vulnerability is uniquely identified as CVE-2025-10419. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability has been found in SourceCodester Student Grading System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the argument ID causes sql injection. This vulnerability is handled as CVE-2025-10418. The attack can be initiated remotely. Additionally, an exploit exists.

Submit #646997 / VDB-323856

A vulnerability, which was classified as critical, was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_product. The manipulation of the argument ID results in sql injection. This vulnerability is known as CVE-2025-10417. It is possible to launch the attack remotely. Furthermore, an exploit is available.