Aggregator

Submit #643543 / VDB-322344

Submit #643542 / VDB-322343

Submit #643541 / VDB-322342

Submit #643540 / VDB-322341

A vulnerability has been found in D-Link DI-8400 16.07.26A1 and classified as critical. The affected element is the function yyxz_dlink_asp of the file /yyxz.asp. This manipulation of the argument ID causes stack-based buffer overflow. The identification of this vulnerability is CVE-2025-9938. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Submit #643492 / VDB-306510

A vulnerability, which was classified as critical, was found in elunez eladmin 1.1. Impacted is the function deleteFile of the component LocalStorageController. The manipulation results in improper authorization. This vulnerability was named CVE-2025-9937. The attack may be performed from remote. In addition, an exploit is available. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

In January 2025, cybersecurity experts at Wiz Research found that Chinese AI specialist DeepSeek had suffered a data leak, putting more than 1 million sensitive log streams at risk. According to the Wiz Research team, they identified a publicly accessible ClickHouse database belonging to DeepSeek. This allowed “full control over database operations, including the ability to access

A vulnerability, which was classified as critical, has been found in fuyang_lipengjun platform 1.0.0. This issue affects the function AdController of the file /ad/queryAll. The manipulation leads to improper authorization. This vulnerability is uniquely identified as CVE-2025-9936. The attack is possible to be carried out remotely. Moreover, an exploit is present. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Submit #643446 / VDB-322340

Submit #643392 / VDB-322339

A vulnerability classified as critical was found in TOTOLINK N600R 4.3.0cu.7866_B20220506. This vulnerability affects the function sub_4159F8 of the file /web_cste/cgi-bin/cstecgi.cgi. Executing manipulation can lead to command injection. This vulnerability is handled as CVE-2025-9935. The attack can be executed remotely. Additionally, an exploit exists. If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Submit #643388 / VDB-322338

A vulnerability classified as critical has been found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. This affects the function sub_410C34 of the file /cgi-bin/cstecgi.cgi. Performing manipulation of the argument pid results in command injection. This vulnerability is known as CVE-2025-9934. Remote exploitation of the attack is possible. Furthermore, an exploit is available. Once again VulDB remains the best source for vulnerability data.

Submit #643263 / VDB-260480

A vulnerability described as critical has been identified in PHPGurukul Beauty Parlour Management System 1.1. Affected by this issue is some unknown functionality of the file /admin/view-appointment.php. Such manipulation of the argument viewid leads to sql injection. This vulnerability is traded as CVE-2025-9933. The attack may be launched remotely. Furthermore, there is an exploit available. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Submit #643108 / VDB-289661

A vulnerability marked as critical has been reported in PHPGurukul Beauty Parlour Management System 1.1. Affected by this vulnerability is an unknown functionality of the file /admin/update-image.php. This manipulation of the argument lid causes sql injection. This vulnerability appears as CVE-2025-9932. The attack may be initiated remotely. In addition, an exploit is available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Submit #643088 / VDB-322337

Чтобы избежать утечек, Еврокомиссия решила просто ничего не сохранять.