6.9

CVSS4.0

CVE-2025-15011 - code-projects Simple Stock System logout.php sql injection

A vulnerability was found in code-projects Simple Stock System 1.0. Impacted is an unknown function of the file /logout.php. The manipulation of the argument uname results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used.

📅 Published: Dec. 22, 2025, 3:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:02 a.m.

9.3

CVSS4.0

CVE-2025-15016 - Ragic|Enterprise Cloud Database - Hard-coded Cryptographic Key

Enterprise Cloud Database developed by Ragic has a Hard-coded Cryptographic Key vulnerability, allowing unauthenticated remote attackers to exploit the fixed key to generate verification information and log into the system as any user.

📅 Published: Dec. 22, 2025, 3:27 a.m. 🔄 Last Modified: March 5, 2026, 7 p.m.

8.7

CVSS4.0

CVE-2025-15015 - Ragic|Enterprise Cloud Database - Arbitrary File Read

Enterprise Cloud Database developed by Ragic has a Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files.

📅 Published: Dec. 22, 2025, 3:22 a.m. 🔄 Last Modified: March 5, 2026, 7:01 p.m.

9.3

CVSS4.0

CVE-2025-15010 - Tenda WH450 SafeUrlFilter stack-based overflow

A vulnerability has been found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/SafeUrlFilter. The manipulation of the argument page leads to stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed to the publ…

📅 Published: Dec. 22, 2025, 3:02 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:02 a.m.

4

CVSS3.1

CVE-2025-59301 - Modbus/TCP Dos Vulnerability in DVP15MC11T

Delta Electronics DVP15MC11T lacks proper validation of the modbus/tcp packets and can lead to denial of service.

📅 Published: Dec. 22, 2025, 2:56 a.m. 🔄 Last Modified: Jan. 8, 2026, 1:30 p.m.

5.3

CVSS4.0

CVE-2025-15009 - liweiyi ChestnutCMS Filename upload FilenameUtils.getExtension unrestricted upload

A flaw has been found in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function FilenameUtils.getExtension of the file /dev-api/common/upload of the component Filename Handler. Executing manipulation of the argument File can lead to unrestricted upload. The attack may be launched …

📅 Published: Dec. 22, 2025, 2:32 a.m. 🔄 Last Modified: Dec. 31, 2025, 3:51 p.m.

6.9

CVSS4.0

CVE-2025-15008 - Tenda WH450 HTTP Request L7Port stack-based overflow

A vulnerability was detected in Tenda WH450 1.0.0.18. This affects an unknown part of the file /goform/L7Port of the component HTTP Request Handler. Performing a manipulation of the argument page results in stack-based buffer overflow. The attack may be initiated remotely. The exploit is now public…

📅 Published: Dec. 22, 2025, 2:02 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:16 a.m.

9.3

CVSS4.0

CVE-2025-15007 - Tenda WH450 HTTP Request L7Im stack-based overflow

A security vulnerability has been detected in Tenda WH450 1.0.0.18. Affected by this issue is some unknown functionality of the file /goform/L7Im of the component HTTP Request Handler. Such manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. …

📅 Published: Dec. 22, 2025, 1:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:02 a.m.

9.3

CVSS4.0

CVE-2025-15006 - Tenda WH450 HTTP Request CheckTools stack-based overflow

A weakness has been identified in Tenda WH450 1.0.0.18. Affected by this vulnerability is an unknown functionality of the file /goform/CheckTools of the component HTTP Request Handler. This manipulation of the argument ipaddress causes stack-based buffer overflow. The attack can be initiated remote…

📅 Published: Dec. 22, 2025, 1:02 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:16 a.m.

6.3

CVSS4.0

CVE-2025-15005 - CouchCMS reCAPTCHA config.example.php hard-coded key

A security flaw has been discovered in CouchCMS up to 2.4. Affected is an unknown function of the file couch/config.example.php of the component reCAPTCHA Handler. The manipulation of the argument K_RECAPTCHA_SITE_KEY/K_RECAPTCHA_SECRET_KEY results in use of hard-coded cryptographic key . It is po…

📅 Published: Dec. 22, 2025, 12:32 a.m. 🔄 Last Modified: Feb. 24, 2026, 6:16 a.m.
Total resulsts: 343968
Page 1961 of 34,397
« previous page » next page
Filters