5.1

CVSS4.0

CVE-2025-10372 - Portabilis i-Educar educar_modulo_cad.php cross site scripting

A weakness has been identified in Portabilis i-Educar up to 2.10. Impacted is an unknown function of the file /intranet/educar_modulo_cad.php. This manipulation of the argument nm_tipo/descricao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made a…

πŸ“… Published: Sept. 13, 2025, 6:02 p.m. πŸ”„ Last Modified: Oct. 28, 2025, 12:15 a.m.

6.9

CVSS4.0

CVE-2025-10371 - eCharge Hardy Barth Salia PLCC api.php unrestricted upload

A security flaw has been discovered in eCharge Hardy Barth Salia PLCC up to 2.3.81. This issue affects some unknown processing of the file /api.php. The manipulation of the argument setrfidlist results in unrestricted upload. The attack may be performed from remote. The exploit has been released to…

πŸ“… Published: Sept. 13, 2025, 5:32 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.1

CVSS4.0

CVE-2025-10370 - MiczFlor RPi-Jukebox-RFID userScripts.php cross site scripting

A vulnerability was identified in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This vulnerability affects unknown code of the file /htdocs/userScripts.php. The manipulation of the argument Custom script leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publi…

πŸ“… Published: Sept. 13, 2025, 5:02 p.m. πŸ”„ Last Modified: Feb. 3, 2026, 10:16 p.m.

5.1

CVSS4.0

CVE-2025-10369 - MiczFlor RPi-Jukebox-RFID cardRegisterNew.php cross site scripting

A vulnerability was determined in MiczFlor RPi-Jukebox-RFID up to 2.8.0. This affects an unknown part of the file /htdocs/cardRegisterNew.php. Executing manipulation can lead to cross site scripting. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. T…

πŸ“… Published: Sept. 13, 2025, 4:32 p.m. πŸ”„ Last Modified: Oct. 16, 2025, 3:16 p.m.

5.1

CVSS4.0

CVE-2025-10368 - MiczFlor RPi-Jukebox-RFID manageFilesFolders.php cross site scripting

A vulnerability was found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this issue is some unknown functionality of the file /htdocs/manageFilesFolders.php. Performing manipulation results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been made publ…

πŸ“… Published: Sept. 13, 2025, 3:32 p.m. πŸ”„ Last Modified: Oct. 16, 2025, 3:25 p.m.

5.1

CVSS4.0

CVE-2025-10367 - MiczFlor RPi-Jukebox-RFID cardEdit.php cross site scripting

A vulnerability has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected by this vulnerability is an unknown functionality of the file /htdocs/cardEdit.php. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public an…

πŸ“… Published: Sept. 13, 2025, 2:02 p.m. πŸ”„ Last Modified: Oct. 16, 2025, 3:28 p.m.

5.1

CVSS4.0

CVE-2025-10366 - MiczFlor RPi-Jukebox-RFID inc.setWlanIpMail.php cross site scripting

A flaw has been found in MiczFlor RPi-Jukebox-RFID up to 2.8.0. Affected is an unknown function of the file /htdocs/inc.setWlanIpMail.php. This manipulation of the argument Email address causes cross site scripting. The attack may be initiated remotely. The exploit has been published and may be use…

πŸ“… Published: Sept. 13, 2025, 1:32 p.m. πŸ”„ Last Modified: Oct. 2, 2025, 8:10 p.m.

6.9

CVSS4.0

CVE-2025-10359 - Wavlink WL-WN578W2 wireless.cgi sub_404DBC os command injection

A vulnerability was detected in Wavlink WL-WN578W2 221110. This impacts the function sub_404DBC of the file /cgi-bin/wireless.cgi. The manipulation of the argument macAddr results in os command injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was…

πŸ“… Published: Sept. 13, 2025, 1:02 p.m. πŸ”„ Last Modified: Oct. 2, 2025, 8:12 p.m.

6.9

CVSS4.0

CVE-2025-10358 - Wavlink WL-WN578W2 wireless.cgi sub_404850 os command injection

A security vulnerability has been detected in Wavlink WL-WN578W2 221110. This affects the function sub_404850 of the file /cgi-bin/wireless.cgi. The manipulation of the argument delete_list leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed publicly …

πŸ“… Published: Sept. 13, 2025, 8:02 a.m. πŸ”„ Last Modified: Oct. 2, 2025, 8:12 p.m.

5.1

CVSS4.0

CVE-2025-10340 - WhatCD Gazelle Commit Message change_log.php cross site scripting

A vulnerability was determined in WhatCD Gazelle up to 63b337026d49b5cf63ce4be20fdabdc880112fa3. The affected element is an unknown function of the file /sections/tools/managers/change_log.php of the component Commit Message Handler. Executing manipulation of the argument Message can lead to cross …

πŸ“… Published: Sept. 13, 2025, 2:32 a.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.
Total resulsts: 349182
Page 3888 of 34,919
Β« previous page Β» next page
Filters