2025

An issue was discovered in function d_abi_tags in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a denial

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause

An issue was discovered in function d_print_comp_inner in file cp-demangle.c in BinUtils 2.26 allows attackers to cause

An issue was discovered in function d_discriminator in file cp-demangle.c in BinUtils 2.26 allows attackers to cause a d

A buffer overflow vulnerability in function gnu_special in file cplus-dem.c in BinUtils 2.26 allows attackers to cause a

An issue was discovered in function d_unqualified_name in file cp-demangle.c in BinUtils 2.26 allowing attackers to caus

Meshtastic is an open source mesh networking solution. The Meshtastic firmware (starting from version 2.5) introduces as

A security flaw has been discovered in code-projects/anirbandutta9 Content Management System and News-Buzz 1.0. This vul

A vulnerability was identified in code-projects Assessment Management 1.0. This affects an unknown part of the file logi

Nest is a framework for building scalable Node.js server-side applications. Versions prior to 11.1.11 have a Fastify URL

Hemmelig is a messing app with with client-side encryption and self-destructing messages. Prior to version 7.3.3, a Serv

Tugtainer is a self-hosted app for automating updates of docker containers. In versions prior to 1.15.1, arbitary argume

phpMyFAQ is an open source FAQ web application. In versions prior to 4.0.16, an unauthenticated remote attacker can trig

phpMyFAQ is an open source FAQ web application. Versions 4.0.14 and 4.0.15 have a stored cross-site scripting (XSS) vuln

Improper Control of Generation of Code ('Code Injection') vulnerability in Mohammad I. Okfie IF AS Shortcode if-as-short

Server-Side Request Forgery (SSRF) vulnerability in HETWORKS WordPress Image shrinker wp-image-shrinker allows Server Si

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in councilsoft Conten

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prasadkirpekar Adv

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in INVELITY Invelity

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA comp

A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functi

A vulnerability was found in D-Link DIR-600 up to 2.15WWb02. Affected by this vulnerability is an unknown functionality

Frappe is a full-stack web application framework. Prior to versions 14.99.6 and 15.88.1, an authenticated user with spec

Frappe CRM is an open-source customer relationship management tool. Prior to version 1.56.2, authenticated users could s

A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode. When an “instanceof”

DOM-based Cross-Site Scripting (XSS) vulnerability in 201206030 novel V3.5.0 allows remote attackers to execute arbitrar

UxPlay 1.72 contains a double free vulnerability in its RTSP request handling. A specially crafted RTSP TEARDOWN request

Stored cross-site scripting (xss) in machsol machpanel 8.0.32 allows attackers to execute arbitrary web scripts or HTML

A vulnerability was detected in D-Link DWR-M920 up to 1.1.50. This affects the function sub_423848 of the file /boafrm/f

A security vulnerability has been detected in D-Link DWR-M920 up to 1.1.50. The impacted element is the function sub_415

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell.

A weakness has been identified in D-Link DWR-M920 up to 1.1.50. The affected element is the function sub_4155B4 of the f

A security flaw has been discovered in D-Link DWR-M920 up to 1.1.50. Impacted is the function sub_42261C of the file /bo

A vulnerability was identified in D-Link DWR-M920 up to 1.1.50. This issue affects the function sub_464794 of the file /

A vulnerability was determined in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affe

A vulnerability was found in GreenCMS up to 2.3. This affects an unknown part of the file /DataController.class.php of t

A vulnerability has been found in code-projects Refugee Food Management System 1.0. Affected by this issue is some unkno

A flaw has been found in code-projects Refugee Food Management System 1.0. Affected by this vulnerability is an unknown

A vulnerability was detected in code-projects Refugee Food Management System 1.0. Affected is an unknown function of the

A security vulnerability has been detected in code-projects Refugee Food Management System 1.0. This impacts an unknown

A weakness has been identified in code-projects Refugee Food Management System 1.0. This affects an unknown function of

A security flaw has been discovered in code-projects Refugee Food Management System 1.0. The impacted element is an unkn

A vulnerability was identified in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Upload vulnerability, allowing unauthenticated remot

BPMFlowWebkit developed by WELLTEND TECHNOLOGY has a Arbitrary File Read vulnerability, allowing unauthenticated remote

A vulnerability was determined in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/qossetting.

A vulnerability was found in Tenda WH450 1.0.0.18. This issue affects some unknown processing of the file /goform/Virtua

WMPro developed by Sunnet has a Arbitrary File Upload vulnerability, allowing unauthenticated remote attackers to upload

WMPro developed by Sunnet has an Arbitrary File Read vulnerability, allowing unauthenticated remote attackers to exploit