Aggregator

Submit #646910 / VDB-323842

Submit #646909 / VDB-323841

Submit #646905 / VDB-196564

Submit #646904 / VDB-323840

Submit #646903 / VDB-323839

Submit #646889 / VDB-323039

Submit #646892 / VDB-323041

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1 and classified as critical. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. This vulnerability is uniquely identified as CVE-2025-10403. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability, which was classified as critical, was found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument delid can lead to sql injection. This vulnerability is handled as CVE-2025-10402. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, has been found in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in command injection. This vulnerability is known as CVE-2025-10401. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as critical was found in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticket_id leads to sql injection. This vulnerability is traded as CVE-2025-10400. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #646769 / VDB-323838

Submit #646768 / VDB-323837

Submit #646761 / VDB-323836

Submit #646713 / VDB-323835

Submit #646674 / VDB-323507

Submit #646662 / VDB-323508

A vulnerability classified as critical has been found in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the component Query Builder UI. This manipulation causes sql injection. This vulnerability appears as CVE-2025-10399. The attack may be initiated remotely. In addition, an exploit is available.

Submit #646660 / VDB-322397

A vulnerability described as critical has been identified in fcba_zzm ics-park Smart Park Management System 2.0. This vulnerability affects unknown code of the file FileUploadUtils.java. The manipulation of the argument File results in unrestricted upload. This vulnerability is reported as CVE-2025-10398. The attack can be launched remotely. Moreover, an exploit is present.