Vuldb Updates

A vulnerability was found in hanterm-xf 2.0. It has been rated as problematic. This issue affects some unknown processing of the component DEC UDK Processor. This manipulation causes infinite loop. This vulnerability is tracked as CVE-2003-0079. The attack is restricted to local execution. Moreover, an exploit is present. Upgrading the affected component is advised.

A vulnerability identified as problematic has been detected in Vlad Leont FD Script up to 1.3.2. Impacted is an unknown function of the file download.php. Performing manipulation of the argument fname results in information disclosure. This vulnerability was named CVE-2007-0620. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability has been found in Mapos Scripts File Uploader 1.1 and classified as critical. Impacted is an unknown function of the file index.php of the component File Upload. Performing manipulation of the argument config[root_ordner] results in file inclusion. This vulnerability is reported as CVE-2007-4327. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability classified as critical has been found in File Uploader. This affects an unknown function of the file datei.php. Performing manipulation of the argument config[root_ordner] results in Remote Code Execution. This vulnerability is known as CVE-2007-4327. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability was found in Ezboo webstats 3.0.3. It has been rated as critical. The impacted element is an unknown function of the file update.php. This manipulation causes Remote Code Execution. The identification of this vulnerability is CVE-2007-1043. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as problematic, has been found in FaScript FaName 1.0. This impacts an unknown function of the file index.php. Performing manipulation of the argument Name results in cross site scripting. This vulnerability is reported as CVE-2007-3653. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in Tenda AC10 16.03.10.13. It has been classified as problematic. Affected is an unknown function of the file /etc_ro/shadow of the component MD5 Hash Handler. Performing manipulation results in hard-coded credentials. This vulnerability was named CVE-2025-9309. The attack needs to be approached locally. In addition, an exploit is available.

A vulnerability marked as critical has been reported in xuhuisheng lemon up to 1.13.0. This affects the function uploadImage of the file CmsArticleController.java of the component com.mossle.cms.web.CmsArticleController.uploadImage. This manipulation of the argument Upload causes unrestricted upload. This vulnerability is handled as CVE-2025-9406. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability identified as critical has been detected in Tenda M3 1.0.0.12. Affected by this vulnerability is the function formGetMasterPassengerAnalyseData of the file /goform/getMasterPassengerAnalyseData. The manipulation of the argument Time leads to stack-based buffer overflow. This vulnerability is listed as CVE-2025-9299. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability classified as problematic was found in LinuxServer.io Heimdall 2.6.3-ls307. Affected by this vulnerability is an unknown functionality of the component HTTP Header Handler. The manipulation of the argument X-Forwarded-Host/Referer results in open redirect. This vulnerability was named CVE-2025-50578. The attack may be performed from a remote location. In addition, an exploit is available.

A vulnerability has been found in Cursor up to 1.3.8 and classified as critical. Impacted is an unknown function of the file vscode/settings.json of the component Setting Handler. Performing manipulation results in improper authorization. This vulnerability is identified as CVE-2025-54130. The attack can be initiated remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability was found in Cursor up to 1.3.8 and classified as critical. The affected element is an unknown function of the file /.Cursor/mcp.json of the component MCP File Parser. Executing manipulation can lead to os command injection. This vulnerability is tracked as CVE-2025-54135. The attack can be launched remotely. No exploit exists. It is suggested to upgrade the affected component.

A vulnerability has been found in AOMEI Cyber Backup and classified as critical. Affected by this vulnerability is an unknown functionality. Performing manipulation results in missing authentication. This vulnerability is reported as CVE-2025-8610. The attack is possible to be carried out remotely. No exploit exists.

A vulnerability categorized as critical has been discovered in Tenda M3 1.0.0.12. Affected is the function formQuickIndex of the file /goform/QuickIndex. Executing manipulation of the argument PPPOEPassword can lead to stack-based buffer overflow. This vulnerability is tracked as CVE-2025-9298. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability, which was classified as problematic, has been found in CodeAstro Ecommerce Website 1.0. This impacts an unknown function of the file /customer/my_account.php?edit_account of the component Edit Your Account Page. Performing manipulation of the argument Username results in cross site scripting. This vulnerability is cataloged as CVE-2025-9237. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability identified as critical has been detected in Cursor up to 1.2. This affects an unknown function of the component Model Context Protocol. Performing manipulation results in os command injection. This vulnerability is cataloged as CVE-2025-54133. It is possible to initiate the attack remotely. There is no exploit available. You should upgrade the affected component.

A vulnerability classified as critical has been found in Cursor up to 1.2. Affected by this issue is some unknown functionality. This manipulation causes command injection. This vulnerability appears as CVE-2025-54131. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability described as critical has been identified in Cursor up to 1.2.4. Affected by this vulnerability is an unknown functionality. The manipulation results in os command injection. This vulnerability is reported as CVE-2025-54136. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.

A vulnerability, which was classified as critical, was found in Microsoft Windows. Affected by this issue is some unknown functionality of the component Routing/Remote Access Service. The manipulation results in heap-based buffer overflow. This vulnerability is reported as CVE-2025-49663. The attack can be launched remotely. No exploit exists. It is advisable to implement a patch to correct this issue.

A vulnerability was found in OpenSSL up to 0.9.7. It has been declared as critical. This vulnerability affects the function ssl3_get_record of the file s3_pkt.c of the component Block Cipher Padding. The manipulation results in missing encryption of sensitive data. This vulnerability is identified as CVE-2003-0078. The attack can be executed remotely. Additionally, an exploit exists. It is recommended to upgrade the affected component.