Aggregator

Submit #604928 / VDB-314400

A vulnerability, which was classified as critical, has been found in code-projects Car Rental System 1.0. This issue affects some unknown processing of the file /signup.php. The manipulation of the argument fname leads to sql injection. The identification of this vulnerability is CVE-2025-6905. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in code-projects Car Rental System 1.0. This vulnerability affects unknown code of the file /book_car.php. The manipulation of the argument fname leads to sql injection. This vulnerability was named CVE-2025-6907. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in code-projects Car Rental System 1.0. This affects an unknown part of the file /login.php. The manipulation of the argument uname leads to sql injection. This vulnerability is uniquely identified as CVE-2025-6906. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Car Rental System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/add_cars.php. The manipulation of the argument car_name leads to sql injection. This vulnerability is handled as CVE-2025-6904. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Car Rental System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/approve.php. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2025-6903. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #604901 / VDB-175543

A vulnerability was found in code-projects Inventory Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /php_action/editUser.php. The manipulation of the argument edituserName leads to sql injection. This vulnerability is traded as CVE-2025-6902. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Inventory Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /php_action/removeUser.php. The manipulation of the argument userid leads to sql injection. The identification of this vulnerability is CVE-2025-6901. The attack may be initiated remotely. Furthermore, there is an exploit available.

Submit #604570 / VDB-298564

A vulnerability has been found in code-projects Library System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-book.php. The manipulation of the argument image leads to unrestricted upload. This vulnerability was named CVE-2025-6900. The attack can be initiated remotely. Furthermore, there is an exploit available.

Submit #606156 / VDB-314399

Submit #606158 / VDB-314398

Submit #606157 / VDB-314397

Submit #604569 / VDB-314396

Submit #604568 / VDB-314395

Introduction Let’s be honest — passwords are a pain. They’re either too simple and easy to guess, or so complicated […]

The post How Passkeys Work (Explained Simply) appeared first on Security Boulevard.

A vulnerability, which was classified as critical, was found in D-Link DI-7300G+ and DI-8200G 17.12.20A1/19.12.25A1. This affects an unknown part of the file msp_info.htm. The manipulation of the argument flag/cmd/iface leads to os command injection. This vulnerability is uniquely identified as CVE-2025-6899. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in D-Link DI-7300G+ 19.12.25A1. Affected by this issue is some unknown functionality of the file in proxy_client.asp. The manipulation of the argument proxy_srv/proxy_lanport/proxy_lanip/proxy_srvport leads to os command injection. This vulnerability is handled as CVE-2025-6898. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in D-Link DI-7300G+ 19.12.25A1. Affected by this vulnerability is an unknown functionality of the file httpd_debug.asp. The manipulation of the argument Time leads to os command injection. This vulnerability is known as CVE-2025-6897. Access to the local network is required for this attack. Furthermore, there is an exploit available.