Aggregator

Qilin

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

Qilin

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

CVE-2025-67091 | GL-iNet AX1800 4.6.4/4.6.8 API Call /tmp improper authentication

VulDB Recent Entries
5 months 1 week ago
A vulnerability was found in GL-iNet AX1800 4.6.4/4.6.8. It has been classified as critical. The impacted element is an unknown function of the file /tmp of the component API Call Handler. Performing a manipulation results in improper authentication. This vulnerability is cataloged as CVE-2025-67091. It is possible to initiate the attack remotely. There is no exploit available.
vuldb.com

Qilin

Dark Feed IO
5 months 1 week ago

You must login to view this content

cohenido

CVE-2025-61246 | indieka900 online-shopping-system-php 1.0 master/review_action.php proId sql injection

VulDB Recent Entries
5 months 1 week ago
A vulnerability has been found in indieka900 online-shopping-system-php 1.0 and classified as critical. Impacted is an unknown function of the file master/review_action.php. This manipulation of the argument proId causes sql injection. This vulnerability is tracked as CVE-2025-61246. The attack is possible to be carried out remotely. No exploit exists.
vuldb.com

CVE-2025-61546 | edu Business Solutions Print Shop Pro WebDesk 18.34 GetUnitPrice input validation

VulDB Recent Entries
5 months 1 week ago
A vulnerability, which was classified as problematic, was found in edu Business Solutions Print Shop Pro WebDesk 18.34. This issue affects some unknown processing of the file /PSP/appNET/Store/CartV12.aspx/GetUnitPrice. The manipulation results in improper input validation. This vulnerability is identified as CVE-2025-61546. The attack can be executed remotely. There is not any exploit available.
vuldb.com

CVE-2025-56425 | optimal-systems enaio 10.10/11.0/11.10 AppConnector sendmail command injection

VulDB Recent Entries
5 months 1 week ago
A vulnerability, which was classified as critical, has been found in optimal-systems enaio 10.10/11.0/11.10. This vulnerability affects unknown code of the file /osrest/api/organization/sendmail of the component AppConnector. The manipulation leads to command injection. This vulnerability is referenced as CVE-2025-56425. Remote exploitation of the attack is possible. No exploit is available.
vuldb.com

CVE-2026-21639 | Ubiquiti airMAX AC/airMAX M/airFiber AF60-XG/airFiber AF60 airMAX Wireless Protocol privilege escalation

VulDB Recent Entries
5 months 1 week ago
A vulnerability classified as critical was found in Ubiquiti airMAX AC, airMAX M, airFiber AF60-XG and airFiber AF60. This affects an unknown part of the component airMAX Wireless Protocol. Executing a manipulation can lead to privilege escalation. The identification of this vulnerability is CVE-2026-21639. The attack may be launched remotely. There is no exploit available. Upgrading the affected component is advised.
vuldb.com

CVE-2026-21638 | Ubiquiti UBB-XG/UDB-Pro/UDB-Pro-Sector/UBB airMAX Wireless Protocol command injection

VulDB Recent Entries
5 months 1 week ago
A vulnerability classified as critical has been found in Ubiquiti UBB-XG, UDB-Pro, UDB-Pro-Sector and UBB. Affected by this issue is some unknown functionality of the component airMAX Wireless Protocol. Performing a manipulation results in command injection. This vulnerability was named CVE-2026-21638. The attack needs to be approached within the local network. There is no available exploit. It is recommended to upgrade the affected component.
vuldb.com

CVE-2026-22490 | niklaslindemann Bulk Landing Page Creator LPagery Plugin up to 2.4.9 on WordPress authorization

VulDB Recent Entries
5 months 1 week ago
A vulnerability described as problematic has been identified in niklaslindemann Bulk Landing Page Creator LPagery Plugin up to 2.4.9 on WordPress. Affected by this vulnerability is an unknown functionality. Such manipulation leads to missing authorization. This vulnerability is uniquely identified as CVE-2026-22490. The attack can be launched remotely. No exploit exists.
vuldb.com

CVE-2026-22521 | G5Theme Handmade Framework Plugin up to 3.9 on WordPress filename control

VulDB Recent Entries
5 months 1 week ago
A vulnerability marked as problematic has been reported in G5Theme Handmade Framework Plugin up to 3.9 on WordPress. Affected is an unknown function. This manipulation causes improper control of filename for include/require statement in php program ('php remote file inclusion'). This vulnerability is handled as CVE-2026-22521. The attack can be initiated remotely. There is not any exploit available.
vuldb.com

Managed ad