VulDB Recent Entries

A vulnerability marked as critical has been reported in Aider-AI Aider 0.86.3. Affected by this vulnerability is the function editor_coder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. This vulnerability is known as CVE-2026-10175. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability labeled as problematic has been found in Aider-AI Aider 0.86.3. Affected is an unknown function of the file aider/args.py of the component Pre-commit Hook Handler. Such manipulation of the argument git-commit-verify leads to protection mechanism failure. This vulnerability is traded as CVE-2026-10174. The attack may be launched remotely. Furthermore, there is an exploit available. The project was informed of the problem early through an issue report but has not responded yet.

A vulnerability identified as critical has been detected in Armcode Arm Whois 3.11. This impacts an unknown function. This manipulation causes buffer overflow. This vulnerability appears as CVE-2018-25423. The attack requires local access. In addition, an exploit is available.

A vulnerability categorized as critical has been discovered in WinMTR 0.91. This affects an unknown function. The manipulation results in buffer overflow. This vulnerability is reported as CVE-2018-25426. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in NEZUMI Text::LineFold up to 2019.001 on Perl. It has been rated as problematic. The impacted element is the function break. The manipulation leads to asymmetric resource consumption. This vulnerability is documented as CVE-2026-8594. The attack can be initiated remotely. There is not any exploit available.

A vulnerability was found in spider312 MOGG Web Simulator Script. It has been declared as critical. The affected element is an unknown function of the file play.php. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability is registered as CVE-2018-25422. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Yot CMS 3.3.1. It has been classified as critical. Impacted is an unknown function of the file index.php. Performing a manipulation of the argument aid/cid results in sql injection. This vulnerability is cataloged as CVE-2018-25425. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability was found in Openstamanager Open STA Manager 2.3 and classified as critical. This issue affects some unknown processing of the file modules/backup/actions.php. Such manipulation of the argument File leads to path traversal. This vulnerability is listed as CVE-2018-25421. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability has been found in AiOPMSD Final 1.0.0 and classified as critical. This vulnerability affects unknown code of the file watch.php. This manipulation of the argument ID causes sql injection. This vulnerability is tracked as CVE-2018-25420. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability, which was classified as critical, was found in AiOPMSD Final 1.0.0. This affects an unknown part of the file quality.php. The manipulation of the argument quality results in sql injection. This vulnerability is identified as CVE-2018-25417. The attack can be executed remotely. Additionally, an exploit exists.

A vulnerability, which was classified as critical, has been found in AiOPMSD Final 1.0.0. Affected by this issue is some unknown functionality of the file country.php. The manipulation of the argument Country leads to sql injection. This vulnerability is referenced as CVE-2018-25416. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability classified as critical was found in AiOPMSD Final 1.0.0. Affected by this vulnerability is an unknown functionality of the file genre.php. Executing a manipulation of the argument genre can lead to sql injection. The identification of this vulnerability is CVE-2018-25419. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in AiOPMSD Final 1.0.0. Affected is an unknown function of the file director.php. Performing a manipulation of the argument director results in sql injection. This vulnerability was named CVE-2018-25415. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability described as critical has been identified in AiOPMSD Final 1.0.0. This impacts an unknown function of the file year.php. Such manipulation of the argument Year leads to sql injection. This vulnerability is uniquely identified as CVE-2018-25418. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability marked as critical has been reported in Livebms Gate Pass Management System 2.1. This affects an unknown function of the file login-exec.php of the component POST Handler. This manipulation causes sql injection. This vulnerability is handled as CVE-2018-25424. The attack can be initiated remotely. Additionally, an exploit exists.

A vulnerability labeled as critical has been found in AiOPMSD Final 1.0.0. The impacted element is an unknown function of the file actor.php. The manipulation of the argument Actor results in sql injection. This vulnerability is known as CVE-2018-25414. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability identified as critical has been detected in AiOPMSD Final 1.0.0. The affected element is an unknown function of the file search.php. The manipulation of the argument q leads to sql injection. This vulnerability is traded as CVE-2018-25413. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability categorized as critical has been discovered in Simpkh SIM-PKH 2.4.1. Impacted is an unknown function of the file /admin/media.php of the component GET Request Handler. Executing a manipulation of the argument ID can lead to sql injection. This vulnerability appears as CVE-2018-25410. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability was found in openises Open ISES Project 3.30A. It has been rated as critical. This issue affects some unknown processing of the file ajax/download.php of the component Configuration File Handler. Performing a manipulation of the argument filename results in path traversal. This vulnerability is reported as CVE-2018-25408. The attack is possible to be carried out remotely. Moreover, an exploit is present.

A vulnerability was found in eNdonesia Portal 8.7. It has been declared as critical. This vulnerability affects unknown code of the file mod.php. Such manipulation of the argument artid/cid/did/contid/aboutid leads to sql injection. This vulnerability is documented as CVE-2018-25407. The attack can be executed remotely. Additionally, an exploit exists.