Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313302 - https://vuldb.com/?ctiid.313302 - https://vuldb.com/?submit.595473 - https://kn0sinna.notion.site/TOTOLINK-EX1200T-stack-based-BufferOverflow-vulnerability-20fb1876cd6e80d5b4d1f7ec16de4ec2 - https://www.totolink.net/
CVE ID: CVE-2025-6303 State: PUBLISHED Published: 2025-06-20T03:00:18.507Z Last Updated: 2025-06-20T19:40:50.908Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /contactus1.php. The manipulation of the argument Message leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313303 - https://vuldb.com/?ctiid.313303 - https://vuldb.com/?submit.595514 - https://github.com/trinity273-max/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6304 State: PUBLISHED Published: 2025-06-20T03:31:05.744Z Last Updated: 2025-06-23T19:28:43.262Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /cart.php. The manipulation of the argument qty[] leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3133
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313304 - https://vuldb.com/?ctiid.313304 - https://vuldb.com/?submit.595515 - https://github.com/trinity273-max/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6305 State: PUBLISHED Published: 2025-06-20T03:31:07.465Z Last Updated: 2025-06-23T19:28:36.387Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin_feature.php. The manipulation of the argument product_code leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313305 - https://vuldb.com/?ctiid.313305 - https://vuldb.com/?submit.595760 - https://github.com/kali-001/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6306 State: PUBLISHED Published: 2025-06-20T04:00:12.225Z Last Updated: 2025-06-23T19:28:24.772Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/admin_index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313306 - https://vuldb.com/?ctiid.313306 - https://vuldb.com/?submit.595761 - https://github.com/kali-001/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6307 State: PUBLISHED Published: 2025-06-20T04:31:05.819Z Last Updated: 2025-06-20T15:36:05.437Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. This issue affects some unknown processing of the file /function/edit_customer.php. The manipulation of the argument firstname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CI
been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313307 - https://vuldb.com/?ctiid.313307 - https://vuldb.com/?submit.595762 - https://github.com/kali-001/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6308 State: PUBLISHED Published: 2025-06-20T04:31:08.550Z Last Updated: 2025-06-23T20:20:20.987Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA A
ch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313308 - https://vuldb.com/?ctiid.313308 - https://vuldb.com/?submit.595915 - https://github.com/f1rstb100d/myCVE/issues/68 - https://phpgurukul.com/
CVE ID: CVE-2025-6309 State: PUBLISHED Published: 2025-06-20T05:00:15.982Z Last Updated: 2025-06-20T19:39:56.732Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/add-ambulance.php. The manipulation of the argument ambregnum leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnric
hed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313309 - https://vuldb.com/?ctiid.313309 - https://vuldb.com/?submit.595916 - https://github.com/f1rstb100d/myCVE/issues/69 - https://phpgurukul.com/
CVE ID: CVE-2025-6310 State: PUBLISHED Published: 2025-06-20T05:00:20.840Z Last Updated: 2025-06-20T19:30:14.165Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument Message leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Addit
emotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313310 - https://vuldb.com/?ctiid.313310 - https://vuldb.com/?submit.595917 - https://github.com/f1rstb100d/myCVE/issues/70 - https://phpgurukul.com/
CVE ID: CVE-2025-6311 State: PUBLISHED Published: 2025-06-20T05:31:05.958Z Last Updated: 2025-06-20T19:25:57.530Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Sales and Inventory System 1.0. This affects an unknown part of the file /pages/account_add.php. The manipulation of the argument id/amount leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313311 - https://vuldb.com/?ctiid.313311 - https://vuldb.com/?submit.595922 - https://vuldb.com/?submit.595926 - https://github.com/dragonghost2025/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-6312 State: PUBLISHED Published: 2025-06-20T06:00:15.672Z Last Updated: 2025-06-20T19:23:53.332Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. This vulnerability affects unknown code of the file /pages/cash_transaction.php. The manipulation of the argument cid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
s been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313312 - https://vuldb.com/?ctiid.313312 - https://vuldb.com/?submit.595930 - https://github.com/dragonghost2025/cve/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-6313 State: PUBLISHED Published: 2025-06-20T06:31:06.401Z Last Updated: 2025-06-26T17:45:16.621Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/cat_add.php. The manipulation of the argument Category leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313313 - https://vuldb.com/?ctiid.313313 - https://vuldb.com/?submit.595931 - https://github.com/dragonghost2025/cve/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-6314 State: PUBLISHED Published: 2025-06-20T06:31:08.375Z Last Updated: 2025-06-20T14:55:08.414Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Sales and Inventory System 1.0. It has been classified as critical. Affected is an unknown function of the file /pages/cat_update.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313314 - https://vuldb.com/?ctiid.313314 - https://vuldb.com/?submit.595944 - https://github.com/dragonghost2025/cve/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-6315 State: PUBLISHED Published: 2025-06-20T07:00:12.940Z Last Updated: 2025-06-20T19:22:52.784Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /cart2.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313315 - https://vuldb.com/?ctiid.313315 - https://vuldb.com/?submit.595989 - https://github.com/vphcc/cve1/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6316 State: PUBLISHED Published: 2025-06-20T07:00:14.778Z Last Updated: 2025-06-20T19:18:38.551Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Online Shoe Store 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/admin_running.php. The manipulation of the argument qty leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313316 - https://vuldb.com/?ctiid.313316 - https://vuldb.com/?submit.595990 - https://github.com/vphcc/cve1/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6317 State: PUBLISHED Published: 2025-06-20T07:31:05.418Z Last Updated: 2025-06-23T20:21:23.844Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Shoe Store Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Online Shoe Store 1.0. This affects an unknown part of the file /admin/confirm.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313317 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313317 - https://vuldb.com/?ctiid.313317 - https://vuldb.com/?submit.595991 - https://github.com/vphcc/cve1/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6318 State: PUBLISHED Published: 2025-06-20T07:31:08.337Z Last Updated: 2025-06-23T20:22:27.357Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Pre-School Enrollment System 1.0. This vulnerability affects unknown code of the file /admin/check_availability.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313318 - https://vuldb.com/?ctiid.313318 - https://vuldb.com/?submit.596065 - https://github.com/f1rstb100d/myCVE/issues/71 - https://phpgurukul.com/
CVE ID: CVE-2025-6319 State: PUBLISHED Published: 2025-06-20T08:00:17.530Z Last Updated: 2025-06-23T20:24:44.499Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Pre-School Enrollment System 1.0. This issue affects some unknown processing of the file /admin/add-teacher.php. The manipulation of the argument tsubject leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313319 - https://vuldb.com/?ctiid.313319 - https://vuldb.com/?submit.596377 - https://github.com/f1rstb100d/myCVE/issues/72 - https://phpgurukul.com/
CVE ID: CVE-2025-6320 State: PUBLISHED Published: 2025-06-20T08:31:06.547Z Last Updated: 2025-06-20T19:17:49.093Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System 1.0. Affected is an unknown function of the file /admin/add-class.php. The manipulation of the argument classname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313320 - https://vuldb.com/?ctiid.313320 - https://vuldb.com/?submit.596378 - https://github.com/f1rstb100d/myCVE/issues/73 - https://phpgurukul.com/
CVE ID: CVE-2025-6321 State: PUBLISHED Published: 2025-06-20T08:31:09.412Z Last Updated: 2025-06-20T18:50:38.742Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vuln
unched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313321 - https://vuldb.com/?ctiid.313321 - https://vuldb.com/?submit.596380 - https://github.com/f1rstb100d/myCVE/issues/74 - https://phpgurukul.com/
CVE ID: CVE-2025-6322 State: PUBLISHED Published: 2025-06-20T09:00:16.419Z Last Updated: 2025-06-20T18:44:13.094Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /visit.php. The manipulation of the argument gname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313322 - https://vuldb.com/?ctiid.313322 - https://vuldb.com/?submit.596382 - https://github.com/f1rstb100d/myCVE/issues/75 - https://phpgurukul.com/
CVE ID: CVE-2025-6323 State: PUBLISHED Published: 2025-06-20T09:00:19.240Z Last Updated: 2025-06-20T18:40:45.277Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Pre-School Enrollment System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. It has been classified as critical. This affects an unknown part of the file /enrollment.php. The manipulation of the argument fathername leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes
t has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313323 - https://vuldb.com/?ctiid.313323 - https://vuldb.com/?submit.596383 - https://github.com/f1rstb100d/myCVE/issues/76 - https://phpgurukul.com/
CVE ID: CVE-2025-6325 State: PUBLISHED Published: 2025-11-06T15:56:05.901Z Last Updated: 2025-11-13T10:33:49.116Z Vendors: KingAddons.com Products: King Addons for Elementor Problem Types: CWE-266 Description: Incorrect Privilege Assignment vulnerability in KingAddons.com King Addons for Elementor king-addons allows Privilege Escalation.This issue affects King Addons for Elementor: from n/a through <= 51.1.36. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-privilege-escalation-vulnerability?_s_id=cve
CVE ID: CVE-2025-6327 State: PUBLISHED Published: 2025-11-06T15:56:06.826Z Last Updated: 2025-11-13T10:33:49.191Z Vendors: KingAddons.com Products: King Addons for Elementor Problem Types: CWE-434 Description: Unrestricted Upload of File with Dangerous Type vulnerability in KingAddons.com King Addons for Elementor king-addons allows Upload a Web Shell to a Web Server.This issue affects King Addons for Elementor: from n/a through <= 51.1.36. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vdp.patchstack.com/database/Wordpress/Plugin/king-addons/vulnerability/wordpress-king-addons-for-elementor-plugin-51-1-36-arbitrary-file-upload-vulnerability?_s_id=cve
CVE ID: CVE-2025-6328 State: PUBLISHED Published: 2025-06-20T09:31:05.441Z Last Updated: 2025-06-20T18:31:01.371Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-815 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DIR-815 1.01. It has been declared as critical. This vulnerability affects the function sub_403794 of the file hedwig.cgi. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313324 - https://vuldb.com/?ctiid.3133
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313324 - https://vuldb.com/?ctiid.313324 - https://vuldb.com/?submit.596439 - https://github.com/Thir0th/Thir0th-CVE/blob/main/D-Link%20DIR-815%20RevA%20v1.01.md - https://www.dlink.com/
CVE ID: CVE-2025-6329 State: PUBLISHED Published: 2025-06-20T09:31:07.446Z Last Updated: 2025-06-20T13:51:04.739Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ScriptAndTools Products: Real Estate Management System Problem Types: CWE-639, CWE-285 Description: A vulnerability was found in ScriptAndTools Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file userdelete.php of the component User Delete Handler. The manipulation of the argument ID leads to authorization bypass. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Not