Vuldb Updates

A vulnerability has been found in Intelbras InControl up to 2.21.60.9 and classified as problematic. This issue affects some unknown processing of the file /v1/operador/. Performing manipulation results in csv injection. This vulnerability is known as CVE-2025-7061. Remote exploitation of the attack is possible. Furthermore, an exploit is available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability categorized as critical has been discovered in Microweber CMS up to 1.2.11. This vulnerability affects unknown code of the file /api/BackupV2/upload of the component Backup Management API. The manipulation of the argument src results in path traversal. This vulnerability was named CVE-2025-34076. The attack may be performed from a remote location. There is no available exploit.

A vulnerability described as critical has been identified in Intelbras InControl 2.21.60.9. This affects an unknown part of the file /v1/operador/ of the component HTTP PUT Request Handler. Executing manipulation can lead to permission issues. The identification of this vulnerability is CVE-2025-6765. The attack may be launched remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability marked as critical has been reported in Trend Micro Apex One 10.0/10.0 SP1. The affected element is an unknown function of the component Management Console. Performing manipulation results in os command injection. This vulnerability is cataloged as CVE-2025-54948. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. It is suggested to upgrade the affected component.

A vulnerability was found in GStreamer. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component MXF File Parser. Performing manipulation results in integer overflow. This vulnerability is known as CVE-2023-40474. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is recommended.

A vulnerability identified as critical has been detected in Apple watchOS. Affected is an unknown function of the component Web Handler. The manipulation leads to memory corruption. This vulnerability is referenced as CVE-2025-24189. Remote exploitation of the attack is possible. No exploit is available. You should upgrade the affected component.

A vulnerability labeled as critical has been found in Apple iOS and iPadOS. Affected by this vulnerability is an unknown functionality of the component Web Handler. The manipulation results in memory corruption. This vulnerability is identified as CVE-2025-24189. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability classified as problematic was found in Pucit.edu Com Onlineexam 1.5.0. Affected by this issue is some unknown functionality of the file index.php. Executing manipulation of the argument controller can lead to path traversal. This vulnerability is tracked as CVE-2010-1715. The attack can be launched remotely. Moreover, an exploit is present.

A vulnerability was found in Dev.pucit.edu.pk Com Market 2.0. It has been rated as problematic. This affects an unknown function of the file index.php. The manipulation of the argument controller leads to path traversal. This vulnerability is traded as CVE-2010-1722. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

A vulnerability classified as problematic was found in Code-Garage Com Noticeboard 1.3. The affected element is an unknown function of the file index.php. The manipulation of the argument controller results in path traversal. This vulnerability is cataloged as CVE-2010-1658. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in Emultisoft Com Jnewspaper 1.0. It has been rated as critical. The affected element is an unknown function of the file index.php. Performing manipulation of the argument date_info results in sql injection. This vulnerability is known as CVE-2010-1950. Remote exploitation of the attack is possible. Furthermore, an exploit is available.

A vulnerability labeled as critical has been found in Com Newsfeeds on Joomla. The affected element is an unknown function of the file index.php of the component Newsfeed. The manipulation of the argument feedid results in sql injection. This vulnerability is known as CVE-2010-1739. It is possible to launch the attack remotely. Furthermore, an exploit is available.

A vulnerability was found in Ninjaforge NinjaMonials and classified as critical. This issue affects some unknown processing of the file index.php. Such manipulation of the argument Itemid leads to sql injection. This vulnerability is traded as CVE-2010-4991. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in IBM Engineering Requirements Management DOORS Next 7.0.2/7.0.3. It has been rated as critical. This affects an unknown part of the component Request Handler. The manipulation leads to time-of-check time-of-use. This vulnerability is referenced as CVE-2024-41787. Remote exploitation of the attack is possible. No exploit is available. Upgrading the affected component is advised.

A vulnerability identified as problematic has been detected in Shenzhen Libituo Technology LBT-T300-T400 3.2. This affects the function tftp_image_check of the file rc. The manipulation leads to incorrect default permissions. This vulnerability is referenced as CVE-2025-29570. The attack can only be performed from a local environment. No exploit is available.

A vulnerability classified as problematic has been found in IBM Sterling Partner Engagement Manager 6.1.0/6.2.0/6.2.2. This affects an unknown function of the component Helm Chart. The manipulation leads to password in configuration file. This vulnerability is listed as CVE-2025-33093. The attack may be initiated remotely. There is no available exploit. It is recommended to upgrade the affected component.

A vulnerability labeled as problematic has been found in IBM 4769 Developers Toolkit up to 7.5.52. Impacted is an unknown function of the component Hardware Security Module. The manipulation results in uncontrolled memory allocation. This vulnerability is identified as CVE-2025-3632. The attack can be executed remotely. There is not any exploit available. The affected component should be upgraded.

A vulnerability labeled as critical has been found in CodePhiliaX Chat2DB up to 0.3.7. This affects an unknown function of the file ai/chat2db/server/web/api/controller/data/source/DataSourceController.java of the component JDBC Connection Handler. The manipulation results in sql injection. This vulnerability is identified as CVE-2025-9148. The attack can be executed remotely. Additionally, an exploit exists. The vendor was contacted early about this disclosure but did not respond in any way.

A vulnerability described as critical has been identified in Surbowl dormitory-management-php up to 9f1d9d1f528cabffc66fda3652c56ff327fda317. Affected is an unknown function of the file /admin/violation_add.php?id=2. Such manipulation of the argument ID leads to sql injection. This vulnerability only affects products that are no longer supported by the maintainer. This vulnerability is listed as CVE-2025-9150. The attack may be performed from a remote location. In addition, an exploit is available. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed.

A vulnerability classified as critical has been found in LiuYuYang01 ThriveX-Blog up to 3.1.7. Affected by this vulnerability is the function updateJsonValueByName of the file /web_config/json/name/web. Performing manipulation results in improper authorization. This vulnerability is cataloged as CVE-2025-9151. It is possible to initiate the attack remotely. Furthermore, there is an exploit available. The vendor was contacted early about this disclosure but did not respond in any way.