Archive
8 July 2025
Vulnerabilities first published on this day (UTC), newest first.
440 results · Feed
-
High 8.8
Phoenix Contact: File access due to the replacement of a critical file used by the watchdog
A low privileged remote attacker with file access can replace a critical file used by the watchdog to get read, write and execute access to any file on the device after the watchdog has been initialized.
-
Medium 6.5
Phoenix Contact: DoS of the PLC due to incorrect default permissions possible
An low privileged remote attacker can enforce the watchdog of the affected devices to reboot the PLC due to incorrect default permissions of a config file.
-
Medium 6.3
code-projects Responsive Blog Site category.php sql injection
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated r…
-
High 8.8
OCPP Backend Configuration via Insecure Defaults
An unauthenticated adjacent attacker is able to configure a new OCPP backend, due to insecure defaults for the configuration interface.
-
Critical 9.8
Remote Code Execution via Unauthenticated Configuration Manipulation
An unauthenticated remote attacker can alter the device configuration in a way to get remote code execution as root with specific configurations.
-
High 8.4
Local Privilege Escalation via Unauthenticated Command Injection
An unauthenticated local attacker can inject a command that is subsequently executed as root, leading to a privilege escalation.
-
High 8.8
Unauthenticated Configuration Access via Exposed API Endpoint
An unauthenticated adjacent attacker can modify configuration by sending specific requests to an API-endpoint resulting in read and write access due to missing authentication.
-
High 7.8
Privilege Escalation via Insecure SSH Permissions
A low privileged local attacker can leverage insecure permissions via SSH on the affected devices to escalate privileges to root.
-
High 7.8
Local Privilege Escalation via Vulnerable SSH Script
A local attacker with a local user account can leverage a vulnerable script via SSH to escalate privileges to root due to improper input validation.
-
Medium 5.2
USB-C Buffer Overflow via Display Interface in EV Charging Stations
A physical attacker with access to the device display via USB-C can send a message to the device which triggers an unsecure copy to a buffer resulting in loss of integrity and a temporary denial-of-service for the stations until they got restarted by the watc…
-
High 8.2
MQTT OOB Write Vulnerability in EichrechtAgents of German EV Charging Stations
An unauthenticated remote attacker can use MQTT messages to trigger out-of-bounds writes in charging stations complying with German Calibration Law, resulting in a loss of integrity for only EichrechtAgents and potential denial-of-service for these stations.
-
Medium 5.3
MQTT DoS Vulnerability in German EV Charging Stations
An unauthenticated remote attacker can use MQTT messages to crash a service on charging stations complying with German Calibration Law, resulting in a temporary denial-of-service for these stations until they got restarted by the watchdog.
-
Medium 6.1
Multiple vulnerabilities in SAP NetWeaver Application Server ABAP
SAP NetWeaver Application Server ABAP and ABAP Platform allows an unauthenticated attacker to create a malicious link which they can make publicly available. When an authenticated victim clicks on this malicious link, injected input data will be used by the w…
-
High 8.8
WoodMart <= 8.2.3 - Authenticated (Contributor+) Local File Inclusion
The WoodMart plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 8.2.3 via the 'layout' attribute. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute…
-
Medium 6.4
WoodMart <= 8.2.3 - Authenticated (Contributor+) Stored Cross-Site Scripting
The Woodmart theme for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'multiple_markers' attribute in all versions up to, and including, 8.2.3 due to insufficient input sanitization and output escaping on user supplied attributes. Thi…
-
Medium 6.3
code-projects Responsive Blog Site single.php sql injection
A vulnerability was found in code-projects Responsive Blog Site 1.0. It has been classified as critical. This affects an unknown part of the file /single.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack re…
-
High 7.3
PHPGurukul/Campcodes Cyber Cafe Management System forgot-password.php sql injection
A vulnerability was found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection…
-
High 7.3
PHPGurukul/Campcodes Cyber Cafe Management System index.php sql injection
A vulnerability has been found in PHPGurukul/Campcodes Cyber Cafe Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /index.php. The manipulation of the argument Username leads to sql injec…
-
High 8.8
Widget for Google Reviews <= 1.0.15 - Authenticated (Subscriber+) Directory Traversal to Local File Inclusion
The Widget for Google Reviews plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.0.15 via the layout parameter. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inclu…
-
Medium 6.3
PHPGurukul Zoo Management System add-animals.php sql injection
A vulnerability, which was classified as critical, was found in PHPGurukul Zoo Management System 2.1. Affected is an unknown function of the file /admin/add-animals.php. The manipulation of the argument cnum leads to sql injection. It is possible to launch th…
-
Medium 6.3
PHPGurukul Zoo Management System add-foreigners-ticket.php sql injection
A vulnerability, which was classified as critical, has been found in PHPGurukul Zoo Management System 2.1. This issue affects some unknown processing of the file /admin/add-foreigners-ticket.php. The manipulation of the argument cprice leads to sql injection.…
-
Medium 5.3
Guest Support – Complete customer support ticket system for WordPress <= 1.2.2 - Missing Authorization to Unauthenticated Ticket Deletion
The Guest Support – Complete customer support ticket system for WordPress plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'deleteMassTickets' function in all versions up to, and including, 1.2.2. This m…
-
Medium 6.4
Lightbox & Modal Popup WordPress Plugin – FooBox <= 2.7.34 - Authenticated (Author+) Stored Cross-Site Scripting
The Lightbox & Modal Popup WordPress Plugin – FooBox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via image alternative texts in all versions up to, and including, 2.7.34 due to insufficient input sanitization and output escaping. This ma…
-
Medium 6.3
PHPGurukul Zoo Management System add-normal-ticket.php sql injection
A vulnerability classified as critical was found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-normal-ticket.php. The manipulation of the argument cprice leads to sql injection. The attack can be initi…
-
High 7.3CVE-2025-7160 Scanner template
PHPGurukul Zoo Management System index.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Zoo Management System 2.1. This affects an unknown part of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. It is possible to initiate the attack r…
-
Medium 6.3
PHPGurukul Zoo Management System manage-animals.php sql injection
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/manage-animals.php. The manipulation of the argument ID leads to sql injection. The attac…
-
Medium 6.3
PHPGurukul Zoo Management System manage-normal-ticket.php sql injection
A vulnerability was found in PHPGurukul Zoo Management System 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/manage-normal-ticket.php. The manipulation of the argument ID leads to sql injec…
-
High 7.3
code-projects Online Note Sharing login.php sql injection
A vulnerability was found in code-projects Online Note Sharing 1.0. It has been classified as critical. Affected is an unknown function of the file /login.php. The manipulation of the argument username/password leads to sql injection. It is possible to launch…
-
Medium 6.5
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of ser…
-
Medium 6.5
In Bluetooth FW, there is a possible system crash due to an uncaught exception. This could lead to remote denial of ser…
-
Medium 6.5
In wlan STA driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote …
-
Medium 5.5
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in…
-
Medium 5.5
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in…
-
Medium 5.5
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in…
-
Medium 5.5
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in…
-
Medium 5.5
In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local in…
-
Medium 5.5
In Bluetooth driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local …
-
High 8.8
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote …
-
High 8.8
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote …
-
Critical 9.8
In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local e…