Archive
6 September 2025
Vulnerabilities first published on this day (UTC), newest first.
60 results · Feed
-
Medium 4.3
itsourcecode POS Point of Sale System deferred_table.php cross site scripting
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/deferred_table.php. The manipulation of the argument scripts leads to cr…
-
High 7.3
itsourcecode Student Information Management System login.php sql injection
A vulnerability was determined in itsourcecode Student Information Management System 1.0. This affects an unknown part of the file /admin/login.php. Executing manipulation of the argument uname can lead to sql injection. The attack may be launched remotely. T…
-
Critical 9.9
FOG's authentication bypass leads to full SQL DB dump
FOG is a free open-source cloning/imaging/rescue suite/inventory management system. Versions 1.5.10.1673 and below contain an authentication bypass vulnerability. It is possible for an attacker to perform an unauthenticated DB dump where they could pull a ful…
-
Medium 6.9
Atlantis Exposes Service Version Publicly on /status API Endpoint
Atlantis is a self-hosted golang application that listens for Terraform pull request events via webhooks. All versions of Atlantis publicly expose detailed version information through its /status endpoint. This information disclosure could allow attackers to …
-
Medium 6.9
xgrammar vulnerable to denial of service by huge enum grammar
xgrammar is an open-source library for efficient, flexible, and portable structured generation. A grammar optimizer introduced in 0.1.23 processes large grammars (>100k characters) at very low rates, and can be used for DOS of model providers. This issue is f…
-
Critical 9.4
internetarchive is vulnerable to Directory Traversal through file downloads
internetarchive is a Python and Command-Line Interface to Archive.org In versions 5.5.0 and below, there is a directory traversal (path traversal) vulnerability in the File.download() method of the internetarchive library. The file.download() method does not …
-
Medium 4.7
Insufficient parameter sanitization in TEE SOC Driver could allow an attacker to issue a malformed DRV_SOC_CMD_ID_SRIOV…
-
High 7.2
Improper cleanup in AMD CPU microcode patch loading could allow an attacker with local administrator privilege to load …
-
Low 3.3
Improper removal of sensitive information before storage or transfer in AMD Crash Defender could allow an attacker to o…
-
Medium 6.1
An out of bounds write in the Linux graphics driver could allow an attacker to overflow the buffer potentially resultin…
-
Medium 5.5
A NULL pointer dereference in AMD Crash Defender could allow an attacker to write a NULL output to a log file potential…
-
High 7.5
Improper input validation for DIMM serial presence detect (SPD) metadata could allow an attacker with physical access, …
-
High 8.4
Improper input validation in the AMD Graphics Driver could allow an attacker to supply a specially crafted pointer, pot…
-
Medium 6.0
Improper input validation in AMD Power Management Firmware (PMFW) could allow a privileged attacker from Guest VM to se…
-
High 8.8
Improper input validation in the GPU driver could allow an attacker to exploit a heap overflow potentially resulting in…
-
Low 3.2
Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-S…
-
High 8.4
Missing authorization in AMD RomArmor could allow an attacker to bypass ROMArmor protections during system resume from …
-
Medium 4.4
Improper validation of an array index in the AND power Management Firmware could allow a privileged attacker to corrupt…
-
High 7.5
Improper input validation in the system management mode (SMM) could allow a privileged attacker to overwrite arbitrary …
-
Low 3.9
An integer overflow in the SMU could allow a privileged attacker to potentially write memory beyond the end of the rese…
-
Medium 5.3
Improper restriction of operations in the IOMMU could allow a malicious hypervisor to access guest private memory resul…
-
Low 2.5
An out-of-bounds read in the ASP could allow a privileged attacker with access to a malicious bootloader to potentially…
-
Low 2.8
Use of an uninitialized variable in the ASP could allow an attacker to access leftover data from a trusted execution en…
-
High 7.2
Improper isolation of shared resources on System-on-a-chip (SOC) could a privileged attacker to tamper with the content…
-
High 8.7
Type confusion in the ASP could allow an attacker to pass a malformed argument to the Reliability, Availability, and Se…
-
Low 3.3
Improper validation of an array index in the AMD graphics driver software could allow an attacker to pass malformed arg…
-
Low 3.3
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Re…
-
Low 3.0
Failure to validate the address and size in TEE (Trusted Execution Environment) may allow a malicious x86 attacker to s…
-
Medium 4.1
Insufficient parameter validation while allocating process space in the Trusted OS (TOS) may allow for a malicious user…
-
High 8.8
D-Link DIR-825 httpd ping6_response.cg get_ping6_app_stat buffer overflow
A vulnerability was found in D-Link DIR-825 1.08.01. This impacts the function get_ping6_app_stat of the file ping6_response.cg of the component httpd. Performing manipulation of the argument ping6_ipaddr results in buffer overflow. It is possible to initiate…
-
High 7.3
itsourcecode Online Discussion Forum admin sql injection
A vulnerability has been found in itsourcecode Online Discussion Forum 1.0. This affects an unknown function of the file /admin. Such manipulation of the argument Username leads to sql injection. The attack may be performed from remote. The exploit has been d…
-
Medium 4.3
Campcodes Grocery Sales and Inventory System index.php cross site scripting
A vulnerability was detected in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /index.php. The manipulation of the argument page results in cross site scripting. The attack can be executed remotely. T…
-
High 7.3
Campcodes Grocery Sales and Inventory System ajax.php sql injection
A security vulnerability has been detected in Campcodes Grocery Sales and Inventory System 1.0. Impacted is an unknown function of the file /ajax.php?action=delete_sales. The manipulation of the argument ID leads to sql injection. Remote exploitation of the a…
-
High 7.3
Campcodes Grocery Sales and Inventory System ajax.php sql injection
A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=save_receiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be …
-
Low 3.5
itsourcecode POS Point of Sale System complex_header_2.php cross site scripting
A security flaw has been discovered in itsourcecode POS Point of Sale System 1.0. This vulnerability affects unknown code of the file /inventory/main/vendors/datatables/unit_testing/templates/complex_header_2.php. Performing manipulation of the argument scrip…
-
High 8.6
Authenticated RCE by CWMP binary
An authenticated attacker may remotely execute arbitrary code via the CWMP binary on the devices AX10 and AX1500. The exploit can only be conducted via a Man-In-The-Middle (MITM) attack. This issue affects AX10 V1/V1.2/V2/V2.6/V3/V3.6: before 1.2.1; AX1500 …
-
Medium 4.9CVE-2025-10046 Public exploit
ELEX WooCommerce Google Shopping (Google Product Feed) <= 1.4.3 - Authenticated (Admin+) SQL Inejction
The ELEX WooCommerce Google Shopping (Google Product Feed) plugin for WordPress is vulnerable to SQL Injection via the 'file_to_delete' parameter in all versions up to, and including, 1.4.3 due to insufficient escaping on the user supplied parameter and lack …
-
Low 3.5
itsourcecode POS Point of Sale System 6776.php cross site scripting
A vulnerability was identified in itsourcecode POS Point of Sale System 1.0. This affects an unknown part of the file /inventory/main/vendors/datatables/unit_testing/templates/6776.php. Such manipulation of the argument scripts leads to cross site scripting. …
-
Medium 6.4
Recent Posts Widget Extended <= 2.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via rpwe Shortcode
The Recent Posts Widget Extended plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'rpwe' shortcode in all versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping on user supplied attrib…
-
Medium 6.4
aThemes Addons for Elementor Lite <= 1.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Countdown Widget
The aThemes Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 1.1.2 due to insufficient input sanitization and output escaping on user supplied attrib…