Aggregator

Submit #566787 / VDB-308207

Submit #566786 / VDB-308206

Submit #566785 / VDB-308205

Submit #566784 / VDB-308204

A vulnerability, which was classified as critical, was found in itsourcecode Gym Management System 1.0. Affected is an unknown function of the file /ajax.php?action=save_package. The manipulation of the argument ID leads to sql injection. This vulnerability is traded as CVE-2025-4463. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability has been found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=save_plan. The manipulation of the argument plan leads to sql injection. This vulnerability is known as CVE-2025-4464. The attack can be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in itsourcecode Gym Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?action=save_schedule. The manipulation of the argument member_id leads to sql injection. This vulnerability is handled as CVE-2025-4465. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in ATEN CL5708IM up to 2.2.214. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to heap-based buffer overflow. This vulnerability was named CVE-2025-3712. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in ATEN CL5708IM up to 2.2.214. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to heap-based buffer overflow. The identification of this vulnerability is CVE-2025-3713. The attack may be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability classified as critical has been found in ATEN CL5708IM up to 2.2.214. Affected is an unknown function. The manipulation leads to stack-based buffer overflow. This vulnerability is traded as CVE-2025-3714. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file fecalysis_form.php. The manipulation of the argument itr_no leads to sql injection. This vulnerability is handled as CVE-2025-4459. The attack may be launched remotely. Furthermore, there is an exploit available.

A vulnerability was found in code-projects Patient Record Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /edit_upatient.php. The manipulation of the argument ID leads to sql injection. This vulnerability is known as CVE-2025-4458. The attack can be launched remotely. Furthermore, there is an exploit available.

The tech giant plans to leverage its Gemini Nano LLM on-device to enhance scam detection on Chrome

Submit #566783 / VDB-308203

Submit #566782 / VDB-308202

Submit #566781 / VDB-308201

Submit #566780 / VDB-308200

Submit #566779 / VDB-308199