Aggregator

Submit #628677 / VDB-319986

A vulnerability, which was classified as critical, was found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/operations/expense_category.php. The manipulation of the argument expense_name leads to sql injection. This vulnerability is traded as CVE-2025-8984. It is possible to launch the attack remotely. Furthermore, there is an exploit available.

A vulnerability, which was classified as critical, has been found in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/operations/expense.php. The manipulation of the argument expense_for leads to sql injection. The identification of this vulnerability is CVE-2025-8983. The attack may be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical was found in itsourcecode Online Tour and Travel Management System 1.0. This vulnerability affects unknown code of the file /admin/operations/currency.php. The manipulation of the argument curr_code leads to sql injection. This vulnerability was named CVE-2025-8982. The attack can be initiated remotely. Furthermore, there is an exploit available.

A vulnerability classified as critical has been found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/operations/payment.php. The manipulation of the argument payment_type leads to sql injection. This vulnerability is uniquely identified as CVE-2025-8981. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #628676 / VDB-319985

Submit #628675 / VDB-319984

Submit #628664 / VDB-319983

Submit #628663 / VDB-319982

Submit #628662 / VDB-319981

A vulnerability was found in Tenda G1 16.01.7.8(3660). It has been rated as critical. Affected by this issue is the function check_upload_file of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. This vulnerability is handled as CVE-2025-8980. The attack may be launched remotely. Furthermore, there is an exploit available.

Submit #628661 / VDB-319980

Submit #628660 / VDB-319979

Submit #628659 / VDB-319978

Submit #628658 / VDB-319977

A vulnerability was found in Tenda AC15 15.13.07.13. It has been declared as critical. Affected by this vulnerability is the function check_fw_type/split_fireware/check_fw of the component Firmware Update Handler. The manipulation leads to insufficient verification of data authenticity. This vulnerability is known as CVE-2025-8979. The attack can be launched remotely. Furthermore, there is an exploit available.

Submit #628606 / VDB-319976

Submit #628605 / VDB-319976

Submit #628603 / VDB-319975