CVE-2025-5217 - FreeFloat FTP Server RMDIR Command Handler Buffer Overflow Vulnerability
CVE ID : CVE-2025-5217
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5217
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0.0. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5218 - FreeFloat FTP Server LITERAL Command Handler Buffer Overflow Vulnerability
CVE ID : CVE-2025-5218
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5218
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0.0. Affected is an unknown function of the component LITERAL Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5219 - FreeFloat FTP Server Buffer Overflow Vulnerability
CVE ID : CVE-2025-5219
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5219
Published : May 27, 2025, 1:15 a.m. | 15 minutes ago
Description : A vulnerability has been found in FreeFloat FTP Server 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the component ASCII Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5221 - FreeFloat FTP Server QUOTE Command Handler Buffer Overflow Vulnerability
CVE ID : CVE-2025-5221
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5221
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability was found in FreeFloat FTP Server 1.0.0. It has been classified as critical. This affects an unknown part of the component QUOTE Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5224 - Campcodes Online Hospital Management System SQL Injection Vulnerability
CVE ID : CVE-2025-5224
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5224
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability classified as critical has been found in Campcodes Online Hospital Management System 1.0. Affected is an unknown function of the file /admin/add-doctor.php. The manipulation of the argument Doctorspecialization leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5225 - Campcodes Advanced Online Voting System SQL Injection Vulnerability
CVE ID : CVE-2025-5225
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument voter leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5225
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability, which was classified as critical, was found in Campcodes Advanced Online Voting System 1.0. This affects an unknown part of the file /index.php. The manipulation of the argument voter leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5226 - PHPGurukul Small CRM SQL Injection Vulnerability
CVE ID : CVE-2025-5226
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5226
Published : May 27, 2025, 3:15 a.m. | 2 hours, 15 minutes ago
Description : A vulnerability has been found in PHPGurukul Small CRM 3.0 and classified as critical. This vulnerability affects unknown code of the file /admin/change-password.php. The manipulation of the argument oldpass leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-26211 - Gibbon CSRF Vulnerability
CVE ID : CVE-2025-26211
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Gibbon before 29.0.00 allows CSRF.
Severity: 3.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-26211
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Gibbon before 29.0.00 allows CSRF.
Severity: 3.7 | LOW
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48742 - SIGB PMB Remote Code Execution Vulnerability
CVE ID : CVE-2025-48742
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : The installer in SIGB PMB before 8.0.1.2 allows remote code execution.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48742
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : The installer in SIGB PMB before 8.0.1.2 allows remote code execution.
Severity: 5.4 | MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48786 - Apache HTTP Server Cross-Site Request Forgery
CVE ID : CVE-2025-48786
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48786
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48787 - Cisco Router Unvalidated User Input
CVE ID : CVE-2025-48787
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48787
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48788 - Apache HTTP Server Credentials Disclosure
CVE ID : CVE-2025-48788
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48788
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48789 - Apache Struts Command Injection
CVE ID : CVE-2025-48789
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48789
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48790 - Apache Struts SQL Injection
CVE ID : CVE-2025-48790
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48790
Published : May 27, 2025, 4:15 a.m. | 1 hour, 15 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48791 - Apache Struts Deserialization Vulnerability
CVE ID : CVE-2025-48791
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48791
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48792 - Oracle WebLogic Server Unvalidated Redirect
CVE ID : CVE-2025-48792
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48792
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48793 - Fortinet SSL/TLS Implementation Vulnerability
CVE ID : CVE-2025-48793
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48793
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48794 - Adobe Flash Remote Code Execution
CVE ID : CVE-2025-48794
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48794
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Rejected reason: Not used
Severity: 0.0 | NA
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48827 - vBulletin Unauthenticated API Controller Method Invocation Vulnerability
CVE ID : CVE-2025-48827
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48827
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern.
Severity: 10.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-48828 - vBulletin PHP Code Execution Vulnerability
CVE ID : CVE-2025-48828
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the "var_dump"("test") syntax, attackers can bypass security checks and execute arbitrary PHP code.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-48828
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the "var_dump"("test") syntax, attackers can bypass security checks and execute arbitrary PHP code.
Severity: 9.0 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE-2025-5227 - PHPGurukul Small CRM SQL Injection Vulnerability
CVE ID : CVE-2025-5227
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
CVE ID : CVE-2025-5227
Published : May 27, 2025, 4:15 a.m. | 1 hour, 14 minutes ago
Description : A vulnerability was found in PHPGurukul Small CRM 3.0 and classified as critical. This issue affects some unknown processing of the file /admin/manage-tickets.php. The manipulation of the argument aremark leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
Severity: 7.3 | HIGH
Visit the link for more details, such as CVSS details, affected products, timeline, and more...