CVE-2025-6108 – Hansonwang99 Spring-Boot-In-Action Path Traversal Vulnerability

CVE ID : CVE-2025-6108

Published : June 16, 2025, 6:15 a.m. | 4 hours, 4 minutes ago

Description : A vulnerability was found in hansonwang99 Spring-Boot-In-Action up to 807fd37643aa774b94fd004cc3adbd29ca17e9aa. It has been declared as critical. Affected by this vulnerability is the function watermarkTest of the file /springbt_watermark/src/main/java/cn/codesheep/springbt_watermark/service/ImageUploadService.java of the component File Upload. The manipulation of the argument filename leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.

Severity: 6.3 | MEDIUM

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-6110 – Tenda FH1201 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-6110

Published : June 16, 2025, 7:15 a.m. | 3 hours, 4 minutes ago

Description : A vulnerability classified as critical has been found in Tenda FH1201 1.2.0.14(408). This affects an unknown part of the file /goform/SafeMacFilter. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-6111 – Tenda FH1205 Stack-Based Buffer Overflow Vulnerability

CVE ID : CVE-2025-6111

Published : June 16, 2025, 7:15 a.m. | 3 hours, 4 minutes ago

Description : A vulnerability classified as critical was found in Tenda FH1205 2.0.0.7(775). This vulnerability affects the function fromVirtualSer of the file /goform/VirtualSer. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More

CVE-2025-6169 – HAMASTAR Technology WIMP SQL Injection Vulnerability

CVE ID : CVE-2025-6169

Published : June 16, 2025, 7:15 a.m. | 3 hours, 4 minutes ago

Description : The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.

Severity: 9.8 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…

Read More