Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311038 - https://vuldb.com/?ctiid.311038 - https://vuldb.com/?submit.588820 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_admin_index.php.md - https://codeastro.com/
CVE ID: CVE-2025-5582 State: PUBLISHED Published: 2025-06-04T09:00:17.836Z Last Updated: 2025-06-04T13:25:17.656Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeAstro Products: Real Estate Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Real Estate Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311039
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311039 - https://vuldb.com/?ctiid.311039 - https://vuldb.com/?submit.588821 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_profile.php.md - https://codeastro.com/
CVE ID: CVE-2025-5583 State: PUBLISHED Published: 2025-06-04T09:31:05.606Z Last Updated: 2025-06-04T13:24:41.383Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: CodeAstro Products: Real Estate Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311040 - https://vuldb.com/?ctiid.3
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311040 - https://vuldb.com/?ctiid.311040 - https://vuldb.com/?submit.588822 - https://github.com/YZS17/CVE/blob/main/CodeAstro_Real_Estate_Management_System/sqli_register.php.md - https://codeastro.com/
CVE ID: CVE-2025-5584 State: PUBLISHED Published: 2025-06-04T10:00:20.873Z Last Updated: 2025-06-04T13:15:04.050Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: PHPGurukul Products: Hospital Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Hospital Management System 4.0. It has been classified as problematic. Affected is an unknown function of the file /doctor/edit-patient.php?editid=2 of the component POST Parameter Handler. The manipulation of the argument patname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes
le to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311046 - https://vuldb.com/?ctiid.311046 - https://vuldb.com/?submit.588828 - https://github.com/Ant1sec-ops/Hospital-management-Systemv4.0-Stored-XSS/blob/main/stored-xss-exploit.md - https://phpgurukul.com/
CVE ID: CVE-2025-5585 State: PUBLISHED Published: 2025-06-25T02:22:07.865Z Last Updated: 2025-06-25T15:02:33.343Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gpriday Products: SiteOrigin Widgets Bundle Problem Types: CWE-79 Description: The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `data-url` DOM Element Attribute in all versions up to, and including, 1.68.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an inj
butor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bb1b93ee-8641-4ddb-8b6b-2e9d30fe338d?source=cve - https://plugins.svn.wordpress.org/so-widgets-bundle/tags/1.68.4/js/slider/jquery.slider.js
CVE ID: CVE-2025-5586 State: PUBLISHED Published: 2025-06-06T06:42:49.635Z Last Updated: 2025-06-06T16:09:34.085Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: tushargohel Products: WordPress Ajax Load More and Infinite Scroll Problem Types: CWE-79 Description: The WordPress Ajax Load More and Infinite Scroll plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘id’ parameter in all versions up to, and including, 1.6.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/5be80195-192a-4b53-9d10-4d877fa0afbe?source=cve - https://plugins.trac.wordpress.org/browser/cpt-ajax-load-more/trunk/includes/class-cpt-alm-shortcodes.php#L126 - https://wordpress.org/plugins/cpt-ajax-load-more/#developers
CVE ID: CVE-2025-5587 State: PUBLISHED Published: 2025-07-29T11:19:02.293Z Last Updated: 2025-07-29T13:56:42.663Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: sparklewpthemes Products: Appzend Problem Types: CWE-79 Description: The Appzend theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘progressbarLayout’ parameter in all versions up to, and including, 1.2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst No
inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/51214cd0-23a6-48ba-a3d8-4d9a0a9e52df?source=cve - https://themes.trac.wordpress.org/browser/appzend/1.2.6/blocks-extends/blocks/progressbar.php#L44 - https://wordpress.org/themes/appzend/ - https://themes.trac.wordpress.org/changeset/281244/
CVE ID: CVE-2025-5588 State: PUBLISHED Published: 2025-06-26T01:44:38.259Z Last Updated: 2025-06-26T13:31:12.214Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: ickata Products: Image Editor by Pixo Problem Types: CWE-79 Description: The Image Editor by Pixo plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘download’ parameter in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional A
bove, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1036a34d-ec03-4bec-8455-02c83fdb8b36?source=cve - https://plugins.trac.wordpress.org/browser/image-editor-by-pixo/trunk/frontend.php#L42 - https://wordpress.org/plugins/image-editor-by-pixo/#developers - https://plugins.trac.wordpress.org/changeset/3315303/
CVE ID: CVE-2025-5589 State: PUBLISHED Published: 2025-06-14T08:23:24.655Z Last Updated: 2025-06-17T18:39:16.718Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: streamweasels Products: StreamWeasels Kick Integration Problem Types: CWE-79 Description: The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘status-classic-offline-text’ parameter in all versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever
attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/45f98a96-8f32-49f9-bfc8-9beb316ce0bc?source=cve - https://plugins.trac.wordpress.org/browser/streamweasels-kick-integration/trunk/public/partials/streamweasels-kick-status-public-display.php#L50 - https://wordpress.org/plugins/streamweasels-kick-integration/#developers - https://plugins.trac.wordpress.org/changeset/3309930/streamweasels-kick-integration/trunk/public/partials/streamweasels-kick-status-public-display.php
CVE ID: CVE-2025-5590 State: PUBLISHED Published: 2025-06-26T01:44:39.625Z Last Updated: 2025-06-26T13:28:36.392Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: gopiplus Products: Owl carousel responsive Problem Types: CWE-89 Description: The Owl carousel responsive plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.9 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing qu
henticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/e1f230f5-d40c-43b2-82f2-c920dca9707f?source=cve - https://plugins.trac.wordpress.org/browser/responsive-owl-carousel/trunk/query/db_gallery.php#L57 - https://wordpress.org/plugins/responsive-owl-carousel/#developers
CVE ID: CVE-2025-5592 State: PUBLISHED Published: 2025-06-04T14:00:18.519Z Last Updated: 2025-06-04T14:17:39.815Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component PASSIVE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311078 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311078 - https://vuldb.com/?ctiid.311078 - https://vuldb.com/?submit.586990 - https://fitoxs.com/exploit/exploit-d28993dd71bcf3fbc63ff58db41e5f10a3ff7932e72d9e25c556cf18921a98e3.txt
CVE ID: CVE-2025-5593 State: PUBLISHED Published: 2025-06-04T15:31:04.609Z Last Updated: 2025-06-04T15:54:38.980Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. This affects an unknown part of the component HOST Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311079 - https://vuldb.com/?ctiid.311079 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311079 - https://vuldb.com/?ctiid.311079 - https://vuldb.com/?submit.587000 - https://fitoxs.com/exploit/exploit-9e0f802ba8eab46db6ff5f0c634f96412286b66b33c50a420dd57c1329e3a20d1.txt
CVE ID: CVE-2025-5594 State: PUBLISHED Published: 2025-06-04T16:00:18.902Z Last Updated: 2025-06-04T16:11:31.800Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. This vulnerability affects unknown code of the component SET Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311080 - https://vuldb.com/?ctiid.311080 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311080 - https://vuldb.com/?ctiid.311080 - https://vuldb.com/?submit.587009 - https://fitoxs.com/exploit/exploit-79d290eb2c875b417f7a91769b3bb07a64f2562b57484473ef0f92808bb7dbe2.txt
CVE ID: CVE-2025-5595 State: PUBLISHED Published: 2025-06-04T16:31:04.575Z Last Updated: 2025-06-04T18:19:05.831Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component PROGRESS Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311081 - https://vuldb.com/?ctiid.311081 - https://
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311081 - https://vuldb.com/?ctiid.311081 - https://vuldb.com/?submit.587018 - https://fitoxs.com/exploit/exploit-ecb3f049a567f5dd9e36ad55d28579e2403e4e4cb487028f02c25a7a9ea4dc5a.txt
CVE ID: CVE-2025-5596 State: PUBLISHED Published: 2025-06-04T17:00:20.036Z Last Updated: 2025-06-04T18:18:52.216Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component REGET Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311082 - https://vuldb.com/?ctiid.311082 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311082 - https://vuldb.com/?ctiid.311082 - https://vuldb.com/?submit.587019 - https://fitoxs.com/exploit/exploit-e21cfeef06589e33f21ae1975b3395b38b98d82f90a582a2f41dc8c6bb1ecdc1.txt
CVE ID: CVE-2025-5597 State: PUBLISHED Published: 2025-06-04T11:24:40.752Z Last Updated: 2025-06-04T13:12:02.297Z Vendors: WF Steuerungstechnik GmbH Products: airleader MASTER Problem Types: CWE-287 Description: Improper Authentication vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Authentication Bypass.This issue affects airleader MASTER: 3.00571. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-003_wf-seuerungstechnik-gmbh_airleader-master_authentication-bypass.md
CVE ID: CVE-2025-5598 State: PUBLISHED Published: 2025-06-04T11:24:26.367Z Last Updated: 2025-06-04T13:13:17.863Z Vendors: WF Steuerungstechnik GmbH Products: airleader MASTER Problem Types: CWE-35 Description: Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/migros/migros-security-advisories/blob/main/advisories/msec-2025-004_wf-seuerungstechnik-gmbh_airleader-master_path-traversal.md
CVE ID: CVE-2025-5599 State: PUBLISHED Published: 2025-06-04T17:31:06.646Z Last Updated: 2025-06-04T18:18:39.615Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Student Result Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Student Result Management System 1.3. This vulnerability affects unknown code of the file /editmyexp.php. The manipulation of the argument emp1ctc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311086
e public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311086 - https://vuldb.com/?ctiid.311086 - https://vuldb.com/?submit.587960 - https://github.com/GarminYoung/myCVE/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-5600 State: PUBLISHED Published: 2025-06-04T17:31:11.291Z Last Updated: 2025-06-04T18:18:33.222Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311087 - https://vuldb.com/?ctiid.311087 - https://vuldb.com/?submit.588075 - https://kn0sinna.notion.site/TOTOLINK-EX1200T-stack-based-BufferOverflow-vulnerability-204b1876cd6e80709ce8dab4778dce55 - https://www.totolink.net/
CVE ID: CVE-2025-5601 State: PUBLISHED Published: 2025-06-04T10:30:46.001Z Last Updated: 2025-06-04T13:14:01.435Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Wireshark Foundation Products: Wireshark Problem Types: CWE-120 Description: Column handling crashes in Wireshark 4.4.0 to 4.4.6 and 4.2.0 to 4.2.12 allows denial of service via packet injection or crafted capture file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wireshark.org/security/wnpa-sec-2025-02.html - https://gitlab.com/wireshark/wireshark/-/issues/20509
CVE ID: CVE-2025-5602 State: PUBLISHED Published: 2025-06-04T18:00:20.252Z Last Updated: 2025-06-04T20:38:42.033Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Campcodes Hospital Management System 1.0. Affected is an unknown function of the file /admin/registration.php. The manipulation of the argument full_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311088 - https://vuldb.com/?ctiid.311088 - https://vuldb.com/?submit.588842 - https://github.com/YZS17/CVE/blob/main/Hospital_Management_System/hms_admin_registration.php_sqli.md - https://www.campcodes.com/
CVE ID: CVE-2025-5603 State: PUBLISHED Published: 2025-06-04T18:00:22.655Z Last Updated: 2025-06-04T20:39:30.902Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /registration.php. The manipulation of the argument full_name/username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311089 - https://vuldb.com/?ctiid.311089 - https://vuldb.com/?submit.588843 - https://github.com/YZS17/CVE/blob/main/Hospital_Management_System/hms_registration.php_sqli.md - https://www.campcodes.com/
CVE ID: CVE-2025-5604 State: PUBLISHED Published: 2025-06-04T18:31:05.543Z Last Updated: 2025-06-04T20:40:10.781Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Campcodes Products: Hospital Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311090 - https://vuldb.com/?ctiid.311090 - https://vuldb.com/?submit.588844 - https://github.com/YZS17/CVE/blob/main/Hospital_Management_System/user-login.md - https://www.campcodes.com/
CVE ID: CVE-2025-5605 State: PUBLISHED Published: 2025-10-24T10:09:59.591Z Last Updated: 2025-10-24T11:44:58.987Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: WSO2 Products: WSO2 Identity Server, WSO2 Enterprise Integrator, WSO2 Universal Gateway, WSO2 Traffic Manager, WSO2 API Manager, WSO2 API Control Plane, WSO2 Identity Server as Key Manager, WSO2 Open Banking AM, WSO2 Open Banking IAM, org.wso2.carbon:org.wso2.carbon.ui Description: An authentication bypass vulnerability exists in the Management Console of multiple WSO2 products. A malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain re
malicious actor with access to the console can manipulate the request URI to bypass authentication and access certain restricted resources, resulting in partial information disclosure. The known exposure from this issue is limited to memory statistics. While the vulnerability does not allow full account compromise, it still enables unauthorized access to internal system details. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security.docs.wso2.com/en/latest/security-announcements/security-advisories/2025/WSO2-2025-4115/
CVE ID: CVE-2025-5606 State: PUBLISHED Published: 2025-06-04T19:00:21.064Z Last Updated: 2025-06-04T19:33:20.012Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Tenda Products: AC18 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311092 - https://vuldb.com/?ctiid.311