Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-11012 State: PUBLISHED Published: 2025-09-26T11:32:12.970Z Last Updated: 2025-09-26T12:13:06.743Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: BehaviorTree Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in BehaviorTree up to 4.7.0. This affects the function ParseScript of the file /src/script_parser.cpp of the component Diagnostic Message Handler. Executing manipulation of the argument error_msgs_buffer can lead to stack-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called cb6c7514efa628adb8
e executed locally. The exploit has been publicly disclosed and may be utilized. This patch is called cb6c7514efa628adb8180b58b4c9ccdebbe096e3. A patch should be applied to remediate this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325955 - https://vuldb.com/?ctiid.325955 - https://vuldb.com/?submit.654074 - https://github.com/BehaviorTree/BehaviorTree.CPP/issues/1006 - https://github.com/BehaviorTree/BehaviorTree.CPP/pull/1007 - https://github.com/user-attachments/files/22251337/poc.zip - https://github.com/BehaviorTree/BehaviorTree.CPP/commit/cb6c7514efa628adb8180b58b4c9ccdebbe096e3
CVE ID: CVE-2025-11013 State: PUBLISHED Published: 2025-09-26T12:02:06.535Z Last Updated: 2025-09-26T13:01:15.497Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:C) Vendors: n/a Products: BehaviorTree Problem Types: CWE-476, CWE-404 Description: A vulnerability was identified in BehaviorTree up to 4.7.0. This vulnerability affects the function XMLParser::PImpl::loadDocImpl of the file /src/xml_parsing.cpp of the component XML Parser. The manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
t. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325956 - https://vuldb.com/?ctiid.325956 - https://vuldb.com/?submit.654075 - https://github.com/BehaviorTree/BehaviorTree.CPP/issues/1003 - https://github.com/BehaviorTree/BehaviorTree.CPP/pull/1004 - https://github.com/user-attachments/files/22245915/poc.zip
CVE ID: CVE-2025-11014 State: PUBLISHED Published: 2025-09-26T12:02:09.871Z Last Updated: 2025-09-26T12:59:56.473Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: OGRECave Products: Ogre Problem Types: CWE-122, CWE-119 Description: A security flaw has been discovered in OGRECave Ogre up to 14.4.1. This issue affects the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp of the component Image Handler. The manipulation results in heap-based buffer overflow. The attack is only possible with local access. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vu
local access. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325957 - https://vuldb.com/?ctiid.325957 - https://vuldb.com/?submit.654269 - https://github.com/OGRECave/ogre/issues/3445 - https://github.com/user-attachments/files/22326665/poc.zip
CVE ID: CVE-2025-11015 State: PUBLISHED Published: 2025-09-26T13:32:06.704Z Last Updated: 2025-09-26T19:53:54.435Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: OGRECave Products: Ogre Problem Types: CWE-762, CWE-119 Description: A weakness has been identified in OGRECave Ogre up to 14.4.1. Impacted is the function STBIImageCodec::encode of the file /ogre/PlugIns/STBICodec/src/OgreSTBICodec.cpp. This manipulation causes mismatched memory management routines. The attack is restricted to local execution. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
ade available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325958 - https://vuldb.com/?ctiid.325958 - https://vuldb.com/?submit.654340 - https://github.com/OGRECave/ogre/issues/3446 - https://github.com/user-attachments/files/22328216/poc.zip
CVE ID: CVE-2025-11016 State: PUBLISHED Published: 2025-09-26T13:32:09.106Z Last Updated: 2025-09-26T19:54:22.474Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: kalcaddle Products: kodbox Problem Types: CWE-22 Description: A security vulnerability has been detected in kalcaddle kodbox up to 1.61.09. The affected element is the function fileOut of the file app/controller/explorer/index.class.php. Such manipulation of the argument path leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addi
osed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325959 - https://vuldb.com/?ctiid.325959 - https://vuldb.com/?submit.654367 - https://github.com/August829/YU1/issues/3 - https://github.com/August829/YU1/issues/3#issue-3416620392
CVE ID: CVE-2025-11017 State: PUBLISHED Published: 2025-09-26T14:02:06.178Z Last Updated: 2025-09-26T15:15:50.726Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: OGRECave Products: Ogre Problem Types: CWE-476, CWE-404 Description: A vulnerability was detected in OGRECave Ogre up to 14.4.1. The impacted element is the function Ogre::LogManager::stream of the file /ogre/OgreMain/src/OgreLogManager.cpp. Performing manipulation of the argument mDefaultLog results in null pointer dereference. The attack must be initiated from a local position. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
position. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325960 - https://vuldb.com/?ctiid.325960 - https://vuldb.com/?submit.654456 - https://github.com/OGRECave/ogre/issues/3447 - https://github.com/user-attachments/files/22335685/poc.zip
CVE ID: CVE-2025-11018 State: PUBLISHED Published: 2025-09-26T14:02:08.786Z Last Updated: 2025-09-26T15:05:42.856Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Four-Faith Products: Water Conservancy Informatization Platform Problem Types: CWE-22 Description: A flaw has been found in Four-Faith Water Conservancy Informatization Platform 1.0. This affects an unknown function of the file /sysRole/index.do/../../generalReport/download.do;usrlogout.do.do. Executing manipulation of the argument fileName can lead to path traversal. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted
. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325961 - https://vuldb.com/?ctiid.325961 - https://vuldb.com/?submit.650695 - https://github.com/MMarch7/CVE/issues/1
CVE ID: CVE-2025-11019 State: PUBLISHED Published: 2025-09-26T14:32:07.098Z Last Updated: 2025-09-26T15:01:48.580Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Total.js Products: CMS Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325962 - https://vuldb.com/?ctiid.325962 - https://vuldb.com/?submit.651427
CVE ID: CVE-2025-11020 State: PUBLISHED Published: 2025-10-02T05:15:50.859Z Last Updated: 2025-10-02T15:53:44.530Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MarkAny Products: SafePC Enterprise Problem Types: CWE-89, CWE-22, CWE-434 Description: An attacker can obtain server information using Path Traversal vulnerability to conduct SQL Injection, which possibly exploits Unrestricted Upload of File with Dangerous Type vulnerability in MarkAny SafePC Enterprise on Windows, Linux.This issue affects SafePC Enterprise: V7.0.* (V7.0.YYYY.MM.DD) before V7.0.1, and V5.*.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.markany.com/en
) before V7.0.1, and V5.*.*. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.markany.com/enterprisesecurity?utm_campaign=markany_sa&utm_source=google_pc&utm_medium=gsa_pc&utm_term=cybersecurity&utm_content=&gad_source=1&gad_campaignid=21853187406&gbraid=0AAAAADOrb0lM8ZHyDytvnVwj9T--km9aM&gclid=Cj0KCQjwovPGBhDxARIsAFhgkwSh0F9hnsAoRTS8OnFI3KcF4_UMarYchq0uP5V1DiSQyKKVLdZPJNYaAiBuEALw_wcB
CVE ID: CVE-2025-11021 State: PUBLISHED Published: 2025-09-26T08:36:19.399Z Last Updated: 2025-11-25T05:13:22.532Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Red Hat Products: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 7 Extended Lifecycle Support, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8.2 Advanced Update Support, Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On, Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services
te Support, Red Hat Enterprise Linux 8.6 Telecommunications Update Service, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions, Red Hat Enterprise Linux 9.4 Extended Update Support, Red Hat Enterprise Linux 6 Problem Types: CWE-125 Description: A flaw was found in the cookie date handling logic of the libsoup HTTP library, widely used by GNOME and other applications for web communication. When processing cookies with specially crafted expiration dates, the library
d other applications for web communication. When processing cookies with specially crafted expiration dates, the library may perform an out-of-bounds memory read. This flaw could result in unintended disclosure of memory contents, potentially exposing sensitive information from the process using libsoup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:18183 - https://access.redhat.com/errata/RHSA-2025:19713 - https://access.redhat.com/errata/RHSA-2025:19714 - https://access.redhat.com/errata/RHSA-2025:20959 - https://access.redhat.com/errata/RHSA-2025:21032 - https://access.redhat.com/errata/RHSA-2025:21655 - https://access.redhat.c
://access.redhat.com/errata/RHSA-2025:21032 - https://access.redhat.com/errata/RHSA-2025:21655 - https://access.redhat.com/errata/RHSA-2025:21656 - https://access.redhat.com/errata/RHSA-2025:21657 - https://access.redhat.com/errata/RHSA-2025:21664 - https://access.redhat.com/errata/RHSA-2025:21665 - https://access.redhat.com/errata/RHSA-2025:21666 - https://access.redhat.com/errata/RHSA-2025:21772 - https://access.redhat.com/errata/RHSA-2025:22013 - https://access.redhat.com/security/cve/CVE-2025-11021 - https://bugzilla.redhat.com/show_bug.cgi?id=2399627
CVE ID: CVE-2025-11023 State: PUBLISHED Published: 2025-10-23T12:32:31.850Z Last Updated: 2025-10-23T13:55:54.210Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: ArkSigner Software and Hardware Inc. Products: AcBakImzala Problem Types: CWE-829, CWE-98 Description: Inclusion of Functionality from Untrusted Control Sphere, Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ArkSigner Software and Hardware Inc. AcBakImzala allows PHP Local File Inclusion.This issue affects AcBakImzala: before v5.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bi
AcBakImzala: before v5.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0356
CVE ID: CVE-2025-11025 State: PUBLISHED Published: 2025-09-26T12:40:31.008Z Last Updated: 2025-09-26T13:39:22.861Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: Vimesoft Information Technologies and Software Inc. Products: Vimesoft Corporate Messaging Platform Problem Types: CWE-201 Description: Insertion of Sensitive Information Into Sent Data vulnerability in Vimesoft Information Technologies and Software Inc. Vimesoft Corporate Messaging Platform allows Retrieve Embedded Sensitive Data.This issue affects Vimesoft Corporate Messaging Platform: from V1.3.0 before V2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov
atform: from V1.3.0 before V2.0.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0300
CVE ID: CVE-2025-11026 State: PUBLISHED Published: 2025-09-26T15:02:06.153Z Last Updated: 2025-09-26T15:14:50.300Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:P/I:N/A:N/E:POC/RL:ND/RC:C) Vendors: givanz Products: Vvveb Problem Types: CWE-200, CWE-284 Description: A vulnerability was determined in givanz Vvveb up to 1.0.7.2. Affected by this vulnerability is an unknown functionality of the component Configuration File Handler. This manipulation causes information disclosure. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed th
ain the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325964 - https://vuldb.com/?ctiid.325964 - https://vuldb.com/?submit.657181 - https://gist.github.com/KhanMarshaI/14b48f974cbdaa3278a81a169e4caae1
CVE ID: CVE-2025-11027 State: PUBLISHED Published: 2025-09-26T16:02:05.547Z Last Updated: 2025-09-26T17:52:26.530Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: givanz Products: Vvveb Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in givanz Vvveb up to 1.0.7.2. Affected by this issue is some unknown functionality of the component SVG File Handler. Such manipulation leads to cross site scripting. The attack may be launched remotely. The exploit is publicly available and might be used. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vu
r reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325965 - https://vuldb.com/?ctiid.325965 - https://vuldb.com/?submit.657184 - https://gist.github.com/KhanMarshaI/b90045ee823866a52f33615776b5a6ec
CVE ID: CVE-2025-11028 State: PUBLISHED Published: 2025-09-26T16:02:07.891Z Last Updated: 2025-09-26T17:51:32.848Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:C) Vendors: givanz Products: Vvveb Problem Types: CWE-200, CWE-284 Description: A security flaw has been discovered in givanz Vvveb up to 1.0.7.2. This affects an unknown part of the component Image Handler. Performing manipulation results in information disclosure. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fi
nce again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325966 - https://vuldb.com/?ctiid.325966 - https://vuldb.com/?submit.657185 - https://gist.github.com/KhanMarshaI/9a1a5b72ff7a0a9d180ca77d26814bc7
CVE ID: CVE-2025-11029 State: PUBLISHED Published: 2025-09-26T16:32:05.672Z Last Updated: 2025-09-26T17:51:15.246Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: givanz Products: Vvveb Problem Types: CWE-352, CWE-862 Description: A weakness has been identified in givanz Vvveb up to 1.0.7.2. This vulnerability affects unknown code. Executing manipulation can lead to cross-site request forgery. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Once again the project maintainer reacted very professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilitie
ry professional: "I accept the existence of these vulnerabilities. (...) I fixed the code to remove these vulnerabilities and will push the code to github and make a new release." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325967 - https://vuldb.com/?ctiid.325967 - https://vuldb.com/?submit.657188 - https://vuldb.com/?submit.657190 - https://vuldb.com/?submit.657191 - https://vuldb.com/?submit.657192 - https://gist.github.com/KhanMarshaI/165ae8f63ec6b5fdf1f4123252499fce - https://gist.github.com/KhanMarshaI/db888b65cfd75bead2035348babfb423
CVE ID: CVE-2025-11030 State: PUBLISHED Published: 2025-09-26T17:02:06.052Z Last Updated: 2025-09-26T17:51:06.849Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Tutorials-Website Products: Employee Management System Problem Types: CWE-285, CWE-266 Description: A vulnerability was detected in Tutorials-Website Employee Management System up to 611887d8f8375271ce8abc704507d46340837a60. Impacted is an unknown function of the file /admin/all-applied-leave.php of the component HTTP Request Handler. The manipulation results in improper authorization. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling r
n. The attack may be performed from remote. The exploit is now public and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325969 - https://vuldb.com/?ctiid.325969 - https://vuldb.com/?submit.657210 - https://drive.google.com/file/d/1N5ApKiYw-yKNhVERr4m3ruooiANgpFRo/view?usp=sharing
CVE ID: CVE-2025-11031 State: PUBLISHED Published: 2025-09-26T17:02:09.560Z Last Updated: 2025-09-26T17:50:52.515Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:O/RC:C) Vendors: n/a Products: DataTables Problem Types: CWE-22 Description: A flaw has been found in DataTables up to 1.10.13. The affected element is an unknown function of the file /examples/resources/examples.php. This manipulation of the argument src causes path traversal. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 1.10.15 is sufficient to fix this issue. Patch name: 3b24f99ac4ddb7f9072076b0d07f0b1a408f177a. Upgrading the a
o version 1.10.15 is sufficient to fix this issue. Patch name: 3b24f99ac4ddb7f9072076b0d07f0b1a408f177a. Upgrading the affected component is advised. This vulnerability was initially reported for code-projects Faculty Management System but appears to affect DataTables as an upstream component instead. The vendor of DataTables explains: "I would suggest that the author upgrade to the latest versions of DataTables (actually, they shouldn't really be deploying that file to their own server at all - it is only relevant for the DataTables examples)." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325970 - https://vuldb.com/?ctiid.325970 - https://vuldb.com/
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325970 - https://vuldb.com/?ctiid.325970 - https://vuldb.com/?submit.657918 - https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md - https://github.com/xiaoliyu-1/Faculty-Management-System-examples.php-v.1.0-Path-Traversal/blob/main/report.md#url - https://github.com/DataTables/DataTables/commit/3b24f99ac4ddb7f9072076b0d07f0b1a408f177a - https://github.com/DataTables/DataTables/releases/tag/1.10.15
CVE ID: CVE-2025-11032 State: PUBLISHED Published: 2025-09-26T17:32:05.839Z Last Updated: 2025-09-26T17:49:58.986Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kidaze Products: CourseSelectionSystem Problem Types: CWE-89, CWE-74 Description: A flaw has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. This issue affects some unknown processing of the file /Profilers/PriProfile/COUNT3s6.php. Executing manipulation of the argument CPU can lead to sql injection. The attack may be performed from remote. The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery,
The exploit has been published and may be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325979 - https://vuldb.com/?ctiid.325979 - https://vuldb.com/?submit.657950 - https://github.com/limingserverll-wq/cve/issues/3
CVE ID: CVE-2025-11033 State: PUBLISHED Published: 2025-09-26T18:02:05.749Z Last Updated: 2025-09-26T18:32:47.794Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kidaze Products: CourseSelectionSystem Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in kidaze CourseSelectionSystem up to 42cd892b40a18d50bd4ed1905fa89f939173a464. Impacted is an unknown function of the file /Profilers/PriProfile/COUNT3s7.php. The manipulation of the argument cbe leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious
exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325980 - https://vuldb.com/?ctiid.325980 - https://vuldb.com/?submit.657951 - https://github.com/limingserverll-wq/cve/issues/4