Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-1166 State: PUBLISHED Published: 2025-02-11T01:00:11.426Z Last Updated: 2025-02-18T18:02:58.660Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Food Menu Manager Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in SourceCodester Food Menu Manager 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file endpoint/update.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295069 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295069 - https://vuldb.com/?ctiid.295069 - https://vuldb.com/?submit.494567 - https://gist.github.com/jmx0hxq/0ce2c97ca11b2423a203b5719438c9f8 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1167 State: PUBLISHED Published: 2025-02-11T01:31:03.714Z Last Updated: 2025-02-18T18:02:30.653Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Mayuri K Products: Employee Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Mayuri K Employee Management System up to 192.168.70.3 and classified as critical. Affected by this issue is some unknown functionality of the file /hr_soft/admin/Update_User.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295070 - https://vuldb.com/?ctiid.295070 - https://vuldb.com/?submit.494725
CVE ID: CVE-2025-1168 State: PUBLISHED Published: 2025-02-11T02:00:10.382Z Last Updated: 2025-02-18T18:02:02.353Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Contact Manager with Export to VCF Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Contact Manager with Export to VCF 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /endpoint/delete-contact.php. The manipulation of the argument contact leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295072 - https://vuldb.com/?ctiid.295072 - https://vuldb.com/?submit.494766 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1169 State: PUBLISHED Published: 2025-02-11T02:31:05.194Z Last Updated: 2025-02-18T18:01:36.532Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: SourceCodester Products: Image Compressor Tool Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in SourceCodester Image Compressor Tool 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /image-compressor/compressor.php. The manipulation of the argument image leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295073 - https://vuldb.com/?ctiid.295073 - https://vuldb.com/?submit.494775 - https://www.sourcecodester.com/
CVE ID: CVE-2025-1170 State: PUBLISHED Published: 2025-02-11T03:00:12.395Z Last Updated: 2025-02-18T18:01:06.199Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Real Estate Property Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /Admin/Category.php. The manipulation of the argument Desc leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295074 - https://vuldb.com/?ctiid.295074 - https://vuldb.com/?submit.494829 - https://github.com/J0hnFFFF/j0hn_upload_five/blob/main/web2.pdf - https://code-projects.org/
CVE ID: CVE-2025-1171 State: PUBLISHED Published: 2025-02-11T03:31:05.079Z Last Updated: 2025-02-18T17:53:58.098Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Real Estate Property Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in code-projects Real Estate Property Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /Admin/CustomerReport.php. The manipulation of the argument Address leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vu
launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295075 - https://vuldb.com/?ctiid.295075 - https://vuldb.com/?submit.494830 - https://github.com/J0hnFFFF/j0hn_upload_six/blob/main/web3.pdf - https://code-projects.org/
CVE ID: CVE-2025-1172 State: PUBLISHED Published: 2025-02-11T04:00:11.157Z Last Updated: 2025-02-18T17:53:25.257Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in 1000 Projects Bookstore Management System 1.0. Affected by this issue is some unknown functionality of the file addtocart.php. The manipulation of the argument bcid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295076 - https://vuldb.com/?ctiid.295076 - https://vuldb.com/?submit.495183 - https://github.com/NeoVuln/CVE/issues/1 - https://1000projects.org/
CVE ID: CVE-2025-1173 State: PUBLISHED Published: 2025-02-11T04:31:04.566Z Last Updated: 2025-02-18T17:52:18.302Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in 1000 Projects Bookstore Management System 1.0. This affects an unknown part of the file process_users_del.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295077 - https://vuldb.com/?ctiid.295077 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295077 - https://vuldb.com/?ctiid.295077 - https://vuldb.com/?submit.495309 - https://github.com/NeoVuln/CVE/issues/2 - https://1000projects.org/
CVE ID: CVE-2025-1174 State: PUBLISHED Published: 2025-02-11T05:00:14.613Z Last Updated: 2025-02-11T15:17:59.415Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: 1000 Projects Products: Bookstore Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in 1000 Projects Bookstore Management System 1.0 and classified as problematic. This vulnerability affects unknown code of the file process_book_add.php of the component Add Book Page. The manipulation of the argument Book Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as we
itiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295078 - https://vuldb.com/?ctiid.295078 - https://vuldb.com/?submit.495318 - https://github.com/NeoVuln/CVE/issues/3 - https://1000projects.org/
CVE ID: CVE-2025-1175 State: PUBLISHED Published: 2025-02-10T12:42:26.693Z Last Updated: 2025-02-12T15:43:14.698Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Kelio Products: Kelio Visio 1, Kelio Visio X7, Kelio Visio X4 Problem Types: CWE-79 Description: Reflected Cross-Site Scripting (XSS) vulnerability in Kelio Visio 1, Kelio Visio X7 and Kelio Visio X4, in versions between 3.2C and 5.1K. This vulnerability could allow an attacker to execute a JavaScript payload by making a POST request and injecting malicious code into the editable ‘username’ parameter of the ‘/PageLoginVisio.do’ endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
username’ parameter of the ‘/PageLoginVisio.do’ endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.incibe.es/en/incibe-cert/notices/aviso/cross-site-scripting-xss-vulnerability-kelio-visio
CVE ID: CVE-2025-1176 State: PUBLISHED Published: 2025-02-11T05:31:08.015Z Last Updated: 2025-04-11T22:03:21.576Z Severity: N/A (CVSS 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P) Vendors: GNU Products: Binutils Problem Types: CWE-122, CWE-119 Description: A vulnerability was found in GNU Binutils 2.43 and classified as critical. This issue affects the function _bfd_elf_gc_mark_rsec of the file elflink.c of the component ld. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d9
be difficult. The exploit has been disclosed to the public and may be used. The patch is named f9978defb6fab0bd8583942d97c112b0932ac814. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.295079 - https://vuldb.com/?ctiid.295079 - https://vuldb.com/?submit.495329 - https://sourceware.org/bugzilla/show_bug.cgi?id=32636 - https://sourceware.org/bugzilla/attachment.cgi?id=15913 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=f9978defb6fab0bd8583942d97c112b0932ac814 - https://www.gnu.org/
CVE ID: CVE-2025-1177 State: PUBLISHED Published: 2025-02-11T06:00:11.417Z Last Updated: 2025-02-11T15:16:01.246Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: dayrui Products: XunRuiCMS Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in dayrui XunRuiCMS 4.6.3. It has been classified as critical. Affected is the function import_add of the file dayrui/Fcms/Control/Admin/Linkage.php. The manipulation leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295080 - https://vuldb.com/?ctiid.295080
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295080 - https://vuldb.com/?ctiid.295080 - https://vuldb.com/?submit.495366 - https://github.com/stevenchen0x01/CVE2/blob/main/cve2.md
CVE ID: CVE-2025-1178 State: PUBLISHED Published: 2025-02-11T06:31:12.580Z Last Updated: 2025-04-11T22:03:22.878Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: GNU Products: Binutils Problem Types: CWE-119 Description: A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. Affected by this vulnerability is the function bfd_putl64 of the file libbfd.c of the component ld. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is
on appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is 75086e9de1707281172cc77f178e7949a4414ed0. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.295081 - https://vuldb.com/?ctiid.295081 - https://vuldb.com/?submit.495369 - https://sourceware.org/bugzilla/show_bug.cgi?id=32638 - https://sourceware.org/bugzilla/attachment.cgi?id=15914 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=75086e9de1707281172cc77f178e7949a4414ed0 - https://www.gnu.org/
CVE ID: CVE-2025-1179 State: PUBLISHED Published: 2025-02-11T07:00:10.602Z Last Updated: 2025-02-11T15:15:23.220Z Severity: N/A (CVSS 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P) Vendors: GNU Products: Binutils Problem Types: CWE-119 Description: A vulnerability was found in GNU Binutils 2.43. It has been rated as critical. Affected by this issue is the function bfd_putl64 of the file bfd/libbfd.c of the component ld. The manipulation leads to memory corruption. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It
e exploit has been disclosed to the public and may be used. Upgrading to version 2.44 is able to address this issue. It is recommended to upgrade the affected component. The code maintainer explains, that "[t]his bug has been fixed at some point between the 2.43 and 2.44 releases". Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295082 - https://vuldb.com/?ctiid.295082 - https://vuldb.com/?submit.495376 - https://sourceware.org/bugzilla/show_bug.cgi?id=32640 - https://sourceware.org/bugzilla/attachment.cgi?id=15915 - https://sourceware.org/bugzilla/show_bug.cgi?id=32640#c1 - https://www.gnu.org/
CVE ID: CVE-2025-1180 State: PUBLISHED Published: 2025-02-11T07:31:06.853Z Last Updated: 2025-02-11T14:55:02.649Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L) Vendors: GNU Products: Binutils Problem Types: CWE-119 Description: A vulnerability classified as problematic has been found in GNU Binutils 2.43. This affects the function _bfd_elf_write_section_eh_frame of the file bfd/elf-eh-frame.c of the component ld. The manipulation leads to memory corruption. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommende
e exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295083 - https://vuldb.com/?ctiid.295083 - https://vuldb.com/?submit.495381 - https://sourceware.org/bugzilla/show_bug.cgi?id=32642 - https://sourceware.org/bugzilla/attachment.cgi?id=15917 - https://www.gnu.org/
CVE ID: CVE-2025-1181 State: PUBLISHED Published: 2025-02-11T08:00:11.337Z Last Updated: 2025-04-25T23:02:58.994Z Severity: N/A (CVSS 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P) Vendors: GNU Products: Binutils Problem Types: CWE-119 Description: A vulnerability classified as critical was found in GNU Binutils 2.43. This vulnerability affects the function _bfd_elf_gc_mark_rsec of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c017
t. The exploit has been disclosed to the public and may be used. The name of the patch is 931494c9a89558acb36a03a340c01726545eef24. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://vuldb.com/?id.295084 - https://vuldb.com/?ctiid.295084 - https://vuldb.com/?submit.495402 - https://sourceware.org/bugzilla/show_bug.cgi?id=32643 - https://sourceware.org/bugzilla/attachment.cgi?id=15918 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=931494c9a89558acb36a03a340c01726545eef24 - https://www.gnu.org/
CVE ID: CVE-2025-1182 State: PUBLISHED Published: 2025-02-11T08:31:08.272Z Last Updated: 2025-02-11T14:47:09.739Z Severity: N/A (CVSS 5.1 AV:N/AC:H/Au:N/C:P/I:P/A:P) Vendors: GNU Products: Binutils Problem Types: CWE-119 Description: A vulnerability, which was classified as critical, was found in GNU Binutils 2.43. Affected is the function bfd_elf_reloc_symbol_deleted_p of the file bfd/elflink.c of the component ld. The manipulation leads to memory corruption. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d1
d to be difficult. The exploit has been disclosed to the public and may be used. The patch is identified as b425859021d17adf62f06fb904797cf8642986ad. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295086 - https://vuldb.com/?ctiid.295086 - https://vuldb.com/?submit.495407 - https://sourceware.org/bugzilla/show_bug.cgi?id=32644 - https://sourceware.org/bugzilla/attachment.cgi?id=15919 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=b425859021d17adf62f06fb904797cf8642986ad - https://www.gnu.org/
CVE ID: CVE-2025-1183 State: PUBLISHED Published: 2025-02-12T06:58:30.355Z Last Updated: 2025-02-18T17:42:17.794Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: CodeZips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in CodeZips Gym Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/admin/more-userprofile.php. The manipulation of the argument login_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295087 - https://vuldb.com/?ctiid.295087 - https://vuldb.com/?submit.495410 - https://www.yuque.com/polaris-pisym/aevk1q/fyu4dy8fglbs6rzy
CVE ID: CVE-2025-1184 State: PUBLISHED Published: 2025-02-12T07:00:12.040Z Last Updated: 2025-02-18T17:41:49.661Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: pihome-shc Products: PiHome Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in pihome-shc PiHome 1.77 and classified as critical. Affected by this issue is some unknown functionality of the file /ajax.php?Ajax=GetModal_MQTTEdit. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295088 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295088 - https://vuldb.com/?ctiid.295088 - https://vuldb.com/?submit.495413 - https://github.com/janssensjelle/published-pocs/blob/main/pihome_sqli_ajax.md
CVE ID: CVE-2025-1185 State: PUBLISHED Published: 2025-02-12T07:31:04.076Z Last Updated: 2025-02-18T17:41:18.594Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: pihome-shc Products: PiHome Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in pihome-shc PiHome 2.0. It has been classified as critical. This affects an unknown part of the file /ajax.php?Ajax=GetModal_Sensor_Graph. The manipulation leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295089 - https://vuldb.com/?ctiid.295089 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295089 - https://vuldb.com/?ctiid.295089 - https://vuldb.com/?submit.495548 - https://github.com/janssensjelle/published-pocs/blob/main/pihomehva_sqli_ajax.md
CVE ID: CVE-2025-1186 State: PUBLISHED Published: 2025-02-12T08:00:11.363Z Last Updated: 2025-02-18T17:39:11.065Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: dayrui Products: XunRuiCMS Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in dayrui XunRuiCMS up to 4.6.4. It has been declared as critical. This vulnerability affects unknown code of the file /Control/Api/Api.php. The manipulation of the argument thumb leads to deserialization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295090 - https://vuldb.com/?ctiid.2
ditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295090 - https://vuldb.com/?ctiid.295090 - https://vuldb.com/?submit.495820 - https://github.com/pwysec/d6qRhl/blob/main/1.pdf
CVE ID: CVE-2025-1187 State: PUBLISHED Published: 2025-02-12T08:31:04.907Z Last Updated: 2025-02-12T14:44:27.356Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: code-projects Products: Police FIR Record Management System Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in code-projects Police FIR Record Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Delete Record Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
is a requirement. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295093 - https://vuldb.com/?ctiid.295093 - https://vuldb.com/?submit.495921 - https://github.com/zzzxc643/cve/blob/main/STACK_OVERFLOW_cve.md - https://code-projects.org/
CVE ID: CVE-2025-1188 State: PUBLISHED Published: 2025-02-12T09:00:10.434Z Last Updated: 2025-02-18T17:38:13.914Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Codezips Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in Codezips Gym Management System 1.0. Affected by this issue is some unknown functionality of the file /dashboard/admin/updateroutine.php. The manipulation of the argument tid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.295094 - https://vuldb.com/?ctiid.295094 - https://vuldb.com/?submit.496409 - https://github.com/takakie/CVE/blob/main/cve_1.md