Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-9434 State: PUBLISHED Published: 2025-08-26T01:02:14.589Z Last Updated: 2025-09-05T17:10:18.538Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Project Report Submission and Evaluation System Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in 1000projects Online Project Report Submission and Evaluation System 1.0. This affects an unknown function of the file /admin/edit_title.php?id=1. Executing manipulation of the argument desc can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA
may be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321275 - https://vuldb.com/?ctiid.321275 - https://vuldb.com/?submit.634184 - https://github.com/lan041221/cvec/issues/11
CVE ID: CVE-2025-9437 State: PUBLISHED Published: 2025-10-14T12:13:29.421Z Last Updated: 2025-10-14T18:44:17.558Z Vendors: Rockwell Automation Products: ArmorStart AOP Problem Types: CWE-755 Description: A security issue exists within the Studio 5000 Logix Designer add-on profile (AOP) for the ArmorStart Classic distributed motor controller, resulting in denial-of-service. This vulnerability is possible due to the input of invalid values into Component Object Model (COM) methods. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1751.html
CVE ID: CVE-2025-9438 State: PUBLISHED Published: 2025-08-26T01:32:06.812Z Last Updated: 2025-08-26T18:57:27.627Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Project Report Submission and Evaluation System Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected is an unknown function of the file /admin/add_student.php. The manipulation of the argument address results in cross site scripting. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CIS
be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321277 - https://vuldb.com/?ctiid.321277 - https://vuldb.com/?submit.634195 - https://github.com/lan041221/cvec/issues/12
CVE ID: CVE-2025-9439 State: PUBLISHED Published: 2025-08-26T02:02:06.545Z Last Updated: 2025-08-26T18:03:41.426Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Project Report Submission and Evaluation System Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this vulnerability is an unknown functionality of the file /rse/admin/edit_faculty.php?id=2. This manipulation of the argument Name causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and cou
scripting. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321278 - https://vuldb.com/?ctiid.321278 - https://vuldb.com/?submit.634197 - https://github.com/lan041221/cvec/issues/13
CVE ID: CVE-2025-9440 State: PUBLISHED Published: 2025-08-26T02:02:08.876Z Last Updated: 2025-08-26T14:10:40.874Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Project Report Submission and Evaluation System Problem Types: CWE-79, CWE-94 Description: A security vulnerability has been detected in 1000projects Online Project Report Submission and Evaluation System 1.0. Affected by this issue is some unknown functionality of the file /admin/add_title.php. Such manipulation of the argument Title leads to cross site scripting. The attack may be performed from a remote location. The exploit has been disclosed publicly and may be used. Ad
ripting. The attack may be performed from a remote location. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321279 - https://vuldb.com/?ctiid.321279 - https://vuldb.com/?submit.634208 - https://github.com/lan041221/cvec/issues/14
CVE ID: CVE-2025-9441 State: PUBLISHED Published: 2025-08-29T04:25:30.351Z Last Updated: 2025-08-29T11:58:17.874Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: iatspaymentsdev Products: iATS Online Forms Problem Types: CWE-89 Description: The iATS Online Forms plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order' parameter in all versions up to, and including, 1.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing qu
henticated attackers, with Contributor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ea183ae3-683f-4eec-b583-feefc8c62382?source=cve - https://plugins.trac.wordpress.org/browser/iats-online-forms/trunk/class-iats-form-table.php#L241 - https://wordpress.org/plugins/iats-online-forms/#developers
CVE ID: CVE-2025-9442 State: PUBLISHED Published: 2025-09-06T03:22:35.747Z Last Updated: 2025-09-08T20:17:42.508Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: streamweasels Products: StreamWeasels Kick Integration Problem Types: CWE-79 Description: The StreamWeasels Kick Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘vodsChannel’ parameter in all versions up to, and including, 1.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses
Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/4a433565-0896-4ba9-a718-9507c6c4ba58?source=cve - https://plugins.trac.wordpress.org/browser/streamweasels-kick-integration/trunk/public/partials/streamweasels-kick-vods-public-display.php#L44 - https://wordpress.org/plugins/streamweasels-kick-integration/#developers - https://plugins.trac.wordpress.org/changeset/3355340#file4
CVE ID: CVE-2025-9443 State: PUBLISHED Published: 2025-08-26T02:32:08.370Z Last Updated: 2025-08-26T14:02:09.254Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A flaw has been found in Tenda CH22 1.0.0.1. This vulnerability affects the function formeditUserName of the file /goform/editUserName. Executing manipulation of the argument new_account can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321281 - https://vuldb.com/?ctiid.321281 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321281 - https://vuldb.com/?ctiid.321281 - https://vuldb.com/?submit.634271 - https://github.com/moweizhang1994/cve/issues/4 - https://www.tenda.com.cn/
CVE ID: CVE-2025-9444 State: PUBLISHED Published: 2025-08-26T03:02:06.417Z Last Updated: 2025-08-26T13:59:20.346Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Project Report Submission and Evaluation System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in 1000projects Online Project Report Submission and Evaluation System 1.0. This issue affects some unknown processing of the file /admin/controller/delete_group_student.php. The manipulation of the argument batch_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Ana
tion. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321282 - https://vuldb.com/?ctiid.321282 - https://vuldb.com/?submit.634272 - https://github.com/yunhdeng/CVE/issues/1
CVE ID: CVE-2025-9447 State: PUBLISHED Published: 2025-09-17T06:12:58.127Z Last Updated: 2025-09-17T12:50:06.853Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-125 Description: An Out-Of-Bounds Read vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9447
CVE ID: CVE-2025-9449 State: PUBLISHED Published: 2025-09-17T06:13:08.090Z Last Updated: 2025-09-17T12:50:33.276Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-416 Description: A Use After Free vulnerability affecting the PAR file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted PAR file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9449
CVE ID: CVE-2025-9450 State: PUBLISHED Published: 2025-09-17T06:13:25.958Z Last Updated: 2025-09-17T12:51:00.889Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dassault Systèmes Products: SOLIDWORKS eDrawings Problem Types: CWE-457 Description: A Use of Uninitialized Variable vulnerability affecting the JT file reading procedure in SOLIDWORKS eDrawings on Release SOLIDWORKS Desktop 2025 could allow an attacker to execute arbitrary code while opening a specially crafted JT file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.3ds.com/trust-center/security/security-advisories/cve-2025-9450
CVE ID: CVE-2025-9451 State: PUBLISHED Published: 2025-09-11T07:24:59.052Z Last Updated: 2025-09-11T14:38:07.093Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: smartcatai Products: Smartcat Translator for WPML Problem Types: CWE-89 Description: The Smartcat Translator for WPML plugin for WordPress is vulnerable to time-based SQL Injection via the ‘orderby’ parameter in all versions up to, and including, 3.1.69 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into al
es it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/c9ebc817-ccae-4ad2-8eea-eade1c2a1a0c?source=cve - https://plugins.trac.wordpress.org/browser/smartcat-wpml/trunk/includes/Services/App/Includes/TranslationRequestFinder.php#L30 - https://wordpress.org/plugins/smartcat-wpml/#developers
CVE ID: CVE-2025-9458 State: PUBLISHED Published: 2025-11-07T18:01:48.595Z Last Updated: 2025-11-08T04:55:20.636Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Autodesk Products: Shared Components Problem Types: CWE-120 Description: A maliciously crafted PRT file, when parsed through certain Autodesk products, can force a Memory Corruption vulnerability. A malicious actor can leverage this vulnerability to execute arbitrary code in the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.autodesk.com/products/autodesk-access/overview - https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0019
CVE ID: CVE-2025-9461 State: PUBLISHED Published: 2025-08-26T03:02:08.509Z Last Updated: 2025-08-26T13:39:47.790Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: diyhi Products: bbs Problem Types: CWE-200, CWE-284 Description: A weakness has been identified in diyhi bbs up to 6.8. The impacted element is an unknown function of the file src/main/java/cms/web/action/filePackage/FilePackageManageAction.java of the component File Compression Handler. This manipulation of the argument idGroup causes information disclosure. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additio
xploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321296 - https://vuldb.com/?ctiid.321296 - https://vuldb.com/?submit.634295 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e1.md
CVE ID: CVE-2025-9463 State: PUBLISHED Published: 2025-09-10T06:38:46.456Z Last Updated: 2025-09-10T16:11:12.990Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: peachpay Products: Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net Problem Types: CWE-89 Description: The Payments Plugin and Checkout Plugin for WooCommerce: Stripe, PayPal, Square, Authorize.net plugin for WordPress is vulnerable to time-based SQL Injection via the ‘order_by’ parameter in all versions up to, and including, 1.117.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This
insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/670953e2-46d3-46f9-9922-0a3c9c277968?source=cve - https://plugins.trac.wordpress.org/browser/peachpay-for-woocommerce/tags/1.117.4/core/modules/analytics/class-peachpay-analytics-database.php#L582 - https://wordpress.org/plugins/peachpay
/tags/1.117.4/core/modules/analytics/class-peachpay-analytics-database.php#L582 - https://wordpress.org/plugins/peachpay-for-woocommerce/ - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3356898%40peachpay-for-woocommerce&new=3356898%40peachpay-for-woocommerce&sfp_email=&sfph_mail=
CVE ID: CVE-2025-9467 State: PUBLISHED Published: 2025-09-04T06:15:47.336Z Last Updated: 2025-09-04T13:41:24.243Z Vendors: vaadin Products: vaadin, framework, vaadin-upload-flow Problem Types: CWE-20 Description: When the Vaadin Upload's start listener is used to validate metadata about an incoming upload, it is possible to bypass the upload validation. Users of affected versions should apply the following mitigation or upgrade. Releases that have fixed this issue include: Product version Vaadin 7.0.0 - 7.7.47 Vaadin 8.0.0 - 8.28.1 Vaadin 14.0.0 - 14.13.0 Vaadin 23.0.0 - 23.6.1 Vaadin 24.0.0 - 24.7.6 Mitigation Upgrade to 7.7.48 Upgrade to 8.28.2 Upgrade to 14.13.1 Upgrade to 23.6.2 Upgrade
.6.1 Vaadin 24.0.0 - 24.7.6 Mitigation Upgrade to 7.7.48 Upgrade to 8.28.2 Upgrade to 14.13.1 Upgrade to 23.6.2 Upgrade to 24.7.7 or newer Please note that Vaadin versions 10-13 and 15-22 are no longer supported and you should update either to the latest 14, 23, 24 version. Artifacts Maven coordinatesVulnerable versionsFixed versioncom.vaadin:vaadin-server 7.0.0 - 7.7.47 ≥7.7.48 com.vaadin:vaadin-server 8.0.0 - 8.28.1 ≥8.28.2 com.vaadin:vaadin 14.0.0 - 14.13.0 ≥14.13.1 com.vaadin:vaadin23.0.0 - 23.6.1 ≥23.6.2 com.vaadin:vaadin24.0.0 - 24.7.6 ≥24.7.7com.vaadin:vaadin-upload-flow 2.0.0 - 14.13.0 ≥14.13.1 com.vaadin:vaadin-upload-flow 23.0.0 - 23.6.1 ≥23.6.2 com.vaadin:vaadin-upload-flow 24.0.0
flow 2.0.0 - 14.13.0 ≥14.13.1 com.vaadin:vaadin-upload-flow 23.0.0 - 23.6.1 ≥23.6.2 com.vaadin:vaadin-upload-flow 24.0.0 - 24.7.6 ≥24.7.7 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vaadin.com/security/cve-2025-9467
CVE ID: CVE-2025-9468 State: PUBLISHED Published: 2025-08-26T03:32:07.196Z Last Updated: 2025-08-26T13:27:05.938Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /bill/add_bill.php. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321333 - https://vuldb.com/?ctiid.321333 - https://vuldb.com/?submit.634079 - https://github.com/zhuyi-hz/cve/issues/15 - https://itsourcecode.com/
CVE ID: CVE-2025-9469 State: PUBLISHED Published: 2025-08-26T03:32:10.029Z Last Updated: 2025-08-26T13:21:54.305Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /fund/add_fund.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321334 - http
ic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321334 - https://vuldb.com/?ctiid.321334 - https://vuldb.com/?submit.634080 - https://github.com/zhuyi-hz/cve/issues/14 - https://itsourcecode.com/
CVE ID: CVE-2025-9470 State: PUBLISHED Published: 2025-08-26T04:02:06.656Z Last Updated: 2025-08-26T13:19:33.226Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Apartment Management System 1.0. This affects an unknown part of the file /management/add_m_committee.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321335 - https://vuldb.com/
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321335 - https://vuldb.com/?ctiid.321335 - https://vuldb.com/?submit.634081 - https://github.com/zhuyi-hz/cve/issues/13 - https://itsourcecode.com/
CVE ID: CVE-2025-9471 State: PUBLISHED Published: 2025-08-26T04:02:09.405Z Last Updated: 2025-08-26T13:13:17.593Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Apartment Management System 1.0. This vulnerability affects unknown code of the file /maintenance/add_maintenance_cost.php. The manipulation of the argument ID leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321336 - https://vuldb.com/?ctiid.321336 - https://vuldb.com/?submit.634082 - https://github.com/zhuyi-hz/cve/issues/12 - https://itsourcecode.com/
CVE ID: CVE-2025-9472 State: PUBLISHED Published: 2025-08-26T04:32:07.567Z Last Updated: 2025-08-26T13:06:54.097Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /owner_utility/add_owner_utility.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321337
public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321337 - https://vuldb.com/?ctiid.321337 - https://vuldb.com/?submit.634083 - https://github.com/zhuyi-hz/cve/issues/11 - https://itsourcecode.com/
CVE ID: CVE-2025-9473 State: PUBLISHED Published: 2025-08-26T05:02:07.198Z Last Updated: 2025-08-26T17:21:21.216Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Bank Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Online Bank Management System 1.0. This impacts an unknown function of the file /feedback.php. The manipulation of the argument msg leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321342 - h
licly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321342 - https://vuldb.com/?ctiid.321342 - https://vuldb.com/?submit.634362 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb0e2.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-9474 State: PUBLISHED Published: 2025-08-26T05:02:09.404Z Last Updated: 2025-09-05T17:10:11.510Z Severity: MEDIUM (CVSS 4.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: Mihomo Products: Party Problem Types: CWE-378, CWE-377 Description: A vulnerability was detected in Mihomo Party up to 1.8.1 on macOS. Affected is the function enableSysProxy of the file src/main/sys/sysproxy.ts of the component Socket Handler. The manipulation results in creation of temporary file with insecure permissions. The attack requires a local approach. This attack is characterized by high complexity. The exploitability is told to be difficult. The exploit is now public and ma