Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
to os command injection. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321689 - https://vuldb.com/?ctiid.321689 - https://vuldb.com/?submit.634840 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_13/13.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9576 State: PUBLISHED Published: 2025-08-28T18:02:08.263Z Last Updated: 2025-08-28T18:23:48.501Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: seeedstudio Products: ReSpeaker Problem Types: CWE-1392 Description: A vulnerability was identified in seeedstudio ReSpeaker LinkIt7688. Impacted is an unknown function of the file /etc/shadow of the component Administrative Interface. The manipulation leads to use of default credentials. An attack has to be approached locally. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor w
he attack. The exploitability is considered difficult. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321690 - https://vuldb.com/?ctiid.321690 - https://vuldb.com/?submit.636068 - https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md - https://github.com/XXRicardo/iot-cve/blob/main/seeedstudio/ramips-openwrt-LinkIt7688.md#steps-to-reproduce
CVE ID: CVE-2025-9577 State: PUBLISHED Published: 2025-08-28T18:32:07.573Z Last Updated: 2025-08-28T18:41:04.929Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: TOTOLINK Products: X2000R Problem Types: CWE-1392 Description: A security flaw has been discovered in TOTOLINK X2000R up to 2.0.0. The affected element is an unknown function of the file /etc/shadow.sample of the component Administrative Interface. The manipulation results in use of default credentials. Attacking locally is a requirement. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploite
y complex. The exploitability is described as difficult. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321691 - https://vuldb.com/?ctiid.321691 - https://vuldb.com/?submit.636069 - https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md - https://github.com/XXRicardo/iot-cve/blob/main/TOLOLINK/X2000R-Gh-V2.0.0.md#steps-to-reproduce - https://www.totolink.net/
CVE ID: CVE-2025-9578 State: PUBLISHED Published: 2025-08-28T14:01:46.663Z Last Updated: 2025-08-29T03:55:23.224Z Severity: HIGH (CVSS 7.8 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Acronis Products: Acronis Cyber Protect Cloud Agent Problem Types: CWE-732 Description: Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 40734. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://security-advisory.acronis.com/advisories/SEC-9107
CVE ID: CVE-2025-9579 State: PUBLISHED Published: 2025-08-28T18:32:09.759Z Last Updated: 2025-08-28T18:41:59.318Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LB-LINK Products: BL-X26 Problem Types: CWE-78, CWE-77 Description: A weakness has been identified in LB-LINK BL-X26 1.2.8. The impacted element is an unknown function of the file /goform/set_hidessid_cfg of the component HTTP Handler. This manipulation of the argument enable causes os command injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Addi
public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321692 - https://vuldb.com/?ctiid.321692 - https://vuldb.com/?submit.636082 - https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-1/B-Link%20X26%20V1.2.8.md - https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-1/B-Link%20X26%20V1.2.8.md#3-poc
CVE ID: CVE-2025-9580 State: PUBLISHED Published: 2025-08-28T19:02:06.830Z Last Updated: 2025-08-28T19:58:24.267Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LB-LINK Products: BL-X26 Problem Types: CWE-78, CWE-77 Description: A security vulnerability has been detected in LB-LINK BL-X26 1.2.8. This affects an unknown function of the file /goform/set_blacklist of the component HTTP Handler. Such manipulation of the argument mac leads to os command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes:
be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321693 - https://vuldb.com/?ctiid.321693 - https://vuldb.com/?submit.636083 - https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-2/B-Link%20X26%20V1.2.8.md - https://github.com/lin-3-start/lin-cve/blob/main/B-Link%20X26%20V1.2.8-2/B-Link%20X26%20V1.2.8.md#3poc
CVE ID: CVE-2025-9581 State: PUBLISHED Published: 2025-08-28T19:02:10.432Z Last Updated: 2025-08-28T20:01:08.768Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A vulnerability was detected in Comfast CF-N1 2.6.0. This impacts the function multi_pppoe of the file /usr/bin/webmgnt. Performing manipulation of the argument phy_interface results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321694 - https://vuldb.com/?ctiid.321694 - https://vuldb.com/?submi
DP Vulnrichment: References: - https://vuldb.com/?id.321694 - https://vuldb.com/?ctiid.321694 - https://vuldb.com/?submit.636127 - https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/multi_pppoe
CVE ID: CVE-2025-9582 State: PUBLISHED Published: 2025-08-28T19:32:07.054Z Last Updated: 2025-08-28T20:04:06.709Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A flaw has been found in Comfast CF-N1 2.6.0. Affected is the function ntp_timezone of the file /usr/bin/webmgnt. Executing manipulation of the argument timestr can lead to command injection. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321695 - https://vuldb.com/?ctiid.321695 - https://vuldb.com/?submit.636128
chment: References: - https://vuldb.com/?id.321695 - https://vuldb.com/?ctiid.321695 - https://vuldb.com/?submit.636128 - https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/ntp_timezone
CVE ID: CVE-2025-9583 State: PUBLISHED Published: 2025-08-28T20:02:06.456Z Last Updated: 2025-08-28T20:14:55.933Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in Comfast CF-N1 2.6.0. Affected by this vulnerability is the function ping_config of the file /usr/bin/webmgnt. The manipulation leads to command injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321696 - https://vuldb.com/?ctiid.321696 - https://vuld
es: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321696 - https://vuldb.com/?ctiid.321696 - https://vuldb.com/?submit.636130 - https://github.com/ZZ2266/.github.io/tree/main/COMFAST/N1V2/ping_config
CVE ID: CVE-2025-9584 State: PUBLISHED Published: 2025-08-28T20:02:08.649Z Last Updated: 2025-08-28T20:13:50.031Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Comfast CF-N1 2.6.0. Affected by this issue is the function update_interface_png of the file /usr/bin/webmgnt. The manipulation of the argument interface/display_name results in command injection. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321697 - https://vuldb.com/?ctiid.3216
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321697 - https://vuldb.com/?ctiid.321697 - https://vuldb.com/?submit.636131 - https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/update_interface_png/readme.md
CVE ID: CVE-2025-9585 State: PUBLISHED Published: 2025-08-28T20:32:06.368Z Last Updated: 2025-08-29T13:27:44.109Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A vulnerability was determined in Comfast CF-N1 2.6.0. This affects the function wifilith_delete_pic_file of the file /usr/bin/webmgnt. This manipulation of the argument portal_delete_picname causes command injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321698 - https://vuldb.
utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321698 - https://vuldb.com/?ctiid.321698 - https://vuldb.com/?submit.636136 - https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/wifilith_delete_pic_file/readme.md
CVE ID: CVE-2025-9586 State: PUBLISHED Published: 2025-08-28T21:02:05.469Z Last Updated: 2025-08-29T13:29:07.586Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Comfast Products: CF-N1 Problem Types: CWE-77, CWE-74 Description: A vulnerability was identified in Comfast CF-N1 2.6.0. This vulnerability affects the function wireless_device_dissoc of the file /usr/bin/webmgnt. Such manipulation of the argument mac leads to command injection. The attack may be performed from a remote location. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321699 - https://vuldb.com/?ctiid.
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321699 - https://vuldb.com/?ctiid.321699 - https://vuldb.com/?submit.636137 - https://github.com/ZZ2266/.github.io/blob/main/COMFAST/N1V2/wireless_device_dissoc/readme.md
CVE ID: CVE-2025-9587 State: PUBLISHED Published: 2025-10-02T06:00:02.893Z Last Updated: 2025-11-13T20:55:10.747Z Vendors: Unknown Products: CTL Behance Importer Lite Problem Types: CWE-89 SQL Injection Description: The CTL Behance Importer Lite WordPress plugin through 1.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/e497f8b3-d70b-4d81-b915-e78ea5c02863/
CVE ID: CVE-2025-9588 State: PUBLISHED Published: 2025-09-23T07:51:53.825Z Last Updated: 2025-09-23T19:20:48.995Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Iron Mountain Archiving Services Inc. Products: enVision Problem Types: CWE-78 Description: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Iron Mountain Archiving Services Inc. EnVision allows Command Injection.This issue affects enVision: before 250563. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0285
CVE ID: CVE-2025-9589 State: PUBLISHED Published: 2025-08-28T21:32:07.077Z Last Updated: 2025-08-29T17:06:04.813Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Cudy Products: WR1200EA Problem Types: CWE-1393 Description: A vulnerability was determined in Cudy WR1200EA 2.3.7-20250113-121810. Affected is an unknown function of the file /etc/shadow. Executing manipulation can lead to use of default password. The attack needs to be launched locally. A high complexity level is associated with this attack. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this
to be difficult. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321761 - https://vuldb.com/?ctiid.321761 - https://vuldb.com/?submit.636138 - https://github.com/ZZ2266/.github.io/tree/main/Cudy - https://github.com/ZZ2266/.github.io/tree/main/Cudy#steps-to-reproduce
CVE ID: CVE-2025-9590 State: PUBLISHED Published: 2025-08-28T21:32:09.213Z Last Updated: 2025-08-29T13:29:49.008Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Weaver Products: E-Mobile Mobile Management Platform Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Weaver E-Mobile Mobile Management Platform up to 20250813. Affected by this vulnerability is an unknown functionality. The manipulation of the argument gohome leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
le and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321762 - https://vuldb.com/?ctiid.321762 - https://vuldb.com/?submit.636164 - https://github.com/Lee0568/pocccc/blob/main/poc.md - https://github.com/Lee0568/pocccc/blob/main/poc.md#vulnerability-analysis
CVE ID: CVE-2025-9591 State: PUBLISHED Published: 2025-08-28T22:02:06.489Z Last Updated: 2025-08-29T13:32:12.303Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: ZrLog Problem Types: CWE-79, CWE-94 Description: A security vulnerability has been detected in ZrLog up to 3.1.5. This vulnerability affects unknown code of the file /api/admin/template/config of the component Theme Configuration Form. Such manipulation of the argument footerLink leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
closed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321765 - https://vuldb.com/?ctiid.321765 - https://vuldb.com/?submit.636176 - https://github.com/SaaS5SaaS/CVE/issues/3
CVE ID: CVE-2025-9592 State: PUBLISHED Published: 2025-08-28T22:02:09.300Z Last Updated: 2025-08-29T16:30:13.719Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /report/bill_info.php. Performing manipulation of the argument vid results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321766 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321766 - https://vuldb.com/?ctiid.321766 - https://vuldb.com/?submit.636178 - https://github.com/pjy2004/cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-9593 State: PUBLISHED Published: 2025-08-28T22:32:07.066Z Last Updated: 2025-08-29T13:32:53.255Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /report/unit_status_info.php. Executing manipulation of the argument usid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321767 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321767 - https://vuldb.com/?ctiid.321767 - https://vuldb.com/?submit.636186 - https://github.com/pjy2004/cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-9594 State: PUBLISHED Published: 2025-08-28T23:02:07.850Z Last Updated: 2025-08-29T13:33:34.428Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /report/complain_info.php. The manipulation of the argument vid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321768 - https://vuldb.com/?ctiid.321768 - https://vuldb.com/?submit.636187 - https://github.com/pjy2004/cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-9595 State: PUBLISHED Published: 2025-08-28T23:32:07.226Z Last Updated: 2025-08-29T13:35:07.338Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Student Information Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Student Information Management System 1.0. The impacted element is an unknown function of the file /login.php. The manipulation of the argument uname results in cross site scripting. The attack may be performed from a remote location. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
ploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321769 - https://vuldb.com/?ctiid.321769 - https://vuldb.com/?submit.636359 - https://github.com/zzb1388/cve/issues/57 - https://code-projects.org/
CVE ID: CVE-2025-9596 State: PUBLISHED Published: 2025-08-28T23:32:10.097Z Last Updated: 2025-08-29T13:37:17.213Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Sports Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in itsourcecode Sports Management System 1.0. This affects an unknown function of the file /login.php. This manipulation of the argument User causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321770 - https://vuldb.co
ilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321770 - https://vuldb.com/?ctiid.321770 - https://vuldb.com/?submit.636362 - https://github.com/zzb1388/cve/issues/55 - https://itsourcecode.com/
CVE ID: CVE-2025-9597 State: PUBLISHED Published: 2025-08-29T00:02:07.436Z Last Updated: 2025-08-29T14:28:00.294Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Apartment Management System 1.0. This impacts an unknown function of the file /o_dashboard/rented_all_info.php. Such manipulation of the argument uid leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321771
ailable and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321771 - https://vuldb.com/?ctiid.321771 - https://vuldb.com/?submit.636363 - https://github.com/zzb1388/cve/issues/54 - https://itsourcecode.com/
CVE ID: CVE-2025-9598 State: PUBLISHED Published: 2025-08-29T00:02:11.319Z Last Updated: 2025-08-29T14:28:31.943Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Apartment Management System 1.0. Affected is an unknown function of the file /setting/year_setup.php. Performing manipulation of the argument txtXYear results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
sed to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321772 - https://vuldb.com/?ctiid.321772 - https://vuldb.com/?submit.636364 - https://github.com/zzb1388/cve/issues/53 - https://itsourcecode.com/
CVE ID: CVE-2025-9599 State: PUBLISHED Published: 2025-08-29T00:32:06.724Z Last Updated: 2025-08-29T16:28:50.050Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Apartment Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /setting/month_setup.php. Executing manipulation of the argument txtMonthName can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichm
The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321773 - https://vuldb.com/?ctiid.321773 - https://vuldb.com/?submit.636365 - https://github.com/zzb1388/cve/issues/52 - https://itsourcecode.com/
CVE ID: CVE-2025-9600 State: PUBLISHED Published: 2025-08-29T00:32:09.383Z Last Updated: 2025-08-29T16:28:16.558Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Affected by this issue is some unknown functionality of the file /setting/member_type_setup.php. The manipulation of the argument txtMemberType leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen