Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329926 - https://vuldb.com/?ctiid.329926 - https://vuldb.com/?submit.674006 - https://github.com/zzonce/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-12256 State: PUBLISHED Published: 2025-10-27T09:32:05.563Z Last Updated: 2025-10-27T14:17:19.226Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in code-projects Online Event Judging System 1.0. This vulnerability affects unknown code of the file /edit_contestant.php. Executing manipulation of the argument contestant_id can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
n made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329927 - https://vuldb.com/?ctiid.329927 - https://vuldb.com/?submit.674009 - https://github.com/zzonce/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-12257 State: PUBLISHED Published: 2025-10-27T09:32:08.633Z Last Updated: 2025-10-27T14:16:39.217Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Online Student Result System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Online Student Result System 1.0. This issue affects some unknown processing of the file /view_result.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
t has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329928 - https://vuldb.com/?ctiid.329928 - https://vuldb.com/?submit.673983 - https://github.com/Cloverhyl/CVE/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-12258 State: PUBLISHED Published: 2025-10-27T09:32:11.829Z Last Updated: 2025-10-27T13:23:42.434Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:ND/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3300R Problem Types: CWE-121, CWE-119 Description: A vulnerability was detected in TOTOLINK A3300R 17.0.0cu.557_B20221024. Impacted is the function setOpModeCfg of the file /cgi-bin/cstecgi.cg of the component POST Parameter Handler. The manipulation of the argument opmode results in stack-based buffer overflow. The attack may be performed from remote. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329929 - https://vuldb.com/?ctiid.329929 - http
lyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329929 - https://vuldb.com/?ctiid.329929 - https://vuldb.com/?submit.673725 - https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setOpModeCfg.md - https://www.totolink.net/
CVE ID: CVE-2025-12259 State: PUBLISHED Published: 2025-10-27T10:02:08.097Z Last Updated: 2025-10-27T20:13:39.307Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3300R Problem Types: CWE-121, CWE-119 Description: A flaw has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The affected element is the function setScheduleCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. This manipulation of the argument recHour causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329930 - https://vuldb.com/?ctiid.329930 - https://vuldb.com/?submit.673726 - https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setScheduleCfg.md - https://www.totolink.net/
CVE ID: CVE-2025-12260 State: PUBLISHED Published: 2025-10-27T10:02:11.656Z Last Updated: 2025-10-27T20:13:58.026Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: A3300R Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in TOTOLINK A3300R 17.0.0cu.557_B20221024. The impacted element is the function setSyslogCfg of the file /cgi-bin/cstecgi.cgi of the component POST Parameter Handler. Such manipulation of the argument enable leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329931 - https://vuldb.com/?ctiid.329931 - https://vuldb.com/?submit.673727 - https://github.com/noahze01/IoT-vulnerable/blob/main/TOTOLink/A3300R/setSyslogCfg.md - https://www.totolink.net/
CVE ID: CVE-2025-12261 State: PUBLISHED Published: 2025-10-27T10:02:14.597Z Last Updated: 2025-10-27T13:23:02.540Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: CodeAstro Products: Gym Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in CodeAstro Gym Management System 1.0. This affects an unknown function of the file /admin/actions/remove-announcement.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329932 - https://vuldb.c
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329932 - https://vuldb.com/?ctiid.329932 - https://vuldb.com/?submit.674022 - https://github.com/JeromClown/cve/issues/1 - https://codeastro.com/
CVE ID: CVE-2025-12262 State: PUBLISHED Published: 2025-10-27T10:32:05.934Z Last Updated: 2025-10-27T13:22:24.941Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /edit_criteria.php. Executing manipulation of the argument crit_id can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329933
losed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329933 - https://vuldb.com/?ctiid.329933 - https://vuldb.com/?submit.674056 - https://github.com/anyizilegong/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-12263 State: PUBLISHED Published: 2025-10-27T10:32:08.484Z Last Updated: 2025-10-27T12:46:44.143Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /edit_judge.php. The manipulation of the argument judge_id leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329934 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329934 - https://vuldb.com/?ctiid.329934 - https://vuldb.com/?submit.674065 - https://github.com/anyizilegong/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-12264 State: PUBLISHED Published: 2025-10-27T10:32:10.416Z Last Updated: 2025-10-27T12:20:59.536Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:ND) Vendors: n/a Products: Wisencode Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in Wisencode up to 20251012. Affected by this vulnerability is an unknown functionality of the file /support-ticket/create of the component Create Support Ticket Handler. The manipulation of the argument Message results in cross site scripting. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vu
vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329935 - https://vuldb.com/?ctiid.329935 - https://vuldb.com/?submit.673806
CVE ID: CVE-2025-12265 State: PUBLISHED Published: 2025-10-27T11:02:07.933Z Last Updated: 2025-10-27T12:14:52.668Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A weakness has been identified in Tenda CH22 1.0.0.1. Affected by this issue is the function fromVirtualSer of the file /goform/VirtualSer. This manipulation of the argument page causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329936 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329936 - https://vuldb.com/?ctiid.329936 - https://vuldb.com/?submit.674012 - https://github.com/QIU-DIE/CVE/issues/18 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12266 State: PUBLISHED Published: 2025-10-27T11:02:10.635Z Last Updated: 2025-10-27T12:10:15.962Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Zytec Dalian Zhuoyun Technology Products: Central Authentication Service Problem Types: CWE-94, CWE-74 Description: A vulnerability was detected in Zytec Dalian Zhuoyun Technology Central Authentication Service up to 20251009. This vulnerability affects the function _empty of the file /index.php/auth/widget. Performing manipulation of the argument get.layer/get.widget/get.action results in code injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The
lts in code injection. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329938 - https://vuldb.com/?ctiid.329938 - https://vuldb.com/?submit.671721 - http://101.200.76.102:38765/qwertyuiop/Vuldb/Zytec.html
CVE ID: CVE-2025-12267 State: PUBLISHED Published: 2025-10-27T11:02:13.921Z Last Updated: 2025-10-27T12:05:29.018Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:C) Vendors: abhicodebox Products: ModernShop Problem Types: CWE-79, CWE-94 Description: A flaw has been found in abhicodebox ModernShop 20250922. This issue affects some unknown processing of the file /search. Executing manipulation of the argument q can lead to cross site scripting. The attack may be performed from remote. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329939 - https://vuldb.com/?ctiid.329939 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329939 - https://vuldb.com/?ctiid.329939 - https://vuldb.com/?submit.673717 - https://www.codester.com/items/comments/58847/modern-shop-php-ecommerce-platform
CVE ID: CVE-2025-12268 State: PUBLISHED Published: 2025-10-27T11:32:06.104Z Last Updated: 2025-10-27T13:18:34.621Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: LearnHouse Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Impacted is an unknown function of the file /api/v1/courses/ of the component Course Thumbnail Handler. The manipulation of the argument thumbnail leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide conti
. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329940 - https://vuldb.com/?ctiid.329940 - https://vuldb.com/?submit.674145 - https://gist.github.com/KhanMarshaI/ef07d20eb1cbe30c71722fbded7cc056
CVE ID: CVE-2025-12269 State: PUBLISHED Published: 2025-10-27T11:32:08.512Z Last Updated: 2025-10-27T13:17:47.154Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: LearnHouse Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The affected element is an unknown function of the file /dash/org/settings/previews of the component Account Setting Page. The manipulation results in cross site scripting. It is possible to launch the attack remotely. The exploit has been made public and could be used. This product takes the approach of rolling releases to provide continious deliver
as been made public and could be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329941 - https://vuldb.com/?ctiid.329941 - https://vuldb.com/?submit.674146 - https://gist.github.com/KhanMarshaI/c06263648d8a807108801e1a4daf0ab9
CVE ID: CVE-2025-12270 State: PUBLISHED Published: 2025-10-27T12:02:07.011Z Last Updated: 2025-10-27T13:16:14.087Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: LearnHouse Problem Types: CWE-99 Description: A vulnerability was determined in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. The impacted element is an unknown function of the file /api/v1/assignments/{assignment_id}/tasks/{task_id}/sub_file of the component Student Assignment Submission Handler. This manipulation causes improper control of resource identifiers. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilize
f resource identifiers. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329942 - https://vuldb.com/?ctiid.329942 - https://vuldb.com/?submit.674147 - https://gist.github.com/KhanMarshaI/f71f86fbd5d8e8363f9113a8c054c28b
CVE ID: CVE-2025-12271 State: PUBLISHED Published: 2025-10-27T12:02:10.792Z Last Updated: 2025-10-27T13:15:34.156Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in Tenda CH22 1.0.0.1. This affects the function fromRouteStatic of the file /goform/RouteStatic. Such manipulation of the argument page leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329943 - https://vuldb.com/?ctiid.329943 - https://vuldb.com/?submit.67
ulnrichment: References: - https://vuldb.com/?id.329943 - https://vuldb.com/?ctiid.329943 - https://vuldb.com/?submit.674153 - https://github.com/QIU-DIE/CVE/issues/20 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12272 State: PUBLISHED Published: 2025-10-27T12:02:14.528Z Last Updated: 2025-10-27T13:14:57.485Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A security flaw has been discovered in Tenda CH22 1.0.0.1. This impacts the function fromAddressNat of the file /goform/addressNat. Performing manipulation of the argument page results in buffer overflow. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329944 - https://vuldb.com/?ctiid.329944 - htt
alyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329944 - https://vuldb.com/?ctiid.329944 - https://vuldb.com/?submit.674159 - https://github.com/QIU-DIE/CVE/issues/21 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12273 State: PUBLISHED Published: 2025-10-27T12:32:08.278Z Last Updated: 2025-10-27T13:07:43.656Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A weakness has been identified in Tenda CH22 1.0.0.1. Affected is the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. Executing manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329945 - https://vuldb.co
loited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329945 - https://vuldb.com/?ctiid.329945 - https://vuldb.com/?submit.674161 - https://github.com/QIU-DIE/CVE/issues/22 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12274 State: PUBLISHED Published: 2025-10-27T12:32:12.399Z Last Updated: 2025-10-27T13:05:48.770Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A security vulnerability has been detected in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to buffer overflow. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329946 - https://vuld
ay be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329946 - https://vuldb.com/?ctiid.329946 - https://vuldb.com/?submit.674165 - https://github.com/QIU-DIE/CVE/issues/23 - https://www.tenda.com.cn/
CVE ID: CVE-2025-12275 State: PUBLISHED Published: 2025-10-26T16:15:33.851Z Last Updated: 2025-10-28T14:35:27.315Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-20 Description: Mail Configuration File Manipulation + Command Execution.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12276 State: PUBLISHED Published: 2025-10-27T13:02:05.167Z Last Updated: 2025-10-27T20:14:46.615Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: LearnHouse Problem Types: CWE-200, CWE-284 Description: A vulnerability was detected in LearnHouse up to 98dfad76aad70711a8113f6c1fdabfccf10509ca. Affected by this issue is some unknown functionality of the component Image Handler. The manipulation results in information disclosure. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or
be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329947 - https://vuldb.com/?ctiid.329947 - https://vuldb.com/?submit.674148 - https://gist.github.com/KhanMarshaI/4a89e9d807094b6dd4a138bc5664e748
CVE ID: CVE-2025-12277 State: PUBLISHED Published: 2025-10-27T13:02:07.671Z Last Updated: 2025-10-27T20:15:12.936Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Abdullah-Hasan-Sajjad Products: Online-School Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Abdullah-Hasan-Sajjad Online-School up to f09dda77b4c29aa083ff57f4b1eb991b98b68883. This affects an unknown part of the file /studentLogin.php. This manipulation of the argument Email causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vend
been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329948 - https://vuldb.com/?ctiid.329948 - https://vuldb.com/?submit.674173 - https://github.com/DaoYunXinShang/Reports/blob/main/sql%20injection.doc
CVE ID: CVE-2025-12278 State: PUBLISHED Published: 2025-10-26T16:14:33.383Z Last Updated: 2025-10-28T14:34:56.546Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-20 Description: Logout Functionality not Working.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12279 State: PUBLISHED Published: 2025-10-27T13:02:10.472Z Last Updated: 2025-10-27T20:16:07.395Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Client Details System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in code-projects Client Details System 1.0. This vulnerability affects unknown code of the file /welcome.php. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329949 - https://vuldb.com/?ctiid.329
tional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329949 - https://vuldb.com/?ctiid.329949 - https://vuldb.com/?submit.674190 - https://github.com/hellonewbie/tutorial/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-12280 State: PUBLISHED Published: 2025-10-27T13:32:05.925Z Last Updated: 2025-10-27T14:25:29.509Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Client Details System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Client Details System 1.0. This issue affects some unknown processing of the file /update-clients.php. Performing manipulation results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329950 - https://vuldb.com/