Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8990 State: PUBLISHED Published: 2025-08-15T00:02:05.596Z Last Updated: 2025-08-15T19:02:27.550Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Medicine Guide Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /browsemdcn.php. The manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319986 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319986 - https://vuldb.com/?ctiid.319986 - https://vuldb.com/?submit.628677 - https://github.com/zhuyi-hz/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-8991 State: PUBLISHED Published: 2025-08-15T00:32:05.399Z Last Updated: 2025-08-15T14:26:04.500Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: linlinjava Products: litemall Problem Types: CWE-840 Description: A vulnerability was identified in linlinjava litemall up to 1.8.0. Affected by this vulnerability is an unknown functionality of the file /admin/config/express of the component Business Logic Handler. The manipulation of the argument litemall_express_freight_min leads to business logic errors. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
k can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319987 - https://vuldb.com/?ctiid.319987 - https://vuldb.com/?submit.628764 - https://github.com/linlinjava/litemall/issues/566 - https://github.com/linlinjava/litemall/issues/566#issue-3267858791
CVE ID: CVE-2025-8992 State: PUBLISHED Published: 2025-08-15T01:05:00.773Z Last Updated: 2025-08-15T12:50:01.174Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-352, CWE-862 Description: A vulnerability has been found in mtons mblog up to 3.5.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319988 - https://vuldb.com/?ctiid.319988 - https://vuldb.com/?submit.628765 - https://git
ences: - https://vuldb.com/?id.319988 - https://vuldb.com/?ctiid.319988 - https://vuldb.com/?submit.628765 - https://gitee.com/mtons/mblog/issues/ICPMGP
CVE ID: CVE-2025-8993 State: PUBLISHED Published: 2025-08-15T01:05:09.063Z Last Updated: 2025-08-15T12:49:22.212Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /admin/expense_report.php. The manipulation of the argument from_date leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319989 - https://vuldb.com/?ctiid.319989 - https://vuldb.com/?submit.628788 - https://github.com/lin-3-start/lin-cve/issues/1 - https://itsourcecode.com/
CVE ID: CVE-2025-8994 State: PUBLISHED Published: 2025-11-15T05:45:33.608Z Last Updated: 2025-11-24T20:27:01.309Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: wedevs Products: Project Management & Task Manager with Kanban Board & Gantt Chart – WP Project Manager Problem Types: CWE-89 Description: The Project Management, Team Collaboration, Kanban Board, Gantt Charts, Task Manager and More – WP Project Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘completed_at_operator’ parameter in all versions up to, and including, 2.6.26 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on th
d including, 2.6.26 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/74984cc6-06b1-4c3a-a3e6-9e104c71e9c5?source=cve - https://plugins.trac.wordpress.org/browser/wedevs-project-manager/tags/2.6.24/src/Task/Helper/Task.php#L1484 - https://plugins.trac.wordpress.org/changeset/33861
r/wedevs-project-manager/tags/2.6.24/src/Task/Helper/Task.php#L1484 - https://plugins.trac.wordpress.org/changeset/3386164/
CVE ID: CVE-2025-8995 State: PUBLISHED Published: 2025-08-15T16:27:39.017Z Last Updated: 2025-08-16T03:55:56.226Z Vendors: Drupal Products: Authenticator Login Problem Types: CWE-288 Description: Authentication Bypass Using an Alternate Path or Channel vulnerability in Drupal Authenticator Login allows Authentication Bypass.This issue affects Authenticator Login: from 0.0.0 before 2.1.4. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-096
CVE ID: CVE-2025-8996 State: PUBLISHED Published: 2025-08-15T16:27:53.342Z Last Updated: 2025-08-15T16:41:33.912Z Vendors: Drupal Products: Layout Builder Advanced Permissions Problem Types: CWE-862 Description: Missing Authorization vulnerability in Drupal Layout Builder Advanced Permissions allows Forceful Browsing.This issue affects Layout Builder Advanced Permissions: from 0.0.0 before 2.2.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.drupal.org/sa-contrib-2025-097
CVE ID: CVE-2025-8997 State: PUBLISHED Published: 2025-08-25T06:30:24.141Z Last Updated: 2025-08-25T13:53:30.652Z Vendors: OpenText Products: OpenText Enterprise Security Manager Problem Types: CWE-598 Description: An Information Exposure vulnerability has been identified in OpenText Enterprise Security Manager. The vulnerability could be remotely exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://portal.microfocus.com/s/article/KM000042482
CVE ID: CVE-2025-8998 State: PUBLISHED Published: 2025-11-11T07:28:40.933Z Last Updated: 2025-11-14T18:21:44.092Z Severity: LOW (CVSS 3.1 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-73 Description: It was possible to upload files with a specific name to a temporary directory, which may result in process crashes and impact usability. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/f5/62/80/cve-2025-8998pdf-en-US-504374.pdf
CVE ID: CVE-2025-8999 State: PUBLISHED Published: 2025-09-17T11:25:55.832Z Last Updated: 2025-09-17T13:07:02.567Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: athemes Products: Sydney Problem Types: CWE-862 Description: The Sydney theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'activate_modules' function in all versions up to, and including, 2.56. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate or deactivate various theme modules. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vul
eme modules. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/965582c6-a52e-4f88-81ef-b5dd761a0c23?source=cve - https://themes.trac.wordpress.org/browser/sydney/2.55/inc/classes/class-sydney-modules.php#L166 - https://themes.trac.wordpress.org/browser/sydney/2.55/inc/modules/class-sydney-modules.php#L72 - https://themes.trac.wordpress.org/changeset/288374/
CVE ID: CVE-2025-9000 State: PUBLISHED Published: 2025-08-15T01:32:06.506Z Last Updated: 2025-08-15T12:48:36.237Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Mechrevo Products: Control Center GX V2 Problem Types: CWE-427, CWE-426 Description: A vulnerability was found in Mechrevo Control Center GX V2 5.56.51.48. Affected by this vulnerability is an unknown functionality of the component reg File Handler. The manipulation leads to uncontrolled search path. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and ma
an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320029 - https://vuldb.com/?ctiid.320029 - https://vuldb.com/?submit.624903 - https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
CVE ID: CVE-2025-9001 State: PUBLISHED Published: 2025-08-15T02:02:06.013Z Last Updated: 2025-08-15T12:46:28.682Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: LemonOS Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
d remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320030 - https://vuldb.com/?ctiid.320030 - https://vuldb.com/?submit.624974 - https://hkohi.ca/vulnerability/16 - https://github.com/LemonOSProject/LemonOS/issues/60
CVE ID: CVE-2025-9002 State: PUBLISHED Published: 2025-08-15T02:02:07.810Z Last Updated: 2025-08-15T12:45:05.687Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Surbowl Products: dormitory-management-php Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Surbowl dormitory-management-php 1.0. This affects an unknown part of the file login.php. The manipulation of the argument Account leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA
is vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320031 - https://vuldb.com/?ctiid.320031 - https://vuldb.com/?submit.625595 - https://github.com/fatdog957/CVE-/issues/1
CVE ID: CVE-2025-9003 State: PUBLISHED Published: 2025-08-15T02:32:05.762Z Last Updated: 2025-08-18T18:36:33.352Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-818LW Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in D-Link DIR-818LW 1.04. This vulnerability affects unknown code of the file /bsc_lan.php of the component DHCP Reserved Address Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
hat are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320032 - https://vuldb.com/?ctiid.320032 - https://vuldb.com/?submit.628334 - https://www.dlink.com/
CVE ID: CVE-2025-9004 State: PUBLISHED Published: 2025-08-15T02:32:12.183Z Last Updated: 2025-08-18T18:33:35.737Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: mtons Products: mblog Problem Types: CWE-307, CWE-799 Description: A vulnerability was found in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /settings/password. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
tation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320033 - https://vuldb.com/?ctiid.320033 - https://vuldb.com/?submit.628785 - https://gitee.com/mtons/mblog/issues/ICPMIR
CVE ID: CVE-2025-9005 State: PUBLISHED Published: 2025-08-15T03:02:11.498Z Last Updated: 2025-08-18T18:32:11.845Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: mtons Products: mblog Problem Types: CWE-209, CWE-200 Description: A vulnerability was determined in mtons mblog up to 3.5.0. Affected is an unknown function of the file /register. The manipulation leads to information exposure through error message. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320034 - https://vuldb.com/?ctiid.320034 - https://vuldb.com/?submit.628787 - https://gitee.com/mtons/mblog/issues/ICPMJO
CVE ID: CVE-2025-9006 State: PUBLISHED Published: 2025-08-15T03:02:14.847Z Last Updated: 2025-08-18T18:21:51.578Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in Tenda CH22 1.0.0.1. Affected by this vulnerability is the function formdelFileName of the file /goform/delFileName. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320035 - https://vuldb.com/?ctiid.320035 - https://vuldb.com/?su
A ADP Vulnrichment: References: - https://vuldb.com/?id.320035 - https://vuldb.com/?ctiid.320035 - https://vuldb.com/?submit.628845 - https://github.com/moweizhang1994/cve/issues/2 - https://www.tenda.com.cn/
CVE ID: CVE-2025-9007 State: PUBLISHED Published: 2025-08-15T03:32:07.493Z Last Updated: 2025-08-18T18:20:42.779Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CH22 Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in Tenda CH22 1.0.0.1. Affected by this issue is the function formeditFileName of the file /goform/editFileName. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320036 - https://vuldb.com/?ctiid.320036 - https://vuldb.com/?submit.6
Vulnrichment: References: - https://vuldb.com/?id.320036 - https://vuldb.com/?ctiid.320036 - https://vuldb.com/?submit.628867 - https://github.com/moweizhang1994/cve/issues/3 - https://www.tenda.com.cn/
CVE ID: CVE-2025-9008 State: PUBLISHED Published: 2025-08-15T04:02:06.016Z Last Updated: 2025-08-15T16:17:13.774Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Online Tour and Travel Management System 1.0. This issue affects some unknown processing of the file /admin/sms_setting.php. The manipulation of the argument uname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320039 - https://vuldb.com/?ctiid.320039 - https://vuldb.com/?submit.628871 - https://github.com/lin-3-start/lin-cve/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-9009 State: PUBLISHED Published: 2025-08-15T04:32:06.752Z Last Updated: 2025-08-18T18:19:59.653Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Online Tour and Travel Management System 1.0. Affected is an unknown function of the file /admin/email_setup.php. The manipulation of the argument Name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320040 - https://vuldb.com/?ctiid.320040 - https://vuldb.com/?submit.628873 - https://github.com/lin-3-start/lin-cve/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-9010 State: PUBLISHED Published: 2025-08-15T04:32:09.058Z Last Updated: 2025-08-15T12:20:27.604Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Online Tour and Travel Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/booking_report.php. The manipulation of the argument from_date leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320041 - https://vuldb.com/?ctiid.320041 - https://vuldb.com/?submit.628874 - https://github.com/lin-3-start/lin-cve/issues/2 - https://itsourcecode.com/
CVE ID: CVE-2025-9011 State: PUBLISHED Published: 2025-08-15T05:02:06.702Z Last Updated: 2025-08-15T12:19:54.655Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Shopping Portal Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in PHPGurukul Online Shopping Portal Project 2.0. Affected by this issue is some unknown functionality of the file /shopping/signup.php. The manipulation of the argument emailid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.c
isclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320042 - https://vuldb.com/?ctiid.320042 - https://vuldb.com/?submit.629438 - https://github.com/StrongDog23/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-9012 State: PUBLISHED Published: 2025-08-15T05:32:07.099Z Last Updated: 2025-08-15T12:19:30.995Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Shopping Portal Project Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in PHPGurukul Online Shopping Portal Project 2.0. This affects an unknown part of the file shopping/bill-ship-addresses.php. The manipulation of the argument billingpincode leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320043 - https://vuldb.com/?ctiid.320043 - https://vuldb.com/?submit.629456 - https://github.com/StrongDog23/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-9013 State: PUBLISHED Published: 2025-08-15T06:02:06.143Z Last Updated: 2025-08-15T12:14:40.458Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Shopping Portal Project Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Shopping Portal Project 2.0. This vulnerability affects unknown code of the file /shopping/password-recovery.php. The manipulation of the argument emailid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.co
sclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320044 - https://vuldb.com/?ctiid.320044 - https://vuldb.com/?submit.629553 - https://github.com/StrongDog23/myCVE/issues/3 - https://phpgurukul.com/
CVE ID: CVE-2025-9016 State: PUBLISHED Published: 2025-08-15T06:32:05.308Z Last Updated: 2025-08-15T12:13:55.497Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: Mechrevo Products: Control Center GX V2 Problem Types: CWE-427, CWE-426 Description: A vulnerability was identified in Mechrevo Control Center GX V2 5.56.51.48. This affects an unknown part of the file C:\Program Files\OEM\机械革命控制中心\AiStoneService\MyControlCenter\Command of the component Powershell Script Handler. The manipulation leads to uncontrolled search path. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be
ccess is required to approach this attack. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320067 - https://vuldb.com/?ctiid.320067 - https://vuldb.com/?submit.624900 - https://drive.proton.me/urls/7QYSEW6734#H3N4fQ3mw6gX
CVE ID: CVE-2025-9017 State: PUBLISHED Published: 2025-08-15T07:02:07.080Z Last Updated: 2025-08-15T12:04:11.113Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Zoo Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in PHPGurukul Zoo Management System 2.1. This vulnerability affects unknown code of the file /admin/add-foreigner-ticket.php. The manipulation of the argument visitorname leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.320