Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
t is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323049 - https://vuldb.com/?ctiid.323049 - https://vuldb.com/?submit.644935 - https://github.com/i-Corner/cve/issues/21 - https://www.dlink.com/
CVE ID: CVE-2025-10094 State: PUBLISHED Published: 2025-09-12T04:57:11.650Z Last Updated: 2025-09-12T13:05:11.654Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: GitLab Products: GitLab Problem Types: CWE-1284 Description: An issue has been discovered in GitLab CE/EE affecting all versions from 10.7 before 18.1.6, 18.2 before 18.2.6, and 18.3 before 18.3.2 that could have allowed authenticated users to disrupt access to token listings and related administrative operations by creating tokens with excessively large names. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-r
Notes: - CISA ADP Vulnrichment: References: - https://about.gitlab.com/releases/2025/09/10/patch-release-gitlab-18-3-2-released/ - https://gitlab.com/gitlab-org/gitlab/-/issues/528469 - https://hackerone.com/reports/3049089
CVE ID: CVE-2025-10095 State: PUBLISHED Published: 2025-09-09T09:59:07.413Z Last Updated: 2025-09-11T15:13:38.259Z Vendors: Proximus sp. z o.o. Products: SMSEagle Problem Types: CWE-89 Description: A SQL injection vulnerability has been identified in the SMPP server component of the SMSEagle firmware, specifically affecting the handling of certain parameters within the server's database interactions. The vulnerability is isolated to the SMPP server, which operates with its own dedicated database, separate from the main software's database. This isolation limits the scope of the vulnerability to the SMPP server's operations. The vulnerability arises from improper sanitization of user input in
the vulnerability to the SMPP server's operations. The vulnerability arises from improper sanitization of user input in the SMPP server's scripts. This issue has been fixed in version 6.11. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/09/CVE-2025-10095 - https://www.smseagle.eu/security-advisory/resolved-sql-injection-in-smpp-component-of-smseagle-software-6-11/
CVE ID: CVE-2025-10096 State: PUBLISHED Published: 2025-09-08T15:32:08.846Z Last Updated: 2025-09-08T15:54:31.292Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: SimStudioAI Products: sim Problem Types: CWE-918 Description: A vulnerability was determined in SimStudioAI sim up to 1.0.0. This affects an unknown function of the file apps/sim/app/api/files/parse/route.ts. Executing manipulation of the argument filePath can lead to server-side request forgery. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This patch is called 3424a338b763115f0269b209e777608e4cd31785. Applying a patch is advised to resolve this issu
tilized. This patch is called 3424a338b763115f0269b209e777608e4cd31785. Applying a patch is advised to resolve this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323057 - https://vuldb.com/?ctiid.323057 - https://vuldb.com/?submit.644953 - https://github.com/simstudioai/sim/issues/960 - https://github.com/simstudioai/sim/pull/1149 - https://github.com/simstudioai/sim/commit/3424a338b763115f0269b209e777608e4cd31785
CVE ID: CVE-2025-10097 State: PUBLISHED Published: 2025-09-08T16:32:06.882Z Last Updated: 2025-09-09T13:41:12.135Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: SimStudioAI Products: sim Problem Types: CWE-94, CWE-74 Description: A vulnerability was identified in SimStudioAI sim up to 1.0.0. This impacts an unknown function of the file apps/sim/app/api/function/execute/route.ts. The manipulation of the argument code leads to code injection. The attack is possible to be carried out remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323058 - https://vuldb.com/?ctiid.323058 - https://vuldb.com/?submit.644954 - https:/
eferences: - https://vuldb.com/?id.323058 - https://vuldb.com/?ctiid.323058 - https://vuldb.com/?submit.644954 - https://github.com/simstudioai/sim/issues/961 - https://github.com/simstudioai/sim/issues/961#issuecomment-3215578979
CVE ID: CVE-2025-10098 State: PUBLISHED Published: 2025-09-08T17:02:07.736Z Last Updated: 2025-10-15T15:59:35.656Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: User Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in PHPGurukul User Management System 1.0. Affected is an unknown function of the file /admin/edit-user-profile.php. The manipulation of the argument uid results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323059 - h
and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323059 - https://vuldb.com/?ctiid.323059 - https://vuldb.com/?submit.644966 - https://github.com/CSentinel/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-10099 State: PUBLISHED Published: 2025-09-08T17:32:09.058Z Last Updated: 2025-09-08T18:57:09.784Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in Portabilis i-Educar up to 2.10. Affected by this vulnerability is an unknown functionality of the file /intranet/educar_usuario_cad.php of the component Editar usuário Page. This manipulation of the argument email/data_inicial/data_expiracao causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. Additi
ssible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323060 - https://vuldb.com/?ctiid.323060 - https://vuldb.com/?submit.644967 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10099.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Cross-Site%20Scripting%20(XSS)%20Reflected%20endpoint%20%60educar_usuario_cad.php%60%20parameters%20%60email%60,%20%60data_inicial%60,%20%60data_expiracao%60.md
CVE ID: CVE-2025-10100 State: PUBLISHED Published: 2025-09-08T18:02:09.311Z Last Updated: 2025-09-08T18:54:33.614Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple Forum Discussion System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Simple Forum Discussion System 1.0. This impacts an unknown function of the file /admin_class.php?action=login. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
xploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323080 - https://vuldb.com/?ctiid.323080 - https://vuldb.com/?submit.645389 - https://github.com/bdrfly/cve/issues/1 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10102 State: PUBLISHED Published: 2025-09-08T18:32:09.841Z Last Updated: 2025-09-08T18:51:59.214Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in code-projects Online Event Judging System 1.0. This affects an unknown function of the file /index.php. Performing manipulation of the argument Username results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
eleased to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323068 - https://vuldb.com/?ctiid.323068 - https://vuldb.com/?submit.645297 - https://github.com/yihaofuweng/cve/issues/14 - https://code-projects.org/
CVE ID: CVE-2025-10103 State: PUBLISHED Published: 2025-09-08T19:02:07.153Z Last Updated: 2025-09-08T19:44:12.224Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in code-projects Online Event Judging System 1.0. This impacts an unknown function of the file /home.php. Executing manipulation of the argument main_event can lead to sql injection. The attack may be performed from remote. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323069 - https://vuldb.com/?ctiid.323069 - https://vuldb.com/?submit.645298 - https://github.com/yihaofuweng/cve/issues/16 - https://code-projects.org/
CVE ID: CVE-2025-10104 State: PUBLISHED Published: 2025-09-08T20:02:06.910Z Last Updated: 2025-09-08T20:19:51.283Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Event Judging System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in code-projects Online Event Judging System 1.0. Affected is an unknown function of the file /review_search.php. The manipulation of the argument txtsearch leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
n disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323070 - https://vuldb.com/?ctiid.323070 - https://vuldb.com/?submit.645316 - https://github.com/yihaofuweng/cve/issues/17 - https://code-projects.org/
CVE ID: CVE-2025-10105 State: PUBLISHED Published: 2025-09-08T20:32:07.660Z Last Updated: 2025-09-08T20:43:07.322Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: yanyutao0402 Products: ChanCMS Problem Types: CWE-89, CWE-74 Description: A flaw has been found in yanyutao0402 ChanCMS up to 3.3.1. Affected by this issue is some unknown functionality of the file /cms/article/search. This manipulation of the argument keyword causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323072 - https://vuldb.com/?ctiid.323072 - https:/
t Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323072 - https://vuldb.com/?ctiid.323072 - https://vuldb.com/?submit.645341 - https://github.com/chujianxin0101/vuln/issues/8
CVE ID: CVE-2025-10106 State: PUBLISHED Published: 2025-09-08T21:32:05.519Z Last Updated: 2025-09-09T13:30:50.538Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: yanyutao0402 Products: ChanCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in yanyutao0402 ChanCMS up to 3.3.1. This affects an unknown part of the file /cms/collect/search. Such manipulation of the argument keyword leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323073 - https://vuldb.com/?ctiid.323073 - https:/
t Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323073 - https://vuldb.com/?ctiid.323073 - https://vuldb.com/?submit.645354 - https://github.com/chujianxin0101/vuln/issues/9
CVE ID: CVE-2025-10107 State: PUBLISHED Published: 2025-09-09T14:32:06.495Z Last Updated: 2025-09-09T15:09:56.083Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TRENDnet Products: TEW-831DR Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in TRENDnet TEW-831DR 1.0 (601.130.1.1410). Impacted is an unknown function of the file /boafrm/formSysCmd. The manipulation of the argument sysHost leads to command injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: -
used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323208 - https://vuldb.com/?ctiid.323208 - https://vuldb.com/?submit.636833 - https://github.com/Darklab-limited/TRENDnet-AC1200-RCE/blob/main/TRENDnet%20Post-auth%20RCE.pdf
CVE ID: CVE-2025-10108 State: PUBLISHED Published: 2025-09-08T22:02:07.597Z Last Updated: 2025-09-09T13:30:38.245Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Loan Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Online Loan Management System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=delete_loan. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323074 - ht
ic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323074 - https://vuldb.com/?ctiid.323074 - https://vuldb.com/?submit.645378 - https://github.com/dico-Z/CVE/issues/4 - https://www.campcodes.com/
CVE ID: CVE-2025-10109 State: PUBLISHED Published: 2025-09-08T22:32:07.408Z Last Updated: 2025-09-09T13:30:09.327Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Loan Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=delete_payment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323075 - https://vuldb.com/?ctiid.323075 - https://vuldb.com/?submit.645379 - https://github.com/dico-Z/CVE/issues/5 - https://www.campcodes.com/
CVE ID: CVE-2025-10110 State: PUBLISHED Published: 2025-09-08T22:32:09.780Z Last Updated: 2025-09-09T13:30:00.587Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: ChanCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in ChanCMS up to 3.3.1. Impacted is an unknown function of the file /search/. The manipulation with the input '%20or%201=1%20%23/words.html leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323076 - https://vuldb.com/?ctiid.323076 - https://vuldb.co
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323076 - https://vuldb.com/?ctiid.323076 - https://vuldb.com/?submit.645383 - https://github.com/chujianxin0101/vuln/issues/10
CVE ID: CVE-2025-10111 State: PUBLISHED Published: 2025-09-08T23:02:08.227Z Last Updated: 2025-09-09T13:29:24.418Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Student Information Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Student Information Management System 1.0. The affected element is an unknown function of the file /admin/modules/instructor/index.php. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment
ely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323077 - https://vuldb.com/?ctiid.323077 - https://vuldb.com/?submit.645386 - https://github.com/mybonn/CVE/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-10112 State: PUBLISHED Published: 2025-09-08T23:32:06.785Z Last Updated: 2025-09-09T13:29:10.996Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Student Information Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Student Information Management System 1.0. The impacted element is an unknown function of the file /admin/modules/department/index.php. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA AD
remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323078 - https://vuldb.com/?ctiid.323078 - https://vuldb.com/?submit.645387 - https://github.com/mybonn/CVE/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-10113 State: PUBLISHED Published: 2025-09-09T00:02:08.550Z Last Updated: 2025-09-09T19:20:20.949Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Student Information Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Student Information Management System 1.0. This affects an unknown function of the file /admin/modules/room/index.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
e exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323079 - https://vuldb.com/?ctiid.323079 - https://vuldb.com/?submit.645388 - https://github.com/mybonn/CVE/issues/6 - https://itsourcecode.com/
CVE ID: CVE-2025-10114 State: PUBLISHED Published: 2025-09-09T00:32:07.090Z Last Updated: 2025-09-09T19:20:46.838Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Small CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Small CRM 4.0. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument Name results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323083 - https://vuldb.com/?ctiid.323083 - https://vuldb.c
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323083 - https://vuldb.com/?ctiid.323083 - https://vuldb.com/?submit.645503 - https://github.com/sruki3/cve/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-10115 State: PUBLISHED Published: 2025-09-09T00:32:09.580Z Last Updated: 2025-09-09T19:22:00.698Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SiempreCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SiempreCMS up to 1.3.6. This affects an unknown part of the file user_search_ajax.php. This manipulation of the argument name/userName causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323084 - https://vuldb.com/?ctiid.323084 - https://vuldb.com/
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323084 - https://vuldb.com/?ctiid.323084 - https://vuldb.com/?submit.645531 - https://github.com/drew-byte/SiempreCMS-SQLi-POC
CVE ID: CVE-2025-10116 State: PUBLISHED Published: 2025-09-09T01:02:07.390Z Last Updated: 2025-09-09T19:22:32.336Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: SiempreCMS Problem Types: CWE-434, CWE-284 Description: A vulnerability was identified in SiempreCMS up to 1.3.6. This vulnerability affects unknown code of the file /docs/admin/file_upload.php. Such manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323085 - https://vuldb.com/?ctiid.323085 - https://vuldb.com/?submit.645
lnrichment: References: - https://vuldb.com/?id.323085 - https://vuldb.com/?ctiid.323085 - https://vuldb.com/?submit.645540 - https://github.com/drew-byte/SiempreCMS-File-Upload-Abuse/blob/main/README.md
CVE ID: CVE-2025-10117 State: PUBLISHED Published: 2025-09-09T01:02:10.703Z Last Updated: 2025-09-09T19:23:08.178Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Simple To-Do List System Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in SourceCodester Simple To-Do List System 1.0. Impacted is an unknown function of the file /fetch_tasks.php of the component Add New Task. Executing manipulation with the input <script>alert('XSS')</script> can lead to cross site scripting. The attack can be executed remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CIS
uted remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323087 - https://vuldb.com/?ctiid.323087 - https://vuldb.com/?submit.645597 - https://github.com/chen2496088236/CVE/issues/11 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10118 State: PUBLISHED Published: 2025-09-09T01:32:08.516Z Last Updated: 2025-09-09T13:55:39.039Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: E-Logbook with Health Monitoring System for COVID-19 Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. The affected element is an unknown function of the file /login.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: -
ssible to be carried out remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323088 - https://vuldb.com/?ctiid.323088 - https://vuldb.com/?submit.645615 - https://github.com/Ais0329/cve/issues/1 - https://itsourcecode.com/