Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10387 State: PUBLISHED Published: 2025-09-14T03:02:05.743Z Last Updated: 2025-09-15T15:46:48.506Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: codesiddhant Products: Jasmin Ransomware Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in codesiddhant Jasmin Ransomware up to 1.0.1. This vulnerability affects unknown code of the file /handshake.php. This manipulation of the argument machine_name/computer_user/os/date/time/ip/location/systemid/password causes sql injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosur
motely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323822 - https://vuldb.com/?ctiid.323822 - https://vuldb.com/?submit.644285 - https://github.com/YZS17/CVE/blob/main/Jasmin-Ransomware/sqli_handshake.php.md
CVE ID: CVE-2025-10388 State: PUBLISHED Published: 2025-09-14T03:32:06.704Z Last Updated: 2025-09-15T15:39:41.151Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Selleo Products: Mentingo Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in Selleo Mentingo 2025.08.27. This issue affects some unknown processing of the file /api/course/enroll-course of the component Create New Course Basic Settings. Such manipulation of the argument Description leads to cross site scripting. The attack can be launched remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in an
is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323823 - https://vuldb.com/?ctiid.323823 - https://vuldb.com/?submit.643623 - https://gist.github.com/KhanMarshaI/584ae9d7ba8578ac040a0f89597fc3c1
CVE ID: CVE-2025-10389 State: PUBLISHED Published: 2025-09-14T04:02:06.069Z Last Updated: 2025-09-15T13:33:17.005Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: CRMEB Problem Types: CWE-285, CWE-266 Description: A security flaw has been discovered in CRMEB up to 5.6.1. Impacted is the function Save of the file app/services/system/admin/SystemAdminServices.php of the component Administrator Password Handler. Performing manipulation of the argument ID results in improper authorization. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did
ploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323824 - https://vuldb.com/?ctiid.323824 - https://vuldb.com/?submit.644543 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb013.md
CVE ID: CVE-2025-10390 State: PUBLISHED Published: 2025-09-14T04:32:05.427Z Last Updated: 2025-09-15T13:32:40.989Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: CRMEB Problem Types: CWE-285, CWE-266 Description: A weakness has been identified in CRMEB up to 5.6.1. The affected element is the function editAddress of the file app/services/user/UserAddressServices.php. Executing manipulation of the argument ID can lead to improper authorization. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional
and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323825 - https://vuldb.com/?ctiid.323825 - https://vuldb.com/?submit.644578 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb014.md
CVE ID: CVE-2025-10391 State: PUBLISHED Published: 2025-09-14T05:02:06.676Z Last Updated: 2025-09-15T13:31:48.622Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: CRMEB Problem Types: CWE-918 Description: A security vulnerability has been detected in CRMEB up to 5.6.1. The impacted element is the function testOutUrl of the file app/services/out/OutAccountServices.php. The manipulation of the argument push_token_url leads to server-side request forgery. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323826 - https://vuldb.com/?ctiid.323826 - https://vuldb.com/?submit.644582 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb015.md
CVE ID: CVE-2025-10392 State: PUBLISHED Published: 2025-09-14T05:32:06.135Z Last Updated: 2025-09-15T15:48:36.519Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR) Vendors: Mercury Products: KM08-708H GiGA WiFi Wave2 Problem Types: CWE-121, CWE-119 Description: A vulnerability was detected in Mercury KM08-708H GiGA WiFi Wave2 1.1.14. This affects an unknown function of the component HTTP Header Handler. The manipulation of the argument Host results in stack-based buffer overflow. The attack can be executed remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323827 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323827 - https://vuldb.com/?ctiid.323827 - https://vuldb.com/?submit.644596 - https://github.com/mohdkey/IOT-CVE/blob/main/KT_GIGA_WIFI-Wave%202%20has%20a%20stack%20overflow%20vulnerability.pdf
CVE ID: CVE-2025-10393 State: PUBLISHED Published: 2025-09-14T06:02:07.373Z Last Updated: 2025-09-15T20:09:55.847Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: miurla Products: morphic Problem Types: CWE-918 Description: A flaw has been found in miurla morphic up to 0.4.5. This impacts the function fetchHtml of the file /api/advanced-search of the component HTTP Status Code 3xx Handler. This manipulation causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323828 - https://vuldb.com/?ctiid.32
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323828 - https://vuldb.com/?ctiid.323828 - https://vuldb.com/?submit.645509 - https://github.com/miurla/morphic/issues/670
CVE ID: CVE-2025-10394 State: PUBLISHED Published: 2025-09-14T06:32:05.884Z Last Updated: 2025-09-15T20:10:46.125Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: fcba_zzm Products: ics-park Smart Park Management System Problem Types: CWE-94, CWE-74 Description: A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java of the component Scheduled Task Module. Such manipulation leads to code injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analy
The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323829 - https://vuldb.com/?ctiid.323829 - https://vuldb.com/?submit.645729 - https://github.com/Yyjccc/CVE/issues/1
CVE ID: CVE-2025-10395 State: PUBLISHED Published: 2025-09-14T08:02:06.148Z Last Updated: 2025-09-15T20:11:53.663Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:ND/RL:ND/RC:UR) Vendors: Magicblack Products: MacCMS Problem Types: CWE-918 Description: A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Affected by this vulnerability is the function col_url of the component Scheduled Task Handler. Performing manipulation of the argument cjurl results in server-side request forgery. It is possible to initiate the attack remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323830 - https://vuldb.com/?ctiid.323830 - https://vuldb.com/?s
SA ADP Vulnrichment: References: - https://vuldb.com/?id.323830 - https://vuldb.com/?ctiid.323830 - https://vuldb.com/?submit.645798 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb017.md
CVE ID: CVE-2025-10396 State: PUBLISHED Published: 2025-09-14T08:32:06.931Z Last Updated: 2025-09-15T20:12:31.704Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/edit_role.php. Executing manipulation of the argument ID can lead to sql injection. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
ly. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323831 - https://vuldb.com/?ctiid.323831 - https://vuldb.com/?submit.645803 - https://github.com/zhe293/src2/blob/master/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10397 State: PUBLISHED Published: 2025-09-14T11:02:05.683Z Last Updated: 2025-09-15T20:13:17.742Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Magicblack Products: MacCMS Problem Types: CWE-918 Description: A vulnerability was identified in Magicblack MacCMS 2025.1000.4050. This affects an unknown part of the component API Handler. The manipulation of the argument cjurl leads to server-side request forgery. The attack can be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323832 - https://vuldb.com/?ctiid.323832 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323832 - https://vuldb.com/?ctiid.323832 - https://vuldb.com/?submit.645805 - https://github.com/August829/Yu/blob/main/58ead8e7e08bfb018.md
CVE ID: CVE-2025-10398 State: PUBLISHED Published: 2025-09-14T12:02:07.266Z Last Updated: 2025-09-15T20:15:25.463Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: fcba_zzm Products: ics-park Smart Park Management System Problem Types: CWE-434, CWE-284 Description: A security flaw has been discovered in fcba_zzm ics-park Smart Park Management System 2.0. This vulnerability affects unknown code of the file FileUploadUtils.java. The manipulation of the argument File results in unrestricted upload. The attack can be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323833 - https://vuldb.com/?ctiid.323833 - https://vuldb.com/?submit.646303 - https://github.com/Yyjccc/CVE/issues/2
CVE ID: CVE-2025-10399 State: PUBLISHED Published: 2025-09-14T13:02:06.030Z Last Updated: 2025-09-15T20:16:06.911Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Korzh Products: EasyQuery Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Korzh EasyQuery up to 7.4.0. This issue affects some unknown processing of the file /api/easyquery/models/nwind/fetch of the component Query Builder UI. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323834 - ht
d could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323834 - https://vuldb.com/?ctiid.323834 - https://vuldb.com/?submit.646353
CVE ID: CVE-2025-10400 State: PUBLISHED Published: 2025-09-14T14:02:07.364Z Last Updated: 2025-09-15T20:16:42.062Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Food Ordering Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Food Ordering Management System 1.0. Impacted is an unknown function of the file /routers/ticket-message.php. Such manipulation of the argument ticket_id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
t has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323835 - https://vuldb.com/?ctiid.323835 - https://vuldb.com/?submit.646713 - https://github.com/lrjbsyh/CVE_Hunter/issues/12 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10401 State: PUBLISHED Published: 2025-09-14T15:32:06.293Z Last Updated: 2025-09-15T20:19:50.195Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823x Problem Types: CWE-77, CWE-74 Description: A vulnerability was detected in D-Link DIR-823x up to 250416. The affected element is an unknown function of the file /goform/diag_ping. Performing manipulation of the argument target_addr results in command injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323836 - https://vuldb.com/?ctiid.323836
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323836 - https://vuldb.com/?ctiid.323836 - https://vuldb.com/?submit.646761 - https://github.com/Cpppq43/D-Link/blob/main/D-Link%20DIR-823X%20AX3000.md - https://www.dlink.com/
CVE ID: CVE-2025-10402 State: PUBLISHED Published: 2025-09-14T16:32:07.439Z Last Updated: 2025-09-15T20:20:22.861Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. The impacted element is an unknown function of the file /admin/readenq.php. Executing manipulation of the argument delid can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323837 - https:
and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323837 - https://vuldb.com/?ctiid.323837 - https://vuldb.com/?submit.646768 - https://github.com/LitBot123/mycve/issues/6 - https://phpgurukul.com/
CVE ID: CVE-2025-10403 State: PUBLISHED Published: 2025-09-14T17:32:07.225Z Last Updated: 2025-09-15T20:20:55.620Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Beauty Parlour Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. This affects an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323838 - https://vuldb.com/?ctiid.323838 - https://vuldb.com/?submit.646769 - https://github.com/LitBot123/mycve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-10404 State: PUBLISHED Published: 2025-09-14T18:02:07.504Z Last Updated: 2025-09-15T20:21:25.654Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Baptism Information Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in itsourcecode Baptism Information Management System 1.0. This impacts an unknown function of the file /rptbaptismal.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323839 - ht
ic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323839 - https://vuldb.com/?ctiid.323839 - https://vuldb.com/?submit.646903 - https://github.com/peri0d/my_cve/issues/5 - https://itsourcecode.com/
CVE ID: CVE-2025-10405 State: PUBLISHED Published: 2025-09-14T18:32:07.235Z Last Updated: 2025-09-15T16:27:04.411Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Baptism Information Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Affected is an unknown function of the file /listbaptism.php. This manipulation of the argument bapt_id causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
en publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323840 - https://vuldb.com/?ctiid.323840 - https://vuldb.com/?submit.646904 - https://github.com/peri0d/my_cve/issues/4 - https://itsourcecode.com/
CVE ID: CVE-2025-10406 State: PUBLISHED Published: 2025-10-15T06:00:02.280Z Last Updated: 2025-10-15T13:20:38.419Z Vendors: Unknown Products: BlindMatrix e-Commerce Problem Types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Description: The BlindMatrix e-Commerce WordPress plugin before 3.1 does not validate some shortcode attributes before using them to generate paths passed to include function/s, allowing any authenticated users, such as contributors, to perform LFI attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/d8bdd2d4-c03c-4e7f-9c8a-6efc010311b6/
CVE ID: CVE-2025-10407 State: PUBLISHED Published: 2025-09-14T19:32:08.686Z Last Updated: 2025-09-15T16:25:52.871Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_user.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3238
available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323841 - https://vuldb.com/?ctiid.323841 - https://vuldb.com/?submit.646909 - https://github.com/qcycop0101-hash/CVE/issues/3 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10408 State: PUBLISHED Published: 2025-09-14T20:02:08.335Z Last Updated: 2025-09-15T16:23:47.966Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /edit_user.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
ased to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323842 - https://vuldb.com/?ctiid.323842 - https://vuldb.com/?submit.646910 - https://github.com/qcycop0101-hash/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10409 State: PUBLISHED Published: 2025-09-14T20:32:06.364Z Last Updated: 2025-09-15T17:25:14.442Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /rms.php?page=users. Executing manipulation of the argument fname can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323843
ic and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323843 - https://vuldb.com/?ctiid.323843 - https://vuldb.com/?submit.646913 - https://github.com/qcycop0101-hash/CVE/issues/5 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10410 State: PUBLISHED Published: 2025-09-14T21:02:06.958Z Last Updated: 2025-09-15T17:24:28.432Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Link Status Checker Problem Types: CWE-918 Description: A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323844 - https://
nd may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323844 - https://vuldb.com/?ctiid.323844 - https://vuldb.com/?submit.646911 - https://github.com/drew-byte/Link_Status_Checker_PoC - https://www.sourcecodester.com/
CVE ID: CVE-2025-10411 State: PUBLISHED Published: 2025-09-14T21:32:07.222Z Last Updated: 2025-09-15T17:19:30.581Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: E-Logbook with Health Monitoring System for COVID-19 Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in itsourcecode E-Logbook with Health Monitoring System for COVID-19 1.0. This issue affects some unknown processing of the file /stc-log-keeper/check_profile.php of the component POST Request Handler. The manipulation of the argument profile_id results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. A
le_id results in cross site scripting. The attack may be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323845 - https://vuldb.com/?ctiid.323845 - https://vuldb.com/?submit.646922 - https://github.com/yihaofuweng/cve/issues/21 - https://itsourcecode.com/