Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10412 State: PUBLISHED Published: 2025-09-23T09:25:56.611Z Last Updated: 2025-09-23T19:30:38.993Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: MooMoo Products: Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) Problem Types: CWE-434 Description: The Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) plugin for WordPress is vulnerable to arbitrary file uploads due to misconfigured file type validation in the 'uni_cpo_upload_file' function in all versions up to, and including, 4.9.54. This makes it possible for unauthenticated attackers to upload arbitrary files on the affec
p to, and including, 4.9.54. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/1c0c6a45-2c4a-4a23-84e6-7a9759796824?source=cve - https://builderius.io/cpo/
CVE ID: CVE-2025-10413 State: PUBLISHED Published: 2025-09-14T22:02:07.546Z Last Updated: 2025-09-15T17:18:51.422Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_customer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://v
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323847 - https://vuldb.com/?ctiid.323847 - https://vuldb.com/?submit.646969 - https://github.com/zzb1388/cve/issues/82 - https://www.campcodes.com/
CVE ID: CVE-2025-10414 State: PUBLISHED Published: 2025-09-14T22:32:07.174Z Last Updated: 2025-09-15T17:17:54.827Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=save_customer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
he exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323848 - https://vuldb.com/?ctiid.323848 - https://vuldb.com/?submit.646970 - https://github.com/zzb1388/cve/issues/81 - https://www.campcodes.com/
CVE ID: CVE-2025-10415 State: PUBLISHED Published: 2025-09-14T23:02:06.430Z Last Updated: 2025-09-15T17:17:10.852Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=save_supplier. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
een publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323849 - https://vuldb.com/?ctiid.323849 - https://vuldb.com/?submit.646971 - https://github.com/zzb1388/cve/issues/80 - https://www.campcodes.com/
CVE ID: CVE-2025-10416 State: PUBLISHED Published: 2025-09-14T23:32:06.914Z Last Updated: 2025-09-15T17:16:32.387Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=delete_supplier. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
blicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323850 - https://vuldb.com/?ctiid.323850 - https://vuldb.com/?submit.646972 - https://github.com/zzb1388/cve/issues/79 - https://www.campcodes.com/
CVE ID: CVE-2025-10417 State: PUBLISHED Published: 2025-09-15T00:02:07.011Z Last Updated: 2025-09-15T20:24:10.306Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Grocery Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=delete_product. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
s been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323851 - https://vuldb.com/?ctiid.323851 - https://vuldb.com/?submit.646973 - https://github.com/zzb1388/cve/issues/78 - https://www.campcodes.com/
CVE ID: CVE-2025-10418 State: PUBLISHED Published: 2025-09-15T00:32:06.721Z Last Updated: 2025-09-15T20:24:58.229Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Student Grading System 1.0. Affected by this vulnerability is an unknown functionality of the file /view_students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
lable to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323852 - https://vuldb.com/?ctiid.323852 - https://vuldb.com/?submit.646917 - https://github.com/qcycop0101-hash/CVE/issues/6 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10419 State: PUBLISHED Published: 2025-09-15T01:02:07.193Z Last Updated: 2025-09-15T20:25:29.419Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Student Grading System 1.0. Affected by this issue is some unknown functionality of the file /del_promote.php. Such manipulation of the argument sy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
losed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323853 - https://vuldb.com/?ctiid.323853 - https://vuldb.com/?submit.646921 - https://github.com/qcycop0101-hash/CVE/issues/7 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10420 State: PUBLISHED Published: 2025-09-15T01:32:05.916Z Last Updated: 2025-09-15T20:33:42.157Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Student Grading System 1.0. This affects an unknown part of the file /form137.php. Performing manipulation of the argument ID results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323854 - https://vuldb.com/?ctiid.323854 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323854 - https://vuldb.com/?ctiid.323854 - https://vuldb.com/?submit.646927 - https://github.com/qcycop0101-hash/CVE/issues/8 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10421 State: PUBLISHED Published: 2025-09-15T02:02:08.803Z Last Updated: 2025-09-15T20:34:12.131Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Student Grading System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Student Grading System 1.0. This vulnerability affects unknown code of the file /update_account.php. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323855 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323855 - https://vuldb.com/?ctiid.323855 - https://vuldb.com/?submit.646952 - https://github.com/qcycop0101-hash/CVE/issues/9 - https://www.sourcecodester.com/
CVE ID: CVE-2025-10422 State: PUBLISHED Published: 2025-09-15T02:32:06.166Z Last Updated: 2025-09-15T17:15:08.732Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: newbee-mall Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in newbee-mall up to 613a662adf1da7623ec34459bc83e3c1b12d8ce7. This issue affects the function paySuccess of the file /paySuccess of the component Order Status Handler. The manipulation of the argument orderNo leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling rele
he attack is possible. The exploit has been disclosed to the public and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323856 - https://vuldb.com/?ctiid.323856 - https://vuldb.com/?submit.646997 - https://github.com/newbee-ltd/newbee-mall/issues/100 - https://github.com/newbee-ltd/newbee-mall/issues/100#issue-3379977698
CVE ID: CVE-2025-10423 State: PUBLISHED Published: 2025-09-15T03:02:05.834Z Last Updated: 2025-09-15T17:10:21.301Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: n/a Products: newbee-mall Problem Types: CWE-804, CWE-287 Description: A vulnerability was found in newbee-mall 1.0. Impacted is the function mallKaptcha of the file /common/mall/kaptcha. The manipulation results in guessable captcha. The attack can be executed remotely. A high complexity level is associated with this attack. The exploitability is considered difficult. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323857 - https://vuldb.com/?ctiid.323857 - https://vuldb.com/?submit.647066 - https://github.com/newbee-ltd/newbee-mall/issues/101 - https://github.com/newbee-ltd/newbee-mall/issues/101#issue-3380163659
CVE ID: CVE-2025-10424 State: PUBLISHED Published: 2025-09-15T03:32:06.816Z Last Updated: 2025-09-15T17:07:50.725Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Student Project Report Submission and Evaluation System Problem Types: CWE-434, CWE-284 Description: A vulnerability was determined in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The affected element is an unknown function of the file /admin/controller/faculty_controller.php. This manipulation of the argument new_image causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed
e causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323858 - https://vuldb.com/?ctiid.323858 - https://vuldb.com/?submit.647173 - https://vuldb.com/?submit.647176 - https://github.com/lan041221/cvec/issues/22
CVE ID: CVE-2025-10425 State: PUBLISHED Published: 2025-09-15T04:02:07.414Z Last Updated: 2025-09-15T17:01:01.187Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Online Student Project Report Submission and Evaluation System Problem Types: CWE-434, CWE-284 Description: A vulnerability was identified in 1000projects Online Student Project Report Submission and Evaluation System 1.0. The impacted element is an unknown function of the file /admin/controller/student_controller.php. Such manipulation of the argument new_image leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be
e leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323859 - https://vuldb.com/?ctiid.323859 - https://vuldb.com/?submit.647175 - https://vuldb.com/?submit.647177 - https://github.com/lan041221/cvec/issues/23
CVE ID: CVE-2025-10426 State: PUBLISHED Published: 2025-09-15T04:32:07.533Z Last Updated: 2025-09-15T16:21:09.552Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Laundry Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Online Laundry Management System 1.0. This affects an unknown function of the file /login.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
een released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323860 - https://vuldb.com/?ctiid.323860 - https://vuldb.com/?submit.647210 - https://github.com/HAO-RAY/HCR-CVE/issues/3 - https://itsourcecode.com/
CVE ID: CVE-2025-10427 State: PUBLISHED Published: 2025-09-15T05:02:06.053Z Last Updated: 2025-09-15T16:20:04.507Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-434, CWE-284 Description: A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/operation/user.php. Executing manipulation of the argument website_image can lead to unrestricted upload. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP V
motely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323861 - https://vuldb.com/?ctiid.323861 - https://vuldb.com/?submit.647463 - https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-upload-user.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10428 State: PUBLISHED Published: 2025-09-15T05:32:06.428Z Last Updated: 2025-09-15T16:17:36.548Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/seo_setting.php of the component Setting Handler. The manipulation of the argument website_image leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CIS
tack can be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323862 - https://vuldb.com/?ctiid.323862 - https://vuldb.com/?submit.647464 - https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-upload-seosetting.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10429 State: PUBLISHED Published: 2025-09-15T06:02:05.586Z Last Updated: 2025-09-15T16:01:57.229Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in SourceCodester Pet Grooming Management Software 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/ajax_product.php. The manipulation of the argument drop_services results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
tely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323863 - https://vuldb.com/?ctiid.323863 - https://vuldb.com/?submit.647470 - https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-sql-ajaxpro.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10430 State: PUBLISHED Published: 2025-09-15T06:32:10.876Z Last Updated: 2025-09-15T15:41:47.851Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A flaw has been found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/barcode.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323864 - h
ished and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323864 - https://vuldb.com/?ctiid.323864 - https://vuldb.com/?submit.647488 - https://vuldb.com/?submit.647622 - https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-sql-barcode.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10431 State: PUBLISHED Published: 2025-09-15T07:02:06.252Z Last Updated: 2025-09-15T15:39:41.281Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/ajax_represent.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323
o the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323865 - https://vuldb.com/?ctiid.323865 - https://vuldb.com/?submit.647493 - https://github.com/joinia/webray.com.cn/blob/main/Pet-grooming-management-software/petgrooming-sql-ajaxrepresent.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10432 State: PUBLISHED Published: 2025-09-15T07:32:07.178Z Last Updated: 2025-09-15T15:38:03.857Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC1206 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
le. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323866 - https://vuldb.com/?ctiid.323866 - https://vuldb.com/?submit.647527 - https://github.com/M4st3rYi/IoTVulPocs/blob/main/Tenda/AC1206/fromAdvSetMacMtuWan.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-10433 State: PUBLISHED Published: 2025-09-15T08:02:06.678Z Last Updated: 2025-09-15T15:09:48.130Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:OF/RC:C) Vendors: 1Panel-dev Products: MaxKB Problem Types: CWE-502, CWE-20 Description: A vulnerability was determined in 1Panel-dev MaxKB up to 2.0.2/2.1.0. This issue affects some unknown processing of the file /admin/api/workspace/default/tool/debug. Executing manipulation of the argument code can lead to deserialization. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.1 is capable of addressing this issue. It is suggested to upgrade the affe
and may be utilized. Upgrading to version 2.1.1 is capable of addressing this issue. It is suggested to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323867 - https://vuldb.com/?ctiid.323867 - https://vuldb.com/?submit.647589 - https://zealous-brand-b4a.notion.site/MaxKB-2-1-0-tool-debug-RCE-2647244a828c80e7850dc6503061b88b - https://github.com/1Panel-dev/MaxKB/releases/tag/v2.1.1
CVE ID: CVE-2025-10434 State: PUBLISHED Published: 2025-09-15T08:32:07.608Z Last Updated: 2025-09-15T17:00:21.313Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: IbuyuCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in IbuyuCMS up to 2.6.3. Impacted is an unknown function of the file /admin/article.php?a=mod of the component Add Article Page. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323868 - https://vu
ight be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.323868 - https://vuldb.com/?ctiid.323868 - https://vuldb.com/?submit.647590 - https://github.com/Upgradeextension/ibuyu/blob/main/README.md
CVE ID: CVE-2025-10435 State: PUBLISHED Published: 2025-09-15T09:02:06.621Z Last Updated: 2025-09-15T16:58:36.828Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Computer Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Computer Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/cust_edit1.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http