Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-10813 State: PUBLISHED Published: 2025-09-22T20:02:05.881Z Last Updated: 2025-09-22T20:27:56.750Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0. Affected is an unknown function of the file /justines/admin/mod_reports/index.php. The manipulation of the argument Home results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325171 -
blic and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325171 - https://vuldb.com/?ctiid.325171 - https://vuldb.com/?submit.654438 - https://github.com/yihaofuweng/cve/issues/29 - https://code-projects.org/
CVE ID: CVE-2025-10814 State: PUBLISHED Published: 2025-09-22T20:32:09.997Z Last Updated: 2025-09-23T20:17:43.980Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-823X Problem Types: CWE-77, CWE-74 Description: A vulnerability was determined in D-Link DIR-823X 240126/240802/250416. Affected by this vulnerability is an unknown functionality of the file /usr/sbin/goahead. This manipulation of the argument port causes command injection. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325172 - https://vuldb.c
tilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325172 - https://vuldb.com/?ctiid.325172 - https://vuldb.com/?submit.654452 - https://github.com/W1ngyu/cve/blob/main/DIink-DIR-823xgoformset_server_settings_command_execution_vulnerability.md - https://www.dlink.com/
CVE ID: CVE-2025-10815 State: PUBLISHED Published: 2025-09-22T21:02:08.431Z Last Updated: 2025-09-23T16:02:43.704Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC20 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in Tenda AC20 up to 16.03.08.12. Affected by this issue is the function strcpy of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. The attack can be launched remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325173
ailable and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325173 - https://vuldb.com/?ctiid.325173 - https://vuldb.com/?submit.654460 - https://github.com/Juana-2u/Tenda-AC20 - https://www.tenda.com.cn/
CVE ID: CVE-2025-10816 State: PUBLISHED Published: 2025-09-22T21:32:07.896Z Last Updated: 2025-09-23T16:02:01.993Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Jinher Products: OA Problem Types: CWE-611, CWE-610 Description: A security flaw has been discovered in Jinher OA 2.0. This affects an unknown part of the file /c6/Jhsoft.Web.module/ToolBar/GetWordFileName.aspx/?text=GetUrl&style=add of the component XML Handler. Performing manipulation results in xml external entity reference. The attack may be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:/
en released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325174 - https://vuldb.com/?ctiid.325174 - https://vuldb.com/?submit.654466 - https://github.com/1296299554/CVE/issues/1
CVE ID: CVE-2025-10817 State: PUBLISHED Published: 2025-09-22T22:02:06.681Z Last Updated: 2025-09-23T15:59:00.141Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Learning Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in Campcodes Online Learning Management System 1.0. This vulnerability affects unknown code of the file /admin/admin_user.php. Executing manipulation of the argument firstname can lead to sql injection. The attack may be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
en made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325175 - https://vuldb.com/?ctiid.325175 - https://vuldb.com/?submit.654545 - https://github.com/244556089/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-10819 State: PUBLISHED Published: 2025-09-22T22:32:08.050Z Last Updated: 2025-09-23T15:52:33.236Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-285, CWE-266 Description: A security vulnerability has been detected in fuyang_lipengjun platform 1.0. This issue affects the function UserCouponController of the file /usercoupon/queryAll. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325
sed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325176 - https://vuldb.com/?ctiid.325176 - https://vuldb.com/?submit.653740 - https://www.cnblogs.com/aibot/p/19063466
CVE ID: CVE-2025-10820 State: PUBLISHED Published: 2025-09-22T22:32:11.810Z Last Updated: 2025-09-23T15:49:37.788Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-285, CWE-266 Description: A vulnerability was detected in fuyang_lipengjun platform 1.0. Impacted is the function TopicController of the file /topic/queryAll. The manipulation results in improper authorization. The attack can be executed remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325177 - https://vuldb.com/?ctiid.325177 - https://vuldb
s: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325177 - https://vuldb.com/?ctiid.325177 - https://vuldb.com/?submit.653741 - https://www.cnblogs.com/aibot/p/19063465
CVE ID: CVE-2025-10821 State: PUBLISHED Published: 2025-09-22T23:02:09.848Z Last Updated: 2025-09-23T15:29:00.547Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-285, CWE-266 Description: A flaw has been found in fuyang_lipengjun platform 1.0. The affected element is the function TopicCategoryController of the file /topiccategory/queryAll. This manipulation causes improper authorization. The attack is possible to be carried out remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325178 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325178 - https://vuldb.com/?ctiid.325178 - https://vuldb.com/?submit.653742 - https://www.cnblogs.com/aibot/p/19063464
CVE ID: CVE-2025-10822 State: PUBLISHED Published: 2025-09-22T23:32:07.527Z Last Updated: 2025-09-23T15:27:30.659Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: fuyang_lipengjun Products: platform Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in fuyang_lipengjun platform 1.0. The impacted element is the function SysSmsLogController of the file /sys/smslog/queryAll. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325179 - ht
blic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325179 - https://vuldb.com/?ctiid.325179 - https://vuldb.com/?submit.653743 - https://www.cnblogs.com/aibot/p/19063462
CVE ID: CVE-2025-10823 State: PUBLISHED Published: 2025-09-22T23:32:10.940Z Last Updated: 2025-09-23T20:06:40.394Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: axboe Products: fio Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in axboe fio up to 3.41. This affects the function str_buffer_pattern_cb of the file options.c. Performing manipulation results in null pointer dereference. The attack must be initiated from a local position. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325180 - https://vuldb.com/?ctiid.325180 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325180 - https://vuldb.com/?ctiid.325180 - https://vuldb.com/?submit.654069 - https://github.com/axboe/fio/issues/1982 - https://github.com/user-attachments/files/22266964/poc.zip
CVE ID: CVE-2025-10824 State: PUBLISHED Published: 2025-09-23T00:02:06.575Z Last Updated: 2025-09-23T19:55:20.846Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: axboe Products: fio Problem Types: CWE-416, CWE-119 Description: A vulnerability was determined in axboe fio up to 3.41. This impacts the function __parse_jobs_ini of the file init.c. Executing manipulation can lead to use after free. The attack needs to be launched locally. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325181 - https://vuldb.com/?ctiid.325181 - https://vuldb.com/?sub
ADP Vulnrichment: References: - https://vuldb.com/?id.325181 - https://vuldb.com/?ctiid.325181 - https://vuldb.com/?submit.654072 - https://github.com/axboe/fio/issues/1981 - https://github.com/user-attachments/files/22266756/poc.zip
CVE ID: CVE-2025-10825 State: PUBLISHED Published: 2025-09-23T00:02:09.845Z Last Updated: 2025-09-23T19:52:17.849Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. Affected is an unknown function of the file /admin/view-appointment.php. The manipulation of the argument viewid leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
ly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325182 - https://vuldb.com/?ctiid.325182 - https://vuldb.com/?submit.654379 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20view-appointment.php.md - https://www.campcodes.com/
CVE ID: CVE-2025-10826 State: PUBLISHED Published: 2025-09-23T00:32:06.675Z Last Updated: 2025-09-23T19:50:02.881Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Beauty Parlor Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - C
an be launched remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325183 - https://vuldb.com/?ctiid.325183 - https://vuldb.com/?submit.654384 - https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20sales-reports-detail.php.md - https://www.campcodes.com/
CVE ID: CVE-2025-10827 State: PUBLISHED Published: 2025-09-23T00:32:09.601Z Last Updated: 2025-09-23T19:39:50.135Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPJabbers Products: Restaurant Menu Maker Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in PHPJabbers Restaurant Menu Maker up to 1.1. Affected by this issue is some unknown functionality of the file /preview.php. This manipulation of the argument theme causes cross site scripting. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325184 - https://vuldb.com/?ctiid.325184 - https://vuldb.com/?submit.655884 - https://github.com/485961590/CVE/issues/1
CVE ID: CVE-2025-10828 State: PUBLISHED Published: 2025-09-23T01:02:07.974Z Last Updated: 2025-09-23T19:36:05.125Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file /admin/edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325185
publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325185 - https://vuldb.com/?ctiid.325185 - https://vuldb.com/?submit.655902 - https://github.com/para-paradise/webray.com.cn/blob/main/Pet%20Grooming%20Management/SourceCodester%20Pet%20Grooming%20Management%20Software%20edit.php%20sql%20injection%20Vulnerability.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10829 State: PUBLISHED Published: 2025-09-23T01:02:11.191Z Last Updated: 2025-09-23T13:35:00.827Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Computer Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in Campcodes Computer Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /pages/sup_edit1.php. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3251
now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325186 - https://vuldb.com/?ctiid.325186 - https://vuldb.com/?submit.655906 - https://github.com/Michsta/CVE/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-10830 State: PUBLISHED Published: 2025-09-23T01:32:05.733Z Last Updated: 2025-09-23T13:33:16.855Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Computer Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in Campcodes Computer Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/inv_edit1.php. Executing manipulation of the argument idd can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325187 - htt
hed and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325187 - https://vuldb.com/?ctiid.325187 - https://vuldb.com/?submit.655993 - https://github.com/Michsta/CVE/issues/2 - https://www.campcodes.com/
CVE ID: CVE-2025-10831 State: PUBLISHED Published: 2025-09-23T01:32:08.574Z Last Updated: 2025-09-23T13:32:27.932Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Computer Sales and Inventory System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in Campcodes Computer Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_edit1.php. The manipulation of the argument prodcode leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325188 - https://vuldb.com/?ctiid.325188 - https://vuldb.com/?submit.656016 - https://github.com/Michsta/CVE/issues/3 - https://www.campcodes.com/
CVE ID: CVE-2025-10832 State: PUBLISHED Published: 2025-09-23T02:02:06.363Z Last Updated: 2025-09-23T13:30:49.619Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. The affected element is an unknown function of the file /admin/fetch_product_details.php. The manipulation of the argument barcode results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
xploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325189 - https://vuldb.com/?ctiid.325189 - https://vuldb.com/?submit.656004 - https://github.com/lalalalalalala555/Pet-grooming-management-v1.0-sql-injection/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10833 State: PUBLISHED Published: 2025-09-23T02:32:06.097Z Last Updated: 2025-09-23T14:37:14.939Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 1000projects Products: Bookstore Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in 1000projects Bookstore Management System 1.0. The impacted element is an unknown function of the file /login.php. This manipulation of the argument unm causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325190 -
sed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325190 - https://vuldb.com/?ctiid.325190 - https://vuldb.com/?submit.656419 - https://github.com/xingrenlvke/cve/issues/1
CVE ID: CVE-2025-10834 State: PUBLISHED Published: 2025-09-23T03:02:07.288Z Last Updated: 2025-09-23T14:34:32.270Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Open Source Job Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in itsourcecode Open Source Job Portal 1.0. This affects an unknown function of the file /jobportal/admin/login.php. Such manipulation of the argument user_email leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325191 - https
and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325191 - https://vuldb.com/?ctiid.325191 - https://vuldb.com/?submit.656829 - https://github.com/yihaofuweng/cve/issues/30 - https://itsourcecode.com/
CVE ID: CVE-2025-10835 State: PUBLISHED Published: 2025-09-23T03:32:07.360Z Last Updated: 2025-09-23T14:10:48.052Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Pet Grooming Management Software 1.0. This impacts an unknown function of the file /admin/view_payorder.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325192 - https://vuldb.com/?ctiid.325192 - https://vuldb.com/?submit.656865 - https://github.com/xiaoliyu-1/Pet-grooming-management-view_payorder.php-v.1.0-sql-injection/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10836 State: PUBLISHED Published: 2025-09-23T03:32:10.624Z Last Updated: 2025-09-23T14:08:14.277Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Pet Grooming Management Software Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in SourceCodester Pet Grooming Management Software 1.0. Affected is an unknown function of the file /admin/print1.php. Executing manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
ilable to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325193 - https://vuldb.com/?ctiid.325193 - https://vuldb.com/?submit.656889 - https://github.com/xiaoliyu-1/Pet-grooming-management-print1.php-v.1.0-sql-injection/blob/main/report.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-10837 State: PUBLISHED Published: 2025-09-23T04:02:07.507Z Last Updated: 2025-09-23T13:51:47.909Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-79, CWE-94 Description: A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file /ordersimple/order.php. The manipulation of the argument ID leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325194 - https://vuldb.com/?ctiid.325194 - https://vuldb.com/?submit.657108 - https://github.com/asd1238525/cve/blob/main/xss3.md - https://code-projects.org/
CVE ID: CVE-2025-10838 State: PUBLISHED Published: 2025-09-23T04:32:07.071Z Last Updated: 2025-09-23T19:12:30.355Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC21 Problem Types: CWE-120, CWE-119 Description: A vulnerability was identified in Tenda AC21 16.03.08.16. The affected element is the function sub_45BB10 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.325200 - https://vuldb.com/?ctiid.325200