Skip to main content
CVE-2025-3236 Apr 04, 10:15 MEDIUM POC This Month

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Tenda Fh1202 Firmware
NVD VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2025-3237 Apr 04, 10:15 MEDIUM POC This Month

A vulnerability was found in Tenda FH1202 1.2.0.14(408). Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Tenda Fh1202 Firmware
NVD VulDB
CVSS 4.0
6.9
EPSS
0.7%
CVE-2025-3199 Apr 04, 02:15 MEDIUM POC PATCH This Month

A vulnerability was found in ageerle ruoyi-ai up to 2.0.1 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Java Information Disclosure Ruoyi Ai
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.6%
CVE-2025-3266 Apr 04, 20:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in qinguoyi TinyWebServer up to 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tinywebserver Qinguoyi
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-3202 Apr 04, 03:15 MEDIUM POC PATCH This Month

A vulnerability classified as critical has been found in ageerle ruoyi-ai up to 2.0.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Java Information Disclosure Ruoyi Ai
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2025-3216 Apr 04, 07:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-3186 Apr 04, 00:15 MEDIUM POC This Month

A vulnerability was found in projectworlds Online Doctor Appointment Booking System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Doctor Appointment Booking System Php And Mysql Projectworlds
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3240 Apr 04, 11:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Online Fire Reporting System 1.2. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Fire Reporting System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3231 Apr 04, 09:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Zoo Management System 2.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Zoo Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3217 Apr 04, 07:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3213 Apr 04, 06:15 MEDIUM POC This Month

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3195 Apr 04, 02:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in itsourcecode Online Blood Bank Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Blood Bank Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3188 Apr 04, 01:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3187 Apr 04, 01:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-29476 Apr 04, 18:15 MEDIUM POC This Month

Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow
NVD GitHub
CVSS 3.1
5.5
EPSS
0.2%
CVE-2025-29477 Apr 04, 18:15 MEDIUM POC This Month

An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event. Rated medium severity (CVSS 5.5). Public exploit code available and no vendor patch available.

Denial Of Service Fluent Bit Treasuredata
NVD GitHub
CVSS 3.1
5.5
EPSS
0.1%
CVE-2025-32257 Apr 04, 16:15 MEDIUM POC This Month

Exposure of Sensitive System Information Due to Uncleared Debug Information vulnerability in 1clickmigration 1 Click WordPress Migration allows Retrieve Embedded Sensitive Data.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Information Disclosure
NVD
CVSS 3.1
5.3
EPSS
0.7%
CVE-2025-3267 Apr 04, 20:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in qinguoyi TinyWebServer up to 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Tinywebserver Qinguoyi
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3257 Apr 04, 17:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in xujiangfei admintwo 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Admintwo Xujiangfei
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3235 Apr 04, 10:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Old Age Home Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3209 Apr 04, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Fabianros
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3205 Apr 04, 03:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in CodeAstro Student Grading System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Student Grading System Codeastro
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3245 Apr 04, 12:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Library Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Library Management System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3241 Apr 04, 11:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in zhangyanbo2007 youkefu up to 4.2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java XXE Youkefu Zhangyanbo2007
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3256 Apr 04, 17:15 MEDIUM POC This Month

A vulnerability was found in xujiangfei admintwo 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Admintwo Xujiangfei
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-3211 Apr 04, 06:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Fabianros
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3210 Apr 04, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3208 Apr 04, 05:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3207 Apr 04, 04:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3206 Apr 04, 04:15 MEDIUM POC This Month

A vulnerability has been found in code-projects Hospital Management System 1.0 and classified as critical. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Hospital Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3243 Apr 04, 12:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-3229 Apr 04, 09:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Restaurant Table Booking System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Table Booking System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.2%
CVE-2025-3251 Apr 04, 15:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in xujiangfei admintwo 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Admintwo Xujiangfei
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-3219 Apr 04, 08:15 MEDIUM POC This Month

A vulnerability was found in CodeCanyon Perfex CRM 3.2.1. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Perfex Crm Perfexcrm
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-3253 Apr 04, 16:15 MEDIUM POC This Month

A vulnerability was found in xujiangfei admintwo 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Admintwo Xujiangfei
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-3252 Apr 04, 16:15 MEDIUM POC This Month

A vulnerability has been found in xujiangfei admintwo 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Admintwo Xujiangfei
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-3198 Apr 04, 02:15 MEDIUM POC PATCH This Month

A vulnerability has been found in GNU Binutils 2.43/2.44 and classified as problematic. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Binutils Gnu
NVD VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-2243 Apr 04, 10:15 MEDIUM This Month

A server-side request forgery (SSRF) vulnerability in Bitdefender GravityZone Console allows an attacker to bypass input validation logic using leading characters in DNS requests. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Gravityzone Bitdefender
NVD
CVSS 4.0
6.9
EPSS
0.8%
CVE-2025-3268 Apr 04, 21:15 MEDIUM This Month

A vulnerability has been found in qinguoyi TinyWebServer up to 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Tinywebserver Qinguoyi
NVD VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-2245 Apr 04, 10:15 MEDIUM This Month

A server-side request forgery (SSRF) vulnerability exists in the Bitdefender GravityZone Update Server when operating in Relay Mode. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

SSRF Gravityzone Update Server Bitdefender
NVD
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-31130 Apr 04, 15:15 MEDIUM PATCH This Month

gitoxide is an implementation of git written in Rust. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure Suse
NVD GitHub
CVSS 3.1
6.8
EPSS
0.1%
CVE-2025-32138 Apr 04, 16:15 MEDIUM This Month

Improper Restriction of XML External Entity Reference vulnerability in supsystic Easy Google Maps allows XML Injection.11.17. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Google XXE Wordpress Plugin
NVD
CVSS 3.1
6.6
EPSS
0.3%
CVE-2025-32196 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in blazethemes News Kit Elementor Addons allows Stored XSS.3.1. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2025-32187 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Quý Lê 91 Administrator Z allows DOM-Based XSS.03.04. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2025-32169 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Suresh Prasad Showeblogin Social allows DOM-Based XSS.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.4%
CVE-2025-31381 Apr 04, 14:15 MEDIUM This Month

Missing Authorization vulnerability in shiptrack Booking Calendar and Notification allows Exploiting Incorrectly Configured Access Control Security Levels.0.3. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.3%
CVE-2025-22285 Apr 04, 14:15 MEDIUM This Month

Missing Authorization vulnerability in Eniture Technology Pallet Packaging for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.1.15. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass
NVD
CVSS 3.0
6.5
EPSS
0.3%
CVE-2025-32207 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Anzar Ahmed Ni WooCommerce Cost Of Goods allows Stored XSS.2.8. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2025-32197 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in piotnetdotcom Piotnet Addons For Elementor allows Stored XSS.4.34. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2025-32195 Apr 04, 16:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ecwid by Lightspeed Ecommerce Shopping Cart Ecwid Shopping Cart allows Stored XSS.0. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin
NVD
CVSS 3.1
6.5
EPSS
0.1%
Page 1 of 4 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy