Skip to main content
CVE-2025-4027 Apr 28, 16:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Old Age Home Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4039 Apr 28, 22:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Rail Pass Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4020 Apr 28, 13:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Old Age Home Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4034 Apr 28, 20:15 MEDIUM POC This Month

A vulnerability classified as critical was found in projectworlds Online Examination System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Examination System Projectworlds
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4033 Apr 28, 19:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Nipah Virus Testing Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4031 Apr 28, 18:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Pre School Enrollment System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4030 Apr 28, 18:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid19 Testing Management System Phpgurukul
NVD VulDB GitHub
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4028 Apr 28, 17:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul COVID19 Testing Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid19 Testing Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4018 Apr 28, 12:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160.java. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass Java Novel Plus Xxyopen
NVD VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4013 Apr 28, 09:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Art Gallery Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4026 Apr 28, 16:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Nipah Virus Testing Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4025 Apr 28, 15:15 MEDIUM POC This Month

A vulnerability classified as critical was found in itsourcecode Placement Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Placement Management System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4024 Apr 28, 15:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in itsourcecode Placement Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Placement Management System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4023 Apr 28, 14:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Placement Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Placement Management System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-3998 Apr 28, 04:15 MEDIUM POC This Month

A vulnerability classified as critical was found in CodeAstro Membership Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Membership Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4014 Apr 28, 10:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Art Gallery Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4005 Apr 28, 07:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid19 Testing Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4004 Apr 28, 06:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Covid19 Testing Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-34490 Apr 28, 19:15 MEDIUM POC This Month

GFI MailEssentials prior to version 21.8 is vulnerable to an XML External Entity (XXE) issue. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XXE Mailessentials Gfi
NVD
CVSS 3.1
6.5
EPSS
0.1%
CVE-2025-4036 Apr 28, 20:15 MEDIUM POC This Month

A vulnerability was found in 201206030 Novel 3.5.0 and classified as critical.java of the component Chapter Handler. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Information Disclosure Novel Xxyopen
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2025-4022 Apr 28, 14:15 MEDIUM POC This Month

A vulnerability was found in web-arena-x webarena up to 0.2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Webarena
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2024-13688 Apr 28, 06:15 MEDIUM POC This Month

The Admin and Site Enhancements (ASE) WordPress plugin before 7.6.10 uses a hardcoded password in its Password Protection feature, allowing attacker to bypass the protection offered via a crafted. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Authentication Bypass Admin And Site Enhancements
NVD WPScan
CVSS 3.1
5.3
EPSS
0.3%
CVE-2025-4017 Apr 28, 11:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Information Disclosure Novel Plus Xxyopen
NVD VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4021 Apr 28, 13:15 MEDIUM POC This Month

A vulnerability was found in code-projects Patient Record Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Patient Record Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-4012 Apr 28, 09:15 MEDIUM POC This Month

A vulnerability was found in playeduxyz PlayEdu 开源培训系统 up to 1.8 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SSRF Playedu
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.5%
CVE-2025-25776 Apr 28, 15:15 MEDIUM POC This Month

Cross-Site Scripting (XSS) vulnerability exists in the User Registration and User Profile features of Codeastro Bus Ticket Booking System v1.0 allows an attacker to execute arbitrary code into the. Rated medium severity (CVSS 5.0), this vulnerability is no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS RCE Bus Ticket Booking System Codeastro
NVD GitHub
CVSS 3.1
5.0
EPSS
0.1%
CVE-2025-3994 Apr 28, 01:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS N150rt Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.6%
CVE-2025-3995 Apr 28, 02:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS N150rt Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.3%
CVE-2025-3996 Apr 28, 03:15 MEDIUM POC This Month

A vulnerability was found in TOTOLINK N150RT 3.4.0-B20190525. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS N150rt Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4037 Apr 28, 21:15 MEDIUM POC This Month

A vulnerability was found in code-projects ATM Banking 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Atm Banking Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4029 Apr 28, 17:15 MEDIUM POC This Month

A vulnerability was found in code-projects Personal Diary Management System 1.0 and classified as critical. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Personal Diary Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4038 Apr 28, 21:15 MEDIUM POC This Month

A vulnerability was found in code-projects Train Ticket Reservation System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Train Ticket Reservation System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4019 Apr 28, 12:15 MEDIUM This Month

A vulnerability, which was classified as critical, was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Java Novel Plus Xxyopen
NVD VulDB
CVSS 4.0
6.9
EPSS
0.4%
CVE-2025-4015 Apr 28, 10:15 MEDIUM This Month

A vulnerability was found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Java Novel Plus Xxyopen
NVD VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-31144 Apr 28, 00:15 MEDIUM This Month

Quick Agent V3 and Quick Agent V2 contain an issue with improper restriction of communication channel to intended endpoints. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Windows Information Disclosure Microsoft
NVD
CVSS 4.0
6.9
EPSS
0.1%
CVE-2025-4003 Apr 28, 06:15 MEDIUM This Month

A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service
NVD GitHub VulDB
CVSS 4.0
6.8
EPSS
0.1%
CVE-2025-4002 Apr 28, 05:15 MEDIUM This Month

A vulnerability was found in RefindPlusRepo RefindPlus 0.14.2.AB and classified as problematic. Rated medium severity (CVSS 6.8), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service
NVD GitHub VulDB
CVSS 4.0
6.8
EPSS
0.1%
CVE-2024-11922 Apr 28, 21:15 MEDIUM This Month

Missing input validation in certain features of the Web Client of Fortra's GoAnywhere prior to version 7.8.0 allows an attacker with permission to trigger emails to insert arbitrary HTML or. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Goanywhere Managed File Transfer Fortra
NVD
CVSS 3.1
6.3
EPSS
0.1%
CVE-2022-41871 Apr 28, 16:15 MEDIUM This Month

SEPPmail through 12.1.17 allows command injection within the Admin Portal. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. No vendor patch available.

RCE Command Injection Seppmail
NVD VulDB
CVSS 3.1
6.0
EPSS
1.0%
CVE-2025-3706 Apr 28, 03:15 MEDIUM This Month

The eHRMS from 104 Corporation has a Reflected Cross-site Scripting vulnerability, allowing unauthenticated remote attackers to execute arbitrary JavaScript codes in user's browser through phishing. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS
NVD
CVSS 3.1
6.1
EPSS
0.2%
CVE-2024-10635 Apr 28, 21:15 MEDIUM This Month

Enterprise Protection contains an improper input validation vulnerability in attachment defense that allows an unauthenticated remote attacker to bypass attachment scanning security policy by sending. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Enterprise Protection Proofpoint
NVD
CVSS 3.1
6.1
EPSS
0.1%
CVE-2025-43857 Apr 28, 16:15 MEDIUM PATCH This Month

Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Uncontrolled Resource Consumption vulnerability could allow attackers to cause denial of service by exhausting system resources.

Denial Of Service Red Hat Suse Net Ruby Lang
NVD GitHub
CVSS 4.0
6.0
EPSS
0.5%
CVE-2025-32472 Apr 28, 13:15 MEDIUM This Month

The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service
NVD
CVSS 3.1
5.3
EPSS
1.0%
CVE-2025-4016 Apr 28, 11:15 MEDIUM This Month

A vulnerability classified as critical has been found in 20120630 Novel-Plus up to 0e156c04b4b7ce0563bef6c97af4476fcda8f160. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Java Information Disclosure Novel Plus Xxyopen
NVD VulDB
CVSS 4.0
5.3
EPSS
0.5%
CVE-2025-39367 Apr 28, 09:15 MEDIUM This Month

Missing Authorization vulnerability in SeventhQueen Kleo.4.4. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wordpress Theme
NVD
CVSS 3.1
5.3
EPSS
0.2%
CVE-2025-3997 Apr 28, 03:15 MEDIUM This Month

A vulnerability classified as problematic has been found in dazhouda lecms 3.0.3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP CSRF
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-4006 Apr 28, 07:15 MEDIUM This Month

A vulnerability classified as critical has been found in youyiio BeyongCms 1.6.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass File Upload
NVD VulDB
CVSS 4.0
5.1
EPSS
0.2%
CVE-2025-4011 Apr 28, 09:15 MEDIUM This Month

A vulnerability has been found in Redmine 6.0.0/6.0.1/6.0.2/6.0.3 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS
NVD VulDB
CVSS 4.0
5.1
EPSS
0.2%
CVE-2025-4000 Apr 28, 04:15 MEDIUM This Month

A vulnerability, which was classified as problematic, was found in Seeyon Zhiyuan OA Web Application System 8.1 SP2. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Oa Web Application System Seeyon
NVD VulDB
CVSS 4.0
5.1
EPSS
0.1%
CVE-2025-3999 Apr 28, 04:15 MEDIUM This Month

A vulnerability, which was classified as problematic, has been found in Seeyon Zhiyuan OA Web Application System 8.1 SP2.jsp of the component URL Parameter Handler. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Oa Web Application System Seeyon
NVD VulDB
CVSS 4.0
5.1
EPSS
0.1%
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy