Skip to main content
CVE-2025-4509 May 10, 18:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in PHPGurukul e-Diary Management System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4508 May 10, 17:15 MEDIUM POC This Month

A vulnerability classified as critical was found in PHPGurukul e-Diary Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi E Diary Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4507 May 10, 17:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in Campcodes Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4506 May 10, 16:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Online Food Ordering System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Food Ordering System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4505 May 10, 16:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Apartment Visitors Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4504 May 10, 15:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Online College Library System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online College Library System Donbermoy
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4503 May 10, 14:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4502 May 10, 14:15 MEDIUM POC This Month

A vulnerability has been found in Campcodes Sales and Inventory System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4511 May 10, 19:15 MEDIUM POC This Month

A vulnerability was found in vector4wang spring-boot-quick up to 20250422. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Path Traversal
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2025-4512 May 10, 19:15 MEDIUM POC This Month

A vulnerability classified as problematic has been found in Inetum IODAS 7.2-LTS.4.1-JDK7/7.2-RC3.2-JDK7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4515 May 10, 21:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, was found in Zylon PrivateGPT up to 0.6.2. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Privategpt Pribai
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4495 May 10, 01:15 MEDIUM POC This Month

A vulnerability has been found in JAdmin-JAVA JAdmin 1.0 and classified as problematic. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Java Jadmin
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.2%
CVE-2025-4501 May 10, 13:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in code-projects Album Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Album Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4500 May 10, 13:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, has been found in code-projects Hotel Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Hotel Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4499 May 10, 12:15 MEDIUM POC This Month

A vulnerability classified as critical was found in code-projects Simple Hospital Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Simple Hospital Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4498 May 10, 10:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in code-projects Simple Bus Reservation System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Simple Bus Reservation System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4497 May 10, 07:15 MEDIUM POC This Month

A vulnerability was found in code-projects Simple Banking System up to 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Simple Banking System Code Projects
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-47815 May 10, 22:15 MEDIUM POC This Month

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from zip_member_read_all) in zip-reader.c. Rated medium severity (CVSS 4.5), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Suse Pspp Gnu
NVD
CVSS 3.1
4.5
EPSS
0.2%
CVE-2025-47814 May 10, 22:15 MEDIUM POC This Month

libpspp-core.a in GNU PSPP through 2.0.1 allows attackers to cause a heap-based buffer overflow in inflate_read (called indirectly from spv_read_xml_member) in zip-reader.c. Rated medium severity (CVSS 4.5), this vulnerability is no authentication required. Public exploit code available and no vendor patch available.

Buffer Overflow Heap Overflow Suse Pspp Gnu
NVD
CVSS 3.1
4.5
EPSS
0.2%
CVE-2025-2944 May 10, 06:15 MEDIUM This Month

The Jeg Elementor Kit plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Video Button and Countdown Widgets in all versions up to, and including, 2.6.12 due to. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress XSS
NVD
CVSS 3.1
6.4
EPSS
0.2%
CVE-2025-3878 May 10, 12:15 MEDIUM PATCH This Month

The SMS Alert Order Notifications - WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sa_verify shortcode in all versions up to, and including, 3.8.1 due. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

PHP WordPress XSS Sms Alert Order Notifications Wordpress Plugin +1
NVD
CVSS 3.1
6.4
EPSS
0.2%
CVE-2025-4513 May 10, 20:15 MEDIUM This Month

A vulnerability classified as problematic was found in Catalyst User Key Authentication Plugin 20220819 on Moodle. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP Open Redirect Moodle
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4514 May 10, 20:15 MEDIUM This Month

A vulnerability, which was classified as critical, has been found in Zhengzhou Jiuhua Electronic Technology mayicms up to 5.8E. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Mayicms
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4510 May 10, 18:15 MEDIUM This Month

A vulnerability was found in Changjietong UFIDA CRM 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy