A flaw was found in the interactive shell of the xmllint command-line tool, used for parsing XML files.
Path traversal vulnerability in whatsmars 2021.4.0 allows remote authenticated attackers to read arbitrary files via the artifactId parameter in the InitializrController. Public exploit code exists, but EPSS score is low (0.12%), indicating limited exploitation likelihood. No active exploitation reported in CISA KEV.
SQL injection in code-projects Restaurant Order System 1.0 allows remote authenticated attackers to manipulate database queries via the ID parameter in /table.php. A public exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.09%), indicating limited exploitation likelihood.
Cross-site request forgery in WuKongOpenSource WukongCRM 9.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability exists in the AdminRoleController.java file and can be triggered remotely with user interaction. A public exploit is available, but no active exploitation has been reported.
Path traversal vulnerability in Spring-Boot-In-Action up to commit 807fd37643aa774b94fd004cc3adbd29ca17e9aa allows remote authenticated attackers to read or write arbitrary files via the filename parameter in the watermarkTest function. Public exploit code exists, but EPSS score is low (0.07%) and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the client_id or nominee_id parameters in /insertNominee.php. Public exploit code is available, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
SQL injection in Jasmin Ransomware 1.0.0 and 1.0.1 allows remote authenticated attackers to extract sensitive data from the database via the Search parameter in /dashboard.php. A public exploit exists, but EPSS score is low (0.07%) and no active exploitation has been reported.
Cross-site request forgery in jfinal_cms 5.0.1 allows an attacker to trigger a logout action without user consent. The vulnerability is publicly exploited but has low real-world risk due to limited impact and low EPSS score.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to manipulate the `recipt_no` parameter in `/insertPayment.php`, potentially leading to data breach or system compromise. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), suggesting limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 enables remote attackers with low privileges to manipulate the client_id parameter in /insertClient.php, leading to unauthorized database access and potential data modification. Public exploit code is available, but EPSS indicates a low probability of widespread exploitation, and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 via the agent_id parameter in /insertagent.php allows authenticated remote attackers to manipulate database queries. Public exploit code is available, but no active exploitation has been confirmed. The vulnerability has low impact (C:L/I:L/A:L) and a very low EPSS score (0.06%), suggesting limited real-world risk.
Cross-site scripting (XSS) in PHPGurukul Rail Pass Management System 1.0 allows remote attackers to inject arbitrary web scripts via the Name parameter in /contact.php. A public exploit exists, but no active exploitation has been confirmed. The EPSS score is low (0.05%), indicating low exploitation likelihood.
SQL injection in open-video-cms 1.0 allows remote authenticated attackers to manipulate database queries via the 'sort' parameter in /v1/video/list. A public exploit exists, but exploitation requires authentication and the product has limited deployment, reducing real-world risk.
Stored cross-site scripting in PHPGurukul Nipah Virus Testing Management System 1.0 allows authenticated attackers to inject arbitrary web scripts via the 'serachdata' parameter in /search-report.php. Public exploit code exists, but no active exploitation has been reported and EPSS risk is low (0.05%).
Stored cross-site scripting in CodeAstro Food Ordering System 1.0 allows authenticated admin users to inject arbitrary JavaScript via the Restaurant Name and Address fields in the store edit page. When viewed, the injected script executes in the victim's browser, enabling session hijacking or defacement. A public exploit exists, but no active exploitation has been confirmed.
Stored cross-site scripting (XSS) in PHPGurukul Rail Pass Management System 1.0 allows an authenticated admin to inject arbitrary JavaScript via the 'pagedes' parameter in /admin/aboutus.php. Public exploit code exists, but no active exploitation has been reported and EPSS risk is low (0.05%).
Denial of service in spdlog up to 1.15.1 via the scoped_padder function in pattern_formatter-inl.h allows local attackers to cause resource consumption. Public exploit code exists, but EPSS score is low (0.05%) and no active exploitation in CISA KEV.
Heap-based buffer overflow in Assimp up to 5.4.3 allows local attackers with low privileges to execute arbitrary code or cause denial of service by enticing a user to load a crafted Half-Life MDL file. A public proof-of-concept exploit exists, but no official patch has been released despite the vendor acknowledging the issue. The EPSS score is low (0.05%), indicating limited exploitation activity currently, but the availability of public exploit code raises the risk for environments where untrusted MDL files are processed.
Use-after-free in Assimp BVHLoader allows local attackers with low privileges to trigger memory corruption when processing crafted BVH files. A public proof-of-concept is available, but EPSS score is very low (0.05%) and there is no evidence of active exploitation in the wild.
A security vulnerability in A vulnerability (CVSS 3.1). Risk factors: public PoC available.
Hard-coded password in TOTOLINK T10 firmware 4.1.8cu.5207 allows local network attackers with high privileges to access the /etc/shadow.sample file. The vulnerability is publicly exploited but has a low EPSS score (0.05%) and high attack complexity, limiting real-world risk.
CVE-2025-24388 is a security vulnerability (CVSS 3.8) that allows parameter injection due. Remediation should follow standard vulnerability management procedures.
Server-side request forgery (SSRF) in Intera InHire up to 20250530 allows remote authenticated attackers to make internal network requests. A public exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.06%), indicating limited exploitation likelihood.
Code injection vulnerability in letta-ai letta up to version 0.4.1 allows authenticated adjacent network attackers to execute arbitrary Python code by manipulating the function_name or function_args arguments in the function_message method. Public exploit code exists, but no active exploitation has been confirmed by CISA.