Authentication bypass via CAPTCHA replay in Novel Plus versions up to 5.1.3 allows remote attackers to circumvent brute-force protections. The flaw in the ajaxLogin function's CATCHA handler permits reuse of valid CAPTCHA tokens, enabling credential guessing attacks. Publicly available exploit code exists, but exploitation is difficult and no active exploitation has been confirmed.
Open redirect vulnerability in Hope-Boot 1.0.0 allows remote attackers to redirect users to arbitrary external URLs via the redirect_url parameter in the login functionality. A public proof-of-concept exploit is available, but no active exploitation has been reported and the EPSS score is low (0.06%).
Cross-site scripting in code-projects School Fees Payment System 1.0 allows remote attackers to inject arbitrary web script via crafted parameters in /student.php. The vulnerability requires user interaction (clicking a malicious link) and a publicly available proof-of-concept exists. EPSS score indicates very low exploitation probability, and no active exploitation has been reported.
A security vulnerability in NOYAFA/Xiami LF9 Pro (CVSS 4.3). Risk factors: public PoC available.
SQL injection in SourceCodester Best Salon Management System 1.0 allows low-privileged authenticated attackers to extract or modify database content via the /add-customer.php endpoint. Public exploit code is available, lowering the barrier for exploitation, though no active exploitation has been confirmed (not in CISA KEV) and EPSS indicates a low probability of widespread attacks (0.06%).
SQL injection in PHPGurukul Hospital Management System 4.0 allows remote authenticated attackers to read, modify, or delete database contents via the searchdata parameter in /doctor/search.php. A public proof-of-concept exploit exists, but EPSS indicates a very low exploitation probability (0.06%) and the vulnerability is not listed in CISA KEV.
SQL injection in Novel-Plus up to 5.1.3 allows authenticated remote attackers to extract sensitive data via the sort/order parameters in the User Management Module. Public exploit code exists, but no active exploitation has been confirmed (not in CISA KEV). EPSS score is low (0.05%), indicating limited exploitation likelihood.
Cross-site scripting (XSS) in Hope-Boot 1.0.0 allows an authenticated attacker to inject arbitrary JavaScript via the errorMsg parameter in the login functionality. A public proof-of-concept exploit exists, but no active exploitation has been reported. The EPSS score is low (0.05%), indicating low exploitation likelihood.
A remote code execution vulnerability in xxyopen/201206030 novel-plus (CVSS 4.2). Risk factors: public PoC available.
Successful exploitation of the vulnerability could allow an attacker to intercept data and conduct session hijacking on the exposed data as the vulnerable product uses unencrypted HTTP communication, potentially leading to unauthorised access or data tampering.
A security vulnerability in SIFUSM/MZZYG BD S1 (CVSS 4.3). Remediation should follow standard vulnerability management procedures.
Reachable assertion in Tarantool up to 3.3.1 via the tm_to_datetime function allows local attackers to cause a denial of service. Public exploit code exists, but no active exploitation has been confirmed. EPSS score is low (0.02%), indicating low exploitation likelihood.
A security vulnerability in RISC Zero (CVSS 1.7). Remediation should follow standard vulnerability management procedures.