In the Linux kernel, the following vulnerability has been resolved: powerpc/powernv/memtrace: Fix out of bounds issue in memtrace mmap memtrace mmap issue has an out of bounds issue. This patch fixes the by checking that the requested mapping region size should stay within the allocated region size.
Insufficient entropy in root password generation allows remote attackers to predict administrator credentials on D-Link DCS-6517 and DCS-7517 cameras running firmware up to 2.02.0. The vulnerability arises from the generate_pass_from_mac function, enabling password disclosure via a high-complexity attack. Public exploit code is available, but the products are end-of-life and no longer supported.
Hard-coded password in D-Link DCS-7517 firmware up to 2.02.0 allows remote attackers to bypass authentication via the Qlync Password Generation Handler. The vulnerability has a high attack complexity and exploitability is reported as difficult, but a public proof-of-concept exists. It is classified as problematic and only affects an end-of-life product, limiting real-world urgency.
Insufficient Session Expiration vulnerability in ABB Lite Panel Pro.This issue affects Lite Panel Pro: through 1.0.1.
A security vulnerability in the default settings of MikroTik RouterOS 7 and fixed in (CVSS 6.5). Remediation should follow standard vulnerability management procedures.
Command injection in D-Link DI-7300G+ and DI-8200G routers allows remote authenticated attackers to execute arbitrary OS commands via the msp_info.htm endpoint. Affected firmware versions include 17.12.20A1 and 19.12.25A1. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates a low exploitation probability of 0.20%.
OS command injection in D-Link DI-7300G+ firmware 19.12.25A1 allows authenticated remote attackers to execute arbitrary OS commands through the wget_test.asp endpoint’s url parameter. Exploit code is publicly available, though EPSS indicates low immediate exploitation likelihood (0.19%). The device is a legacy VPN router with limited deployment, reducing mass-exploitation risk.
Unrestricted file upload in code-projects Library System 1.0 allows authenticated remote attackers with low privileges to upload arbitrary files via the image parameter in /add-book.php. A publicly available proof-of-concept exploit exists, potentially enabling remote code execution through webshell upload. EPSS score is low (0.09%), indicating low threat activity despite the ease of exploitation.
SQL injection in SourceCodester Best Salon Management System 1.0 allows remote attackers with low privileges to manipulate the editid parameter in /panel/edit-category.php, leading to potential data leakage or modification. A public proof-of-concept exploit is available, but no active exploitation is confirmed (EPSS score 0.08%) and the vulnerability is not listed in CISA KEV.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated low-privilege users to execute arbitrary SQL via the searchdata parameter in /panel/search-appointment.php. Exploit code is publicly available, but no active exploitation has been confirmed. An attacker with a valid account can read, modify, or delete salon booking data.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the ID parameter in /admin/manage-foreigners-ticket.php. Public exploit code is available, though no active exploitation has been confirmed by CISA KEV. The low CVSS score (2.1) reflects limited impact and the requirement for low-privilege credentials.
SQL injection in PHPGurukul Zoo Management System 2.1 allows low-privileged authenticated remote attackers to inject malicious SQL via the viewid parameter in /admin/view-normal-ticket.php. Exploit code is publicly available, though no active exploitation has been confirmed and EPSS remains low. The vulnerability carries a low CVSS 4.0 base score (2.1) due to limited impact, but the reporting source rates it as critical.
SQL injection in SourceCodester Best Salon Management System 1.0 allows authenticated attackers with low privileges to manipulate the editid parameter in /panel/edit-tax.php to execute arbitrary SQL queries, potentially leading to unauthorized data access or modification.
SQL injection in Best Salon Management System 1.0 allows remote attackers to inject SQL via the 'Name' parameter in /panel/add-tax.php. The exploit is publicly available, though real-world risk is limited due to the product's low deployment footprint. EPSS of 0.06% indicates very low probability of active exploitation, and no CISA KEV entry suggests no current in-the-wild use.
SQL injection in PHPGurukul Student Record System 3.2 allows authenticated low-privilege users to manipulate database queries via the 'session' parameter in /register.php, potentially leading to data theft or modification. Exploit code is publicly available, but no active exploitation has been confirmed, and EPSS indicates very low likelihood (0.04%).
SQL injection in PHPGurukul Student Record System 3.2 enables authenticated remote attackers to manipulate database queries via the fmarks2 parameter in /edit-student.php, potentially leading to data exposure or modification. Exploit code is publicly available, but the low EPSS score (0.04%) and required low-privilege authentication limit immediate real-world risk.
Remote SQL injection in PHPGurukul Student Record System 3.2 allows authenticated attackers to manipulate the aemailid parameter via /admin-profile.php, leading to unauthorized database access. Exploit code is publicly available, but no active exploitation (CISA KEV) or vendor patch has been confirmed at this time.
We need to produce a JSON object with all the specified fields. The input data: CVE-2025-6912, PHPGurukul Student Record System 3.2, SQL injection in /manage-students.php via del parameter. CVSS 4.0 vector given: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P ... So attack vector network, low complexity, privileges required low (PR:L), user interaction none, vulnerable system impact low on confidentiality, integrity, availability. Exploit maturity is Proof-of-Concept (E:P). The CVSS score is 2.1? That's very low. But it says rated as critical in the description, but CVSS 2.1 is low. The description says rated as critical, but CVSS base score might be different; we'll use the provided CVSS vector to assess. EPSS 0.04% percentile 13% - low. No KEV listing. POC is publicly available (from description and tags). No patch data provided. We'll synthesize. product_name: "Student Record System" (as specific product, from CPE: phpGurukul Student Record System, so "Student Record System" or "PHPGurukul Student Record System"? The instruction: 1-3 words ONLY. The specific product or service name affected. "Student Record System" is fine, maybe "PHPGurukul Student Record System" too many words? 3 words: "PHPGurukul Student Record System"? Actually "PHPGurukul Student Record System" is 4 words. I can simplify to "Student Record System" because the vendor is known, but we must be specific. The CPE says phpGurukul:student_record_system. So product name: "Student Record System". I'll go with "Student Record System". But to be clear: "PHPGurukul Student Record System" might be too long. I'll go "PHPGurukul Student Record System" (3 words if I count: PHPGurukul, Student, Record, System? Actually "PHPGurukul" is one word, "Student Record System" three, total 4. I could do "Student Record System" alone. The CVE description says "PHPGurukul Student Record System 3.2". That's the product. The vendor is PHPGurukul, product Student Record System. So I'll put "Student
SQL injection in PHPGurukul Student Record System 3.2 via /session.php allows authenticated remote attackers to manipulate the session parameter to execute arbitrary SQL commands, leading to potential data theft or tampering. A public proof-of-concept exploit is available, though no active exploitation has been confirmed. The affected system is a niche academic management platform, reducing widespread risk.
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows authenticated users with low privileges to execute arbitrary SQL commands via the emeradd parameter in /admin/add-scdetails.php. An attacker can
SQL injection in PHPGurukul Old Age Home Management System 1.0 allows remote authenticated attackers with low privileges to manipulate the sertitle parameter in /admin/edit-services.php, potentially leading to unauthorized database access or modification. Public exploit code is available, but there is no evidence of active exploitation in the wild. The vulnerability has a low CVSS 4.0 base score of 2.1, reflecting limited impact and authenticated access requirements.
SQL injection in Movie Ticketing System 1.0 allows remote attackers with low privileges to manipulate the backend database through the Date parameter of the /ticketConfirmation.php endpoint. Exploit code is publicly available, but no active exploitation has been confirmed by CISA KEV. The impact is rated low by CVSS, limiting the risk to data exposure or minor data tampering.
SQL injection in Staff Audit System 1.0 allows remote attackers with low privileges to execute arbitrary SQL commands via the Search parameter in /search_index.php. A public exploit is available, though EPSS estimates very low exploitation probability (0.04%) and no active exploitation has been confirmed.
SQL injection in the 'del' parameter of /manage-subjects.php in PHPGurukul Student Record System 3.2 allows authenticated, low-privilege remote attackers to manipulate the backend database. Public exploit code is available, though EPSS exploitation probability is low (0.04%) and active exploitation by CISA KEV is not confirmed.
SQL injection in Staff Audit System 1.0 enables remote authenticated attackers to manipulate database queries via the updateid argument in /update_index.php. Exploit code is public, though no active exploitation is reported. The vulnerability poses low real-world risk due to limited impact and low EPSS score.
A reflected cross-site scripting vulnerability via a specific parameter exists in SLNX Help Documentation of RICOH Streamline NX. If this vulnerability is exploited, an arbitrary script may be executed in the web browser of the user who accessed the product.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the password and confirm_password parameters in /register.php.
Reflected Cross-Site Scripting (XSS) vulnerability in Daily Expense Manager v1.0. This vulnerability allows an attacker to execute JavaScript code by sending a POST request through the username parameter in /login.php.
Akamai CloudTest before 60 2025.06.09 (12989) allows SSRF.
CVE-2025-38090 is a security vulnerability (CVSS 5.5). Remediation should follow standard vulnerability management procedures. Vendor patch is available.
Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly enforce channel member management permissions when adding participants to playbook runs. This allows authenticated users with member-level permissions to bypass system admin restrictions and add or remove users to/from private channels via the playbook run participants feature, even when the 'Manage Members' permission has been explicitly removed. This can lead to unauthorized access to sensitive channel content and allow guest users to gain channel management privileges.
Frappe is a full-stack web application framework. Prior to versions 14.94.2 and 15.57.0, authenticated users could upload carefully crafted malicious files via Data Import, leading to cross-site scripting (XSS). This issue has been patched in versions 14.94.2 and 15.57.0. There are no workarounds for this issue other than upgrading.
IBM Cloud Pak System 2.3.3.6, 2.3.36 iFix1, 2.3.3.7, 2.3.3.7 iFix1, 2.3.4.0, 2.3.4.1, and 2.3.4.1 iFix1 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Devinim Software Library Software allows Reflected XSS.This issue affects Library Software: before 24.11.02.
Mattermost versions 10.5.x <= 10.5.5, 9.11.x <= 9.11.15, 10.8.x <= 10.8.0, 10.7.x <= 10.7.2, 10.6.x <= 10.6.5 fail to properly validate channel membership when retrieving playbook run metadata, allowing authenticated users who are playbook members but not channel members to access sensitive information about linked private channels including channel name, display name, and participant count through the run metadata API endpoint.
Host Header Injection (HHI) vulnerability in the Hotspot Shield VPN client, which can induce unexpected behaviour when accessing third-party web applications through the VPN tunnel. Although such applications do not present this vulnerability per se, the use of the tunnel, together with a forged Host header, can cause the VPN client to redirect or forward HTTP requests to servers other than those originally intended, leading to consequences such as open redirects or delivery of traffic to infrastructure controlled by an attacker. This does not imply a flaw in the target applications, but in how the VPN client internally handles outgoing headers and requests.
OS command injection in D-Link DI-7300G+ firmware version 19.12.25A1 allows remote authenticated attackers to execute arbitrary commands on the device. The vulnerability resides in the proxy_client.asp endpoint, where attacker-supplied proxy server parameters are passed unsanitized to a system shell. Public exploit code is available, but no active exploitation has been confirmed by CISA KEV.
OS command injection in D-Link DI-7300G+ firmware 19.12.25A1 allows authenticated adjacent-network attackers to execute arbitrary commands via the Time parameter in httpd_debug.asp. A publicly available exploit exists, but there is no evidence of active exploitation (not listed in CISA KEV) and EPSS indicates a low exploitation probability (0.13%). This flaw requires low-privilege access and local network connectivity.
Rejected reason: Reason: This candidate was issued in error. No vendor patch available.
Rejected reason: Reason: This candidate was issued in error. No vendor patch available.