MongoDB Server may be susceptible to disruption caused by high memory usage, potentially leading to server crash. This condition is linked to inefficiencies in memory management related to internal operations. In scenarios where certain internal processes persist longer than anticipated, memory consumption can increase, potentially impacting server stability and availability. This issue affects MongoDB Server v8.0 versions prior to 8.0.10
Dokploy is a self-hostable Platform as a Service (PaaS) that simplifies the deployment and management of applications and databases. An authenticated attacker can read any file that the Traefik process user can access (e.g., /etc/passwd, application source, environment variable files containing credentials and secrets). This may lead to full compromise of other services or lateral movement. This vulnerability is fixed in 0.23.7.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
Null pointer dereference vulnerability in the PDF preview module Impact: Successful exploitation of this vulnerability may affect function stability.
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.114, and 9.2.2406.119, an unauthenticated attacker can send a specially-crafted SPL search that could change the membership state in a Splunk Search Head Cluster (SHC) through a Cross-Site Request Forgery (CSRF), potentially leading to the removal of the captain or a member of the SHC.<br><br>The vulnerability requires the attacker to phish the administrator-level victim by tricking them into initiating a request within their browser. The attacker should not be able to exploit the vulnerability at will.
CVE-2025-24508 is a security vulnerability (CVSS 6.4). Remediation should follow standard vulnerability management procedures.
In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the `User Interface - Views` configuration page that could potentially lead to a denial of service (DoS).The user could cause the DoS by exploiting a path traversal vulnerability that allows for deletion of arbitrary files within a Splunk directory. The vulnerability requires the low-privileged user to phish the administrator-level victim by tricking them into initiating a request within their browser. The low-privileged user should not be able to exploit the vulnerability at will.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Unrestricted file upload in Campcodes Advanced Online Voting System 1.0 allows authenticated remote attackers to upload arbitrary files via the photo parameter in /admin/voters_add.php, potentially enabling remote code execution. A public proof-of-concept exploit is available, and the vulnerability is rated critical although the CVSS 4.0 base score suggests low impact. No active exploitation has been confirmed.
Unrestricted file upload in Online Note Sharing 1.0 allows authenticated attackers to upload arbitrary files via the profile image handler, potentially leading to remote code execution. The vulnerability exists in the /
Authenticated path traversal in risesoft-y9 Digital-Infrastructure up to 9.6.7 enables remote attackers with low privileges to delete arbitrary files via a crafted fullPath parameter in the deleteFile endpoint. A public proof-of-concept exploit is available; the vendor did not respond to disclosure and no patch is available.
SQL injection in Campcodes Advanced Online Voting System 1.0 allows remote attackers to execute arbitrary SQL commands via the 'ID' parameter in /admin/voters_delete.php. The vulnerability requires low-privilege authentication and has a publicly available proof-of-concept. EPSS exploitation probability is very low (0.06%), and no active exploitation is reported.
SQL injection in Campcodes Advanced Online Voting System 1.0 allows authenticated attackers to manipulate the ID parameter in /admin/candidates_delete.php to execute arbitrary SQL commands. A public proof-of-concept exploit is available, but no active exploitation is confirmed and EPSS probability is only 0.06%.
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers to inject malicious SQL via the adminname parameter in /panel/admin-profile.php, potentially leading to data leakage or tampering. Despite being publicly disclosed with proof-of-concept code, the actual impact is limited according to CVSS 4.0 (score 2.1), and EPSS predicts a low exploitation probability (0.06%).
SQL injection in Best Salon Management System 1.0 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the staff_id parameter in the /panel/s
SQL injection in Campcodes Complaint Management System 1.0 allows authenticated remote attackers to manipulate the cid parameter in /users/complaint-details.php, potentially reading or modifying database data. A public proof-of-concept exploit is available, but the vulnerability requires low-privilege user authentication and the impact is limited, as reflected by the low CVSS 4.0 score of 2.1 and EPSS exploitation probability of 0.06%. No active exploitation has been reported via CISA KEV.
SQL injection in itsourcecode Employee Management System 1.0 allows authenticated attackers with low privileges to inject SQL via the AdminName parameter in /admin/adminprofile.php. Public proof-of-concept exploit exists, but EPSS indicates low real-world exploitation probability (0.06%).
SQL injection in itsourcecode Employee Management System up to 1.0 allows authenticated administrators to execute arbitrary SQL queries via the coursepg parameter in /admin/editempeducation.php. A public proof-of-concept exploit exists, but CVSS v4.0 base score is 2.1 (low impact) and EPSS is 0.06%, indicating limited real-world risk. No evidence of active exploitation (not in CISA KEV) and no vendor patch is available.
Cross-site request forgery (CSRF) in CodeAstro Online Movie Ticket Booking System 1.0 allows remote attackers to trick authenticated users into performing unauthorized actions, such as modifying data. Exploit code is publicly available, but no active exploitation has been reported, and EPSS predicts a very low exploitation probability (0.03%).
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - WikiHiero Extension allows Stored XSS.This issue affects Mediawiki - WikiHiero Extension: from 1.43.X before 1.43.2.
An Improper Access Control vulnerability in the Stylus Tools component of Google ChromeOS version 16238.64.0 on the garaged stylus devices allows a physical attacker to bypass the lock screen and access user files by removing the stylus while the device is closed and using the screen capture feature.
SQL injection in Campcodes Complaint Management System 1.0 allows authenticated administrators to manipulate cid/uid parameters via /admin/complaint-details.php, enabling arbitrary SQL query execution that can read or modify database records. A public proof-of-concept exploit is available, but the vulnerability requires high privileges and has low exploitation probability (EPSS 0.06%), with no evidence of active attacks.
SQL injection in itsourcecode Employee Management System 1.0 allows authenticated admins to manipulate database queries via the currentpassword parameter in /admin/changepassword.php. Despite classification as critical, the high privilege requirement (PR:H) and low EPSS score (0.06%) indicate limited real-world risk, though public exploit code exists.
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated attackers to inject arbitrary web script via POST parameters at /patient.html. A public exploit is available, but EPSS score of 0.05% and low CVSS severity indicate limited real-world exploitation risk. The flaw can compromise patient data integrity in hospital management deployments.
Cross-site scripting in Portabilis i-Educar 2.9.0 allows an authenticated low-privilege user to inject malicious JavaScript through the unsanitized `Nome` parameter in the Curricular Components Module editor (`/module/ComponenteCurricular/edit`). When a victim with an active session views the affected component, the injected script executes in their browser context, enabling session hijacking or UI manipulation. A public proof-of-concept is available on GitHub, though EPSS at 0.03% (7th percentile) indicates negligible observed exploitation activity to date, and the vulnerability is not listed in CISA KEV.
Cross-site scripting (XSS) in Portabilis i-Educar 2.9.0 allows authenticated attackers to inject arbitrary web script via the 'Função' parameter in the Function Management module. A public exploit is available, but EPSS indicates low exploitation probability (0.03%). The vendor has not responded to disclosures.
Cross-site scripting in Portabilis i-Educar 2.9.0’s Course Module allows authenticated low-privilege users to inject malicious scripts via the ‘Curso’ parameter, potentially compromising other users’ sessions or data. A publicly available proof-of-concept exists, but exploitation requires user interaction and is not known to be actively exploited (EPSS score 0.03%).
Cross-site scripting in Portabilis i-Educar 2.9.0 allows authenticated low-privilege attackers to inject arbitrary web scripts via the 'Escola' parameter in the school module. Publicly available exploit code exists, but the vendor has not responded and no patch is available. EPSS score is low (0.03%), indicating low exploitation likelihood.
Cross-site scripting vulnerability in Portabilis i-Educar 2.9.0 allows a remote, authenticated attacker with low privileges to inject arbitrary web script via the Benefício parameter of the Student Benefits Registration page. When a victim views the maliciously crafted request, the script executes in the victim's browser, potentially leading to session hijacking or defacement. Publicly available exploit code exists, but no active exploitation has been confirmed.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated administrators to inject JavaScript via the Admin Name field on the admin profile page, with a publicly available proof-of-concept exploit. While the attack requires high privileges, a crafted payload could execute in another admin's browser when viewing the profile, leading to session token theft or interface manipulation.
Stored cross-site scripting in Best Salon Management System 1.0 allows an authenticated attacker with high privileges to inject malicious scripts via the 'Tax Name' parameter on the Update Tax page. The injected script executes when another user views the affected page, potentially enabling session hijacking or phishing attacks. Exploit code is publicly available, but no active exploitation has been confirmed; EPSS indicates a very low likelihood of widespread exploitation.
Cross-site scripting (XSS) in Best Salon Management System 1.0 allows a high-privileged attacker to inject malicious scripts via the search-appointment.php endpoint. An unauthenticated victim user passively interacting with the injected content may suffer low integrity impact in their browser session. The vulnerability has a publicly available proof-of-concept but is not known to be actively exploited.
Cross-site scripting in Best Salon Management System 1.0's Update Staff Page allows authenticated admin-level attackers to inject malicious scripts via the /panel/edit_plan.php endpoint. A publicly available exploit exists, but the EPSS score is negligible (0.04%) and no active exploitation has been reported. The vulnerability requires high privileges and user interaction, limiting its real-world severity.
Cross-site scripting in Best Salon Management System 1.0 allows authenticated high-privilege users to inject malicious scripts via the Staff Name field on the edit-staff page. A remote attacker with admin access can store a payload that executes in the browser of another admin who views the staff listing, potentially leading to session hijacking or defacement. Publicly available exploit code exists, but no active exploitation has been confirmed.
Stored cross-site scripting in Best Salon Management System 1.0 enables authenticated high-privilege attackers to inject arbitrary JavaScript via the 'Name' parameter on the edit-customer-detailed.php page. The flaw has public exploit code but no active exploitation per CISA KEV, and EPSS indicates a very low exploitation probability (0.04%).
IBM Engineering Requirements Management DOORS 9.7.2.9, under certain configurations, could allow a remote attacker to obtain password reset instructions of a legitimate user using man in the middle techniques.
Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.
CVE-2025-53168 is a security vulnerability (CVSS 5.7) that allows the peer device. Remediation should follow standard vulnerability management procedures.
The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the {{#tag:tagcloud}} parser function, resulting in arbitrary JavaScript execution when a victim hovers over a link in the category cloud. The vulnerability exists because the linkstyle parameter is only passed through Sanitizer::checkCss() (which does not escape HTML) and is then directly inserted into a style attribute using string concatenation instead of Html::element or Html::openElement. This issue affects Mediawiki - WikiCategoryTagCloud extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
In Splunk Enterprise versions below 9.4.2, 9.3.5, 9.2.7, and 9.1.10 and Splunk Cloud Platform versions below 9.3.2411.104, 9.3.2408.113, and 9.2.2406.119, a low-privileged user that does not hold the "admin" or "power" Splunk roles could create or overwrite [system source type](https://help.splunk.com/en/splunk-enterprise/get-started/get-data-in/9.2/configure-source-types/create-source-types) configurations by sending a specially-crafted payload to the `/servicesNS/nobody/search/admin/sourcetypes/` REST endpoint on the Splunk management port.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
The CheckUser extension’s Special:Investigate interface is vulnerable to reflected XSS due to improper escaping of certain internationalized system messages rendered on the “IPs and User agents” tab. This issue affects Mediawiki - CheckUser extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2.
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension allows Stored XSS.This issue affects Mediawiki - Quiz Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.
The ApprovedRevs extension for MediaWiki is vulnerable to stored XSS in multiple locations where system messages are inserted into raw HTML without proper escaping. Attackers can exploit this by injecting JavaScript payloads via the uselang=x-xss language override, which causes crafted message keys to be rendered unescaped. This issue affects Mediawiki - ApprovedRevs extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.