OS command injection in TOTOLINK N200RE router firmware allows remote authenticated attackers to execute arbitrary commands via the Hostname parameter in the /cgi-bin/cstecgi.cgi endpoint. The vulnerability affects firmware versions 9.3.5u.6095_B20200916 and 9.3.5u.6139_B20201216, and publicly available exploit code exists, though no active exploitation has been confirmed by authorities.
Command injection in D-Link DIR-645 router firmware allows remote attackers with low privileges to execute arbitrary commands via the ssdpcgi component. The vulnerability affects end-of-life firmware versions up to 1.05B01 and a public exploit is available. Active exploitation is not confirmed by CISA KEV and EPSS probability is low (0.19%).
Unrestricted file upload in Staff Audit System 1.0 allows remote attackers to upload arbitrary files via the /test.php endpoint, leading to potential remote code execution. Exploit code is publicly available, but no active exploitation or KEV listing has been confirmed. The vulnerability is critical as it may bypass authentication entirely.
Unrestricted file upload in Advanced Online Voting System 1.0's /admin/candidates_add.php endpoint allows remote authenticated attackers (low privileges) to upload arbitrary files via the photo parameter. Public exploit code is available, but EPSS indicates low exploitation probability (0.10%) and no active exploitation is confirmed. The vulnerability could lead to code execution if a malicious PHP file is uploaded.
Unrestricted file upload in code-projects E-Commerce Site 1.0 allows authenticated attackers to upload arbitrary PHP files via the photo parameter in /admin/users_photo.php, potentially leading to remote code execution on the server. Public exploit code is available, increasing immediate risk for instances where the admin panel is exposed.
Unrestricted file upload in Library Management System 2.0 allows authenticated remote attackers to upload arbitrary files via the photo parameter in /admin/student_edit_photo.php, potentially leading to remote code execution. The vulnerability is publicly disclosed with proof-of-concept exploits available. No active exploitation has been reported through CISA KEV.
SQL injection in Responsive Blog Site 1.0 allows remote attackers with low-level privileges to manipulate database queries via the 'ID' parameter in category.php, potentially leading to data leakage or modification. Public exploit code is available, though no active exploitation has been confirmed by CISA. The limited impact and low EPSS score (0.06%) reduce its real-world urgency.
SQL injection in code-projects Responsive Blog Site 1.0 allows authenticated remote attackers to manipulate the 'ID' parameter in /single.php to interfere with database queries, leading to data leakage or manipulation. A proof-of-concept exploit is publicly available, but no active exploitation has been reported (EPSS 0.06%).
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate the 'cnum' parameter in /admin/add-animals.php, leading to unauthorized database access or data modification. Public exploit code exists but no active exploitation has been confirmed; EPSS score is low at 0.06%.
SQL injection in Zoo Management System 2.1 allows authenticated attackers to manipulate ticket pricing via the cprice parameter in /admin/add-foreigners-ticket.php, potentially altering data in the database. The exploit is publicly available and can be exploited over the network with low attack complexity, though no active exploitation has been confirmed by CISA KEV.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers to manipulate database queries via the cprice parameter in /admin/add-normal-ticket.php. This could lead to unauthorized data access or modification. A public proof-of-concept exploit is available, though no active exploitation has been reported.
SQL injection in PHPGurukul Zoo Management System 2.1 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the ID parameter in /admin/manage-animals.php. Exploit code is publicly available, though no active exploitation is confirmed and the CVSS 4.0 base score is low (2.1) due to limited impact.
SQL injection in PHPGurukul Zoo Management System 2.1's admin ticket management page (/admin/manage-normal-ticket.php) allows authenticated attackers with low privileges to manipulate the ID parameter, potentially leading to unauthorized data access or modification. Exploit code is publicly available, though no active exploitation has been reported.
Cross-site scripting vulnerability in itsourcecode Student Transcript Processing System 1.0 allows remote attackers to inject arbitrary web script into the 'pre' parameter of the /admin/modules/subject/edit.php endpoint. An attacker can craft a malicious URL that, when visited by an authenticated administrator, executes attacker-controlled JavaScript in the admin's browser. The exploit is publicly available, though no active exploitation has been confirmed.
SQL injection in Pharmacy Management System's quantity_upd.php allows low-privileged authenticated attackers to extract or modify limited data via unsanitized med_name, med_cat, or ex_date parameters. Public exploit code exists, but a low EPSS score and CVSS 4.0 base score of 2.1 indicate negligible real-world exploitation probability. No versioned patch is available due to the project's rolling release model.
SQL injection in Chat System 1.0 allows remote attackers to manipulate database queries via the 'msg' parameter of /user/send_message.php. Publicly available exploit code exists, but no active exploitation has been confirmed. The application is a low-footprint, unsupported project, limiting real-world exposure.
SQL injection in code-projects Chat System 1.0 allows remote attackers to execute arbitrary SQL commands via the ID parameter in /user/addmember.php. Public exploit code is available, but EPSS indicates low exploitation probability and no active exploitation has been confirmed.
SQL injection in Chat System 1.0 through the ID parameter of /user/fetch_member.php allows remote authenticated attackers with low privileges to extract or manipulate limited data from the application's database. Public exploit code is available, but no active exploitation has been reported and the EPSS probability is very low.
SQL injection in code-projects Chat System 1.0 allows authenticated remote attackers to manipulate backend database queries via the ID parameter of /user/fetch_chat.php. Public exploit code is available, and the vulnerability is rated critically by the reporter, but the CVSS 4.0 base impact is limited (low confidentiality, integrity, and availability) and EP
SQL injection in PHPGurukul Car Washing Management System 1.0 allows an authenticated administrator to execute arbitrary SQL commands via the wpid parameter in /admin/editcar-washpoint.php. The vulnerability requires high privileges but can be exploited remotely, leading to low-impact data leakage, modification, or service disruption. Exploit code is publicly available, though EPSS scores remain low and no active exploitation has been reported by CISA.
Stored cross-site scripting in CodeAstro Simple Hospital Management System 1.0 allows authenticated remote attackers to inject JavaScript via First Name, Last name, or Address fields in the doctor.html POST handler. The script executes in a victim's browser when the page is viewed, potentially enabling session hijacking or data theft. Publicly available exploit code exists, but no active exploitation has been confirmed and EPSS estimates very low exploitation probability (0.05%).
A transient execution vulnerability in some AMD processors may allow a user process to infer TSC_AUX even when such a read is disabled, potentially resulting in information leakage.
A transient execution vulnerability in some AMD processors may allow a user process to infer the control registers speculatively even if UMIP feature is enabled, potentially resulting in information leakage.
A security vulnerability in External control of file name or path in Windows Storage (CVSS 3.5) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.
CVE-2025-42978 is a security vulnerability (CVSS 3.5). Remediation should follow standard vulnerability management procedures.
Use of a broken or risky cryptographic algorithm in Office Developer Platform allows an authorized attacker to bypass a security feature locally.
A privilege escalation vulnerability in Improper handling of insufficient permissions or privileges in Microsoft Teams (CVSS 3.1) that allows an authorized attacker. Remediation should follow standard vulnerability management procedures.
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiManager 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiManager Cloud 7.4.1 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; FortiAnalyzer 7.6.0 through 7.6.1, 7.4.0 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions; and FortiAnalyzer Cloud 7.4.1 through 7.4.6, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an authenticated attacker with high privilege to extract database information via crafted requests.
SAP NetWeaver Business Warehouse CCAW application allows a privileged attacker to cause a high CPU load by executing a RFC enabled function modules without any input parameters, which results in reduced performance or interrupted operation of the affected resource. This leads to low impact on availability of the application, there is no impact on confidentiality and integrity.
ColdFusion versions 2025.2, 2023.14, 2021.20 and earlier are affected by an Improper Access Control vulnerability that could lead to a partial application denial-of-service. A high-privileged attacker could exploit this vulnerability to partially disrupt the availability of the application. Exploitation of this issue does not require user interaction and scope is unchanged. The vulnerable component is restricted to internal IP addresses.
SQL injection in hitsz-ids airda 0.0.3 allows authenticated remote attackers with low privileges to execute arbitrary SQL commands via the 'question' parameter of the /v1/chat/completions endpoint. A public proof-of-concept is available, but exploitation probability is very low (EPSS 0.03%) and no active attacks have been reported. The vulnerability enables attackers to read or modify database contents with limited scope.