Skip to main content
CVE-2025-9934 Sep 04, 10:42 LOW POC Monitor

A vulnerability was found in TOTOLINK X5000R 9.1.0cu.2415_B20250515. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection X5000r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
1.3%
CVE-2025-9942 Sep 04, 10:42 LOW POC Monitor

A vulnerability has been found in CodeAstro Real Estate Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Real Estate Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-9941 Sep 04, 10:42 LOW POC Monitor

A flaw has been found in CodeAstro Real Estate Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Real Estate Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-9931 Sep 04, 10:42 LOW POC Monitor

A vulnerability was detected in Jinher OA 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Jinher Oa Jinher
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-9936 Sep 04, 10:42 LOW POC Monitor

A vulnerability was identified in fuyang_lipengjun platform 1.0.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Platform Fuyang Lipengjun
NVD VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-9940 Sep 04, 10:42 LOW POC Monitor

A vulnerability was detected in CodeAstro Real Estate Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Real Estate Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-9929 Sep 04, 10:42 LOW POC Monitor

A weakness has been identified in code-projects Responsive Blog Site 1.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Responsive Blog Site Fabian
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-26419 Sep 04, 20:15 LOW Monitor

In initPhoneSwitch of SystemSettingsFragment.java, there is a possible FRP bypass due to a logic error in the code. Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Authentication Bypass Privilege Escalation Google Android
NVD
CVSS 3.1
3.3
EPSS
0.0%
CVE-2025-26428 Sep 04, 18:15 LOW PATCH Monitor

In startLockTaskMode of LockTaskController.java, there is a possible lock screen bypass due to a logic error in the code. Rated low severity (CVSS 3.2), this vulnerability is no authentication required, low attack complexity.

Authentication Bypass Privilege Escalation Google Android
NVD
CVSS 3.1
3.2
EPSS
0.0%
CVE-2025-9937 Sep 04, 10:42 LOW Monitor

A security flaw has been discovered in elunez eladmin 1.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure
NVD VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-9939 Sep 04, 10:42 LOW Monitor

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP XSS Real Estate Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-0076 Sep 04, 19:15 LOW PATCH Monitor

In multiple locations, there is a possible way to view icons belonging to another user due to a missing permission check. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. This Missing Authorization vulnerability could allow attackers to access resources or perform actions without proper authorization checks.

Authentication Bypass Information Disclosure Google Android
NVD
CVSS 3.1
3.3
EPSS
0.0%
CVE-2025-2667 Sep 04, 15:15 LOW Monitor

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 and IBM Sterling File Gateway 6.0.0.0 through 6.1.2.7_1 and 6.2.0.0 through 6.2.0.4 could disclose sensitive system. Rated low severity (CVSS 2.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure IBM Sterling B2b Integrator Sterling File Gateway
NVD
CVSS 3.1
2.7
EPSS
0.0%
CVE-2025-58064 Sep 04, 10:42 LOW PATCH Monitor

CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. Rated low severity (CVSS 2.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS RCE
NVD GitHub
CVSS 4.0
2.3
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy