Skip to main content
CVE-2025-10415 Sep 14, 23:15 MEDIUM POC This Month

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Grocery Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10414 Sep 14, 23:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Grocery Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10413 Sep 14, 22:15 MEDIUM POC This Month

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Grocery Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10405 Sep 14, 19:15 MEDIUM POC This Month

A vulnerability was determined in itsourcecode Baptism Information Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Baptism Information Management System Itsourcecode
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10404 Sep 14, 18:15 MEDIUM POC This Month

A vulnerability was found in itsourcecode Baptism Information Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Baptism Information Management System Itsourcecode
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10403 Sep 14, 18:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Beauty Parlour Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10402 Sep 14, 17:15 MEDIUM POC This Month

A flaw has been found in PHPGurukul Beauty Parlour Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Beauty Parlour Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-10396 Sep 14, 09:15 MEDIUM POC This Month

A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Pet Grooming Management Software Mayurik
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.0%
CVE-2025-6051 Sep 14, 17:15 MEDIUM POC PATCH This Month

A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically within the `normalize_numbers()` method of the `EnglishNormalizer`. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Denial Of Service Red Hat AI / ML Transformers Hugging Face
NVD GitHub
CVSS 3.0
5.3
EPSS
0.0%
CVE-2025-59364 Sep 14, 23:15 MEDIUM PATCH This Month

The express-xss-sanitizer (aka Express XSS Sanitizer) package through 2.0.0 for Node.js has an unbounded recursion depth in sanitize in lib/sanitize.js for a JSON request body. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Node.js
NVD GitHub
CVSS 3.1
5.3
EPSS
0.0%
CVE-2025-36035 Sep 14, 13:15 MEDIUM This Month

IBM PowerVM Hypervisor FW950.00 through FW950.E0, FW1050.00 through FW1050.50, and FW1060.00 through FW1060.40 could allow a local privileged user to cause a denial of service by issuing a specially. Rated medium severity (CVSS 6.7), this vulnerability is low attack complexity. No vendor patch available.

Denial Of Service IBM Powervm Hypervisor
NVD
CVSS 3.1
6.7
EPSS
0.0%
CVE-2025-10395 Sep 14, 08:15 MEDIUM This Month

A vulnerability was found in Magicblack MacCMS 2025.1000.4050. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Maccms
NVD GitHub VulDB
CVSS 4.0
5.1
EPSS
0.0%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy