SQL injection in Cats Information Technology's Aykome License Tracking System (versions prior to the 06.10.2025 build) allows remote unauthenticated attackers to manipulate backend database queries via crafted input. The flaw carries a critical 9.8 CVSS score with full confidentiality, integrity, and availability impact, though EPSS rates near-term exploitation probability at only 0.04% and no public exploit identified at time of analysis. The vulnerability was disclosed by Turkey's national CERT (USOM) under advisory TR-25-0332.
Authentication bypass in ProjectsAndPrograms School Management System allows unauthenticated remote attackers to access protected functions without credentials. A publicly available exploit exists, but no evidence of active exploitation has been confirmed through CISA KEV. The vulnerability has a low EPSS score (0.17%), indicating a low probability of widespread automated exploitation.
Unrestricted file upload in Oranbyte School Management System allows remote attackers to upload arbitrary files, including PHP shells, to the server via the /assets/uploadSllyabus.php endpoint. The vulnerability requires no authentication and has a publicly available exploit, but the low EPSS score (0.06%) suggests limited active exploitation. Attackers can achieve code execution if the uploaded file is accessible and executable.
Unrestricted file upload in Oranbyte's School Management System (PHP) allows remote unauthenticated attackers to upload arbitrary files via the /assets/uploadNotes.php endpoint without authentication or file-type validation. Because the upload target is a web-accessible PHP directory, a successful upload of a PHP webshell grants the attacker arbitrary server-side code execution. A public proof-of-concept exploit is available on GitHub, and no patched version has been identified given the product's rolling release model.
Unrestricted file upload in OranByte School Management System allows remote attackers to upload arbitrary files via the /assets/changeSllyabus.php endpoint without authentication. Successful exploitation can lead to code execution and full server compromise. Exploit code is publicly available, though no active exploitation is confirmed.
Unrestricted file upload in Oranbyte School Management System allows remote unauthenticated attackers to upload arbitrary files via /assets/createNotice.php, potentially leading to remote code execution. Public exploit code exists; no patch version identified as the product uses a rolling release model, and exploitation probability (EPSS 0.06%) is low despite public exploit availability.
Unrestricted file upload in ProjectsAndPrograms School Management System allows remote attackers to upload arbitrary files via the /assets/editNotes.php endpoint. An attacker can send a specially crafted request to execute malicious code on the server. A publicly available proof-of-concept exists, but no active exploitation has been confirmed.
SQL injection in Best Salon Management System 1.0 allows remote attackers to manipulate the serv_id parameter in /booking.php, potentially gaining unauthorized access to the database or modifying data. A public exploit is available, though EPSS assigns a low exploitation probability (0.03%). No active exploitation is reported.
Information disclosure in AKIN Software's QRMenu (versions 1.05.12 up to the build dated 05.09.2025) allows unauthenticated remote attackers to access other users' or tenants' data by manipulating user-controlled identifiers in requests (IDOR). Reported by Turkey's national CSIRT (USOM); no public exploit identified at time of analysis and the issue is not listed in CISA KEV.
Hard-coded credentials in Tenda RP3 Pro firmware (versions up to 22.5.7.93) allow local high-privilege attackers to bypass authentication during firmware updates via the force_upgrade.sh script. Public exploit code exists on GitHub. CVSS 7.0 (High) reflects local access requirement with high privileges, making this a lower real-world priority despite the severity rating - exploitation requires an attacker to already have administrative console access to the device.
SQL injection in Automated Voting System 1.0 allows authenticated remote attackers to manipulate the firstname parameter in /admin/add_candidate_modal.php, resulting in limited confidentiality, integrity, and availability impact. The vulnerability has a very low CVSS score (2.1) due to requirement for authenticated access and limited scope, but publicly available exploit code exists. Active exploitation is not confirmed in CISA KEV, and the EPSS score of 0.01% indicates minimal real-world exploitation probability despite public POC availability.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows authenticated high-privilege administrators to execute arbitrary SQL queries via the sername parameter in /admin/manage-services.php. The vulnerability requires high administrative privileges and has publicly available exploit code, though real-world impact is limited by its requirement for already-compromised admin accounts with no lateral movement or privilege escalation capability.
SQL injection in Automated Voting System 1.0 allows high-privileged remote attackers to manipulate the Password parameter in /admin/update_user.php, potentially causing limited confidentiality and integrity impacts. The vulnerability requires admin-level privileges (PR:H) to exploit and has publicly available exploit code, but carries very low real-world risk due to EPSS of 0.01% and the high privilege requirement that limits practical attack surface.
SQL injection in Campcodes Online Beauty Parlor Management System 1.0 allows high-privileged attackers to manipulate the searchdata parameter in /admin/search-appointment.php, enabling arbitrary database queries with limited confidentiality and integrity impact. The vulnerability requires administrative privileges to exploit and has a publicly disclosed proof-of-concept, though real-world exploitation risk is minimal given the EPSS score of 0.01% and the requirement for high-privilege access.
Use-after-free in the Linux kernel xfrm subsystem allows a local low-privileged user to crash the kernel via improper SPI=0 handling introduced by commit 94f39804d891. The regression causes xfrm_alloc_spi to insert states with SPI value 0 (the sentinel for 'no SPI assigned') into the byspi hash table, while __xfrm_state_delete skips cleanup of those entries on deletion, leaving dangling pointers that produce a UAF on next byspi traversal. No public exploit code exists and EPSS probability is 0.17% (7th percentile), indicating no active exploitation pressure.
SQL injection in the Inferno Online Clothing Store PHP application's login endpoint (/log.php) exposes the cemail and password parameters to unsanitized database queries, enabling unauthenticated remote attackers to extract database contents or bypass authentication entirely. The affected codebase is tracked to commit 827dd42bfbe380e8de76fdc67958c24cf1246208 of the yousaf530 GitHub project. A public proof-of-concept exploit exists per VulDB submission 665475, and the vendor did not respond to responsible disclosure outreach.
Concurrent write access to AF_ALG cryptographic sockets in the Linux kernel corrupts internal socket state and interleaves cryptographic data in an unpredictable manner, undermining the integrity and availability of kernel crypto operations for local users. The flaw spans multiple stable kernel branches up to and including 6.17-rc4, with six upstream patch commits available. No public exploit or active exploitation has been identified; the Siemens SSA-019113 advisory confirms downstream impact on industrial and embedded Linux-based products.
Improper access control in Total.js Flow SVG File Handler allows high-privileged remote attackers to upload files without proper restrictions, bypassing upload security controls. The vulnerability affects versions up to commit 673ef9144dd25d4f4fd4fdfda5af27f230198924 and has public exploit code available, though real-world exploitation risk is constrained by the requirement for administrative privileges (PR:H in CVSS vector) and minor confidentiality/integrity impact.