Skip to main content
CVE-2025-13168 Nov 14, 15:15 LOW POC PATCH Monitor

A weakness has been identified in ury-erp ury up to 0.2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

SQLi Ury
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13179 Nov 14, 20:15 LOW POC Monitor

A vulnerability has been found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Wholesale Bdtask
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13177 Nov 14, 19:15 LOW POC Monitor

A vulnerability was detected in Bdtask/CodeCanyon SalesERP up to 20250728. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Saleserp Bdtask
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13171 Nov 14, 18:15 LOW POC Monitor

A vulnerability was identified in ZZCMS 2023. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Zzcms
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13185 Nov 14, 21:15 LOW POC Monitor

A security flaw has been discovered in Bdtask/CodeCanyon News365 up to 7.0.3. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Authentication Bypass File Upload News365 Bdtask
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.1%
CVE-2025-13182 Nov 14, 21:15 LOW POC Monitor

A vulnerability was identified in pojoin h3blog 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS H3Blog
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.1%
CVE-2025-13180 Nov 14, 20:15 LOW POC Monitor

A vulnerability was found in Bdtask/CodeCanyon Wholesale Inventory Control and Inventory Management System up to 20250320. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wholesale Bdtask
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-13178 Nov 14, 19:15 LOW POC Monitor

A flaw has been found in Bdtask/CodeCanyon SalesERP up to 20250728. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Saleserp Bdtask
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-13181 Nov 14, 20:15 LOW POC Monitor

A vulnerability was determined in pojoin h3blog 1.0. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS H3Blog
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-13186 Nov 14, 22:15 LOW POC Monitor

A weakness has been identified in Bdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution up to 4.0. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Isshue Bdtask
NVD GitHub VulDB
CVSS 4.0
1.9
EPSS
0.0%
CVE-2025-13174 Nov 14, 19:15 LOW Monitor

A weakness has been identified in rachelos WeRSS we-mp-rss up to 1.4.7. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF
NVD VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13172 Nov 14, 18:15 LOW Monitor

A security flaw has been discovered in CodeAstro Gym Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP SQLi Gym Management System Codeastro
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-54560 Nov 14, 18:15 LOW Monitor

A Server-side Request Forgery vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows Probing of internal infrastructure. Rated low severity (CVSS 3.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Pingalert Application Server Desktopalert
NVD
CVSS 3.1
3.8
EPSS
0.0%
CVE-2025-54559 Nov 14, 18:15 LOW Monitor

An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary external content. Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Path Traversal Pingalert Application Server Desktopalert
NVD
CVSS 3.1
3.7
EPSS
0.1%
CVE-2025-54342 Nov 14, 18:15 LOW Monitor

A vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Pingalert Application Server Desktopalert
NVD
CVSS 3.1
3.3
EPSS
0.0%
CVE-2025-4617 Nov 14, 18:15 LOW Monitor

An insufficient policy enforcement vulnerability in Palo Alto Networks Prisma® Browser on Windows allows a locally authenticated non-admin user to bypass the screenshot control feature of the. Rated low severity (CVSS 1.1), this vulnerability is low attack complexity. No vendor patch available.

Windows Authentication Bypass Microsoft Paloalto
NVD
CVSS 4.0
1.1
EPSS
0.0%
CVE-2025-4616 Nov 14, 18:15 LOW Monitor

An insufficient validation of an untrusted input vulnerability in Palo Alto Networks Prisma® Browser allows a locally authenticated non-admin user to revert the browser’s security controls. Rated low severity (CVSS 1.1), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure Paloalto
NVD
CVSS 4.0
1.1
EPSS
0.0%
CVE-2025-41436 Nov 14, 08:15 LOW PATCH Monitor

Mattermost versions <11.0 fail to properly enforce the "Allow users to view archived channels" setting which allows regular users to access archived channel content and files via the "Open in. Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable. No vendor patch available.

Authentication Bypass Mattermost Mattermost Server
NVD
CVSS 3.1
3.1
EPSS
0.0%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy