Skip to main content
CVE-2025-13562 Nov 23, 18:15 MEDIUM POC This Month

A vulnerability was identified in D-Link DIR-852 1.00.cgi. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Command Injection D-Link
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.5%
CVE-2025-13561 Nov 23, 18:15 MEDIUM POC This Month

A vulnerability was determined in SourceCodester Company Website CMS 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Company Website Cms Torrahclef
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13560 Nov 23, 17:15 MEDIUM POC This Month

A vulnerability was found in SourceCodester Company Website CMS 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Company Website Cms Torrahclef
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13572 Nov 23, 23:15 MEDIUM POC This Month

A vulnerability was identified in projectworlds Advanced Library Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Advanced Library Management System Projectworlds
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13557 Nov 23, 17:15 MEDIUM POC This Month

A vulnerability has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Polling System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13556 Nov 23, 16:15 MEDIUM POC This Month

A flaw has been found in Campcodes Online Polling System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Polling System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13555 Nov 23, 16:15 MEDIUM POC This Month

A vulnerability was detected in Campcodes School File Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi School File Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13554 Nov 23, 15:15 MEDIUM POC This Month

A security vulnerability has been detected in Campcodes Supplier Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Supplier Management System Campcodes
NVD GitHub VulDB
CVSS 4.0
5.5
EPSS
0.1%
CVE-2025-13564 Nov 23, 19:15 LOW POC Monitor

A security flaw has been discovered in SourceCodester Pre-School Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Denial Of Service Pre School Management System
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.2%
CVE-2025-13544 Nov 23, 09:15 LOW POC Monitor

A weakness has been identified in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP Authentication Bypass File Upload Travel Agency Ashraf Kabir
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.1%
CVE-2025-13571 Nov 23, 22:16 LOW POC Monitor

A vulnerability was determined in code-projects Simple Food Ordering System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Simple Cafe Ordering System Fabian
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13570 Nov 23, 22:16 LOW POC Monitor

A vulnerability was found in itsourcecode COVID Tracking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid Tracking System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13569 Nov 23, 21:15 LOW POC Monitor

A vulnerability has been found in itsourcecode COVID Tracking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid Tracking System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13568 Nov 23, 21:15 LOW POC Monitor

A flaw has been found in itsourcecode COVID Tracking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid Tracking System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13567 Nov 23, 20:15 LOW POC Monitor

A vulnerability was detected in itsourcecode COVID Tracking System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Covid Tracking System Angeljudesuarez
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13546 Nov 23, 11:15 LOW POC Monitor

A vulnerability was detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Travel Agency Ashraf Kabir
NVD GitHub VulDB
CVSS 4.0
2.1
EPSS
0.0%
CVE-2025-13545 Nov 23, 10:15 LOW POC Monitor

A security vulnerability has been detected in ashraf-kabir travel-agency up to 1f25aa03544bc5fb7a9e846f8a7879cecdb0cad3. Rated medium severity (CVSS 5.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Travel Agency Ashraf Kabir
NVD GitHub VulDB
CVSS 4.0
2.0
EPSS
0.0%
CVE-2025-12800 Nov 23, 23:15 MEDIUM This Month

The WP Shortcodes Plugin - Shortcodes Ultimate plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 7.4.5 via the su_shortcode_csv_table function. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress SSRF
NVD
CVSS 3.1
6.4
EPSS
0.0%
CVE-2025-12759 Nov 23, 23:15

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. No vendor patch available.

Information Disclosure
NVD
CVE-2025-13566 Nov 23, 20:15 MEDIUM Monitor

A security vulnerability has been detected in jarun nnn up to 5.1. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. No vendor patch available.

Buffer Overflow
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.0%
CVE-2025-13565 Nov 23, 19:15 MEDIUM POC This Month

A weakness has been identified in SourceCodester Inventory Management System 1.0. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Information Disclosure Inventory Management System
NVD VulDB
CVSS 4.0
5.5
EPSS
0.2%
CVE-2025-54515 Nov 23, 18:15 LOW Monitor

The Secure Flag passed to Versal™ Adaptive SoC’s Trusted Firmware for Cortex®-A processors (TF-A) for Arm’s Power State Coordination Interface (PSCI) commands were incorrectly set to secure instead. Rated low severity (CVSS 1.0), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 4.0
1.0
EPSS
0.1%
CVE-2025-48507 Nov 23, 17:15 HIGH This Month

The security state of the calling processor into Trusted Firmware (TF-A) is not used and could potentially allow non-secure processors access to secure memories, access to crypto operations, and the. Rated high severity (CVSS 8.6), this vulnerability is low attack complexity. No vendor patch available.

Information Disclosure
NVD
CVSS 4.0
8.6
EPSS
0.1%
CVE-2024-21923 Nov 23, 17:15 HIGH This Month

Incorrect default permissions in AMD StoreMI™ could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Amd
NVD
CVSS 3.1
7.3
EPSS
0.0%
CVE-2024-21922 Nov 23, 17:15 HIGH This Month

A DLL hijacking vulnerability in AMD StoreMI™ could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

Privilege Escalation RCE Amd
NVD
CVSS 3.1
7.3
EPSS
0.0%
CVE-2025-13553 Nov 23, 14:15 HIGH POC This Month

A weakness has been identified in D-Link DWR-M920 1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13552 Nov 23, 14:15 HIGH POC This Month

A security flaw has been discovered in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13551 Nov 23, 13:15 HIGH POC This Month

A vulnerability was identified in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13550 Nov 23, 13:15 HIGH POC This Month

A vulnerability was determined in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13549 Nov 23, 12:15 HIGH POC This Month

A vulnerability was found in D-Link DIR-822K 1.00. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13548 Nov 23, 12:15 HIGH POC This Month

A vulnerability has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%
CVE-2025-13547 Nov 23, 11:15 HIGH POC This Month

A flaw has been found in D-Link DIR-822K and DWR-M920 1.00_20250513164613/1.1.50. Rated high severity (CVSS 7.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Dwr M920 Firmware Dir 822K Firmware
NVD GitHub VulDB
CVSS 4.0
7.4
EPSS
0.1%

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy