The archive.

code-projects11 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11556 · code-projects Simple Leave Manager

code-projects Simple Leave Manager user.php sql injection

CVE-2025-11596 · code-projects E-Commerce Website

code-projects E-Commerce Website delete_order_details.php sql injection

CVE-2025-11608 · code-projects E-Banking System

code-projects E-Banking System POST Parameter register.php sql injection

CVE-2025-11551 · code-projects Student Result Manager

code-projects Student Result Manager Database.java sql injection

CVE-2025-11553 · code-projects Courier Management System

code-projects Courier Management System add-courier.php sql injection

CVE-2025-11582 · code-projects Online Job Search Engine

code-projects Online Job Search Engine registration.php sql injection

CVE-2025-11583 · code-projects Online Job Search Engine

code-projects Online Job Search Engine postjob.php sql injection

CVE-2025-11584 · code-projects Online Job Search Engine

code-projects Online Job Search Engine searchjob.php sql injection

CVE-2025-11585 · code-projects Project Monitoring System

code-projects Project Monitoring System useredit.php sql injection

CVE-2025-11597 · code-projects E-Commerce Website

code-projects E-Commerce Website product_add_qty.php sql injection

CVE-2025-11558 · code-projects E-Commerce Website

code-projects E-Commerce Website user_index_search.php sql injection

EPSS 0.5%CVSS 9.8

Microsoft7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-59246 · Microsoft Microsoft Entra

Azure Entra ID Elevation of Privilege Vulnerability

EPSS 8%CVSS 9.8

CVE-2025-59247 · Microsoft Azure PlayFab

Azure PlayFab Elevation of Privilege Vulnerability

EPSS 2%CVSS 9.8

CVE-2025-59218 · Microsoft Microsoft Entra

Azure Entra ID Elevation of Privilege Vulnerability

EPSS 0.7%CVSS 9.6

CVE-2025-59252 · Microsoft Microsoft 365 Word Copilot

M365 Copilot Information Disclosure Vulnerability

EPSS 0.6%CVSS 9.3

CVE-2025-59272 · Microsoft Microsoft 365 Copilot's Business Chat

Copilot Information Disclosure Vulnerability

EPSS 0.6%CVSS 9.3

CVE-2025-59286 · Microsoft Microsoft 365 Copilot's Business Chat

Copilot Information Disclosure Vulnerability

EPSS 0.6%CVSS 9.3

CVE-2025-55321 · Microsoft Azure Monitor

Azure Monitor Log Analytics Spoofing Vulnerability

EPSS 0.4%CVSS 9.3

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11555 · Campcodes Online Learning Management System

Campcodes Online Learning Management System calendar_of_events.php sql injection

CVE-2025-11595 · Campcodes Online Apartment Visitor Management System

Campcodes Online Apartment Visitor Management System admin-profile.php sql injection

CVE-2025-11599 · Campcodes Online Apartment Visitor Management System

Campcodes Online Apartment Visitor Management System forgot-password.php sql injection

CherryHQ1 vulnerability on this pageMax CVSS 9.7Priority 47KEV 0

CVE-2025-61929 · CherryHQ cherry-studio

Cherry Studio allows one-click on a specific URL to cause a command to execute

EPSS 0.5%public exploit CVSS 9.7

mitre5 vulnerabilities on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2025-56683 · mitre

A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary…

EPSS 0.5%public exploit CVSS 9.6

CVE-2025-60306 · mitre

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and…

EPSS 0.4%public exploit CVSS 9.9

CVE-2025-60307 · mitre

code-projects Computer Laboratory System 1.0 has a SQL injection vulnerability, where entering a universal password in the Password field…

CVE-2025-60316 · mitre

SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view_customer.php via the ID parameter.

EPSS 0.4%public exploit CVSS 9.4

CVE-2025-60269 · mitre

JEEWMS 20250820 is vulnerable to SQL Injection in the exportXls function located in the src/main/java/org/jeecgframework/web/cgreport/con…

EPSS 0.3%public exploit CVSS 9.4

projectworlds2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11557 · projectworlds Gate Pass Management System

projectworlds Gate Pass Management System add-pass.php sql injection

CVE-2025-11604 · projectworlds Online Ordering Food System

projectworlds Online Ordering Food System all-orders.php sql injection

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11601 · SourceCodester Online Student Result System

SourceCodester Online Student Result System login.php sql injection

Newforma3 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-35062 · Newforma Project Center

Newforma Info Exchange (NIX) default anonymous access

CVE-2025-35050 · Newforma Project Center

Newforma Info Exchange (NIX) .NET unauthenticated deserialization

EPSS 0.9%CVSS 9.8

CVE-2025-35051 · Newforma Project Center

Newforma Project Center Server (NPCS) .NET unauthenticated deserialization

wptravelengine2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-7526 · wptravelengine WP Travel Engine – Tour Booking Plugin – Tour Operator Software

WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming

EPSS 0.9%CVSS 9.8

CVE-2025-7634 · wptravelengine WP Travel Engine – Tour Booking Plugin – Tour Operator Software

WP Travel Engine – Tour Booking Plugin – Tour Operator Software <= 6.6.7 - Unauthenticated Local File Inclusion

JMA Plugins1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-6439 · JMA Plugins WooCommerce Designer Pro

WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Deletion

ovatheme1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-6553 · ovatheme Ovatheme Events Manager

Ovatheme Events Manager <= 1.8.5 - Unauthenticated Arbitrary File Upload