Exploit for Cross-site Scripting in Phpgurukul Doctor_Appointment_Management_System

CVE-2025-45805 Poc Of CVE-2025-45805 Affected Product: Doctor...

CVE-2025-14387 LearnPress – WordPress LMS Plugin <= 4.3.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via get_profile_social

The LearnPress – WordPress LMS Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 4.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and abov...

CVE-2025-14387

The CVE-2025-14387 entry concerns the LearnPress – WordPress LMS Plugin (WordPress) with versions up to 4.3.1. The vulnerability is a Stored Cross-Site Scripting flaw caused by insufficient input sanitization and output escaping. It can be exploited by authenticated attackers with Subscriber-leve...

PT-2025-51294

Name of the Vulnerable Software and Affected Versions Academy LMS version 6.1 Description Academy LMS version 6.1 has a file upload issue. Authenticated users can upload malicious SVG files containing stored cross-site scripting payloads. An attacker can inject malicious scripts through the profi...

CVE-2025-14582

A vulnerability was detected in campcodes Online Student Enrollment System 1.0. This affects an unknown function of the file /admin/index.php?page=user-profile. Performing a manipulation of the argument userphoto results in unrestricted upload. The attack can be initiated remotely. The exploit is...

Exploit for Cross-site Scripting in Oretnom23 Banking_System

Description 1. CVE-2025-14221 2. Discoverer: Fatma Trabelsi 3...

GHSA-496G-MMPW-J9X3

creationtimestamp| type| source ---|---|--- 2025-12-13 13:14:15+00:00| seen| https://bsky.app/profile/tesaguri.fedibird.com.ap.brid.gy/post/3m7uonli5oa22 2026-01-06 20:11:53+00:00| published-proof-of-concept| Telegram/mJFISOaG9sdliiq532xrtHTh4hR6RCcMc304VWQpxZ4gXns...

CVE-2025-14588

creationtimestamp| type| source ---|---|--- 2025-12-13 12:26:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ulxqhpi32o...

CVE-2025-0969

creationtimestamp| type| source ---|---|--- 2025-12-13 12:11:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ul4uodqh2o 2025-12-15 08:53:29+00:00| seen| https://gist.github.com/Darkcrai86/e7c1d557f97418cf06897855113aad0f...

CVE-2025-8687

creationtimestamp| type| source ---|---|--- 2025-12-13 12:06:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ukttmdsk2m 2025-12-15 08:52:22+00:00| seen| https://gist.github.com/Darkcrai86/cb2f56cf302685524eb879403ceece10...

CVE-2025-10289

creationtimestamp| type| source ---|---|--- 2025-12-13 11:46:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ujr5ne2v2y 2025-12-15 08:54:11+00:00| seen| https://gist.github.com/Darkcrai86/68ddee95ed9e3d4d1c23c3ab05b9c556...

CVE-2025-14587

creationtimestamp| type| source ---|---|--- 2025-12-13 11:43:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ujmbbakr2e...

CVE-2025-36754

creationtimestamp| type| source ---|---|--- 2025-12-13 11:39:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7ujdmvbtx2q 2025-12-14 01:34:15+00:00| seen| https://infosec.exchange/users/offseq/statuses/115715345801833765...

CVE-2025-14476

creationtimestamp| type| source ---|---|--- 2025-12-13 11:10:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7uhqitzvw2c...

CVE-2025-40277

creationtimestamp| type| source ---|---|--- 2025-12-13 10:34:09+00:00| seen| https://bsky.app/profile/secqube.com/post/3m7ufpjxk3k2u 2025-12-13 10:34:10+00:00| seen| https://bsky.app/profile/potato.software/post/3m7ufpktzzy2d 2026-03-19 00:00:00+00:00| seen|...

CVE-2025-14581

creationtimestamp| type| source ---|---|--- 2025-12-13 07:27:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u3blmegx2e...

CVE-2025-12512

creationtimestamp| type| source ---|---|--- 2025-12-13 07:14:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u2kaqva722...

CVE-2025-14278

creationtimestamp| type| source ---|---|--- 2025-12-13 07:11:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7u2eboplq2g...

Improper Input Validation

mantisbt/mantisbt is vulnerable to improper input validation. The vulnerability is due to lack of email ownership verification during profile updates, which allows an attacker to register an unauthorized email address and potentially cause information disclosure by redirecting notifications...

CVE-2025-13320

The WP User Manager plugin for WordPress is vulnerable to Arbitrary File Deletion in all versions up to, and including, 2.9.12. This is due to insufficient validation of user-supplied file paths in the profile update functionality combined with improper handling of array inputs by PHP's filterinp...