EUVD-2025-33730

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

Code-Projects Simple Car Rental System 安全漏洞

Code-Projects Simple Car Rental System is an open source car rental software from Code-Projects. A security vulnerability exists in Code-Projects Simple Car Rental System version 1.0, which stems from a privilege bypass issue that allows a low-privileged user to spoof an elevated privilege sessio...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

PT-2025-41577

Name of the Vulnerable Software and Affected Versions code-projects Simple Car Rental System version 1.0 Description A permission bypass issue exists that allows low privilege users to forge high privilege sessions and perform sensitive operations. Recommendations At the moment, there is no...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is vulnerable to Incorrect Access Control. The application contains a logic flaw which allows low privilege users can forge high privileged sessions and perform sensitive operations...

CVE-2025-60306

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

📄 Perfex CRM Chatbot Cross Site Scripting

Perfex CRM's chatbot feature suffers from a persistent cross site scripting vulnerability. CVE-2025-60374 CVE-2025-60374: Stored Cross-Site Scripting XSS in Perfex CRM Chatbot ⚠️ Security Advisory A critical Stored Cross-Site Scripting vulnerability in Perfex CRM's chatbot feature --- 📋 Overview A...

CVE-2025-62292

In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts...

CVE-2025-60305

SourceCodester Online Student Clearance System 1.0 is affected by an Incorrect Access Control vulnerability. The issue allows low-privilege users to forge high-privilege sessions and perform sensitive operations, with CVSS 3.1 base score 8.8 (HIGH) and impacts to confidentiality, integrity, and a...

EUVD-2025-33745

code-projects Simple Car Rental System 1.0 has a permission bypass issue where low privilege users can forge high privilege sessions and perform sensitive operations...

PT-2025-41574

Name of the Vulnerable Software and Affected Versions SourceCodester Online Student Clearance System version 1.0 Description The application has a flaw in access control. This allows users with limited privileges to create sessions with higher privileges and perform actions that should be...

PT-2025-41531

Name of the Vulnerable Software and Affected Versions SonarQube versions prior to 25.6 SonarQube 2025.3 Commercial versions prior to 2025.3 SonarQube 2025.1.3 LTA versions prior to 2025.1.3 Description Authenticated users with low privileges can access the /api/v2/users-management/users endpoint ...

CVE-2025-62292

In SonarQube before 25.6, 2025.3 Commercial, and 2025.1.3 LTA, authenticated low-privileged users can query the /api/v2/users-management/users endpoint and obtain user fields intended for administrators only, including the email addresses of other accounts...

CVE-2025-60306

CVE-2025-60306 affects Code-Projects’ Simple Car Rental System 1.0. The issue is a permission bypass where a low-privilege user can forge and obtain high-privilege sessions to perform sensitive operations. Metrics assign a CRITICAL 9.9 CVSS v3.1 score with network exploitability, low attack compl...

CVE-2025-55200

BigBlueButton has a Stored XSS vulnerability in the Shared Notes feature prior to version 3.0.13. The issue arises from unsafely handling the Username field, allowing a low-privilege user to inject arbitrary JavaScript that can execute in the context of higher-privileged users (e.g., Admins) who ...

CVE-2025-55200 BigBlueButton vulnerable to Stored XSS via name of user at Shared Notes

BigBlueButton is an open-source virtual classroom. In versions prior to 3.0.13, the "Shared Notes" feature contains a Stored Cross-Site Scripting XSS vulnerability with the input location being the "Username" field and the output location on the "Shared Notes" page, when a user with a malicious...

PT-2025-41453

Name of the Vulnerable Software and Affected Versions BigBlueButton versions prior to 3.0.13 Description BigBlueButton, an open-source virtual classroom, has a Stored Cross-Site Scripting XSS issue in the "Shared Notes" feature. The input location for this issue is the Username field, and the...

EUVD-2025-32907

Dell PowerProtect Data Domain with Data Domain Operating System DD OS of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain an Improper Neutralizatio...