CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

CVE-2025-11109 affects Campcodes Computer Sales and Inventory System 1.0. The vulnerability is a SQL injection in the parameter ID of the file /pages/us_edit.php?action=edit, allowing remote exploitation. Public exploits exist. Several sources corroborate the flaw and its remote exploitability, w...

9.8CVSS6.8AI score0.00456EPSS

Exploits1References5Affected Software1

Positive Technologies•added 2025/09/27 12:0 a.m.•10 views

PT-2025-39727

Name of the Vulnerable Software and Affected Versions Campcodes Online Learning Management System version 1.0 Description A flaw exists in Campcodes Online Learning Management System that allows for SQL injection. The issue is located in the processing of the /admin/edit department.php file...

9.8CVSS7.4AI score0.00441EPSS

Exploits1References11

Positive Technologies•added 2025/09/23 12:0 a.m.•6 views

PT-2025-39151

Name of the Vulnerable Software and Affected Versions Campcodes Society Membership Information System version 1.0 Description A flaw exists in Campcodes Society Membership Information System that allows for remote SQL injection. The issue stems from improper handling of the student id argument...

8.8CVSS6.7AI score0.00351EPSS

Exploits1References9

CVE•added 2025/09/15 4:32 p.m.•21 views

CVE-2025-10471

ZKEACMS 4.3 is affected by a server-side request forgery in the Proxy function of src/ZKEACMS/Controllers/MediaController.cs. Manipulating the url argument enables remote exploitation, and public exploits exist. Impact is SSRF with potential access to internal resources; CVSS specifics vary by so...

8.8CVSS6.4AI score0.00282EPSS

Exploits0References5Affected Software1

OSV•added 2025/09/12 5:32 a.m.•3 views

CVE-2025-10291 linlinjava litemall cancel WxAftersaleController improper authorization

A weakness has been identified in linlinjava litemall up to 1.8.0. This affects the function WxAftersaleController of the file /wx/aftersale/cancel. Executing manipulation of the argument ID can lead to improper authorization. The attack can be executed remotely. The exploit has been made availab...

5.3CVSS6.3AI score0.00313EPSS

Exploits0References6

RedhatCVE•added 2025/09/11 9:20 a.m.•12 views

CVE-2025-41701

An unauthenticated attacker can trick a local user into executing arbitrary commands by opening a deliberately manipulated project file with an affected engineering tool. These arbitrary commands are executed in the user context...

7.8CVSS7AI score0.00155EPSS

Exploits0References1

RedhatCVE•added 2025/09/11 9:20 a.m.•13 views

CVE-2025-59014

An uncaught exception in the Bookmark Toolbar of TYPO3 CMS versions 11.0.0–11.5.47, 12.0.0–12.4.36, and 13.0.0–13.4.17 lets administrator‑level backend users trigger a denial‑of‑service condition in the backend user interface by saving manipulated data in the bookmark toolbar...

5.1CVSS6.8AI score0.0027EPSS

Exploits0References1

Positive Technologies•added 2025/09/11 12:0 a.m.•11 views

PT-2025-37260

Name of the Vulnerable Software and Affected Versions: Lenovo XClarity Orchestrator LXCO affected versions not specified Description: An attacker with access to a device on the local network segment may be able to manipulate the device to create an alternate communication channel. This could allo...

8.8CVSS5.7AI score0.00237EPSS

Exploits0References4

Tenable Nessus•added 2025/09/10 12:0 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2022-43440

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Uncontrolled Search Path Element in Checkmk Agent in Tribe29 Checkmk before 2.1.0p1, before 2.0.0p25 and before 1.6.0p29 on a Checkmk server allows the site use...

8.8CVSS7.3AI score0.0023EPSS

Exploits0References2