CVE-2025-25617

CVE-2025-25617 Unifiedtransform v2.0 is vulnerable to Incorrect Access Control, allowing teachers to create syllabus entries — a role intended only for administrators. Vendor: Unifiedtransform PoC Step 1: Log in to the application as a Teacher. Step 2: Browse to the following endpoint:...

EUVD-2025-7676

Malicious code in bioql PyPI...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617: Improper Access Control

Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus...

CVE-2025-25617

The open-source school management software Unifiedtransform 2.X is vulnerable to Incorrect Access Control , which enables Privilege Escalation . Specifically, a user with Teacher privileges can access the /syllabus/create endpoint to create syllabus entries—a functionality intended exclusively fo...

PT-2025-9869

Name of the Vulnerable Software and Affected Versions Unifiedtransform versions 2.X Description The issue is related to Incorrect Access Control in Unifiedtransform, leading to Privilege Escalation. This allows teachers to create syllabus, which is an unauthorized action. Recommendations For...