CVE-2025-4501 – Apache Code-Projects Album Management System Stack Buffer Overflow

The following table lists the changes that have been made to the CVE-2025-4501 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-4500 – Code-projects Hotel Management System Stack-Based Buffer Overflow Vulnerability

The following table lists the changes that have been made to the CVE-2025-4500 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-4499 – Simple Hospital Management System Buffer Overflow

The following table lists the changes that have been made to the CVE-2025-4499 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-3878 – WooCommerce Stored Cross-Site Scripting Vulnerability

CVE ID : CVE-2025-3878 Published : May 10, 2025, 12:15 p.m. | 24 minutes ago Description : The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin’s sa_verify shortcode in all versions up to, and including, 3.8.1 due to insufficient input sanitization and output escaping on user […]

CVE-2025-3876 – WooCommerce WordPress Privilege Escalation Vulnerability

CVE ID : CVE-2025-3876 Published : May 10, 2025, 12:15 p.m. | 24 minutes ago Description : The SMS Alert Order Notifications – WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to insufficient user OTP validation in the handleWpLoginCreateUserAction() function in all versions up to, and including, 3.8.1. This makes it possible for authenticated […]

CVE-2025-4498 – Simple Bus Reservation System Buffer Overflow Vulnerability

The following table lists the changes that have been made to the CVE-2025-4498 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-2158 – WordPress Review Plugin Local File Inclusion Vulnerability

The WordPress Review Plugin: The Ultimate Solution for Building a Review Website plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 5.3.5 via the Post custom fields. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, […]

CVE-2025-4497 – Apache Code-Projects Simple Banking System Buffer Overflow Vulnerability

The following table lists the changes that have been made to the CVE-2025-4497 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-2944 – Elementor Jeg Stored Cross-Site Scripting (XSS)

The following table lists the changes that have been made to the CVE-2025-2944 vulnerability over time. Vulnerability history details can be useful for understanding the evolution of a vulnerability, and for identifying the most recent changes that may impact the vulnerability’s severity, exploitability, or other characteristics. New CVE Received by [email protected] May. 10, 2025 Action […]

CVE-2025-4496 – TOTOLINK CloudACMunualUpdate Buffer Overflow Vulnerability

A vulnerability was found in TOTOLINK T10, A3100R, A950RG, A800R, N600R, A3000RU and A810R 4.1.8cu.5241_B20210927. It has been declared as critical. This vulnerability affects the function CloudACMunualUpdate of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument FileName leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public […]