Medium - CVE-2025-6867 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Simple Company Website 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/services/manage.php. The...
Medium - CVE-2025-6868 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/clients/manage.php. The manipulation...
NA - CVE-2025-24289 - A Cross-Site Request Forgery (CSRF) leading to...
A Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in the UCRM Client Signup Plugin (v1.3.4 and earlier) could allow privilege escalation if an Administrator is...
NA - CVE-2025-24290 - Multiple Authenticated SQL Injection...
Multiple Authenticated SQL Injection vulnerabilities found in UISP Application (Version 2.4.206 and earlier) could allow a malicious actor with low privileges to escalate privileges.
NA - CVE-2025-24292 - A misconfigured query in UniFi Network...
A misconfigured query in UniFi Network (v9.1.120 and earlier) could allow users to authenticate to Enterprise WiFi or VPN Server (l2tp and OpenVPN) using a device’s MAC address from 802.1X or MAC...
Medium - CVE-2025-6869 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file...
Medium - CVE-2025-6870 - A vulnerability was found in SourceCodester...
A vulnerability was found in SourceCodester Simple Company Website 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file...
High - CVE-2025-6871 - A vulnerability classified as critical has been...
A vulnerability classified as critical has been found in SourceCodester Simple Company Website 1.0. This affects an unknown part of the file /classes/Login.php. The manipulation of the argument...
Medium - CVE-2025-6872 - A vulnerability classified as critical was...
A vulnerability classified as critical was found in SourceCodester Simple Company Website 1.0. This vulnerability affects unknown code of the file /classes/SystemSettings.php?f=update_settings. The...