Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

Vulnerabilities

Structured data from NIST NVD and the CISA KEV catalog. Fields the source has not provided are shown as such — nothing is inferred.

Archives: September 2026 October 2026 CISA KEV / threat intelligence

CVESeverityCVSSKEVDescriptionModified (UTC)
CVE-2025-13122 critical 9.8 No A vulnerability was detected in SourceCodester Patients Waiting Area Queue Management System 1.0. The affected element is the function getPa... 2026-10-07
CVE-2025-62484 critical 9.8 No Inefficient regular expression complexity in certain Zoom Workplace Clients before version 6.5.10 may allow an unauthenticated user to condu... 2026-10-07
CVE-2025-12939 critical 9.8 No A security flaw has been discovered in SourceCodester Interview Management System up to 1.0. Affected by this issue is some unknown function... 2026-10-07
CVE-2025-12938 critical 9.8 No A vulnerability was identified in projectworlds Online Admission System 1.0. Affected by this vulnerability is an unknown functionality of t... 2026-10-07
CVE-2025-12933 critical 9.8 No A vulnerability was identified in SourceCodester Baby Care System 1.0. This affects an unknown part of the file /updatewelcome.php?id=siteop... 2026-10-07
CVE-2025-12932 critical 9.8 No A vulnerability was determined in SourceCodester Baby Care System 1.0. Affected by this issue is some unknown functionality of the file /adm... 2026-10-07
CVE-2025-12931 critical 9.8 No A vulnerability was found in SourceCodester Food Ordering System 1.0. Affected by this vulnerability is an unknown functionality of the file... 2026-10-07
CVE-2025-12930 critical 9.8 No A vulnerability has been found in SourceCodester Food Ordering System 1.0. Affected is an unknown function of the file /view-ticket.php. The... 2026-10-07
CVE-2025-12929 critical 9.8 No A flaw has been found in SourceCodester Survey Application System 1.0. This impacts the function save_user/update_user of the file /LoginReg... 2026-10-07
CVE-2025-12928 critical 9.8 No A vulnerability was detected in code-projects Online Job Search Engine 1.0. This affects an unknown function of the file /login.php. Perform... 2026-10-07
CVE-2025-12925 critical 9.8 No A security flaw has been discovered in rymcu forest up to de53ce79db9faa2efc4e79ce1077a302c42a1224. Impacted is the function getAll/addDic/g... 2026-10-07
CVE-2025-12913 critical 9.8 No A flaw has been found in code-projects Responsive Hotel Site 1.0. This affects an unknown part of the file /admin/roomdel.php. Executing man... 2026-10-07
CVE-2025-12873 critical 9.8 No A security flaw has been discovered in Campcodes School File Management 1.0. This affects an unknown part of the file /admin/update_user.php... 2026-10-07
CVE-2025-12862 critical 9.8 No A vulnerability was identified in projectworlds Online Notes Sharing Platform 1.0. Affected by this issue is some unknown functionality of t... 2026-10-07
CVE-2025-12857 critical 9.8 No A security vulnerability has been detected in code-projects Responsive Hotel Site 1.0. The affected element is an unknown function of the fi... 2026-10-07
CVE-2025-12856 critical 9.8 No A weakness has been identified in code-projects Responsive Hotel Site 1.0. Impacted is an unknown function of the file /admin/reservation.ph... 2026-10-07
CVE-2025-12855 critical 9.8 No A security flaw has been discovered in code-projects Responsive Hotel Site 1.0. This issue affects some unknown processing of the file /admi... 2026-10-07
CVE-2025-12853 critical 9.8 No A vulnerability was determined in SourceCodester Best House Rental Management System 1.0. This affects the function delete_house of the file... 2026-10-07
CVE-2025-64338 critical 9.0 No ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated regular user can create a photo... 2026-10-07
CVE-2025-62630 critical 9.8 No Due to insufficient sanitization, an attacker can upload a specially crafted configuration file to traverse directories and achieve remote... 2026-10-07