Aggregator

Name: CRACCON 2025 (an CRAC CTFs event.)
Date: Sept. 6, 2025, 8 a.m. — 07 Sept. 2025, 08:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://defhawk.com/battleground/raid/craccon-ctf-2025
Rating weight: 23.67
Event organizers: h4wk

Name: ASIS CTF Quals 2025 (an ASIS CTF Quals event.)
Date: Sept. 6, 2025, 2 p.m. — 07 Sept. 2025, 14:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Offical URL: https://asisctf.com/
Rating weight: 96.29
Event organizers: ASIS

A vulnerability was found in SourceCodester Time Tracker 1.0. It has been rated as problematic. The affected element is an unknown function of the file /index.html. Performing manipulation of the argument project-name results in cross site scripting. This vulnerability was named CVE-2025-10088. The attack may be initiated remotely. In addition, an exploit is available.

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0. It has been declared as critical. Impacted is an unknown function of the file /admin/profit_report.php. Such manipulation of the argument product_id leads to sql injection. This vulnerability is uniquely identified as CVE-2025-10087. The attack can be launched remotely. Moreover, an exploit is present.

Submit #644841 / VDB-323044

A vulnerability was found in fuyang_lipengjun platform 1.0.0. It has been classified as critical. This issue affects the function queryAll of the file /adposition/queryAll of the component AdPositionController. This manipulation causes improper authorization. This vulnerability is handled as CVE-2025-10086. The attack can be initiated remotely. Additionally, an exploit exists. Affects another part than CVE-2025-9936.

Submit #644702 / VDB-323043

A vulnerability was found in SourceCodester Pet Grooming Management Software 1.0 and classified as critical. This vulnerability affects unknown code of the file manage_website.php. The manipulation results in unrestricted upload. This vulnerability is known as CVE-2025-10085. It is possible to launch the attack remotely. Furthermore, an exploit is available.

Submit #644681 / VDB-323039

Submit #644680 / VDB-323039

Submit #644661 / VDB-323042

A vulnerability has been found in elunez eladmin up to 2.7 and classified as problematic. This affects the function queryErrorLogDetail of the file /api/logs/error/1 of the component SysLogController. The manipulation leads to improper authorization. This vulnerability is traded as CVE-2025-10084. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.

Submit #644660 / VDB-323041

A vulnerability, which was classified as critical, was found in SourceCodester Pet Grooming Management Software 1.0. Affected by this issue is some unknown functionality of the file /admin/profile.php. Executing manipulation can lead to unrestricted upload. This vulnerability appears as CVE-2025-10083. The attack may be performed from remote. In addition, an exploit is available.

A vulnerability, which was classified as problematic, has been found in ash up to 3.5.38. Affected by this vulnerability is an unknown functionality in the library lib/ash/actions/create/bulk.ex. Performing manipulation results in incorrect authorization. This vulnerability is reported as CVE-2025-48042. The attack is possible to be carried out remotely. No exploit exists. It is advisable to upgrade the affected component.

Submit #644658 / VDB-323040

A vulnerability classified as critical was found in SourceCodester Online Polling System 1.0. Affected is an unknown function of the file /admin/manage-admins.php. Such manipulation of the argument email leads to sql injection. This vulnerability is documented as CVE-2025-10082. The attack can be executed remotely. Additionally, an exploit exists.

Submit #644643 / VDB-323039

Submit #644640 / VDB-323037

Пресс-секретарь президента дал честный ответ на неудобный вопрос.