19 December 2025

49 results · Clear filters · Feed

• Medium 4.7
  CVE-2025-14899

  CodeAstro Real Estate Management System Administrator Endpoint stateadd.php sql injection

  A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remote…

  CodeAstro Real Estate Management System
  Dec 19, 2025
• Medium 6.1
  CVE-2025-66906

  Cross Site Request Forgery (CSRF) vulnerability in Turms Admin API thru v0.10.0-SNAPSHOT allows attackers to gain escal…

  Dec 19, 2025
• Medium 5.3
  CVE-2025-66908

  Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR…

  Dec 19, 2025
• Medium 6.5
  CVE-2025-66911

  Turms IM Server v0.10.0-SNAPSHOT and earlier contains a broken access control vulnerability in the user online status q…

  Dec 19, 2025
• Medium 6.0
  CVE-2025-66910

  Turms Server v0.10.0-SNAPSHOT and earlier contains a plaintext password storage vulnerability in the administrator auth…

  Dec 19, 2025
• Medium 5.0
  CVE-2025-67844

  The GitHub Integration API in Mintlify Platform before 2025-11-15 allows remote attackers to obtain sensitive repositor…

  Mintlify Mintlify Platform
  Dec 19, 2025
• Medium 6.4
  CVE-2025-67845

  A Directory Traversal vulnerability in the Static Asset Proxy Endpoint in Mintlify Platform before 2025-11-15 allows re…

  Mintlify Mintlify Platform
  Dec 19, 2025
• Medium 6.4
  CVE-2025-67842

  The Static Asset API in Mintlify Platform before 2025-11-15 allows remote attackers to inject arbitrary web script or H…

  Mintlify Mintlify Platform
  Dec 19, 2025
• Medium 4.9
  CVE-2025-67846

  The Deployment Infrastructure in Mintlify Platform before 2025-11-15 allows remote attackers to bypass security patches…

  Mintlify Mintlify Platform
  Dec 19, 2025