CVE-2025-6605
published 2025-06-25CVE-2025-6605: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file…
PriorityP355high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
0.37%
29.2th percentile
A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ffmpeg | ffmpeg | >= 0 < 7:3.4.11-0ubuntu0.1+esm11 | 7:3.4.11-0ubuntu0.1+esm11 |
| ffmpeg | ffmpeg | >= 0 < 7:4.2.7-0ubuntu0.1+esm11 | 7:4.2.7-0ubuntu0.1+esm11 |
| ffmpeg | ffmpeg | >= 0 < 7:4.4.2-0ubuntu0.22.04.1+esm10 | 7:4.4.2-0ubuntu0.22.04.1+esm10 |
| ffmpeg | ffmpeg | >= 0 < 7:6.1.1-3ubuntu5+esm6 | 7:6.1.1-3ubuntu5+esm6 |
| mayurik | best_salon_management_system | — | — |
| sourcecodester | best_salon_management_system | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv4.02.1LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
osv7.5HIGH
vendor_ubuntu7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
ffmpeg vulnerabilities
osv·2025-10-21·CVSS 7.5
CVE-2023-6603 [HIGH] ffmpeg vulnerabilities
ffmpeg vulnerabilities
It was discovered that FFmpeg incorrectly handled the return values of
functions in its Firequalizer filter and in the HTTP Live Streaming (HLS)
implementation, leading to a NULL pointer dereference. If a user was
tricked into loading a crafted media file, a remote attacker could
possibly use this issue to make FFmpeg crash, resulting in a denial
of service. (CVE-2023-6603, CVE-2025-10256)
It was discovered that FFmpeg did not enforce an input format before
triggering the HTTP demuxer. A remote attacker could possibly use this
issue to perform a Server-Side Request Forgery (SSRF) attack.
(CVE-2025-6605)
It was discovered that FFmpeg incorrectly handled memory allocation in the
ALS audio decoder. If a user was tricked into loading a crafted media file,
a remote att
GHSA
GHSA-fcvg-xj46-38v6: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1
ghsa_unreviewed·2025-06-26
CVE-2025-6605 [MEDIUM] CWE-74 GHSA-fcvg-xj46-38v6: A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1
A vulnerability classified as critical was found in SourceCodester Best Salon Management System 1.0. This vulnerability affects unknown code of the file /panel/edit-staff.php. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Ubuntu
FFmpeg vulnerabilities
vendor_ubuntu·2025-10-21·CVSS 7.5
CVE-2023-6603 [HIGH] FFmpeg vulnerabilities
Title: FFmpeg vulnerabilities
Summary: Several security issues were fixed in FFmpeg.
It was discovered that FFmpeg incorrectly handled the return values of
functions in its Firequalizer filter and in the HTTP Live Streaming (HLS)
implementation, leading to a NULL pointer dereference. If a user was
tricked into loading a crafted media file, a remote attacker could
possibly use this issue to make FFmpeg crash, resulting in a denial
of service. (CVE-2023-6603, CVE-2025-10256)
It was discovered that FFmpeg did not enforce an input format before
triggering the HTTP demuxer. A remote attacker could possibly use this
issue to perform a Server-Side Request Forgery (SSRF) attack.
(CVE-2025-6605)
It was discovered that FFmpeg incorrectly handled memory allocation in the
ALS audio decoder. If a u
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-6.mdhttps://vuldb.com/?ctiid.313822https://vuldb.com/?id.313822https://vuldb.com/?submit.601914https://www.sourcecodester.com/https://github.com/Colorado-all/cve/blob/main/Best%20salon%20management%20system/SQL-6.md
2025-06-25
Published