CVE-2025-8964

1.9 lowEPSS 0.3%

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Severity

CVSS 4.0

1.9 low

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.8 high

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.3% chance of exploitation in the next 30 days; higher than 20% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2025-08-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fabian:hostel_management_system

References

https://code-projects.org/
https://vuldb.com/?ctiid.319959
https://vuldb.com/?id.319959
https://vuldb.com/?submit.628030
https://www.yuque.com/gongzi-jsnek/xb2q3a/ip83oyxdztulfuzx#vulnerability-details-and-poc

Check your stack JSON