NVD disclosure day

Published threat advisories for October 10, 2025

CVE-2025-60306

Simple Car Rental System Session Forgery Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A permission bypass vulnerability in the Simple Car Rental System allows low-privilege users to forge high-privilege sessions and perform sensitive operations. This could lead to unauthorized access and significant actions within the system if it is deployed and reachable. Confirming the system's presence and exposure

NVD published: October 10, 2025

CVE advisoryCRITICAL

CVE-2025-60307

Computer Laboratory System SQL Injection Login Bypass

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical SQL injection vulnerability in code-projects Computer Laboratory System allows bypassing login via a universal password. If reachable, this could lead to unauthorized access and potential data compromise. Confirming its use and network exposure is important for understanding the risk.

NVD published: October 10, 2025