CVE-2025-10024

Authorization Bypass Through User-Controlled Key vulnerability in EXERT Computer Technologies Software Ltd. Co. Education Management System allows Parameter Injection. This issue affects Education Management System: through 23.09.2025.

• CWE-639

• https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-26-0002
• https://www.usom.gov.tr/bildirim/tr-26-0002

Published

Jan 22, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-10018QuickCMS is vulnerable to multiple Stored XSS in language ed…4.8
• CVE-2025-10019Authorization Bypass Through User-Controlled Key vulnerabili…6.5
• CVE-2025-1002MicroDicom DICOM Viewer version 2024.03 fails to adequately…5.3
• CVE-2025-10020Zohocorp ManageEngine ADManager Plus version before 8024 are…8.8
• CVE-2025-10021A Use of Uninitialized Variable vulnerability exists in Open…7
• CVE-2025-10023Improper Neutralization of Input During Web Page Generation …4.8
• CVE-2025-10025A vulnerability has been found in PHPGurukul Online Course R…9.8
• CVE-2025-10026A vulnerability was found in itsourcecode POS Point of Sale …6.1
• CVE-2025-10027A vulnerability was determined in itsourcecode POS Point of …6.1
• CVE-2025-10028A vulnerability was identified in itsourcecode POS Point of …6.1
• CVE-2025-10029A security flaw has been discovered in itsourcecode POS Poin…6.1
• CVE-2025-1003A potential vulnerability has been identified in HP Anyware …8.5