CVE-2025-1163

A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.

• CWE-119
• CWE-121
• CWE-787

• https://code-projects.org/Product
• https://github.com/J0hnFFFF/j0hn_upload_three/blob/main/binary1.pdfExploit, Third Party Advisory
• https://vuldb.com/?ctiid.295066Permissions Required, VDB Entry
• https://vuldb.com/?id.295066Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.494008Third Party Advisory, VDB Entry
• https://github.com/J0hnFFFF/j0hn_upload_three/blob/main/binary1.pdfExploit, Third Party Advisory

Published

Feb 11, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11624Potential stack buffer overwrite on the SFTP server side whe…9.8
• CVE-2025-11625Improper host authentication vulnerability in wolfSSH versio…9.8
• CVE-2025-11626MONGO dissector infinite loop in Wireshark 4.4.0 to 4.4.9 an…5.5
• CVE-2025-11627The Site Checkup Debug AI Troubleshooting with Wizard and Ti…6.5
• CVE-2025-11628A flaw has been found in jimit105 Project-Online-Shopping-We…4.7
• CVE-2025-11629A vulnerability has been found in RainyGao DocSys up to 2.02…9.8
• CVE-2025-11630A vulnerability was found in RainyGao DocSys up to 2.02.36. …9.8
• CVE-2025-11631A vulnerability was determined in RainyGao DocSys up to 2.02…9.1
• CVE-2025-11632The Call Now Button – The #1 Click to Call Button for WordPr…4.3
• CVE-2025-11633A vulnerability was identified in Tomofun Furbo 360 and Furb…5.9
• CVE-2025-11634A security flaw has been discovered in Tomofun Furbo 360 and…4.6
• CVE-2025-11635A weakness has been identified in Tomofun Furbo 360 up to FB…6.5