CVE-2025-8964 MEDIUM

CVE-2025-8964: code-projects Hostel Management System Login hostel_manage.exe improper authentication

Vendor Code-Projects
Product Hostel Management System
Weakness CWE-287 · Improper authentication
Published August 14, 2025
Last update August 14, 2025
View on NVD All CVEs

CVSS base score

4.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Key dates

02Disclosure timeline

August 14, 2025 CVE published
August 14, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-43805 Nexkey allows users to bypass authentication of Bull dashboard CVE-2025-49001 Dataease Authentication Bypass Vulnerability CVE-2025-2230 Philips Intellispace Cardiovascular (ISCV) Improper Authentication CVE-2025-21349 Windows Remote Desktop Configuration Service Tampering Vulnerability CVE-2025-49831 Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device