Exploitation ongoing with high activity in latest observed window (1 mentions)
Recommended action window: Immediate (within 24h)
NVD description
A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. This issue affects the function LoginUser of the component Login User. The manipulation of the argument username/password leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
Priority
LOW
Exploitation
ACTIVE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Attention, elevated activities detected targeting code-projects Tourism Management System (CVE-2025-4890) https://vuldb.com/vuln/309443/cti
Post summary
Elevated activity has been detected against the Tourism Management System (CVE‑2025‑4890), suggesting potential active exploitation, though no PoC, patch, or technical details are provided.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | fabian | tourism_management_system | 1.0 | - | - |