# CVEs published 2025-11-02

9 CVEs were published on November 2, 2025: 0 critical, 2 high. Days are UTC.

- [CVE-2025-12606](https://cve.now/CVE-2025-12606.md): itsourcecode Online Loan Management System manage\_borrower.php sql injection (CVSS 6.9, itsourcecode Online Loan Management System)
- [CVE-2025-12605](https://cve.now/CVE-2025-12605.md): itsourcecode Online Loan Management System manage\_loan.php sql injection (CVSS 6.9, itsourcecode Online Loan Management System)
- [CVE-2025-12604](https://cve.now/CVE-2025-12604.md): itsourcecode Online Loan Management System load\_fields.php sql injection (CVSS 6.9, itsourcecode Online Loan Management System)
- [CVE-2025-12598](https://cve.now/CVE-2025-12598.md): SourceCodester Best House Rental Management System admin\_class.php save\_tenant sql injection (CVSS 5.1, SourceCodester Best House Rental Management System)
- [CVE-2025-12597](https://cve.now/CVE-2025-12597.md): SourceCodester Best House Rental Management System admin\_class.php save\_category sql injection (CVSS 5.1, SourceCodester Best House Rental Management System)
- [CVE-2025-12596](https://cve.now/CVE-2025-12596.md): Tenda AC23 saveParentControlInfo buffer overflow (CVSS 8.7, Tenda AC23)
- [CVE-2025-12595](https://cve.now/CVE-2025-12595.md): Tenda AC23 SetVirtualServerCfg formSetVirtualSer buffer overflow (CVSS 8.7, Tenda AC23)
- [CVE-2025-12594](https://cve.now/CVE-2025-12594.md): code-projects Simple Online Hotel Reservation System add\_account.php sql injection (CVSS 5.1, code-projects Simple Online Hotel Reservation System)
- [CVE-2025-12593](https://cve.now/CVE-2025-12593.md): code-projects Simple Online Hotel Reservation System Photo edit\_room.php unrestricted upload (CVSS 5.1, code-projects Simple Online Hotel Reservation System)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-11-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.