CVE-2025-8964 code-projects Hostel Management System Login hostel_manage.exe improper authentication

Medium 4.8 Published 14 Aug 2025 Updated 14 Aug 2025

An attacker with local access can bypass authentication in the Hostel Management System login component to gain unauthorized access.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2025-8964?

CVE-2025-8964 is a medium-severity authentication bypass vulnerability in code-projects Hostel Management System, published on 14 Aug 2025. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

A vulnerability was identified in code-projects Hostel Management System 1.0. This affects an unknown part of the file hostel_manage.exe of the component Login. The manipulation leads to improper authentication. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.

Weakness: CWE-287

Which versions are affected by CVE-2025-8964?

It affects 1 product.

Products include Fabian Hostel Management System.

How do I fix CVE-2025-8964?

No fix has been published for CVE-2025-8964 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-8964 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-8964 exists.

Sources

Also known as GHSA-2hcv-cr29-7mmx.