CVE-2023-53933
(8.8 HIGH)

EPSS: 0.27%

updated 2025-12-24T16:52:17.043000

1 posts

Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.

CVE-2025-14879
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-12-24T15:19:01.640000

2 posts

A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_index causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-14878
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-12-24T15:18:36.810000

2 posts

A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

CVE-2025-64465
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-24T15:11:06.627000

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-64469
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-24T15:09:34.350000

1 posts

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-14900
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-12-24T15:01:29.060000

1 posts

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2023-52163
(8.8 HIGH)

EPSS: 21.42%

updated 2025-12-24T11:36:59.630000

4 posts

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-47372
(9.0 None)

EPSS: 0.02%

updated 2025-12-24T00:31:18

1 posts

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

CVE-2025-15046
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-12-24T00:30:29

1 posts

A vulnerability has been found in Tenda WH450 1.0.0.18. The impacted element is an unknown function of the file /goform/PPTPClient of the component HTTP Request Handler. Such manipulation of the argument netmsk leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-15048
(7.3 HIGH)

EPSS: 1.54%

updated 2025-12-23T23:15:44.167000

1 posts

A vulnerability was determined in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/CheckTools of the component HTTP Request Handler. Executing manipulation of the argument ipaddress can lead to command injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-15047
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-12-23T22:15:51.860000

1 posts

A vulnerability was found in Tenda WH450 1.0.0.18. This affects an unknown function of the file /goform/PPTPDClient of the component HTTP Request Handler. Performing manipulation of the argument Username results in stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made public and could be used.

CVE-2025-14926
(7.8 HIGH)

EPSS: 0.07%

updated 2025-12-23T21:30:41

1 posts

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function. T

CVE-2025-14930
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:41

1 posts

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the pars

CVE-2025-14927
(7.8 HIGH)

EPSS: 0.07%

updated 2025-12-23T21:30:41

1 posts

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function.

CVE-2025-14922
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:41

1 posts

Hugging Face Diffusers CogView4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Diffusers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin

CVE-2025-14920
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:41

1 posts

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists with

CVE-2025-14931
(10.0 CRITICAL)

EPSS: 1.40%

updated 2025-12-23T21:30:41

1 posts

Hugging Face smolagents Remote Python Executor Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face smolagents. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of pickle data. The issue results from the lack of p

CVE-2025-15045
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-12-23T21:30:41

1 posts

A flaw has been found in Tenda WH450 1.0.0.18. The affected element is an unknown function of the file /goform/Natlimit of the component HTTP Request Handler. This manipulation of the argument page causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been published and may be used.

CVE-2025-15044
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-12-23T21:30:41

1 posts

A vulnerability was detected in Tenda WH450 1.0.0.18. Impacted is an unknown function of the file /goform/NatStaticSetting. The manipulation of the argument page results in stack-based buffer overflow. The attack may be performed from remote. The exploit is now public and may be used.

CVE-2025-14921
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:40

1 posts

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists

CVE-2025-14928
(7.8 HIGH)

EPSS: 0.07%

updated 2025-12-23T21:30:40

1 posts

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must convert a malicious checkpoint. The specific flaw exists within the convert_config function

CVE-2025-14925
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:40

1 posts

Hugging Face Accelerate Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Accelerate. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ch

1 repos

https://github.com/byteReaper77/CVE-2025-5964-

CVE-2025-14924
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:30:40

1 posts

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within

CVE-2025-29228
(9.8 CRITICAL)

EPSS: 0.27%

updated 2025-12-23T21:30:28

1 posts

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

CVE-2025-14929
(7.8 HIGH)

EPSS: 0.21%

updated 2025-12-23T21:15:48.240000

1 posts

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific fla

CVE-2025-45493
(6.5 MEDIUM)

EPSS: 2.71%

updated 2025-12-23T18:30:35

1 posts

Netgear EX8000 V1.0.0.126 is vulnerable to Command Injection via the iface parameter in the action_bandwidth function.

CVE-2025-50526
(9.8 CRITICAL)

EPSS: 0.29%

updated 2025-12-23T18:30:35

1 posts

Netgear EX8000 V1.0.0.126 was discovered to contain a command injection vulnerability via the switch_status function.

CVE-2025-68381
(6.5 MEDIUM)

EPSS: 0.05%

updated 2025-12-23T17:42:32.230000

1 posts

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.

CVE-2025-13941
(8.8 HIGH)

EPSS: 0.01%

updated 2025-12-23T17:35:55.073000

1 posts

A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which are later executed by the service, resulting in execution of arbitrary code with SYSTEM privileges.

CVE-2025-66520
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-23T17:33:58.673000

1 posts

A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files are not properly sanitized or validated before being inserted into the HTML structure. As a result, embedded HTML or JavaScript within a crafted SVG may execute whenever the Portfolio file list is rendered.

CVE-2025-68475
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-23T16:01:13

1 posts

Hi Fedify team! 👋 Thank you for your work on Fedify—it's a fantastic library for building federated applications. While reviewing the codebase, I discovered a Regular Expression Denial of Service (ReDoS) vulnerability that I'd like to report. I hope this helps improve the project's security. --- ## Summary A Regular Expression Denial of Service (ReDoS) vulnerability exists in Fedify's document

CVE-2025-14964
(9.8 CRITICAL)

EPSS: 0.08%

updated 2025-12-23T14:52:09.593000

1 posts

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from remote.

CVE-2025-68613
(9.9 CRITICAL)

EPSS: 0.22%

updated 2025-12-23T14:51:52.650000

3 posts

n8n is an open source workflow automation platform. Versions starting with 0.211.0 and prior to 1.120.4, 1.121.1, and 1.122.0 contain a critical Remote Code Execution (RCE) vulnerability in their workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently

Nuclei template

12 repos

https://github.com/Ashwesker/Blackash-CVE-2025-68613

https://github.com/intbjw/CVE-2025-68613-poc-via-copilot

https://github.com/intelligent-ears/CVE-2025-68613

https://github.com/rxerium/CVE-2025-68613

https://github.com/secjoker/CVE-2025-68613

https://github.com/GnuTLam/POC-CVE-2025-68613

https://github.com/ali-py3/Exploit-CVE-2025-68613

https://github.com/r4j3sh-com/CVE-2025-68613-n8n-lab

https://github.com/manyaigdtuw/CVE-2025-68613_Scanner

https://github.com/nehkark/CVE-2025-68613

https://github.com/wioui/n8n-CVE-2025-68613-exploit

https://github.com/TheStingR/CVE-2025-68613-POC

CVE-2025-65857
(7.5 HIGH)

EPSS: 0.03%

updated 2025-12-23T14:51:52.650000

1 posts

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

1 repos

https://github.com/LuisMirandaAcebedo/CVE-2025-65857

CVE-2025-14299
(0 None)

EPSS: 0.06%

updated 2025-12-23T14:51:52.650000

1 posts

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).

CVE-2025-46295
(9.8 CRITICAL)

EPSS: 0.33%

updated 2025-12-23T14:50:09.840000

1 posts

Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Because some interpolators could trigger actions like executing commands or accessing external resources, an attacker could potentially achieve remote code execution. This vulnerability has been fully addressed in FileMaker Serve

CVE-2025-37164
(10.0 CRITICAL)

EPSS: 77.21%

updated 2025-12-23T12:15:45.053000

5 posts

A remote code execution issue exists in HPE OneView.

Nuclei template

2 repos

https://github.com/g0vguy/CVE-2025-37164-PoC

https://github.com/rxerium/CVE-2025-37164

CVE-2023-53974
(7.5 HIGH)

EPSS: 0.12%

updated 2025-12-23T00:30:38

1 posts

D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.

CVE-2025-3699
(9.8 CRITICAL)

EPSS: 0.17%

updated 2025-12-23T00:15:43.540000

1 posts

Missing Authentication for Critical Function vulnerability in Mitsubishi Electric Corporation G-50 all versions, G-50-W all versions, G-50A all versions, GB-50 all versions, GB-50A all versions, GB-24A all versions, G-150AD all versions, AG-150A-A all versions, AG-150A-J all versions, GB-50AD all versions, GB-50ADA-A all versions, GB-50ADA-J all versions, EB-50GU-A all versions, EB-50GU-J all vers

CVE-2025-14882(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-20T17:41:17

1 posts

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

CVE-2025-14881(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-20T17:39:03

1 posts

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

CVE-2025-63389(CVSS UNKNOWN)

EPSS: 0.30%

updated 2025-12-20T05:37:50

1 posts

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

CVE-2025-68398
(9.1 CRITICAL)

EPSS: 0.15%

updated 2025-12-20T05:26:43

1 posts

### Impact It was possible to overwrite Git configuration remotely and override some of its behavior. ### Resources Thanks to Jason Marcello for responsible disclosure.

CVE-2025-68129
(6.8 MEDIUM)

EPSS: 0.06%

updated 2025-12-20T05:14:17

1 posts

### Description In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. ### Affected product and versions Projects are affected if they meet the following preconditions: - Applications using the Auth0-PHP SDK, versions between v8.0.0 and v8.17.0, or - App

CVE-2025-8065(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-20T03:31:40

1 posts

A buffer overflow vulnerability exists in the ONVIF XML parser of Tapo C200 V3. An unauthenticated attacker on the same local network segment can send specially crafted SOAP XML requests, causing memory overflow and device crash, resulting in denial-of-service (DoS).

CVE-2025-14300(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-20T03:31:40

1 posts

The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).

CVE-2025-63390
(5.3 MEDIUM)

EPSS: 0.06%

updated 2025-12-20T00:31:32

1 posts

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel

CVE-2025-68161(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-19T22:08:03

2 posts

The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the [verifyHostName](https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName) configuration attribute or the [log4j2.sslVerifyHostName](https://logging.apache.org/log4j/2.x/manual/systemproperties

CVE-2025-14733
(9.8 CRITICAL)

EPSS: 30.80%

updated 2025-12-19T21:30:19

7 posts

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and

3 repos

https://github.com/Ashwesker/Blackash-CVE-2025-14733

https://github.com/machevalia/CVE-2025-14733

https://github.com/b1gchoi/CVE-2025-14733

CVE-2025-34436
(8.8 HIGH)

EPSS: 0.10%

updated 2025-12-19T21:30:17

1 posts

AVideo versions prior to 20.0 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference. The upload functionality verifies authentication but does not enforce ownership checks.

CVE-2025-34437
(8.8 HIGH)

EPSS: 0.10%

updated 2025-12-19T19:15:51.223000

1 posts

AVideo versions prior to 20.1 permit any authenticated user to upload comment images to videos owned by other users. The endpoint validates authentication but omits ownership checks, allowing attackers to perform unauthorized uploads to arbitrary video objects.

CVE-2025-10910
(0 None)

EPSS: 0.19%

updated 2025-12-19T19:15:47.710000

2 posts

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s account. The server‑side API allows device association using a set of identifiers: "device", "sku", "type", and a client‑computed "value", that a

CVE-2025-65567
(7.5 HIGH)

EPSS: 0.05%

updated 2025-12-19T18:32:20

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specially crafted PFCP Session Establishment Request with a CreatePDR that contains a malformed Flow-Description is not robustly validated. The Flow-Description parser (parseFlowDesc) can read beyond the bounds of the provided buffer, causing a pa

CVE-2025-65565
(7.5 HIGH)

EPSS: 0.06%

updated 2025-12-19T18:32:19

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association is established, a PFCP Session Establishment Request that is missing the mandatory F-SEID (CPF-SEID) Information Element is not properly validated. The session establishment handler calls IE.FSEID() on a nil pointer, which triggers a panic and termin

CVE-2025-65564
(7.5 HIGH)

EPSS: 0.06%

updated 2025-12-19T18:32:19

1 posts

A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer via IE.RecoveryTimeStamp() instead of validating the message. This results in a panic and terminates

CVE-2025-52692
(8.8 HIGH)

EPSS: 0.01%

updated 2025-12-19T18:31:18

1 posts

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials.

CVE-2025-65568
(7.5 HIGH)

EPSS: 0.05%

updated 2025-12-19T18:15:50.713000

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During parsing, parseFAR() calls ip2int(), which performs an out-of-bounds read on the IPv4 address buffer and tr

CVE-2025-41697
(6.8 MEDIUM)

EPSS: 0.02%

updated 2025-12-19T18:12:09.187000

1 posts

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

CVE-2025-41694
(6.5 MEDIUM)

EPSS: 0.11%

updated 2025-12-19T18:12:00.187000

1 posts

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.

CVE-2025-14847
(7.5 HIGH)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

5 posts

Mismatched length fields in Zlib compressed protocol headers may allow a read of uninitialized heap memory by an unauthenticated client. This issue affects all MongoDB Server v7.0 prior to 7.0.28 versions, MongoDB Server v8.0 versions prior to 8.0.17, MongoDB Server v8.2 versions prior to 8.2.3, MongoDB Server v6.0 versions prior to 6.0.27, MongoDB Server v5.0 versions prior to 5.0.32, MongoDB Ser

CVE-2025-66908
(5.3 MEDIUM)

EPSS: 0.04%

updated 2025-12-19T18:00:18.330000

1 posts

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java uses the @FormData(contentType = MediaTypeConst.IMAGE) annotation to restrict uploads to image files, but this constraint is not properly enforced.

CVE-2025-66909
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-19T18:00:18.330000

1 posts

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decompression. An attacker can upload a specially crafted compressed image file (e.g., PNG) that is small w

CVE-2025-1885
(5.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Phishing, Forceful Browsing.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-11747
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that

CVE-2025-65041
(10.0 CRITICAL)

EPSS: 0.08%

updated 2025-12-19T18:00:18.330000

2 posts

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-64677
(8.2 HIGH)

EPSS: 0.07%

updated 2025-12-19T18:00:18.330000

1 posts

Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-34452
(0 None)

EPSS: 0.42%

updated 2025-12-19T18:00:18.330000

1 posts

Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery (SSRF) vulnerabilities in that allow an authenticated attacker to write arbitrary files to the server filesystem. The issue exists in the subtitle download functionality, where user-controlled parameters are used to fetch remote content and construct file paths

CVE-2025-67745
(7.1 HIGH)

EPSS: 0.02%

updated 2025-12-19T18:00:18.330000

1 posts

MyHoard is a daemon for creating, managing and restoring MySQL backups. Starting in version 1.0.1 and prior to version 1.3.0, in some cases, myhoard logs the whole backup info, including the encryption key. Version 1.3.0 fixes the issue. As a workaround, direct logs into /dev/null.

CVE-2025-64236
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-12-19T18:00:18.330000

1 posts

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.

CVE-2025-41749
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:46:12.343000

1 posts

An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configu

CVE-2025-41748
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:45:58.910000

1 posts

An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device conf

CVE-2025-41752
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:45:51.260000

1 posts

An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-1928
(9.1 CRITICAL)

EPSS: 0.05%

updated 2025-12-19T15:31:25

1 posts

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-1927
(7.1 HIGH)

EPSS: 0.01%

updated 2025-12-19T12:31:33

1 posts

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Cross Site Request Forgery.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-66522
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T09:30:40

1 posts

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affec

CVE-2025-14151
(6.1 MEDIUM)

EPSS: 0.09%

updated 2025-12-19T09:30:39

1 posts

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound_resource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will

CVE-2025-66521
(6.3 MEDIUM)

EPSS: 0.02%

updated 2025-12-19T09:30:39

1 posts

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the Trusted Certificates view is loaded.

CVE-2025-68490(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68489(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68487(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68491
(0 None)

EPSS: 0.00%

updated 2025-12-19T04:16:02.150000

1 posts

Rejected reason: Not used

CVE-2025-68488
(0 None)

EPSS: 0.00%

updated 2025-12-19T04:16:01.953000

1 posts

Rejected reason: Not used

CVE-2025-11774
(8.3 HIGH)

EPSS: 0.03%

updated 2025-12-19T03:31:23

2 posts

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 CFR3 and

CVE-2025-14908
(6.3 MEDIUM)

EPSS: 0.06%

updated 2025-12-19T03:31:23

1 posts

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module. Performing manipulation of the argument ID results in improper authentication. The attack can be initiated rem

CVE-2025-14899
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T03:31:23

1 posts

A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-67843
(8.3 HIGH)

EPSS: 0.23%

updated 2025-12-19T03:31:18

1 posts

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

CVE-2025-64675
(8.3 HIGH)

EPSS: 0.06%

updated 2025-12-19T00:31:52

1 posts

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-68382
(6.5 MEDIUM)

EPSS: 0.05%

updated 2025-12-19T00:31:47

1 posts

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.

CVE-2025-65037
(10.0 CRITICAL)

EPSS: 0.10%

updated 2025-12-19T00:31:47

1 posts

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

CVE-2025-64663
(10.0 CRITICAL)

EPSS: 0.06%

updated 2025-12-19T00:31:47

1 posts

Custom Question Answering Elevation of Privilege Vulnerability

CVE-2025-13427(CVSS UNKNOWN)

EPSS: 0.14%

updated 2025-12-19T00:31:46

1 posts

An authentication bypass vulnerability in Google Cloud Dialogflow CX Messenger allowed unauthenticated users to interact with restricted chat agents, gaining access to the agents' knowledge and the ability to trigger their intents, by manipulating initialization parameters or crafting specific API requests. All versions after August 20th, 2025 have been updated to protect from this vulnerability

CVE-2025-64676
(7.2 HIGH)

EPSS: 0.10%

updated 2025-12-19T00:31:46

1 posts

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.

CVE-2025-68463
(4.9 MEDIUM)

EPSS: 0.04%

updated 2025-12-18T22:16:30

1 posts

Bio.Entrez in Biopython through 1.86 allows doctype XXE.

CVE-2025-53000(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-18T22:03:09

1 posts

### Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a [Windows batch script](https://en.wikipedia.org/wiki/Batch_file), capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Window

CVE-2025-64374
(10.0 CRITICAL)

EPSS: 0.05%

updated 2025-12-18T21:32:49

1 posts

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through <= 5.6.81.

CVE-2025-14739(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-18T21:31:50

1 posts

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.

CVE-2025-66397
(8.3 HIGH)

EPSS: 0.04%

updated 2025-12-18T19:07:25.637000

1 posts

ChurchCRM is an open-source church management system. Prior to version 6.5.3, the allowRegistration, acceptKiosk, reloadKiosk, and identifyKiosk functions in the Kiosk Manager feature suffers from broken access control, allowing any authenticated user to allow and accept kiosk registrations, and perform other Kiosk Manager actions such as reload and identify. Version 6.5.3 fixes the issue.

CVE-2025-14884
(7.2 HIGH)

EPSS: 0.27%

updated 2025-12-18T18:30:38

2 posts

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-14896
(7.5 HIGH)

EPSS: 0.04%

updated 2025-12-18T18:30:37

1 posts

due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, including local file system paths, leading to exposure of sensitive information.

CVE-2025-14738(CVSS UNKNOWN)

EPSS: 0.07%

updated 2025-12-18T18:30:37

1 posts

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

CVE-2025-14737(CVSS UNKNOWN)

EPSS: 0.73%

updated 2025-12-18T18:30:37

1 posts

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

CVE-2025-63391
(7.5 HIGH)

EPSS: 0.10%

updated 2025-12-18T18:30:37

1 posts

An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers.

CVE-2025-68275
(4.8 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T18:27:40.170000

1 posts

ChurchCRM is an open-source church management system. Versions prior to 6.5.3 have a stored cross-site scripting vulnerability on the pages `View Active People`, `View Inactive people`, and `View All People`. Version 6.5.3 fixes the issue.

CVE-2025-68399
(5.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T16:47:11.970000

1 posts

ChurchCRM is an open-source church management system. In versions prior to 6.5.4, there is a Stored Cross-Site Scripting (XSS) vulnerability within the GroupEditor.php page of the application. When a user attempts to create a group role, they can execute malicious JavaScript. However, for this to work, the user must have permission to view and modify groups in the application. Version 6.5.4 fixes

CVE-2025-59374
(9.8 CRITICAL)

EPSS: 35.96%

updated 2025-12-18T15:42:03.790000

5 posts

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that met these conditions and installed the compromised versions were affected. The Live Update client has

CVE-2025-20393
(10.0 CRITICAL)

EPSS: 7.05%

updated 2025-12-18T15:41:16.840000

11 posts

Cisco is aware of a potential vulnerability.&nbsp; Cisco is currently investigating and&nbsp;will update these details as appropriate&nbsp;as more information becomes available.

4 repos

https://github.com/KingHacker353/CVE-2025-20393

https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4

https://github.com/cyberleelawat/CVE-2025-20393

https://github.com/Ashwesker/Blackash-CVE-2025-20393

CVE-2025-64466
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-18T15:30:52

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-64468
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-18T15:30:51

1 posts

There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions

CVE-2025-13110
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:30:51

1 posts

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woof_add_subscr" function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber level access and above, to create product messenger subscriptions on be

CVE-2025-14618
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:30:51

1 posts

The Sweet Energy Efficiency plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on the 'sweet_energy_efficiency_action' AJAX handler in all versions up to, and including, 1.0.6. This makes it possible for authenticated attackers, with subscriber level access and above, to read, modify, and delete arbitrary graphs.

CVE-2025-65007(CVSS UNKNOWN)

EPSS: 0.05%

updated 2025-12-18T15:30:51

1 posts

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attacker can execute commands including backup creation, device restart and resetting the device to factory settings. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerabil

CVE-2025-64467
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-18T15:30:45

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-14277
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:30:43

1 posts

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and m

CVE-2025-68459
(7.2 HIGH)

EPSS: 0.24%

updated 2025-12-18T15:07:42.550000

2 posts

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

CVE-2025-68462
(3.2 LOW)

EPSS: 0.02%

updated 2025-12-18T15:07:42.550000

1 posts

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

CVE-2025-12885
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:07:42.550000

1 posts

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitize_pdf_src function regex bypass in all versions up to, and including, 2.7.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary

CVE-2025-14202
(0 None)

EPSS: 0.05%

updated 2025-12-18T15:07:42.550000

2 posts

A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content. When an authenticated admin user views the SVG file with embedded JavaScript code of shared bookmark, JavaScript executes in the admin’s browser, retrieves the CSRF token, and sends a request to change the admin's password resulting in a full account

CVE-2025-68435
(9.1 CRITICAL)

EPSS: 0.09%

updated 2025-12-18T15:07:42.550000

2 posts

Zerobyte is a backup automation tool Zerobyte versions prior to 0.18.5 and 0.19.0 contain an authentication bypass vulnerability where authentication middleware is not properly applied to API endpoints. This results in certain API endpoints being accessible without valid session credentials. This is dangerous for those who have exposed Zerobyte to be used outside of their internal network. A fix h

CVE-2025-14437
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-18T15:07:18.427000

1 posts

The Hummingbird Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.18.0 via the 'request' function. This makes it possible for unauthenticated attackers to extract sensitive data including Cloudflare API credentials.

CVE-2025-40602
(6.6 MEDIUM)

EPSS: 1.86%

updated 2025-12-18T12:30:33

3 posts

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

2 repos

https://github.com/cyberleelawat/CVE-2025-40602

https://github.com/rxerium/CVE-2025-40602

CVE-2025-47387
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-18T06:30:19

1 posts

Memory Corruption when processing IOCTLs for JPEG data without verification.

CVE-2025-47382
(7.8 HIGH)

EPSS: 0.02%

updated 2025-12-18T06:30:19

1 posts

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-14856
(6.3 MEDIUM)

EPSS: 0.05%

updated 2025-12-18T03:30:18

1 posts

A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-14841
(3.3 LOW)

EPSS: 0.01%

updated 2025-12-18T03:30:18

1 posts

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve

CVE-2025-14837
(4.7 MEDIUM)

EPSS: 0.05%

updated 2025-12-18T00:34:16

1 posts

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-67073
(9.8 CRITICAL)

EPSS: 0.20%

updated 2025-12-17T21:30:56

1 posts

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.

CVE-2025-59718
(9.8 CRITICAL)

EPSS: 5.95%

updated 2025-12-17T13:54:45.390000

3 posts

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7

2 repos

https://github.com/exfil0/CVE-2025-59718-PoC

https://github.com/Ashwesker/Blackash-CVE-2025-59718

CVE-2025-68154
(8.1 HIGH)

EPSS: 0.06%

updated 2025-12-16T22:37:26

1 posts

## Summary The `fsSize()` function in `systeminformation` is vulnerable to **OS Command Injection (CWE-78)** on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function. **Affected Platforms:** Windows only **CVSS Breakdown:** - **Attack Vector

CVE-2025-68260(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-16T15:30:56

3 posts

In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix race condition on death_list Rust Binder contains the following unsafe operation: // SAFETY: A `NodeDeath` is never inserted into the death list // of any node other than its owner, so it is either in this // death list or in no death list. unsafe { node_inner.death_list.remove(self) }; This operation is u

CVE-2025-59719
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-12-09T18:30:52

2 posts

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

CVE-2025-41746
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:45

1 posts

An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device

CVE-2025-41745
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device

CVE-2025-41696
(4.6 MEDIUM)

EPSS: 0.02%

updated 2025-12-09T18:30:44

1 posts

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

CVE-2025-41750
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-41751
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device conf

CVE-2025-41695
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-41747
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to devic

CVE-2025-41692
(6.8 MEDIUM)

EPSS: 0.02%

updated 2025-12-09T18:30:43

1 posts

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

CVE-2025-41693
(4.3 MEDIUM)

EPSS: 0.23%

updated 2025-12-09T18:30:43

1 posts

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

CVE-2025-55182
(10.0 CRITICAL)

EPSS: 46.72%

updated 2025-12-09T16:53:25

3 posts

### Impact There is an unauthenticated remote code execution vulnerability in React Server Components. We recommend upgrading immediately. The vulnerability is present in versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 of: * [react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) * [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) * [react-s

Nuclei template

100 repos

https://github.com/fatguru/CVE-2025-55182-scanner

https://github.com/EynaExp/CVE-2025-55182-POC

https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell

https://github.com/alfazhossain/CVE-2025-55182-Exploiter

https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script

https://github.com/BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

https://github.com/onlylovetx/CVE-2025-55182-CVE-2025-66478-Exploit-GUI

https://github.com/timsonner/React2Shell-CVE-2025-55182

https://github.com/TrixSec/CVE-2025-55182-Scanner

https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension

https://github.com/GelukCrab/React-Server-Components-RCE

https://github.com/Syrins/CVE-2025-55182-React2Shell-RCE

https://github.com/ThemeHackers/CVE-2025-55182

https://github.com/XiaomingX/CVE-2025-55182-poc

https://github.com/whiteov3rflow/CVE-2025-55182-poc

https://github.com/7amzahard/React2shell

https://github.com/sumanrox/rschunter

https://github.com/hackersatyamrastogi/react2shell-ultimate

https://github.com/sudo-Yangziran/CVE-2025-55182POC

https://github.com/websecuritylabs/React2Shell-Library

https://github.com/emredavut/CVE-2025-55182

https://github.com/techgaun/cve-2025-55182-scanner

https://github.com/mrknow001/RSC_Detector

https://github.com/RuoJi6/CVE-2025-55182-RCE-shell

https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

https://github.com/shyambhanushali/React2Shell

https://github.com/ejpir/CVE-2025-55182-bypass

https://github.com/Pizz33/CVE-2025-55182-burpscanner

https://github.com/songsanggggg/CVE-2025-55182

https://github.com/Saturate/CVE-2025-55182-Scanner

https://github.com/alsaut1/react2shell-lab

https://github.com/AggressiveUser/React2Hell

https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-

https://github.com/m3m0ryc0rrupt/CVE-2025-55182-PoC

https://github.com/kOaDT/poc-cve-2025-55182

https://github.com/fullhunt/react2shell-test-server

https://github.com/subhdotsol/CVE-2025-55182

https://github.com/im-ezboy/CVE-2025-55182-zoomeye

https://github.com/jf0x3a/CVE-2025-55182-exploit

https://github.com/raivenLockdown/RCE_React2Shell_ButCooler-SomeUselessUsefulThingsLMAO-

https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive

https://github.com/Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-

https://github.com/theori-io/reactguard

https://github.com/AliHzSec/CVE-2025-55182

https://github.com/LemonTeatw1/CVE-2025-55182-exploit

https://github.com/Rsatan/Next.js-Exploit-Tool

https://github.com/MoLeft/React2Shell-Toolbox

https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool

https://github.com/freeqaz/react2shell

https://github.com/Chocapikk/CVE-2025-55182

https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool

https://github.com/Ashwesker/Blackash-CVE-2025-55182

https://github.com/logesh-GIT001/CVE-2025-55182

https://github.com/xkillbit/cve-2025-55182-scanner

https://github.com/f0xyx/CVE-2025-55182-Scanner

https://github.com/Spritualkb/CVE-2025-55182-exp

https://github.com/xalgord/React2Shell

https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell

https://github.com/StealthMoud/CVE-2025-55182-Scanner

https://github.com/ynsmroztas/NextRce

https://github.com/zr0n/react2shell

https://github.com/hualy13/CVE-2025-55182

https://github.com/surajhacx/react2shellpoc

https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

https://github.com/nehkark/CVE-2025-55182

https://github.com/assetnote/react2shell-scanner

https://github.com/kavienanj/CVE-2025-55182

https://github.com/yz9yt/React2Shell-CTF

https://github.com/ZihxS/check-react-rce-cve-2025-55182

https://github.com/Call123X/-cve-2025-55182

https://github.com/c0rydoras/CVE-2025-55182

https://github.com/acheong08/CVE-2025-55182-poc

https://github.com/hidden-investigations/react2shell-scanner

https://github.com/l4rm4nd/CVE-2025-55182

https://github.com/SainiONHacks/CVE-2025-55182-Scanner

https://github.com/santihabib/CVE-2025-55182-analysis

https://github.com/C00LN3T/React2Shell

https://github.com/VeilVulp/RscScan-cve-2025-55182

https://github.com/keklick1337/CVE-2025-55182-golang-PoC

https://github.com/xcanwin/CVE-2025-55182-React-RCE

https://github.com/sho-luv/React2Shell

https://github.com/shamo0/react2shell-PoC

https://github.com/msanft/CVE-2025-55182

https://github.com/SoICT-BKSEC/CVE-2025-55182-docker-lab

https://github.com/gensecaihq/react2shell-scanner

https://github.com/yanoshercohen/React2Shell_CVE-2025-55182

https://github.com/ejpir/CVE-2025-55182-research

https://github.com/xiaopeng-ye/react2shell-detector

https://github.com/sickwell/CVE-2025-55182

https://github.com/zzhorc/CVE-2025-55182

https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182

https://github.com/CymulateResearch/React2Shell-Scanner

https://github.com/dwisiswant0/CVE-2025-55182

https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS

https://github.com/Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478

https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc

https://github.com/hoosin/CVE-2025-55182

https://github.com/heiheishushu/rsc_detect_CVE-2025-55182

https://github.com/zack0x01/vuln-app-CVE-2025-55182

https://github.com/cybertechajju/R2C-CVE-2025-55182-66478

CVE-2025-37899
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-07T00:30:55

1 posts

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.

2 repos

https://github.com/SeanHeelan/o3_finds_cve-2025-37899

https://github.com/vett3x/SMB-LINUX-CVE-2025-37899

CVE-2025-66471(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-05T18:33:09

1 posts

### Impact urllib3's [streaming API](https://urllib3.readthedocs.io/en/2.5.0/advanced-usage.html#streaming-and-i-o) is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP `Content-Encoding

CVE-2025-65945
(7.5 HIGH)

EPSS: 0.01%

updated 2025-12-04T22:50:04

1 posts

### Overview An improper signature verification vulnerability exists when using auth0/node-jws with the HS256 algorithm under specific conditions. ### Am I Affected? You are affected by this vulnerability if you meet all of the following preconditions: 1. Application uses the auth0/node-jws implementation of JSON Web Signatures, versions <=3.2.2 || 4.0.0 2. Application uses the jws.createVerify(

1 repos

https://github.com/jedisct1/CVE-2025-65945-poc

CVE-2025-34352(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-02T21:31:37

1 posts

JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall or update operations. The Remote Assist uninstaller performs privileged create, write, execute, and delete actions on predictable files inside a user-writable %TEMP% subdirectory without validating that the directory is tr

CVE-2025-40300(CVSS UNKNOWN)

EPSS: 0.06%

updated 2025-11-17T18:30:25

1 posts

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors af

CVE-2025-7962
(7.5 HIGH)

EPSS: 0.01%

updated 2025-11-13T18:36:55.173000

1 posts

In Jakarta Mail 2.0.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

CVE-2025-63666
(9.8 CRITICAL)

EPSS: 0.09%

updated 2025-11-13T18:31:03

1 posts

Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.

1 repos

https://github.com/Remenis/CVE-2025-63666

CVE-2025-11953
(9.8 CRITICAL)

EPSS: 0.49%

updated 2025-11-13T16:25:27

1 posts

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments

3 repos

https://github.com/Ashwesker/Blackash-CVE-2025-11953

https://github.com/SaidBenaissa/cve-2025-11953-vulnerability-demo

https://github.com/N3k0t-dev/PoC-CVE-collection

CVE-2025-9242
(9.8 CRITICAL)

EPSS: 73.45%

updated 2025-11-13T15:31:32

1 posts

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and

Nuclei template

2 repos

https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242

https://github.com/Ashwesker/Blackash-CVE-2025-9242

CVE-2025-12480
(9.1 CRITICAL)

EPSS: 78.02%

updated 2025-11-12T15:32:32

1 posts

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

Nuclei template

CVE-2025-59287
(9.8 CRITICAL)

EPSS: 75.42%

updated 2025-11-12T14:33:19.727000

1 posts

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Nuclei template

21 repos

https://github.com/jiansiting/CVE-2025-59287

https://github.com/AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector

https://github.com/garvitv14/CVE-2025-59287

https://github.com/fsanzmoya/wsus_CVE-2025-59287

https://github.com/Twodimensionalitylevelcrossing817/CVE-2025-59287

https://github.com/N3k0t-dev/PoC-CVE-collection

https://github.com/esteban11121/WSUS-RCE-Mitigation-59287

https://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS

https://github.com/mrk336/Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

https://github.com/Adel-kaka-dz/cve-2025-59287

https://github.com/tecxx/CVE-2025-59287-WSUS

https://github.com/FurkanKAYAPINAR/CVE-2025-59287

https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE

https://github.com/mrmtwoj/WSUS-Patch-Level-Scanner-A-Lightweight-Tool-for-Detecting-Vulnerable-Microsoft-WSUS-Deployments

https://github.com/mubix/Find-WSUS

https://github.com/M507/CVE-2025-59287-PoC

https://github.com/0xBruno/WSUSploit.NET

https://github.com/0x7556/CVE-2025-59287

https://github.com/RadzaRr/WSUSResponder

https://github.com/keeganparr1/CVE-2025-59287-hawktrace

https://github.com/dexterm300/cve-2025-59287-exploit-poc

CVE-2025-53057
(5.9 MEDIUM)

EPSS: 0.09%

updated 2025-11-03T18:32:51

1 posts

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated at

CVE-2025-53066
(7.5 HIGH)

EPSS: 0.09%

updated 2025-11-03T18:16:57.227000

1 posts

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker

CVE-2019-10758
(9.9 CRITICAL)

EPSS: 94.36%

updated 2025-10-27T17:12:23.890000

1 posts

mongo-express before 0.54.0 is vulnerable to Remote Code Execution via endpoints that uses the `toBSON` method. A misuse of the `vm` dependency to perform `exec` commands in a non-safe environment.

Nuclei template

3 repos

https://github.com/ossf-cve-benchmark/CVE-2019-10758

https://github.com/masahiro331/CVE-2019-10758

https://github.com/lp008/CVE-2019-10758

CVE-2025-31324
(10.0 CRITICAL)

EPSS: 40.17%

updated 2025-10-22T00:34:21

1 posts

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Nuclei template

19 repos

https://github.com/harshitvarma05/CVE-2025-31324-Exploits

https://github.com/moften/CVE-2025-31324

https://github.com/nairuzabulhul/nuclei-template-cve-2025-31324-check

https://github.com/NULLTRACE0X/CVE-2025-31324

https://github.com/Onapsis/Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

https://github.com/respondiq/jsp-webshell-scanner

https://github.com/sug4r-wr41th/CVE-2025-31324

https://github.com/ODST-Forge/CVE-2025-31324_PoC

https://github.com/Onapsis/Onapsis_CVE-2025-31324_Scanner_Tools

https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324

https://github.com/BlueOWL-overlord/Burp_CVE-2025-31324

https://github.com/rxerium/CVE-2025-31324

https://github.com/JonathanStross/CVE-2025-31324

https://github.com/nullcult/CVE-2025-31324-File-Upload

https://github.com/redrays-io/CVE-2025-31324

https://github.com/rf-peixoto/sap_netweaver_cve-2025-31324-

https://github.com/moften/CVE-2025-31324-NUCLEI

https://github.com/abrewer251/CVE-2025-31324_PoC_SAP

https://github.com/Alizngnc/SAP-CVE-2025-31324

CVE-2025-23006
(9.8 CRITICAL)

EPSS: 56.66%

updated 2025-10-22T00:34:17

1 posts

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

CVE-2024-53704
(9.8 CRITICAL)

EPSS: 93.97%

updated 2025-10-22T00:34:16

1 posts

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Nuclei template

1 repos

https://github.com/istagmbh/CVE-2024-53704

CVE-2025-50165
(9.8 CRITICAL)

EPSS: 3.84%

updated 2025-08-12T18:31:39

1 posts

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

1 repos

https://github.com/encrypter15/CVE-2025-50165-x64-Exploit

CVE-2025-25231
(7.5 HIGH)

EPSS: 10.75%

updated 2025-08-11T21:31:39

1 posts

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.

Nuclei template

1 repos

https://github.com/ashkan-pu/CVE-CVE-2025-25231

CVE-2025-24294
(7.5 HIGH)

EPSS: 0.04%

updated 2025-07-16T14:15:23.037000

1 posts

The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the librar

CVE-2025-30026(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-07-11T06:30:36

1 posts

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

CVE-2025-30023
(9.1 CRITICAL)

EPSS: 1.92%

updated 2025-07-11T06:30:36

1 posts

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

CVE-2025-6514
(9.7 CRITICAL)

EPSS: 0.73%

updated 2025-07-09T18:08:46

1 posts

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

2 repos

https://github.com/Cyberency/CVE-2025-6514

https://github.com/ChaseHCS/CVE-2025-6514

CVE-2025-49146
(8.2 HIGH)

EPSS: 0.01%

updated 2025-06-11T16:17:03

1 posts

### Impact When the PostgreSQL JDBC driver is configured with channel binding set to `required` (default value is `prefer`), the driver would incorrectly allow connections to proceed with authentication methods that do not support channel binding (such as password, MD5, GSS, or SSPI authentication). This could allow a man-in-the-middle attacker to intercept connections that users believed were pr

CVE-2025-5516
(2.4 LOW)

EPSS: 0.05%

updated 2025-06-03T18:30:53

1 posts

A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor w