CVE-2025-13451
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-21T21:31:22

1 posts

A vulnerability was identified in SourceCodester Online Shop Project 1.0. The affected element is an unknown function of the file /action.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVE-2025-41075
(7.5 HIGH)

EPSS: 0.04%

updated 2025-11-21T21:30:17

1 posts

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optin that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

CVE-2025-41074
(7.5 HIGH)

EPSS: 0.04%

updated 2025-11-21T21:30:17

1 posts

Vulnerability in LimeSurvey 6.13.0 in the endpoint /optout that causes infinite HTTP redirects when accessed directly. This behavior can be exploited to generate a Denegation of Service (DoS attack), by exhausting server or client resources. The system is unable to break the redirect loop, which can cause service degradation or browser instability.

CVE-2025-13424
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T21:30:17

1 posts

A vulnerability has been found in Campcodes Supplier Management System 1.0. This affects an unknown function of the file /admin/add_product.php. The manipulation of the argument txtProductName leads to sql injection. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used.

CVE-2025-61757
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-11-21T21:15:50.947000

9 posts

Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager. CVSS 3.1 Base

Nuclei template

2 repos

https://github.com/B1ack4sh/Blackash-CVE-2025-61757

https://github.com/Jinxia62/Oracle-Identity-Manager-CVE-2025-61757

CVE-2025-13421
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-21T20:21:56.600000

1 posts

A security vulnerability has been detected in itsourcecode Human Resource Management System 1.0. Impacted is an unknown function of the file /src/store/NoticeStore.php. Such manipulation of the argument noticeDesc leads to sql injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-13423
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T20:21:20.850000

1 posts

A flaw has been found in Campcodes Retro Basketball Shoes Online Store 1.0. The impacted element is an unknown function of the file /admin/admin_product.php. Executing manipulation of the argument product_image can lead to unrestricted upload. The attack may be launched remotely. The exploit has been published and may be used.

CVE-2025-13446
(8.8 HIGH)

EPSS: 0.09%

updated 2025-11-21T20:16:29.907000

2 posts

A vulnerability has been found in Tenda AC21 16.03.08.16. This vulnerability affects unknown code of the file /goform/SetSysTimeCfg. The manipulation of the argument timeZone/time leads to stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-13449
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-21T20:14:28.467000

1 posts

A vulnerability was found in code-projects Online Shop Project 1.0. This issue affects some unknown processing of the file /login.php. The manipulation of the argument Password results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

CVE-2025-41076
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T19:54:57.150000

1 posts

In version 6.13.0 of LimeSurvey, any external user can cause a 500 error in the survey system by sending a malformed session cookie. Instead of displaying a generic error message, the system exposes internal backend information, including the use of the Yii framework, the MySQL/MariaDB database engine, the table name 'lime_sessions', primary keys, and fragments of the content that caused the confl

CVE-2025-13223
(8.8 HIGH)

EPSS: 30.74%

updated 2025-11-21T18:28:01.260000

5 posts

Type Confusion in V8 in Google Chrome prior to 142.0.7444.175 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CVE-2025-65222
(4.3 MEDIUM)

EPSS: 0.01%

updated 2025-11-21T17:25:23.817000

1 posts

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the rebootTime parameter of /goform/SetSysAutoRebbotCfg.

CVE-2025-63211
(6.1 MEDIUM)

EPSS: 0.02%

updated 2025-11-21T16:16:14.620000

1 posts

Stored cross-site scripting vulnerability in bridgetech VBC Server & Element Manager, firmware versions 6.5.0-9 thru 6.5.0-10, allows attackers to execute arbitrary code via the addName parameter to the /vbc/core/userSetupDoc/userSetupDoc endpoint.

CVE-2025-64762(CVSS UNKNOWN)

EPSS: 0.10%

updated 2025-11-21T15:32:25

2 posts

In `authkit-nextjs` version 2.11.0 and below, authenticated responses do not defensively apply anti-caching headers. In environments where CDN caching is enabled, this can result in session tokens being included in cached responses and subsequently served to multiple users. Next.js applications deployed on Vercel are unaffected **unless** they manually enable CDN caching by setting cache headers

CVE-2025-64751(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-11-21T15:32:10

1 posts

### Overview OpenFGA v1.4.0 to v1.11.0 (openfga-0.1.34 <= Helm chart <= openfga-0.2.48, v.1.4.0 <= docker <= v.1.11.0) are vulnerable to improper policy enforcement when certain Check and ListObject calls are executed. ### Am I Affected? You are affected by this vulnerability if you meet the following preconditions: - You are using OpenFGA v1.4.0 to v1.11.0 - The model has a a relation directly

CVE-2025-62426
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T15:32:05

1 posts

### Summary The /v1/chat/completions and /tokenize endpoints allow a `chat_template_kwargs` request parameter that is used in the code before it is properly validated against the chat template. With the right `chat_template_kwargs` parameters, it is possible to block processing of the API server for long periods of time, delaying all other requests ### Details In serving_engine.py, the chat_temp

CVE-2025-62372
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T15:31:39

2 posts

### Summary Users can crash the vLLM engine serving multimodal models by passing multimodal embedding inputs with correct `ndim` but incorrect `shape` (e.g. hidden dimension is wrong), regardless of whether the model is intended to support such inputs (as defined in the Supported Models page). The issue has existed ever since we added support for image embedding inputs, i.e. #6613 (released in v

CVE-2025-41115
(10.0 CRITICAL)

EPSS: 0.00%

updated 2025-11-21T15:15:52.283000

8 posts

SCIM provisioning was introduced in Grafana Enterprise and Grafana Cloud in April to improve how organizations manage users and teams in Grafana by introducing automated user lifecycle management. In Grafana versions 12.x where SCIM provisioning is enabled and configured, a vulnerability in user identity handling allows a malicious or compromised SCIM client to provision a user with a numeric ext

1 repos

https://github.com/B1ack4sh/Blackash-CVE-2025-41115

CVE-2025-11001
(7.0 HIGH)

EPSS: 0.31%

updated 2025-11-21T15:13:59.083000

12 posts

7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of 7-Zip. Interaction with this product is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the handling of symbolic links in ZIP files. Craf

3 repos

https://github.com/lastvocher/7zip-CVE-2025-11001

https://github.com/pacbypass/CVE-2025-11001

https://github.com/shalevo13/Se7enSlip

CVE-2025-40601
(7.5 HIGH)

EPSS: 0.05%

updated 2025-11-21T15:13:59.083000

3 posts

A Stack-based buffer overflow vulnerability in the SonicOS SSLVPN service allows a remote unauthenticated attacker to cause Denial of Service (DoS), which could cause an impacted firewall to crash.

CVE-2025-0645
(7.2 HIGH)

EPSS: 0.04%

updated 2025-11-21T15:13:59.083000

1 posts

Unrestricted Upload of File with Dangerous Type vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Pyxis Signage: through 31012025.

CVE-2025-11676
(0 None)

EPSS: 0.03%

updated 2025-11-21T15:13:59.083000

2 posts

Improper input validation vulnerability in TP-Link System Inc. TL-WR940N V6 (UPnP modules), which allows unauthenticated adjacent attackers to perform DoS attack. This issue affects TL-WR940N V6 <= Build 220801.

CVE-2025-12414
(0 None)

EPSS: 0.07%

updated 2025-11-21T15:13:59.083000

1 posts

An attacker could take over a Looker account in a Looker instance configured with OIDC authentication, due to email address string normalization.Looker-hosted and Self-hosted were found to be vulnerable. This issue has already been mitigated for Looker-hosted. Self-hosted instances must be upgraded as soon as possible. This vulnerability has been patched in all supported versions of Self-hosted

CVE-2025-12778
(5.3 MEDIUM)

EPSS: 0.05%

updated 2025-11-21T15:13:59.083000

1 posts

The Ultimate Member Widgets for Elementor – WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email

CVE-2025-13434
(5.3 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T15:13:59.083000

1 posts

A weakness has been identified in jameschz Hush Framework 2.0. The impacted element is an unknown function of the file Hush\hush-lib\hush\Util.php of the component HTTP Host Header Handler. This manipulation of the argument $_SERVER['HOST'] causes improper neutralization of http headers for scripting syntax. The attack is possible to be carried out remotely. The exploit has been made available to

CVE-2025-47914
(5.3 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T15:13:59.083000

2 posts

SSH Agent servers do not validate the size of messages when processing new identity requests, which may cause the program to panic if the message is malformed due to an out of bounds read.

CVE-2025-65103
(8.8 HIGH)

EPSS: 0.03%

updated 2025-11-21T15:13:59.083000

2 posts

OpenSTAManager is an open source management software for technical assistance and invoicing. Prior to version 2.9.5, an authenticated SQL Injection vulnerability in the API allows any user, regardless of permission level, to execute arbitrary SQL queries. By manipulating the display parameter in an API request, an attacker can exfiltrate, modify, or delete any data in the database, leading to a fu

CVE-2025-63932
(7.3 HIGH)

EPSS: 0.23%

updated 2025-11-21T15:13:59.083000

1 posts

D-Link Router DIR-868L A1 FW106KRb01.bin has an unauthenticated remote code execution vulnerability in the cgibin binary. The HNAP service provided by cgibin does not filter the HTTP SOAPAction header field. The unauthenticated remote attacker can execute the shell command.

CVE-2025-12160
(7.2 HIGH)

EPSS: 0.07%

updated 2025-11-21T15:13:13.800000

1 posts

The Simple User Registration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'wpr_admin_msg' parameter in all versions up to, and including, 6.6 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

CVE-2025-13149
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T15:13:13.800000

1 posts

The Schedule Post Changes With PublishPress Future: Unpublish, Delete, Change Status, Trash, Change Categories plugin for WordPress is vulnerable to unauthorized modification of data due to a missing authorization check on the "saveFutureActionData" function in all versions up to, and including, 4.9.1. This makes it possible for authenticated attackers, with author level access and above, to chang

CVE-2025-64755
(0 None)

EPSS: 0.05%

updated 2025-11-21T15:13:13.800000

2 posts

Claude Code is an agentic coding tool. Prior to version 2.0.31, due to an error in sed command parsing, it was possible to bypass the Claude Code read-only validation and write to arbitrary files on the host system. This issue has been patched in version 2.0.31.

CVE-2025-62164
(8.8 HIGH)

EPSS: 0.21%

updated 2025-11-21T15:13:13.800000

2 posts

vLLM is an inference and serving engine for large language models (LLMs). From versions 0.10.2 to before 0.11.1, a memory corruption vulnerability could lead to a crash (denial-of-service) and potentially remote code execution (RCE), exists in the Completions API endpoint. When processing user-supplied prompt embeddings, the endpoint loads serialized tensors using torch.load() without sufficient v

CVE-2025-62207
(8.6 HIGH)

EPSS: 0.08%

updated 2025-11-21T15:13:13.800000

3 posts

Azure Monitor Elevation of Privilege Vulnerability

CVE-2025-13485
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-21T15:13:13.800000

1 posts

A security flaw has been discovered in itsourcecode Online File Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=login. The manipulation of the argument Username results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.

CVE-2025-52668
(8.7 HIGH)

EPSS: 0.03%

updated 2025-11-21T15:13:13.800000

2 posts

Improper input neutralization in the stats-conversions.php script in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes potential information disclosure and session hijacking via a stored XSS attack.

CVE-2025-55124
(6.1 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T15:13:13.800000

1 posts

Improper neutralisation of input in Revive Adserver 6.0.0+ causes a reflected XSS attack in the banner-zone.php script.

CVE-2025-52670
(7.1 HIGH)

EPSS: 0.04%

updated 2025-11-21T15:13:13.800000

1 posts

Missing authorization check in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes users on the system to delete banners owned by other accounts

CVE-2025-52666
(2.7 LOW)

EPSS: 0.04%

updated 2025-11-21T15:13:13.800000

1 posts

Improper neutralisation of format characters in the settings of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an administrator user to disable the admin user console due to a fatal PHP error.

CVE-2025-62730
(0 None)

EPSS: 0.03%

updated 2025-11-21T15:13:13.800000

1 posts

SOPlanning is vulnerable to Privilege Escalation in user management tab. Users with user_manage_team role are allowed to modify permissions of users. However, they are able to assign administrative permissions to any user including themselves. This allow a malicious authenticated attacker with this role to escalate to admin privileges. This issue affects both Bulk Update functionality and regular

CVE-2025-63848
(6.1 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T15:13:13.800000

1 posts

Stored cross site scripting (xss) vulnerability in SWISH prolog thru 2.2.0 allowing attackers to execute arbitrary code via crafted web IDE notebook.

1 repos

https://github.com/coderMohammed1/CVE-2025-63848

CVE-2025-12121
(7.3 HIGH)

EPSS: 0.02%

updated 2025-11-21T15:13:13.800000

2 posts

Lite XL versions 2.1.8 and prior contain a vulnerability in the system.exec function, which allowed arbitrary command execution through unsanitized shell command construction. This function was used in project directory launching (core.lua), drag-and-drop file handling (rootview.lua), and the “open in system” command in the treeview plugin (treeview.lua). If an attacker could influence input to sy

CVE-2025-13156
(8.8 HIGH)

EPSS: 0.24%

updated 2025-11-21T09:30:39

1 posts

The Vitepos – Point of Sale (POS) for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the insert_media_attachment() function in all versions up to, and including, 3.3.0. This is due to the save_update_category_img() function accepting user-supplied file types without validation when processing category images. This makes it possible f

1 repos

https://github.com/MooseLoveti/Vitepos-CVE-Report

CVE-2025-12039
(5.3 MEDIUM)

EPSS: 0.02%

updated 2025-11-21T09:30:39

1 posts

The BigBuy Dropshipping Connector for WooCommerce plugin for WordPress is vulnerable to IP Address Spoofing in all versions up to, and including, 2.0.5 due to insufficient IP address validation and use of user-supplied HTTP headers as a primary method for IP retrieval. This makes it possible for unauthenticated attackers to retrieve the output of phpinfo().

CVE-2025-11826
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T09:30:39

1 posts

The WP Company Info plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'class' attribute of the 'social-networks' shortcode in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execu

CVE-2025-11808
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T09:30:39

1 posts

The Shortcode for Google Street View plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'streetview' shortcode in all versions up to, and including, 0.5.7. This is due to insufficient input sanitization and output escaping on the 'id' attribute. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pag

CVE-2025-13322
(8.1 HIGH)

EPSS: 0.22%

updated 2025-11-21T09:30:39

2 posts

The WP AUDIO GALLERY plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in all versions up to, and including, 2.0. This is due to the `wpag_uploadaudio_callback()` AJAX handler not properly validating user-supplied file paths in the `audio_upload` parameter before passing them to `unlink()`. This makes it possible for authenticated attackers, wit

CVE-2025-13159
(7.1 HIGH)

EPSS: 0.03%

updated 2025-11-21T09:30:39

1 posts

The Flo Forms – Easy Drag & Drop Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG file uploads in all versions up to, and including, 1.0.43. This is due to the plugin allowing SVG file uploads via an unauthenticated AJAX endpoint (`flo_form_submit`) without proper file content validation. This makes it possible for unauthenticated attackers to upload malicious

1 repos

https://github.com/MooseLoveti/Flo-Forms-CVE-Report

CVE-2025-13141
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T09:30:38

1 posts

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Gutenberg blocks in all versions up to, and including, 3.0.0 due to insufficient input validation on user-supplied HTML tag names. This is due to the lack of a tag name whitelist allowing dangerous tags like 'script', 'iframe', and 'object' to be injected even though tag_e

CVE-2025-11973
(4.9 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T09:30:38

1 posts

The 简数采集器 plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.6.3 via the __kds_flag functionality that imports featured images. This makes it possible for authenticated attackers, with Adminstrator-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.

CVE-2025-11803
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T09:30:38

1 posts

The WPSite Shortcode plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'format' shortcode attribute in the wpsite_y shortcode and the 'before' attribute in the wpsite_postauthor shortcode in all versions up to, and including, 1.2. This is due to insufficient input sanitization and output escaping in error messages. This makes it possible for authenticated attackers, with co

CVE-2025-12138
(8.8 HIGH)

EPSS: 0.28%

updated 2025-11-21T09:30:34

1 posts

The URL Image Importer plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.0.6. This is due to the plugin relying on a user-controlled Content-Type HTTP header to validate file uploads in the 'uimptr_import_image_from_url()' function which writes the file to the server before performing proper validation. Thi

CVE-2025-11985
(8.8 HIGH)

EPSS: 0.05%

updated 2025-11-21T09:30:34

1 posts

The Realty Portal plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the 'rp_save_property_settings' function in versions 0.1 to 0.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to

CVE-2025-64695
(7.8 HIGH)

EPSS: 0.01%

updated 2025-11-21T09:30:34

1 posts

Uncontrolled search path element issue exists in the installer of LogStare Collector (for Windows). If exploited, arbitrary code may be executed with the privilege of the user invoking the installer.

CVE-2025-11456
(9.8 CRITICAL)

EPSS: 0.14%

updated 2025-11-21T09:30:33

1 posts

The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the eh_crm_new_ticket_post() function in all versions up to, and including, 3.3.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.

CVE-2025-64310
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-11-21T03:31:20

2 posts

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts. An administrative user's password may be identified through a brute force attack.

CVE-2025-55123
(3.5 LOW)

EPSS: 0.03%

updated 2025-11-21T00:31:29

1 posts

Improper neutralization of input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes manager accounts to be able to craft XSS attacks to their own advertiser users.

CVE-2025-52671
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T00:31:28

1 posts

Debug information disclosure in the SQL error message to in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to acquire information about the software, PHP and database versions currently in use.

CVE-2025-64655
(8.8 HIGH)

EPSS: 0.08%

updated 2025-11-21T00:30:29

3 posts

Improper authorization in Dynamics OmniChannel SDK Storage Containers allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-62459
(8.3 HIGH)

EPSS: 0.08%

updated 2025-11-21T00:30:28

3 posts

Microsoft Defender Portal Spoofing Vulnerability

CVE-2025-59245
(9.8 CRITICAL)

EPSS: 0.37%

updated 2025-11-21T00:30:28

3 posts

Microsoft SharePoint Online Elevation of Privilege Vulnerability

CVE-2025-36072
(8.8 HIGH)

EPSS: 0.07%

updated 2025-11-21T00:30:28

2 posts

IBM webMethods Integration 10.11 through 10.11_Core_Fix22, 10.15 through 10.15_Core_Fix22, and 11.1 through 11.1_Core_Fix6 IBM webMethods Integration allow an authenticated user to execute arbitrary code on the system, caused by the deserialization of untrusted object graphs data.

CVE-2025-64660
(5.7 MEDIUM)

EPSS: 0.05%

updated 2025-11-21T00:30:28

2 posts

Improper access control in GitHub Copilot and Visual Studio Code allows an authorized attacker to bypass a security feature over a network.

CVE-2025-13484
(2.4 LOW)

EPSS: 0.03%

updated 2025-11-21T00:30:28

1 posts

A vulnerability was identified in Campcodes Complete Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/customer-list.php. The manipulation of the argument Name leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used.

CVE-2025-48986
(8.8 HIGH)

EPSS: 0.02%

updated 2025-11-21T00:30:24

2 posts

Authorization bypass in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes an logged in attacker to change other users' email address and potentialy take over their accounts using the forgot password functionality.

CVE-2025-49752
(10.0 CRITICAL)

EPSS: 0.09%

updated 2025-11-21T00:30:23

3 posts

Azure Bastion Elevation of Privilege Vulnerability

1 repos

https://github.com/skipdurex661/cve-2025-49752-Exploit

CVE-2025-52669
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-11-21T00:30:22

1 posts

Insecure design policies in the user management system of Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes non-admin users to have access to the contact name and email address of other users on the system.

CVE-2025-48987
(6.3 MEDIUM)

EPSS: 0.04%

updated 2025-11-21T00:30:22

1 posts

Improper Neutralization of Input in Revive Adserver 5.5.2 and 6.0.1 and earlier versions causes a potential reflected XSS attack.

CVE-2025-64027(CVSS UNKNOWN)

EPSS: 0.01%

updated 2025-11-20T21:56:35

1 posts

Snipe-IT v8.3.4 (build 20218) contains a reflected cross-site scripting (XSS) vulnerability in the CSV Import workflow. When an invalid CSV file is uploaded, the application returns a progress_message value that is rendered as raw HTML in the admin interface. An attacker can intercept and modify the POST /livewire/update request to inject arbitrary HTML or JavaScript into the progress_message. Bec

1 repos

https://github.com/cybercrewinc/CVE-2025-64027

CVE-2025-40605
(5.3 MEDIUM)

EPSS: 0.03%

updated 2025-11-20T21:31:39

2 posts

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences (such as ../) and may access files and directories outside the intended restricted path.

CVE-2025-40604
(6.5 MEDIUM)

EPSS: 0.01%

updated 2025-11-20T21:31:39

2 posts

Download of Code Without Integrity Check Vulnerability in the SonicWall Email Security appliance loads root filesystem images without verifying signatures, allowing attackers with VMDK or datastore access to modify system files and gain persistent arbitrary code execution.

CVE-2025-52667
(3.5 LOW)

EPSS: 0.03%

updated 2025-11-20T21:30:43

1 posts

Missing JSON Content-Type header in a script in Revive Adserver 6.0.1 and 5.5.2 and earlier versions causes a stored XSS attack to be possible for a logged in manager user.

CVE-2025-10571
(9.7 CRITICAL)

EPSS: 0.03%

updated 2025-11-20T21:30:43

1 posts

Authentication Bypass Using an Alternate Path or Channel vulnerability in ABB ABB Ability Edgenius.This issue affects ABB Ability Edgenius: 3.2.0.0, 3.2.1.1.

CVE-2025-13400
(8.8 HIGH)

EPSS: 0.11%

updated 2025-11-20T18:32:09

1 posts

A vulnerability was detected in Tenda CH22 1.0.0.1. Affected is the function formWrlExtraGet of the file /goform/WrlExtraGet. Performing manipulation of the argument chkHz results in buffer overflow. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2025-63207
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-11-20T18:32:08

1 posts

The R.V.R Elettronica TEX product (firmware TEXL-000400, Web GUI TLAN-000400) is vulnerable to broken access control due to improper authentication checks on the /_Passwd.html endpoint. An attacker can send an unauthenticated POST request to change the Admin, Operator, and User passwords, resulting in complete system compromise.

CVE-2025-65220
(4.3 MEDIUM)

EPSS: 0.01%

updated 2025-11-20T18:32:08

1 posts

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow in: /goform/SetVirtualServerCfg via the list parameter.

CVE-2025-65223
(4.3 MEDIUM)

EPSS: 0.01%

updated 2025-11-20T18:32:08

1 posts

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the urls parameter of /goform/saveParentControlInfo.

CVE-2025-65221
(4.3 MEDIUM)

EPSS: 0.01%

updated 2025-11-20T18:32:08

1 posts

Tenda AC21 V16.03.08.16 is vulnerable to Buffer Overflow via the list parameter of /goform/setPptpUserList.

CVE-2025-62294(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-11-20T18:31:12

1 posts

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55.

CVE-2025-34320(CVSS UNKNOWN)

EPSS: 0.34%

updated 2025-11-20T18:31:12

1 posts

BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthenticated directory traversal sequences to cause the server to read arbitrary system files accessible to the account running the service. Retrieved configuration artifacts may contain account credentials used for BBj Enterprise Manager; posses

CVE-2025-13435
(5.6 MEDIUM)

EPSS: 0.09%

updated 2025-11-20T17:57:06

1 posts

A security vulnerability has been detected in Dreampie Resty versions up to the 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/java/cn/dreampie/client/HttpClient.java of the component HttpClient Module. Such manipulation of the argument filename leads to path traversal. The attack may be performed from remote. Attacks of this nature are highly complex. The

CVE-2025-65022
(7.2 HIGH)

EPSS: 0.03%

updated 2025-11-20T17:24:07.987000

1 posts

i-Educar is free, fully online school management software. In versions 2.10.0 and prior, an authenticated time-based SQL injection vulnerability exists in the ieducar/intranet/agenda.php script. An attacker with access to an authenticated session can execute arbitrary SQL commands against the application's database. This vulnerability is caused by the improper handling of the cod_agenda request pa

CVE-2025-63206
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-11-20T17:15:51.933000

1 posts

An authentication bypass issue was discovered in Dasan Switch DS2924 web based interface, firmware versions 1.01.18 and 1.02.00, allowing attackers to gain escalated privileges via storing crafted cookies in the web browser.

CVE-2025-63719
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-20T15:31:26

1 posts

Campcodes Online Hospital Management System 1.0 is vulnerable to SQL Injection in /admin/index.php via the parameter username.

CVE-2025-64984
(6.1 MEDIUM)

EPSS: 0.03%

updated 2025-11-20T15:30:35

1 posts

Kaspersky has fixed a security issue in Kaspersky Endpoint Security for Linux (any version with anti-virus databases prior to 18.11.2025), Kaspersky Industrial CyberSecurity for Linux Nodes (any version with anti-virus databases prior to 18.11.2025), and Kaspersky Endpoint Security for Mac (12.0.0.325, 12.1.0.553, and 12.2.0.694 with anti-virus databases prior to 18.11.2025) that could have allowe

CVE-2025-62346
(6.8 MEDIUM)

EPSS: 0.01%

updated 2025-11-20T15:30:34

1 posts

A Cross-Site Request Forgery (CSRF) vulnerability was identified in HCL Glovius Cloud. An attacker can force a user's web browser to execute an unwanted, malicious action on a trusted site where the user is authenticated, specifically on one endpoint.

CVE-2025-5092
(6.4 MEDIUM)

EPSS: 0.04%

updated 2025-11-20T15:30:34

1 posts

Multiple plugins and/or themes for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled lightGallery library (<= 2.8.3) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will

CVE-2025-13469
(2.4 LOW)

EPSS: 0.03%

updated 2025-11-20T15:30:30

1 posts

A security vulnerability has been detected in Public Knowledge Project omp and ojs 3.3.0/3.4.0/3.5.0. Impacted is an unknown function of the file plugins/paymethod/manual/templates/paymentForm.tpl of the component Payment Instructions Setting Handler. The manipulation of the argument manualInstructions leads to cross site scripting. The attack can be initiated remotely. You should upgrade the affe

CVE-2025-13445
(8.8 HIGH)

EPSS: 0.05%

updated 2025-11-20T15:30:30

2 posts

A flaw has been found in Tenda AC21 16.03.08.16. This affects an unknown part of the file /goform/SetIpMacBind. Executing manipulation of the argument list can lead to stack-based buffer overflow. The attack can be executed remotely. The exploit has been published and may be used.

CVE-2025-13442
(7.3 HIGH)

EPSS: 1.02%

updated 2025-11-20T15:30:30

1 posts

A security vulnerability has been detected in UTT 进取 750W up to 3.2.2-191225. Affected by this vulnerability is the function system of the file /goform/formPdbUpConfig. Such manipulation of the argument policyNames leads to command injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did no

CVE-2025-13468
(5.4 MEDIUM)

EPSS: 0.04%

updated 2025-11-20T15:30:29

1 posts

A weakness has been identified in SourceCodester Alumni Management System 1.0. This issue affects the function delete_forum/delete_career/delete_comment/delete_gallery/delete_event of the file admin/admin_class.php of the component Delete Handler. Executing manipulation of the argument ID can lead to missing authorization. It is possible to launch the attack remotely. The exploit has been made ava

CVE-2025-12502
(6.8 MEDIUM)

EPSS: 0.02%

updated 2025-11-20T15:30:29

1 posts

The attention-bar WordPress plugin through 0.7.2.1 does not sanitize and escape a parameter before using it in a SQL statement, allowing high privilege users such as administrator to perform SQL injection attacks

CVE-2025-13450
(3.5 LOW)

EPSS: 0.03%

updated 2025-11-20T15:30:29

1 posts

A vulnerability was determined in SourceCodester Online Shop Project 1.0. Impacted is an unknown function of the file /shop/register.php. This manipulation of the argument f_name causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

CVE-2025-13443
(5.4 MEDIUM)

EPSS: 0.03%

updated 2025-11-20T15:30:29

1 posts

A vulnerability was detected in macrozheng mall up to 1.0.3. Affected by this issue is the function delete of the file /member/readHistory/delete. Performing manipulation of the argument ids results in improper access controls. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVE-2025-13433
(7.0 None)

EPSS: 0.01%

updated 2025-11-20T15:30:29

1 posts

A security flaw has been discovered in Muse Group MuseHub 2.1.0.1567. The affected element is an unknown function of the file C:\Program Files\WindowsApps\Muse.MuseHub_2.1.0.1567_x64__rb9pth70m6nz6\Muse.Updater.exe of the component Windows Service. The manipulation results in unquoted search path. The attack is only possible with local access. A high complexity level is associated with this attack

CVE-2025-0643
(7.2 HIGH)

EPSS: 0.04%

updated 2025-11-20T15:30:22

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Narkom Communication and Software Technologies Trade Ltd. Co. Pyxis Signage allows Stored XSS.This issue affects Pyxis Signage: through 31012025.

CVE-2025-63371
(7.5 HIGH)

EPSS: 0.29%

updated 2025-11-20T15:30:22

1 posts

Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents.

CVE-2025-63878
(6.5 MEDIUM)

EPSS: 0.03%

updated 2025-11-20T00:32:25

1 posts

Github Restaurant Website Restoran v1.0 was discovered to contain a SQL injection vulnerability via the Contact Form page.

CVE-2025-13420
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-20T00:31:25

1 posts

A weakness has been identified in itsourcecode Human Resource Management System 1.0. This issue affects some unknown processing of the file /src/store/EventStore.php. This manipulation of the argument eventSubject causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-13422
(7.3 HIGH)

EPSS: 0.03%

updated 2025-11-20T00:31:25

1 posts

A vulnerability was detected in freeprojectscodes Sports Club Management System 1.0. The affected element is an unknown function of the file /dashboard/admin/change_s_pwd.php. Performing manipulation of the argument login_id results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used.

CVE-2025-11884(CVSS UNKNOWN)

EPSS: 0.05%

updated 2025-11-20T00:31:25

1 posts

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in opentext uCMDB allows Stored XSS. The vulnerability could allow an attacker has high level access to UCMDB to create or update data with malicious scripts This issue affects uCMDB: 24.4.

CVE-2025-4042(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-11-20T00:31:24

1 posts

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

CVE-2025-58181
(5.3 MEDIUM)

EPSS: 0.06%

updated 2025-11-19T23:01:22

1 posts

SSH servers parsing GSSAPI authentication requests do not validate the number of mechanisms specified in the request, allowing an attacker to cause unbounded memory consumption.

CVE-2025-63210
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-11-19T21:32:25

1 posts

The Newtec Celox UHD (models: CELOXA504, CELOXA820) running firmware version celox-21.6.13 is vulnerable to an authentication bypass. An attacker can exploit this issue by modifying intercepted responses from the /celoxservice endpoint. By injecting a forged response body during the loginWithUserName flow, the attacker can gain Superuser or Operator access without providing valid credentials.

CVE-2025-65099(CVSS UNKNOWN)

EPSS: 0.08%

updated 2025-11-19T20:33:13

1 posts

When running on a machine with Yarn 3.0 or above, Claude Code could have been tricked to execute code contained in a project via yarn plugins before the user accepted the startup trust dialog. Exploiting this would have required a user to start Claude Code in an untrusted directory and to be using Yarn 3.0 or above. Users on standard Claude Code auto-update will have received this fix automatica

CVE-2025-65025
(8.2 HIGH)

EPSS: 0.05%

updated 2025-11-19T20:30:01

1 posts

### Summary The esm.sh CDN service is vulnerable to a Path Traversal (CWE-22) vulnerability during NPM package tarball extraction. An attacker can craft a malicious NPM package containing specially crafted file paths (e.g., `package/../../tmp/evil.js`). When esm.sh downloads and extracts this package, files may be written to arbitrary locations on the server, escaping the intended extraction d

CVE-2025-65033
(8.1 HIGH)

EPSS: 0.04%

updated 2025-11-19T20:15:53.960000

2 posts

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an authorization flaw in the poll management feature allows any authenticated user to pause or resume any poll, regardless of ownership. The system only uses the public pollId to identify polls, and it does not verify whether the user performing the action is the poll owner. As a result, any user can disrupt polls

CVE-2025-65021
(9.1 CRITICAL)

EPSS: 0.04%

updated 2025-11-19T19:14:59.327000

1 posts

Rallly is an open-source scheduling and collaboration tool. Prior to version 4.5.4, an Insecure Direct Object Reference (IDOR) vulnerability exists in the poll finalization feature of the application. Any authenticated user can finalize a poll they do not own by manipulating the pollId parameter in the request. This allows unauthorized users to finalize other users’ polls and convert them into eve

CVE-2025-34333
(0 None)

EPSS: 0.01%

updated 2025-11-19T19:14:59.327000

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly permissive file system permissions. Authenticated local users have modify rights on this directory, while the associated web server process runs as NT AUTHORITY\\SYSTEM. As a result, any local user can create or alter server-side scripts withi

CVE-2025-34331
(0 None)

EPSS: 0.10%

updated 2025-11-19T19:14:59.327000

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 contain an unauthenticated file read vulnerability via the download.php script. The endpoint exposes a file download mechanism that lacks access control, allowing remote, unauthenticated users to request files stored on the appliance based solely on attacker-supplied path and filename parameters. While limi

CVE-2025-63217
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-11-19T19:14:59.327000

1 posts

The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

CVE-2025-65089
(6.8 MEDIUM)

EPSS: 0.01%

updated 2025-11-19T19:00:00

1 posts

### Summary A user with no view rights on a page may see the content of an office attachment displayed with the view file macro. ### Details If on a public page is displayed an office attachment from a restricted page, a user with no view rights on the restricted page can view the attachment content, no matter the display type used. ### PoC 1. Install and activate the Pro Macros application 2. C

CVE-2025-13316(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-11-19T18:31:29

2 posts

Twonky Server 8.5.2 on Linux and Windows is vulnerable to a cryptographic flaw, use of hard-coded cryptographic keys. An attacker with knowledge of the encrypted administrator password can decrypt the value with static keys to view the plain text password and gain administrator-level access to Twonky Server.

CVE-2025-13315(CVSS UNKNOWN)

EPSS: 0.17%

updated 2025-11-19T18:31:28

2 posts

Twonky Server 8.5.2 on Linux and Windows is vulnerable to an access control flaw. An unauthenticated attacker can bypass web service API authentication controls to leak a log file and read the administrator's username and encrypted password.

CVE-2025-34337(CVSS UNKNOWN)

EPSS: 0.07%

updated 2025-11-19T18:31:28

1 posts

eGovFramework/egovframe-common-components versions up to and including 4.3.1 includes Web Editor image upload and related file delivery functionality that uses symmetric encryption to protect URL parameters, but exposes an encryption oracle that allows attackers to generate valid ciphertext for chosen values. The image upload endpoints /utl/wed/insertImage.do and /utl/wed/insertImageCk.do encrypt

CVE-2025-34334(CVSS UNKNOWN)

EPSS: 0.31%

updated 2025-11-19T18:31:28

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 are vulnerable to an authenticated command injection in the fax test functionality implemented by AudioCodes_files/TestFax.php. When a fax "send" test is requested, the application builds a faxsender command line using attacker-supplied parameters and passes it to GlobalUtils::RunBatchFile without proper va

CVE-2025-34335(CVSS UNKNOWN)

EPSS: 0.28%

updated 2025-11-19T18:31:27

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an authenticated command injection vulnerability in the license activation workflow handled by AudioCodes_files/ActivateLicense.php. When a license file is uploaded, the application derives a new filename by combining a generated base name with the attacker-controlled extension portion of the origina

CVE-2025-34332(CVSS UNKNOWN)

EPSS: 0.01%

updated 2025-11-19T18:31:27

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windows services using helper batch scripts located under C:\\F2MAdmin\\F2E\\AudioCodes_files\\utils\\Services. When certain service actions are requested through ajaxPost.php, these scripts are invoked by PHP using system() under the NT AUTHORIT

CVE-2025-34329(CVSS UNKNOWN)

EPSS: 0.70%

updated 2025-11-19T18:31:27

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 expose an unauthenticated backup upload endpoint at AudioCodes_files/ajaxBackupUploadFile.php in the F2MAdmin web interface. The script derives a backup folder path from application configuration, creates the directory if it does not exist, and then moves an uploaded file to that location using the attacker

CVE-2025-34328(CVSS UNKNOWN)

EPSS: 0.10%

updated 2025-11-19T18:31:27

1 posts

AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component (F2MAdmin) that exposes an unauthenticated script-management endpoint at AudioCodes_files/utils/IVR/diagram/ajaxScript.php. The saveScript action writes attacker-supplied data directly to a server-side file path under the privileges of the web service account, which ru

CVE-2025-63879
(6.1 MEDIUM)

EPSS: 0.03%

updated 2025-11-19T18:31:27

1 posts

A reflected cross-site scripted (XSS) vulnerability in the /ecommerce/products.php component of E-commerce Project v1.0 and earlier allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into the id parameter.

CVE-2025-63224
(10.0 CRITICAL)

EPSS: 0.09%

updated 2025-11-19T18:31:27

1 posts

The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

CVE-2025-10703(CVSS UNKNOWN)

EPSS: 0.21%

updated 2025-11-19T18:31:27

1 posts

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver lo

CVE-2025-10702(CVSS UNKNOWN)

EPSS: 0.21%

updated 2025-11-19T18:31:27

1 posts

Improper Control of Generation of Code ('Code Injection') vulnerability in Progress DataDirect Connect for JDBC drivers, Progress DataDirect Open Access JDBC driver and Hybrid Data Pipeline allows Remote Code Inclusion. The SpyAttribute connection option implemented by the DataDirect Connect for JDBC drivers, DataDirect Hybrid Data Pipeline JDBC driver and the DataDirect OpenAccess JDBC driver s

CVE-2025-63216
(10.0 CRITICAL)

EPSS: 0.07%

updated 2025-11-19T15:32:40

1 posts

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices.

CVE-2025-64446
(9.8 CRITICAL)

EPSS: 70.44%

updated 2025-11-19T15:32:36

3 posts

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an attacker to execute administrative commands on the system via crafted HTTP or HTTPS requests.

Nuclei template

10 repos

https://github.com/AN5I/cve-2025-64446-fortiweb-exploit

https://github.com/verylazytech/CVE-2025-64446

https://github.com/B1ack4sh/Blackash-CVE-2025-64446

https://github.com/sxyrxyy/CVE-2025-64446-FortiWeb-CGI-Bypass-PoC

https://github.com/lincemorado97/CVE-2025-64446_CVE-2025-58034

https://github.com/soltanali0/CVE-2025-64446-Exploit

https://github.com/fevar54/CVE-2025-64446-PoC---FortiWeb-Path-Traversal

https://github.com/sensepost/CVE-2025-64446

https://github.com/D3crypT0r/CVE-2025-64446

https://github.com/Death112233/CVE-2025-64446-

CVE-2025-58034
(7.2 HIGH)

EPSS: 2.42%

updated 2025-11-19T00:31:24

6 posts

An Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.5, FortiWeb 7.4.0 through 7.4.10, FortiWeb 7.2.0 through 7.2.11, FortiWeb 7.0.0 through 7.0.11 may allow an authenticated attacker to execute unauthorized code on the underlying system via crafted HTTP requests or

2 repos

https://github.com/lincemorado97/CVE-2025-64446_CVE-2025-58034

https://github.com/B1ack4sh/Blackash-CVE-2025-58034

CVE-2025-9501
(9.0 CRITICAL)

EPSS: 0.83%

updated 2025-11-18T14:06:29.817000

3 posts

The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.

CVE-2025-60672
(6.5 MEDIUM)

EPSS: 0.28%

updated 2025-11-17T19:04:14.260000

1 posts

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to construct system commands executed via twsystem(). An attacker can exploit this vulnerability remotely withou

CVE-2025-60673
(6.5 MEDIUM)

EPSS: 0.28%

updated 2025-11-14T18:32:41

1 posts

An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct iptables commands executed via twsystem(). An attacker can exploit this vulnerability remotely without authentication by

CVE-2025-59367(CVSS UNKNOWN)

EPSS: 0.36%

updated 2025-11-13T03:31:30

1 posts

An authentication bypass vulnerability has been identified in certain DSL series routers, may allow remote attackers to gain unauthorized access into the affected system. Refer to the 'Security Update for DSL Series Router' section on the ASUS Security Advisory for more information.

1 repos

https://github.com/B1ack4sh/Blackash-CVE-2025-59367

CVE-2025-64513
(0 None)

EPSS: 0.10%

updated 2025-11-12T16:19:59.103000

2 posts

Milvus is an open-source vector database built for generative AI applications. An unauthenticated attacker can exploit a vulnerability in versions prior to 2.4.24, 2.5.21, and 2.6.5 to bypass all authentication mechanisms in the Milvus Proxy component, gaining full administrative access to the Milvus cluster. This grants the attacker the ability to read, modify, or delete data, and to perform priv

2 repos

https://github.com/shinyseam/CVE-2025-64513

https://github.com/B1ack4sh/Blackash-CVE-2025-64513

CVE-2025-59287
(9.8 CRITICAL)

EPSS: 60.40%

updated 2025-11-11T15:32:22

1 posts

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Nuclei template

22 repos

https://github.com/N3k0t-dev/PoC-CVE-collection

https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE

https://github.com/keeganparr1/CVE-2025-59287-hawktrace

https://github.com/tecxx/CVE-2025-59287-WSUS

https://github.com/fsanzmoya/wsus_CVE-2025-59287

https://github.com/mrk336/Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

https://github.com/jiansiting/CVE-2025-59287

https://github.com/mubix/Find-WSUS

https://github.com/garvitv14/CVE-2025-59287

https://github.com/0xBruno/WSUSploit.NET

https://github.com/Twodimensionalitylevelcrossing817/CVE-2025-59287

https://github.com/dexterm300/cve-2025-59287-exploit-poc

https://github.com/RadzaRr/WSUSResponder

https://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS

https://github.com/0x7556/CVE-2025-59287

https://github.com/M507/CVE-2025-59287-PoC

https://github.com/mrmtwoj/WSUS-Patch-Level-Scanner-A-Lightweight-Tool-for-Detecting-Vulnerable-Microsoft-WSUS-Deployments

https://github.com/esteban11121/WSUS-RCE-Mitigation-59287

https://github.com/th1n0/CVE-2025-59287

https://github.com/Adel-kaka-dz/cve-2025-59287

https://github.com/FurkanKAYAPINAR/CVE-2025-59287

https://github.com/AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector

CVE-2025-62171
(4.4 MEDIUM)

EPSS: 0.08%

updated 2025-11-03T18:32:51

1 posts

## Summary CVE-2025-57803 claims to be patched in ImageMagick 7.1.2-2, but **the fix is incomplete and ineffective**. The latest version **7.1.2-5 remains vulnerable** to the same integer overflow attack. The patch added `BMPOverflowCheck()` but placed it **after** the overflow occurs, making it useless. A malicious 58-byte BMP file can trigger AddressSanitizer crashes and DoS. **Affected Versi

CVE-2024-36331
(3.2 LOW)

EPSS: 0.02%

updated 2025-11-03T18:32:48

1 posts

Improper initialization of CPU cache memory could allow a privileged attacker with hypervisor access to overwrite SEV-SNP guest memory resulting in loss of data integrity.

CVE-2025-24893
(9.8 CRITICAL)

EPSS: 94.26%

updated 2025-10-30T19:54:05

1 posts

### Impact Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to `<host>/xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28"Hello%20from"%20%2B%2

Nuclei template

38 repos

https://github.com/Bishben/xwiki-15.10.8-reverse-shell-cve-2025-24893

https://github.com/b0ySie7e/CVE-2025-24893

https://github.com/AzureADTrent/CVE-2025-24893-Reverse-Shell

https://github.com/andwati/CVE-2025-24893

https://github.com/AliAmouz/CVE2025-24893

https://github.com/dollarboysushil/CVE-2025-24893-XWiki-Unauthenticated-RCE-Exploit-POC

https://github.com/AliElKhatteb/CVE-2024-32019-POC

https://github.com/B1ack4sh/Blackash-CVE-2025-24893

https://github.com/Artemir7/CVE-2025-24893-EXP

https://github.com/zs1n/CVE-2025-24893

https://github.com/Th3Gl0w/CVE-2025-24893-POC

https://github.com/torjan0/xwiki_solrsearch-rce-exploit

https://github.com/dhiaZnaidi/CVE-2025-24893-PoC

https://github.com/iSee857/CVE-2025-24893-PoC

https://github.com/IIIeJlyXaKapToIIIKu/CVE-2025-24893-XWiki-unauthenticated-RCE-via-SolrSearch

https://github.com/kimtangker/CVE-2025-24893

https://github.com/nopgadget/CVE-2025-24893

https://github.com/ibadovulfat/CVE-2025-24893_HackTheBox-Editor-Writeup

https://github.com/gotr00t0day/CVE-2025-24893

https://github.com/Yukik4z3/CVE-2025-24893

https://github.com/rvizx/CVE-2025-24893

https://github.com/Y2F05p2w/CVE-2025-24893

https://github.com/alaxar/CVE-2025-24893

https://github.com/CMassa/CVE-2025-24893

https://github.com/Infinit3i/CVE-2025-24893

https://github.com/Retro023/CVE-2025-24893-POC

https://github.com/80Ottanta80/CVE-2025-24893-PoC

https://github.com/mah4nzfr/CVE-2025-24893

https://github.com/Hex00-0x4/CVE-2025-24893-XWiki-RCE

https://github.com/The-Red-Serpent/CVE-2025-24893

https://github.com/570RMBR3AK3R/xwiki-cve-2025-24893-poc

https://github.com/investigato/cve-2025-24893-poc

https://github.com/x0da6h/POC-for-CVE-2025-24893

https://github.com/achnouri/Editor-CTF-writre-up

https://github.com/D3Ext/CVE-2025-24893

https://github.com/gunzf0x/CVE-2025-24893

https://github.com/Kai7788/CVE-2025-24893-RCE-PoC

https://github.com/hackersonsteroids/cve-2025-24893

CVE-2025-27093
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-10-30T15:05:32.197000

2 posts

Sliver is a command and control framework that uses a custom Wireguard netstack. In versions 1.5.43 and earlier, and in development version 1.6.0-dev, the netstack does not limit traffic between Wireguard clients. This allows clients to communicate with each other unrestrictedly, potentially enabling leaked or recovered keypairs to be used to attack operators or allowing port forwardings to be acc

CVE-2025-20333
(9.9 CRITICAL)

EPSS: 12.47%

updated 2025-10-28T13:58:58.610000

1 posts

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to improper validation of user-supplied input in HTTP(S) requests. An attacker with valid VPN user credentials cou

CVE-2025-61882
(9.8 CRITICAL)

EPSS: 79.99%

updated 2025-10-27T17:08:52.230000

1 posts

Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: BI Publisher Integration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Concurrent Processing. Successful attacks of this vulnerability can result in takeover of Oracle Concu

Nuclei template

13 repos

https://github.com/zerozenxlabs/CVE-2025-61882-Oracle-EBS

https://github.com/Sachinart/CVE-2025-61882

https://github.com/rxerium/CVE-2025-61882-CVE-2025-61884

https://github.com/MindflareX/CVE-2025-61882-POC

https://github.com/RootAid/CVE-2025-61882

https://github.com/AshrafZaryouh/CVE-2025-61882-Executive-Summary

https://github.com/Zhert-lab/CVE-2025-61882-CVE-2025-61884

https://github.com/siddu7575/CVE-2025-61882-CVE-2025-61884

https://github.com/B1ack4sh/Blackash-CVE-2025-61882

https://github.com/AdityaBhatt3010/CVE-2025-61882-Oracle-E-Business-Suite-Pre-Auth-RCE-Exploit

https://github.com/GhoStZA-debug/CVE-2025-61882

https://github.com/BattalionX/http-oracle-ebs-cve-2025-61882.nse

https://github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882

CVE-2025-20362
(6.5 MEDIUM)

EPSS: 30.85%

updated 2025-10-22T00:34:26

1 posts

A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to access restricted URL endpoints without authentication that should otherwise be inaccessible without authentication. This vulnerability is due to improper validation of user-supplied i

Nuclei template

CVE-2024-21413
(9.8 CRITICAL)

EPSS: 93.52%

updated 2025-10-22T00:33:00

1 posts

Microsoft Outlook Remote Code Execution Vulnerability

22 repos

https://github.com/olebris/CVE-2024-21413

https://github.com/ShubhamKanhere307/CVE-2024-21413

https://github.com/Redfox-Security/Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape

https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/duy-31/CVE-2024-21413

https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

https://github.com/X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

https://github.com/th3Hellion/CVE-2024-21413

https://github.com/CMNatic/CVE-2024-21413

https://github.com/ArtemCyberLab/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413

https://github.com/PolarisXSec/CVE-2024-21413

https://github.com/yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-

https://github.com/MQKGitHub/Moniker-Link-CVE-2024-21413

https://github.com/MSeymenD/CVE-2024-21413

https://github.com/r00tb1t/CVE-2024-21413-POC

https://github.com/hau2212/Moniker-Link-CVE-2024-21413-

https://github.com/ahmetkarakayaoffical/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/dshabani96/CVE-2024-21413

https://github.com/ThemeHackers/CVE-2024-21413

https://github.com/Cyber-Trambon/CVE-2024-21413-exploit

https://github.com/D1se0/CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2023-48022
(9.8 CRITICAL)

EPSS: 92.93%

updated 2025-09-30T18:19:57

2 posts

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment.

Nuclei template

2 repos

https://github.com/0x656565/CVE-2023-48022

https://github.com/jakabakos/ShadowRay-RCE-PoC-CVE-2023-48022

CVE-2025-20363
(9.1 CRITICAL)

EPSS: 0.36%

updated 2025-09-25T18:30:34

1 posts

A vulnerability in the web services of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software, Cisco Secure Firewall Threat Defense (FTD) Software, Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, remote attacker (Cisco ASA and FTD Software) or authenticated, remote attacker (Cisco IOS, IOS XE, and IOS XR Software) with low user privile

CVE-2025-59375
(7.5 HIGH)

EPSS: 0.12%

updated 2025-09-17T15:31:32

1 posts

libexpat in Expat before 2.7.2 allows attackers to trigger large dynamic memory allocations via a small document that is submitted for parsing.

CVE-2025-50165
(9.8 CRITICAL)

EPSS: 2.44%

updated 2025-08-12T18:31:39

1 posts

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

CVE-2025-2492(CVSS UNKNOWN)

EPSS: 0.16%

updated 2025-04-18T15:31:45

1 posts

An improper authentication control vulnerability exists in AiCloud. This vulnerability can be triggered by a crafted request, potentially leading to unauthorized execution of functions. Refer to the 'ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

CVE-2024-52875
(8.8 HIGH)

EPSS: 82.42%

updated 2025-01-31T09:31:57

1 posts

An issue was discovered in GFI Kerio Control 9.2.5 through 9.4.5. The dest GET parameter passed to the /nonauth/addCertException.cs and /nonauth/guestConfirm.cs and /nonauth/expiration.cs pages is not properly sanitized before being used to generate a Location HTTP header in a 302 HTTP response. This can be exploited to perform Open Redirect or HTTP Response Splitting attacks, which in turn lead t

Nuclei template

CVE-2024-2141
(6.4 MEDIUM)

EPSS: 0.14%

updated 2025-01-30T15:20:56.253000

1 posts

The Ultimate Addons for Beaver Builder – Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Button widget in all versions up to, and including, 1.5.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a

23 repos

https://github.com/olebris/CVE-2024-21413

https://github.com/ShubhamKanhere307/CVE-2024-21413

https://github.com/Redfox-Security/Unveiling-Moniker-Link-CVE-2024-21413-Navigating-the-Latest-Cybersecurity-Landscape

https://github.com/xaitax/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/duy-31/CVE-2024-21413

https://github.com/gurleen-147/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability-PoC

https://github.com/X-Projetion/CVE-2024-21413-Microsoft-Outlook-RCE-Exploit

https://github.com/lsr00ter/CVE-2024-21412_Water-Hydra

https://github.com/th3Hellion/CVE-2024-21413

https://github.com/CMNatic/CVE-2024-21413

https://github.com/ArtemCyberLab/Project-NTLM-Hash-Capture-and-Phishing-Email-Exploitation-for-CVE-2024-21413

https://github.com/PolarisXSec/CVE-2024-21413

https://github.com/yass2400012/Email-exploit-Moniker-Link-CVE-2024-21413-

https://github.com/MSeymenD/CVE-2024-21413

https://github.com/MQKGitHub/Moniker-Link-CVE-2024-21413

https://github.com/r00tb1t/CVE-2024-21413-POC

https://github.com/hau2212/Moniker-Link-CVE-2024-21413-

https://github.com/ahmetkarakayaoffical/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability

https://github.com/dshabani96/CVE-2024-21413

https://github.com/ThemeHackers/CVE-2024-21413

https://github.com/Cyber-Trambon/CVE-2024-21413-exploit

https://github.com/D1se0/CVE-2024-21413-Vulnerabilidad-Outlook-LAB

CVE-2024-12912
(7.2 HIGH)

EPSS: 0.38%

updated 2025-01-02T09:15:17.470000

1 posts

An improper input insertion vulnerability in AiCloud on certain router models may lead to arbitrary command execution. Refer to the '01/02/2025 ASUS Router AiCloud vulnerability' section on the ASUS Security Advisory for more information.

CVE-2023-41345
(8.8 HIGH)

EPSS: 0.77%

updated 2024-11-21T08:21:07.047000

1 posts

ASUS RT-AX55’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-generated module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system, or terminate services.

CVE-2024-3871
(7.2 HIGH)

EPSS: 2.87%

updated 2024-04-27T05:02:25

1 posts

The Delta Electronics DVW-W02W2-E2 devices expose a web administration interface to users. This interface implements two features (access control lists management, WPS pin setup) that are affected by command injections and stack overflows vulnerabilities. Successful exploitation of these flaws would allow remote authenticated attackers to gain remote command execution with elevated privileges on t

CVE-2023-41348
(8.8 HIGH)

EPSS: 0.65%

updated 2023-11-12T05:05:03

1 posts

ASUS RT-AC86U’s authentication-related function has a vulnerability of insufficient filtering of special characters within its code-authentication module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

CVE-2023-41346
(8.8 HIGH)

EPSS: 0.65%

updated 2023-11-12T05:04:02

1 posts

ASUS RT-AC86U’s authentication-related function has a vulnerability of insufficient filtering of special characters within its token-refresh module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

CVE-2023-41347
(8.8 HIGH)

EPSS: 0.65%

updated 2023-11-12T05:04:02

1 posts

ASUS RT-AC86U’s authentication-related function has a vulnerability of insufficient filtering of special characters within its check token module. An authenticated remote attacker can exploit this vulnerability to perform a Command Injection attack to execute arbitrary commands, disrupt the system or terminate services.

CVE-2025-64656
(0 None)

EPSS: 0.00%

1 posts

N/A

CVE-2025-64657
(0 None)

EPSS: 0.00%

1 posts

N/A

CVE-2025-64428
(0 None)

EPSS: 0.04%

2 posts

N/A

CVE-2025-64185
(0 None)

EPSS: 0.04%

1 posts

N/A

CVE-2025-62724
(0 None)

EPSS: 0.03%

1 posts

N/A

CVE-2025-65094
(0 None)

EPSS: 0.04%

2 posts

N/A

CVE-2025-64759
(0 None)

EPSS: 0.05%

2 posts

N/A

CVE-2025-65095
(0 None)

EPSS: 0.05%

2 posts

N/A

CVE-2025-65034
(0 None)

EPSS: 0.04%

2 posts

N/A

CVE-2025-65029
(0 None)

EPSS: 0.04%

1 posts

N/A

CVE-2025-65100
(0 None)

EPSS: 0.05%

1 posts

N/A

CVE-2025-65024
(0 None)

EPSS: 0.03%

1 posts

N/A

CVE-2025-65023
(0 None)

EPSS: 0.03%

1 posts

N/A

CVE-2025-11002
(0 None)

EPSS: 0.00%

1 posts

N/A

1 repos

https://github.com/pacbypass/CVE-2025-11001

CVE-2025-13402
(0 None)

EPSS: 0.00%

1 posts

N/A