CVE-2025-49091
(8.2 HIGH)

EPSS: 0.00%

updated 2025-06-11T01:15:20.547000

4 posts

KDE Konsole before 25.04.2 allows remote code execution in a certain scenario. It supports loading URLs from the scheme handlers such as a ssh:// or telnet:// or rlogin:// URL. This can be executed regardless of whether the ssh, telnet, or rlogin binary is available. In this mode, there is a code path where if that binary is not available, Konsole falls back to using /bin/bash for the given argume

CVE-2025-33053
(8.8 HIGH)

EPSS: 0.00%

updated 2025-06-11T01:00:01.443000

11 posts

External control of file name or path in WebDAV allows an unauthorized attacker to execute code over a network.

CVE-2025-24016
(9.9 CRITICAL)

EPSS: 78.54%

updated 2025-06-11T01:00:01.443000

9 posts

Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages

Nuclei template

7 repos

https://github.com/celsius026/poc_CVE-2025-24016

https://github.com/0xjessie21/CVE-2025-24016

https://github.com/cybersecplayground/CVE-2025-24016-Wazuh-Remote-Code-Execution-RCE-PoC

https://github.com/huseyinstif/CVE-2025-24016-Nuclei-Template

https://github.com/rxerium/CVE-2025-24016

https://github.com/MuhammadWaseem29/CVE-2025-24016

https://github.com/B1ack4sh/Blackash-CVE-2025-24016

CVE-2025-2884(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-06-10T21:31:22

3 posts

TCG TPM2.0 Reference implementation's CryptHmacSign helper function is vulnerable to Out-of-Bounds read due to the lack of validation the signature scheme with the signature key's algorithm. See Errata 1.83 of TCG standard TPM2.0

CVE-2025-3052
(8.2 HIGH)

EPSS: 0.00%

updated 2025-06-10T21:15:22.450000

7 posts

An arbitrary write vulnerability in Microsoft signed UEFI firmware allows for code execution of untrusted software. This allows an attacker to control its value, leading to arbitrary memory writes, including modification of critical firmware settings stored in NVRAM. Exploiting this vulnerability could enable security bypasses, persistence mechanisms, or full system compromise.

CVE-2025-27817
(7.5 HIGH)

EPSS: 0.02%

updated 2025-06-10T20:41:37

1 posts

A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and "sasl.oauthbearer.jwks.endpoint.url". Apache Kafka allows clients to read an arbitrary file and return the content in the error log, or sendi

CVE-2025-27819
(8.8 HIGH)

EPSS: 0.02%

updated 2025-06-10T20:21:19

1 posts

In CVE-2023-25194, we announced the RCE/Denial of service attack via SASL JAAS JndiLoginModule configuration in Kafka Connect API. But not only Kafka Connect API is vulnerable to this attack, the Apache Kafka brokers also have this vulnerability. To exploit this vulnerability, the attacker needs to be able to connect to the Kafka cluster and have the AlterConfigs permission on the cluster resource

CVE-2025-37100
(7.7 HIGH)

EPSS: 0.00%

updated 2025-06-10T18:33:27

1 posts

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.

CVE-2025-43699
(5.3 MEDIUM)

EPSS: 0.01%

updated 2025-06-10T18:33:27

1 posts

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for OmniUICard objects.  This impacts OmniStudio: before Spring 2025

CVE-2025-43700
(7.5 HIGH)

EPSS: 0.01%

updated 2025-06-10T18:33:27

1 posts

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of encrypted data.  This impacts OmniStudio: before Spring 2025.

CVE-2025-43701
(7.5 HIGH)

EPSS: 0.01%

updated 2025-06-10T18:33:27

1 posts

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows exposure of Custom Settings data.  This impacts OmniStudio: before version 254.

CVE-2025-33112
(8.4 HIGH)

EPSS: 0.00%

updated 2025-06-10T18:32:36

2 posts

IBM AIX 7.3 and IBM VIOS 4.1.1 Perl implementation could allow a non-privileged local user to exploit a vulnerability to execute arbitrary code due to improper neutralization of pathname input.

CVE-2023-20599
(7.9 HIGH)

EPSS: 0.00%

updated 2025-06-10T18:32:30

2 posts

Improper register access control in ASP may allow a privileged attacker to perform unauthorized access to ASP’s Crypto Co-Processor (CCP) registers from x86, resulting in potential loss of control of cryptographic key pointer/index, leading to loss of integrity or confidentiality.

CVE-2025-2474
(9.8 CRITICAL)

EPSS: 0.00%

updated 2025-06-10T18:15:30.477000

2 posts

Out-of-bounds write in the PCX image codec in QNX SDP versions 8.0, 7.1 and 7.0 could allow an unauthenticated attacker to cause a denial-of-service condition or execute code in the context of the process using the image codec.

CVE-2025-0052
(0 None)

EPSS: 0.00%

updated 2025-06-10T18:15:30.180000

2 posts

Improper input validation performed during the authentication process of FlashBlade could lead to a system Denial of Service.

CVE-2025-0051
(0 None)

EPSS: 0.00%

updated 2025-06-10T18:15:30.030000

2 posts

Improper input validation performed during the authentication process of FlashArray could lead to a system Denial of Service.

CVE-2025-27818
(8.8 HIGH)

EPSS: 0.02%

updated 2025-06-10T16:15:36.917000

1 posts

A possible security vulnerability has been identified in Apache Kafka. This requires access to a alterConfig to the cluster resource, or Kafka Connect worker, and the ability to create/modify connectors on it with an arbitrary Kafka client SASL JAAS config and a SASL-based security protocol, which has been possible on Kafka clusters since Apache Kafka 2.0.0 (Kafka Connect 2.3.0). When configuring

CVE-2025-27531
(9.8 CRITICAL)

EPSS: 0.02%

updated 2025-06-10T16:15:36.583000

1 posts

Deserialization of Untrusted Data vulnerability in Apache InLong.  This issue affects Apache InLong: from 1.13.0 before 2.1.0, this issue would allow an authenticated attacker to read arbitrary files by double writing the param. Users are recommended to upgrade to version 2.1.0, which fixes the issue.

CVE-2025-47827
(8.4 HIGH)

EPSS: 0.02%

updated 2025-06-10T15:31:45

1 posts

In IGEL OS before 11, Secure Boot can be bypassed because the igel-flash-driver module improperly verifies a cryptographic signature. Ultimately, a crafted root filesystem can be mounted from an unverified SquashFS image.

1 repos

https://github.com/Zedeldi/CVE-2025-47827

CVE-2025-26395
(7.0 None)

EPSS: 0.00%

updated 2025-06-10T15:30:53

1 posts

SolarWinds Observability Self-Hosted was susceptible to a cross-site scripting (XSS) vulnerability due to an unsanitized field in the URL. The attack requires authentication using an administrator-level account and user interaction is required.

CVE-2025-5335
(7.8 HIGH)

EPSS: 0.00%

updated 2025-06-10T15:30:53

1 posts

A maliciously crafted binary file when downloaded could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to an untrusted search path being utilized in the Autodesk Installer application. Exploitation of this vulnerability may lead to code execution.

CVE-2025-5353
(8.8 HIGH)

EPSS: 0.00%

updated 2025-06-10T15:30:53

2 posts

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt stored SQL credentials.

CVE-2025-22455
(8.8 HIGH)

EPSS: 0.00%

updated 2025-06-10T15:30:53

2 posts

A hardcoded key in Ivanti Workspace Control before version 10.19.0.0 allows a local authenticated attacker to decrypt stored SQL credentials.

CVE-2025-22463
(7.3 HIGH)

EPSS: 0.00%

updated 2025-06-10T15:30:53

2 posts

A hardcoded key in Ivanti Workspace Control before version 10.19.10.0 allows a local authenticated attacker to decrypt the stored environment password.

CVE-2025-5606
(6.3 MEDIUM)

EPSS: 2.89%

updated 2025-06-10T15:30:41

1 posts

A vulnerability was found in Tenda AC18 15.03.05.05. It has been declared as critical. This vulnerability affects the function formSetIptv of the file /goform/SetIPTVCfg. The manipulation of the argument list leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5600
(9.8 CRITICAL)

EPSS: 0.10%

updated 2025-06-10T15:30:40

1 posts

A vulnerability, which was classified as critical, has been found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. This issue affects the function setLanguageCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument LangType leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-26394
(4.8 MEDIUM)

EPSS: 0.00%

updated 2025-06-10T15:15:23.543000

1 posts

SolarWinds Observability Self-Hosted is susceptible to an open redirection vulnerability. The URL is not properly sanitized, and an attacker could manipulate the string to redirect a user to a malicious site. The attack complexity is high, and authentication is required.

CVE-2025-5604
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-10T15:08:53.860000

1 posts

A vulnerability was found in Campcodes Hospital Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /user-login.php. The manipulation of the argument Username leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5654
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-10T15:04:45.870000

1 posts

A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5685
(8.8 HIGH)

EPSS: 0.05%

updated 2025-06-10T15:01:39.320000

1 posts

A vulnerability, which was classified as critical, was found in Tenda CH22 1.0.0.1. This affects the function formNatlimit of the file /goform/Natlimit. The manipulation of the argument page leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-43698
(0 None)

EPSS: 0.01%

updated 2025-06-10T12:15:24.227000

1 posts

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards) allows bypass of field level security controls for Salesforce objects. This impacts OmniStudio: before Spring 2025

CVE-2025-43697
(0 None)

EPSS: 0.01%

updated 2025-06-10T12:15:24.097000

1 posts

Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper) allows exposure of encrypted data. This impacts OmniStudio: before Spring 2025

CVE-2025-1041
(10.0 CRITICAL)

EPSS: 0.06%

updated 2025-06-10T06:31:44

1 posts

An improper input validation discovered in Avaya Call Management System could allow an unauthorized remote command via a specially crafted web request. Affected versions include 18.x, 19.x prior to 19.2.0.7, and 20.x prior to 20.0.1.0.

CVE-2025-42989
(9.6 CRITICAL)

EPSS: 0.04%

updated 2025-06-10T01:15:22.183000

2 posts

RFC inbound processing�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges. On successful exploitation the attacker could critically impact both integrity and availability of the application.

CVE-2024-42009
(9.3 CRITICAL)

EPSS: 68.50%

updated 2025-06-10T01:00:02.087000

2 posts

A Cross-Site Scripting vulnerability in Roundcube through 1.5.7 and 1.6.x through 1.6.7 allows a remote attacker to steal and send emails of a victim via a crafted e-mail message that abuses a Desanitization issue in message_body() in program/actions/mail/show.php.

4 repos

https://github.com/DaniTheHack3r/CVE-2024-42009-PoC

https://github.com/Foxer131/CVE-2024-42008-9-exploit

https://github.com/Bhanunamikaze/CVE-2024-42009

https://github.com/0xbassiouny1337/CVE-2024-42009

CVE-2025-3461
(9.1 CRITICAL)

EPSS: 0.05%

updated 2025-06-09T19:15:24.923000

1 posts

The Quantenna Wi-Fi chips ship with an unauthenticated telnet interface by default. This is an instance of CWE-306, "Missing Authentication for Critical Function," and is estimated as a CVSS 9.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, and appears to be unpatched at the time of this CVE record's first pub

CVE-2025-3460
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-09T19:15:24.810000

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, set_tx_pow, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N). This issue affects Quantenna Wi-Fi chipset through version 8.0.0.28 of the latest SDK, a

CVE-2025-5794
(8.8 HIGH)

EPSS: 0.09%

updated 2025-06-09T19:08:21.053000

1 posts

A vulnerability, which was classified as critical, has been found in Tenda AC5 15.03.06.47. Affected by this issue is the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5798
(8.8 HIGH)

EPSS: 0.09%

updated 2025-06-09T19:08:05.903000

1 posts

A vulnerability was found in Tenda AC8 16.03.34.09. It has been classified as critical. Affected is the function fromSetSysTime of the file /goform/SetSysTimeCfg. The manipulation of the argument timeType leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-3357
(9.8 CRITICAL)

EPSS: 0.40%

updated 2025-06-09T18:56:33.710000

1 posts

IBM Tivoli Monitoring 6.3.0.7 through 6.3.0.7 Service Pack 19 could allow a remote attacker to execute arbitrary code due to improper validation of an index value of a dynamically allocated array.

CVE-2025-31022
(9.8 CRITICAL)

EPSS: 0.06%

updated 2025-06-09T18:32:16

2 posts

Authentication Bypass Using an Alternate Path or Channel vulnerability in PayU India PayU India allows Authentication Abuse. This issue affects PayU India: from n/a through 3.8.5.

CVE-2025-5799
(8.8 HIGH)

EPSS: 0.09%

updated 2025-06-09T15:32:48

1 posts

A vulnerability was found in Tenda AC8 16.03.34.09. It has been declared as critical. Affected by this vulnerability is the function fromSetWirelessRepeat of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5399
(7.5 HIGH)

EPSS: 0.04%

updated 2025-06-09T15:32:48

1 posts

Due to a mistake in libcurl's WebSocket code, a malicious server can send a particularly crafted packet which makes libcurl get trapped in an endless busy-loop. There is no other way for the application to escape or exit this loop other than killing the thread/process. This might be used to DoS libcurl-using application.

CVE-2025-5795
(8.8 HIGH)

EPSS: 0.09%

updated 2025-06-09T15:31:42

1 posts

A vulnerability, which was classified as critical, was found in Tenda AC5 1.0/15.03.06.47. This affects the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5592
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-09T15:31:37

1 posts

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Affected by this issue is some unknown functionality of the component PASSIVE Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5715
(3.8 LOW)

EPSS: 0.02%

updated 2025-06-09T14:15:24.393000

1 posts

A vulnerability was found in Signal App 7.41.4 on Android. It has been declared as problematic. This vulnerability affects unknown code of the component Biometric Authentication Handler. The manipulation leads to missing critical step in authentication. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult.

CVE-2025-3835
(9.7 CRITICAL)

EPSS: 0.15%

updated 2025-06-09T12:31:18

3 posts

Zohocorp ManageEngine Exchange Reporter Plus versions 5721 and prior are vulnerable to Remote code execution in the Content Search module.

CVE-2025-36528
(8.3 HIGH)

EPSS: 0.03%

updated 2025-06-09T12:31:18

1 posts

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in Service Account Auditing reports.

CVE-2025-27709
(8.3 HIGH)

EPSS: 0.03%

updated 2025-06-09T12:31:12

1 posts

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the Service Account Auditing reports.

CVE-2025-41444
(8.3 HIGH)

EPSS: 0.03%

updated 2025-06-09T12:15:47.880000

1 posts

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the alerts module.

CVE-2025-35005
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-09T12:15:47.880000

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFMAC command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This is

CVE-2025-35008
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-09T12:15:47.880000

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MMNAME command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This i

CVE-2025-49113
(10.0 CRITICAL)

EPSS: 0.54%

updated 2025-06-09T06:30:22

9 posts

Roundcube Webmail before 1.5.10 and 1.6.x before 1.6.11 allows remote code execution by authenticated users because the _from parameter in a URL is not validated in program/actions/settings/upload.php, leading to PHP Object Deserialization.

Nuclei template

7 repos

https://github.com/BiiTts/Roundcube-CVE-2025-49113

https://github.com/rxerium/CVE-2025-49113

https://github.com/Ademking/CVE-2025-49113-nuclei-template

https://github.com/rasool13x/exploit-CVE-2025-49113

https://github.com/hakaioffsec/CVE-2025-49113-exploit

https://github.com/fearsoff-org/CVE-2025-49113

https://github.com/SyFi/CVE-2025-49113

CVE-2025-35007
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-08T21:30:37

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFRULE command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This i

CVE-2025-35009
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-08T21:30:37

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNNETSP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This

CVE-2025-35010
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-08T21:30:37

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MNPINGTM command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This

CVE-2025-35006
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-08T21:30:37

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFPORTFWD command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). Thi

CVE-2025-3459
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:37

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, transmit_file, that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:

CVE-2025-32457
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:37

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_file_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#CVS

CVE-2025-35004
(7.1 HIGH)

EPSS: 0.10%

updated 2025-06-08T21:30:30

1 posts

Products that incorporate the Microhard BulletLTE-NA2 and IPn4Gii-NA2 are vulnerable to a post-authentication command injection issue in the AT+MFIP command that can lead to privilege escalation. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.1 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N). This iss

CVE-2025-32459
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:30

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the sync_time argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV

CVE-2025-32458
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:30

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the get_syslog_from_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#C

CVE-2025-32455
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:29

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the run_cmd argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#CVSS:3.1/AV:L

CVE-2025-32456
(7.7 HIGH)

EPSS: 0.11%

updated 2025-06-08T21:30:29

1 posts

The Quantenna Wi-Fi chipset ships with a local control script, router_command.sh (in the put_file_to_qtn argument), that is vulnerable to command injection. This is an instance of CWE-88, "Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')," and is estimated as a CVSS 7.7 ( CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N) https://www.first.org/cvss/calculator/3-1#CVSS:

CVE-2025-5652
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-06T21:31:29

1 posts

A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5639
(7.3 HIGH)

EPSS: 0.03%

updated 2025-06-06T21:31:29

1 posts

A vulnerability was found in PHPGurukul Notice Board System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /forgot-password.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5619
(8.8 HIGH)

EPSS: 0.12%

updated 2025-06-06T21:31:29

1 posts

A vulnerability, which was classified as critical, has been found in Tenda CH22 1.0.0.1. This issue affects the function formaddUserName of the file /goform/addUserName. The manipulation of the argument Password leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5572
(8.8 HIGH)

EPSS: 0.04%

updated 2025-06-06T21:31:29

1 posts

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been declared as critical. Affected by this vulnerability is the function setSystemEmail of the file /setSystemEmail. The manipulation of the argument EmailSMTPPortNumber leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects

CVE-2025-5616
(6.3 MEDIUM)

EPSS: 0.04%

updated 2025-06-06T20:10:46.310000

1 posts

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin/profile.php. The manipulation of the argument mobilenumber leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as wel

CVE-2025-5573
(6.3 MEDIUM)

EPSS: 0.10%

updated 2025-06-06T18:48:46.463000

1 posts

A vulnerability was found in D-Link DCS-932L 2.18.01. It has been rated as critical. Affected by this issue is the function setSystemWizard/setSystemControl of the file /setSystemWizard. The manipulation of the argument AdminID leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products t

CVE-2025-5624
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-06-06T18:31:34

1 posts

A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been declared as critical. This vulnerability affects the function QoSPortSetup of the file /goform/QoSPortSetup. The manipulation of the argument port0_group/port0_remarker/ssid0_group/ssid0_remarker leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5621
(7.3 HIGH)

EPSS: 0.34%

updated 2025-06-06T18:31:34

1 posts

A vulnerability has been found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this vulnerability is the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affect

CVE-2025-5788
(8.8 HIGH)

EPSS: 0.13%

updated 2025-06-06T18:30:38

1 posts

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formReflashClientTbl of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used

CVE-2025-5623
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-06-06T18:30:30

1 posts

A vulnerability was found in D-Link DIR-816 1.10CNB05. It has been classified as critical. This affects the function qosClassifier of the file /goform/qosClassifier. The manipulation of the argument dip_address/sip_address leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affec

CVE-2025-5622
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-06-06T18:30:29

1 posts

A vulnerability was found in D-Link DIR-816 1.10CNB05 and classified as critical. Affected by this issue is the function wirelessApcli_5g of the file /goform/wirelessApcli_5g. The manipulation of the argument apcli_mode_5g/apcli_enc_5g/apcli_default_key_5g leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This v

CVE-2025-5620
(7.3 HIGH)

EPSS: 0.34%

updated 2025-06-06T18:30:29

1 posts

A vulnerability, which was classified as critical, was found in D-Link DIR-816 1.10CNB05. Affected is the function setipsec_config of the file /goform/setipsec_config. The manipulation of the argument localIP/remoteIP leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products th

CVE-2025-41646
(9.8 CRITICAL)

EPSS: 0.35%

updated 2025-06-06T15:31:04

1 posts

An unauthorized remote attacker can bypass the authentication of the affected software package by misusing an incorrect type conversion. This leads to full compromise of the device

CVE-2025-49425
(7.1 HIGH)

EPSS: 0.01%

updated 2025-06-06T15:31:00

1 posts

Cross-Site Request Forgery (CSRF) vulnerability in Adrian Hanft Konami Easter Egg allows Stored XSS. This issue affects Konami Easter Egg: from n/a through v0.4.

CVE-2025-47966
(9.8 CRITICAL)

EPSS: 0.12%

updated 2025-06-06T14:07:28.330000

3 posts

Exposure of sensitive information to an unauthorized actor in Power Automate allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-5737
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T14:07:28.330000

1 posts

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formDosCfg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5738
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T14:07:28.330000

1 posts

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been rated as critical. Affected by this issue is some unknown functionality of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-3321
(0 None)

EPSS: 0.01%

updated 2025-06-06T14:07:28.330000

1 posts

A predefined administrative account is not documented and cannot be deactivated. This account cannot be misused from the network, only by local users on the server.

CVE-2025-5734
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T09:30:33

1 posts

A vulnerability has been found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This vulnerability affects unknown code of the file /boafrm/formWlanRedirect of the component HTTP POST Request Handler. The manipulation of the argument redirect-url leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-3365
(9.8 CRITICAL)

EPSS: 0.05%

updated 2025-06-06T09:30:33

1 posts

A missing protection against path traversal allows to access any file on the server.

CVE-2025-5736
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T09:30:32

1 posts

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105. It has been classified as critical. Affected is an unknown function of the file /boafrm/formNtp of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5739
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T09:30:32

1 posts

A vulnerability classified as critical has been found in TOTOLINK X15 1.0.0-B20230714.1105. This affects an unknown part of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5735
(8.8 HIGH)

EPSS: 0.08%

updated 2025-06-06T09:30:26

1 posts

A vulnerability was found in TOTOLINK X15 1.0.0-B20230714.1105 and classified as critical. This issue affects some unknown processing of the file /boafrm/formSetLg of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-3322(CVSS UNKNOWN)

EPSS: 0.45%

updated 2025-06-06T09:30:26

1 posts

An improper neutralization of inputs used in expression language allows remote code execution with the highest privileges on the server.

CVE-2011-10007
(8.8 HIGH)

EPSS: 0.05%

updated 2025-06-06T04:15:41.237000

1 posts

File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter to `open()`, turning the filename into a command to be executed. Example: $ mkdir /tmp/poc; echo > "/tmp/poc/|id" $ perl -MFile::Find::Rule

CVE-2025-5702
(5.6 MEDIUM)

EPSS: 0.04%

updated 2025-06-05T21:15:22.873000

1 posts

The strcmp implementation optimized for the Power10 processor in the GNU C Library version 2.39 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the functi

CVE-2025-1793
(9.8 CRITICAL)

EPSS: 0.04%

updated 2025-06-05T20:12:23.777000

2 posts

Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.

CVE-2025-49007
(0 None)

EPSS: 0.06%

updated 2025-06-05T20:12:23.777000

1 posts

Rack is a modular Ruby web server interface. Starting in version 3.1.0 and prior to version 3.1.16, there is a denial of service vulnerability in the Content-Disposition parsing component of Rack. This is very similar to the previous security issue CVE-2022-44571. Carefully crafted input can cause Content-Disposition header parsing in Rack to take an unexpected amount of time, possibly resulting i

CVE-2025-27445
(0 None)

EPSS: 0.08%

updated 2025-06-05T20:12:23.777000

1 posts

A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary files outside the Joomla root directory. The flaw is caused by insufficient sanitization of user-supplied input in file path parameters, allowing attackers to exploit directory traversal sequences (e.g., ../) to access sensitive files

CVE-2025-5642
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T20:12:23.777000

1 posts

A vulnerability classified as problematic has been found in Radare2 5.9.9. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and m

CVE-2025-3054
(8.8 HIGH)

EPSS: 0.24%

updated 2025-06-05T20:12:23.777000

1 posts

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the upload_files() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible. Please

1 repos

https://github.com/frogchung/CVE-2025-3054-Exploit

CVE-2025-5640
(3.3 LOW)

EPSS: 0.01%

updated 2025-06-05T20:12:23.777000

1 posts

A vulnerability was found in PX4-Autopilot 1.12.3. It has been classified as problematic. This affects the function MavlinkReceiver::handle_message_trajectory_representation_waypoints of the file mavlink_receiver.cpp of the component TRAJECTORY_REPRESENTATION_WAYPOINTS Message Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The expl

CVE-2025-5608
(8.8 HIGH)

EPSS: 0.05%

updated 2025-06-05T20:12:23.777000

1 posts

A vulnerability classified as critical has been found in Tenda AC18 15.03.05.05. Affected is the function formsetreboottimer of the file /goform/SetSysAutoRebbotCfg. The manipulation of the argument rebootTime leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-22245
(5.9 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T20:12:23.777000

1 posts

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the router port due to improper input validation.

CVE-2025-5607
(8.8 HIGH)

EPSS: 0.05%

updated 2025-06-05T20:12:23.777000

1 posts

A vulnerability was found in Tenda AC18 15.03.05.05. It has been rated as critical. This issue affects the function formSetPPTPUserList of the file /goform/setPptpUserList. The manipulation of the argument list leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-27753(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-06-05T15:31:39

1 posts

A SQLi vulnerability in RSMediaGallery component 1.7.4 - 2.1.6 for Joomla was discovered. The vulnerability is due to the use of unescaped user-supplied parameters in SQL queries within the dashboard component. This allows an authenticated attacker to inject malicious SQL code through unsanitized input fields, which are used directly in SQL queries. Exploiting this flaw can lead to unauthorized da

CVE-2025-30084(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-06-05T15:31:38

1 posts

A stored XSS vulnerability in RSMail! component 1.19.20 - 1.22.26 for Joomla was discovered. The issue occurs within the dashboard component, where user-supplied input is not properly sanitized before being stored and rendered. An attacker can inject malicious JavaScript code into text fields or other input points, which is subsequently executed in the browser of any user who clicks on the crafte

CVE-2025-27754
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-06-05T15:31:38

1 posts

A stored XSS vulnerability in RSBlog! component 1.11.6 - 1.14.4 for Joomla was discovered. The vulnerability allows authenticated users to inject malicious JavaScript into the plugin's resource. The injected payload is stored by the application and later executed when other users view the affected content.

CVE-2025-5658
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T15:31:38

1 posts

A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatecomplaint.php. The manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-49002
(9.8 CRITICAL)

EPSS: 0.05%

updated 2025-06-05T14:07:36.847000

1 posts

DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds are available.

CVE-2025-5701
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-06-05T12:31:20

1 posts

The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for r

2 repos

https://github.com/Nxploited/CVE-2025-5701

https://github.com/Harley21211/CVE-2025-5701-Exploit

CVE-2025-5653
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T12:31:15

1 posts

A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5648
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability was found in Radare2 5.9.9. It has been classified as problematic. Affected is the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been discl

CVE-2025-5647
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability was found in Radare2 5.9.9 and classified as problematic. This issue affects the function r_cons_context_break_pop in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has

CVE-2025-5646
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability has been found in Radare2 5.9.9 and classified as problematic. This vulnerability affects the function r_cons_rainbow_free in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation appears to be difficult

CVE-2025-5641
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability was found in Radare2 5.9.9. It has been rated as problematic. This issue affects the function r_cons_is_breaked in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. It is possible to launch the attack on the local host. The complexity of an attack is rather high. The exploitation is known to be difficult. The exp

CVE-2025-5643
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability classified as problematic was found in Radare2 5.9.9. Affected by this vulnerability is the function cons_stack_load in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has be

CVE-2025-5644
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability, which was classified as problematic, has been found in Radare2 5.9.9. Affected by this issue is the function r_cons_flush in the library /libr/cons/cons.c of the component radiff2. The manipulation of the argument -T leads to use after free. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation is known to be difficult. The

CVE-2025-5645
(2.5 LOW)

EPSS: 0.01%

updated 2025-06-05T09:30:33

1 posts

A vulnerability, which was classified as problematic, was found in Radare2 5.9.9. This affects the function r_cons_pal_init in the library /libr/cons/pal.c of the component radiff2. The manipulation of the argument -T leads to memory corruption. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed

CVE-2025-4598
(4.7 MEDIUM)

EPSS: 0.01%

updated 2025-06-05T09:30:24

1 posts

A vulnerability was found in systemd-coredump. This flaw allows an attacker to force a SUID process to crash and replace it with a non-SUID binary to access the original's privileged process coredump, allowing the attacker to read sensitive data, such as /etc/shadow content, loaded by the original process. A SUID binary or process has a special type of permission, which allows the process to run

CVE-2025-3055
(8.1 HIGH)

EPSS: 0.53%

updated 2025-06-05T06:30:33

1 posts

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_avatar_ajax() function in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the r

CVE-2025-5614
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T00:31:24

1 posts

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5615
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T00:31:24

1 posts

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /details.php. The manipulation of the argument requestid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5690
(6.5 MEDIUM)

EPSS: 0.03%

updated 2025-06-05T00:31:20

1 posts

PostgreSQL Anonymizer v2.0 and v2.1 contain a vulnerability that allows a masked user to bypass the masking rules defined on a table and read the original data using a database cursor or the --insert option of pg_dump. This problem occurs only when dynamic masking is enabled, which is not the default setting. The problem is resolved in version 2.2.1

CVE-2025-48935(CVSS UNKNOWN)

EPSS: 0.05%

updated 2025-06-04T22:57:14

1 posts

## Summary It is possible to bypass Deno's read/write permission checks by using `ATTACH DATABASE` statement. ## PoC ```js // poc.js import { DatabaseSync } from "node:sqlite" const db = new DatabaseSync(":memory:"); db.exec("ATTACH DATABASE 'test.db' as test;"); db.exec("CREATE TABLE test.test (id INTEGER PRIMARY KEY, name TEXT);"); ``` ``` $ deno poc.js ```

CVE-2025-48934(CVSS UNKNOWN)

EPSS: 0.07%

updated 2025-06-04T22:57:04

1 posts

### Summary The [Deno.env.toObject](https://docs.deno.com/api/deno/~/Deno.Env.toObject) method ignores any variables listed in the `--deny-env` option of the `deno run` command. When looking at the [documentation](https://docs.deno.com/runtime/fundamentals/security/#environment-variables) of the `--deny-env` option this might lead to a false impression that variables listed in the option are impos

CVE-2025-48888(CVSS UNKNOWN)

EPSS: 0.05%

updated 2025-06-04T22:56:55

1 posts

### Summary `deno run --allow-read --deny-read main.ts` results in allowed, even though 'deny' should be stronger. Same with all global unary permissions given as `--allow-* --deny-*`. ### Details Caused by the fast exit logic in #22894. ### PoC Run the above command expecting no permissions to be passed. ### Impact This only affects a nonsensical combination of flags, so there shouldn't be

CVE-2025-5610
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-04T21:31:23

1 posts

A vulnerability, which was classified as critical, has been found in CodeAstro Real Estate Management System 1.0. Affected by this issue is some unknown functionality of the file /submitpropertydelete.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5609
(8.8 HIGH)

EPSS: 0.05%

updated 2025-06-04T21:31:22

1 posts

A vulnerability classified as critical was found in Tenda AC18 15.03.05.05. Affected by this vulnerability is the function fromadvsetlanip of the file /goform/AdvSetLanip. The manipulation of the argument lanMask leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-22244
(6.9 MEDIUM)

EPSS: 0.04%

updated 2025-06-04T21:31:22

1 posts

VMware NSX contains a stored Cross-Site Scripting (XSS) vulnerability in the gateway firewall due to improper input validation.

CVE-2025-22243
(7.5 HIGH)

EPSS: 0.03%

updated 2025-06-04T21:31:15

1 posts

VMware NSX Manager UI is vulnerable to a stored Cross-Site Scripting (XSS) attack due to improper input validation.

CVE-2025-5583
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-04T18:32:00

1 posts

A vulnerability classified as critical has been found in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /register.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5596
(7.3 HIGH)

EPSS: 0.05%

updated 2025-06-04T18:31:05

1 posts

A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component REGET Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-20286
(9.9 CRITICAL)

EPSS: 0.13%

updated 2025-06-04T18:30:58

4 posts

A vulnerability in Amazon Web Services (AWS), Microsoft Azure, and Oracle Cloud Infrastructure (OCI) cloud deployments of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configurations, or disrupt services within the impacted systems. This vulnerability exists because credentia

1 repos

https://github.com/noeneal/CVE-2025-20286

CVE-2025-5578
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-04T18:30:57

1 posts

A vulnerability has been found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /sales-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5579
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-04T18:30:57

1 posts

A vulnerability was found in PHPGurukul Dairy Farm Shop Management System 1.3 and classified as critical. Affected by this issue is some unknown functionality of the file /search-product.php. The manipulation of the argument productname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-5577
(7.3 HIGH)

EPSS: 0.04%

updated 2025-06-04T18:28:13.103000

1 posts

A vulnerability, which was classified as critical, was found in PHPGurukul Dairy Farm Shop Management System 1.3. Affected is an unknown function of the file /profile.php. The manipulation of the argument mobilenumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-27038
(7.5 HIGH)

EPSS: 3.72%

updated 2025-06-04T17:23:58.387000

1 posts

Memory corruption while rendering graphics using Adreno GPU drivers in Chrome.

CVE-2025-20188
(10.0 CRITICAL)

EPSS: 4.36%

updated 2025-06-04T15:31:32

1 posts

A vulnerability in the Out-of-Band Access Point (AP) Image Download feature of Cisco IOS XE Software for Wireless LAN Controllers (WLCs) could allow an unauthenticated, remote attacker to upload arbitrary files to an affected system. This vulnerability is due to the presence of a hard-coded JSON Web Token (JWT) on an affected system. An attacker could exploit this vulnerability by sending crafte

Nuclei template

CVE-2025-48960
(5.9 MEDIUM)

EPSS: 0.00%

updated 2025-06-04T15:30:46

1 posts

Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938.

CVE-2025-1701(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-06-04T15:30:46

1 posts

CVE-2025-1701 is a high-severity vulnerability in the MIM Admin service. An attacker could exploit this vulnerability by sending a specially crafted request over the RMI interface to execute arbitrary code with the privileges of the MIM Admin service. The RMI interface is only accessible locally (listening on 127.0.0.1), limiting the attack vector to the local machine. This means that in a proper

CVE-2025-48962
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-06-04T15:30:41

1 posts

Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938.

CVE-2024-36486
(7.8 HIGH)

EPSS: 0.02%

updated 2025-06-04T14:54:33.783000

1 posts

A privilege escalation vulnerability exists in the virtual machine archive restoration functionality of Parallels Desktop for Mac version 20.1.1 (55740). When an archived virtual machine is restored, the prl_vmarchiver tool decompresses the file and writes the content back to its original location using root privileges. An attacker can exploit this process by using a hard link to write to an arbit

CVE-2024-52561
(7.8 HIGH)

EPSS: 0.01%

updated 2025-06-04T14:54:33.783000

1 posts

A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is deleted, a root service verifies and modifies the ownership of the snapshot files. By using a symlink, an attacker can change the ownership of files owned by root to a lower-privilege user, potentially leading to privilege esca

CVE-2025-30415
(7.5 HIGH)

EPSS: 0.08%

updated 2025-06-04T14:54:33.783000

1 posts

Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077.