CVE-2025-37164
(10.0 CRITICAL)

EPSS: 74.82%

updated 2025-12-23T12:30:17

3 posts

A remote code execution issue exists in HPE OneView.

Nuclei template

2 repos

https://github.com/rxerium/CVE-2025-37164

https://github.com/g0vguy/CVE-2025-37164-PoC

CVE-2023-52163
(8.8 HIGH)

EPSS: 0.15%

updated 2025-12-23T12:15:44.160000

5 posts

Digiever DS-2105 Pro 3.1.0.71-11 devices allow time_tzsetup.cgi Command Injection. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-14733
(9.8 CRITICAL)

EPSS: 31.40%

updated 2025-12-23T11:34:46.317000

8 posts

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and

2 repos

https://github.com/Ashwesker/Blackash-CVE-2025-14733

https://github.com/b1gchoi/CVE-2025-14733

CVE-2025-14388
(9.8 CRITICAL)

EPSS: 0.00%

updated 2025-12-23T10:15:43.673000

1 posts

The PhastPress plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read via null byte injection in all versions up to, and including, 3.7. This is due to a discrepancy between the extension validation in `getExtensionForURL()` which operates on URL-decoded paths, and `appendNormalized()` which strips everything after a null byte before constructing the filesystem path. This makes

CVE-2025-65857
(7.5 HIGH)

EPSS: 0.00%

updated 2025-12-23T00:30:39

2 posts

An issue was discovered in Xiongmai XM530 IP cameras on firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06. The GetStreamUri exposes RTSP URIs containing hardcoded credentials enabling direct unauthorized video stream access.

1 repos

https://github.com/LuisMirandaAcebedo/CVE-2025-65857

CVE-2023-53974
(7.5 HIGH)

EPSS: 0.00%

updated 2025-12-23T00:30:38

2 posts

D-Link DSL-124 ME_1.00 contains a configuration file disclosure vulnerability that allows unauthenticated attackers to retrieve router settings through a POST request. Attackers can send a specific POST request to the router's configuration endpoint to download a complete backup file containing sensitive network credentials and system configurations.

CVE-2025-65856
(9.8 CRITICAL)

EPSS: 0.00%

updated 2025-12-22T22:16:08.360000

1 posts

Authentication bypass vulnerability in Xiongmai XM530 IP cameras on Firmware V5.00.R02.000807D8.10010.346624.S.ONVIF 21.06 allows unauthenticated remote attackers to access sensitive device information and live video streams. The ONVIF implementation fails to enforce authentication on 31 critical endpoints, enabling direct unauthorized video stream access.

1 repos

https://github.com/LuisMirandaAcebedo/CVE-2025-65856

CVE-2025-68475
(7.5 HIGH)

EPSS: 0.00%

updated 2025-12-22T21:36:56

2 posts

Hi Fedify team! 👋 Thank you for your work on Fedify—it's a fantastic library for building federated applications. While reviewing the codebase, I discovered a Regular Expression Denial of Service (ReDoS) vulnerability that I'd like to report. I hope this helps improve the project's security. --- ## Summary A Regular Expression Denial of Service (ReDoS) vulnerability exists in Fedify's document

CVE-2025-67289
(9.6 CRITICAL)

EPSS: 0.00%

updated 2025-12-22T21:15:45.020000

1 posts

An arbitrary file upload vulnerability in the Attachments module of Frappe Framework v15.89.0 allows attackers to execute arbitrary code via uploading a crafted XML file.

CVE-2025-67418
(9.8 CRITICAL)

EPSS: 0.00%

updated 2025-12-22T20:15:45.303000

1 posts

ClipBucket 5.5.2 is affected by an improper access control issue where the product is shipped or deployed with hardcoded default administrative credentials. An unauthenticated remote attacker can log in to the administrative panel using these default credentials, resulting in full administrative control of the application.

CVE-2025-67288
(10.0 CRITICAL)

EPSS: 0.00%

updated 2025-12-22T19:15:49.710000

1 posts

An arbitrary file upload vulnerability in Umbraco CMS v16.3.3 allows attackers to execute arbitrary code via uploading a crafted PDF file.

CVE-2025-68613
(10.0 CRITICAL)

EPSS: 0.22%

updated 2025-12-22T16:19:13

1 posts

### Impact n8n contains a critical Remote Code Execution (RCE) vulnerability in its workflow expression evaluation system. Under certain conditions, expressions supplied by authenticated users during workflow configuration may be evaluated in an execution context that is not sufficiently isolated from the underlying runtime. An authenticated attacker could abuse this behavior to execute arbitrary

6 repos

https://github.com/rxerium/CVE-2025-68613

https://github.com/wioui/n8n-CVE-2025-68613-exploit

https://github.com/ali-py3/Exploit-CVE-2025-68613

https://github.com/Ashwesker/Blackash-CVE-2025-68613

https://github.com/intbjw/CVE-2025-68613-poc-via-copilot

https://github.com/TheStingR/CVE-2025-68613-POC

CVE-2025-12049
(0 None)

EPSS: 0.07%

updated 2025-12-22T05:16:19.120000

1 posts

Missing Authentication for Critical Function vulnerability in Sharp Display Solutions Media Player MP-01 All Verisons allows a attacker may access to the web interface of the affected product without authentication and change settings or perform other operations, and deliver content from the authoring software to the affected product without authentication.

CVE-2025-14881(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-20T17:39:03

1 posts

Multiple API endpoints allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

CVE-2025-63389(CVSS UNKNOWN)

EPSS: 0.25%

updated 2025-12-20T05:37:50

1 posts

A critical authentication bypass vulnerability exists in Ollama platform's API endpoints in versions prior to and including v0.12.3. The platform exposes multiple API endpoints without requiring authentication, enabling remote attackers to perform unauthorized model management operations.

CVE-2025-14761
(5.3 MEDIUM)

EPSS: 0.02%

updated 2025-12-20T05:31:03

1 posts

## Summary S3 Encryption Client for PHP is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key (EDK) is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders" attack (https://eprint.iacr.org/2019/016), which could allow the EDK to be replaced with a

CVE-2025-68398
(9.1 CRITICAL)

EPSS: 0.11%

updated 2025-12-20T05:26:43

1 posts

### Impact It was possible to overwrite Git configuration remotely and override some of its behavior. ### Resources Thanks to Jason Marcello for responsible disclosure.

CVE-2025-14299(CVSS UNKNOWN)

EPSS: 0.06%

updated 2025-12-20T03:31:40

1 posts

The HTTPS server on Tapo C200 V3 does not properly validate the Content-Length header, which can lead to an integer overflow. An unauthenticated attacker on the same local network segment can send crafted HTTPS requests to trigger excessive memory allocation, causing the device to crash and resulting in denial-of-service (DoS).

CVE-2025-14300(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-20T03:31:40

1 posts

The HTTPS service on Tapo C200 V3 exposes a connectAP interface without proper authentication. An unauthenticated attacker on the same local network segment can exploit this to modify the device’s Wi-Fi configuration, resulting in loss of connectivity and denial-of-service (DoS).

CVE-2025-8065(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-20T03:31:40

1 posts

A buffer overflow vulnerability exists in the ONVIF XML parser of Tapo C200 V3. An unauthenticated attacker on the same local network segment can send specially crafted SOAP XML requests, causing memory overflow and device crash, resulting in denial-of-service (DoS).

CVE-2025-63390
(5.3 MEDIUM)

EPSS: 0.05%

updated 2025-12-20T00:31:32

1 posts

An authentication bypass vulnerability exists in AnythingLLM v1.8.5 in via the /api/workspaces endpoint. The endpoint fails to implement proper authentication checks, allowing unauthenticated remote attackers to enumerate and retrieve detailed information about all configured workspaces. Exposed data includes: workspace identifiers (id, name, slug), AI model configurations (chatProvider, chatModel

CVE-2025-68161(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-12-19T22:08:03

2 posts

The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2.25.2 does not perform TLS hostname verification of the peer certificate, even when the [verifyHostName](https://logging.apache.org/log4j/2.x/manual/appenders/network.html#SslConfiguration-attr-verifyHostName) configuration attribute or the [log4j2.sslVerifyHostName](https://logging.apache.org/log4j/2.x/manual/systemproperties

CVE-2025-34437
(8.8 HIGH)

EPSS: 0.10%

updated 2025-12-19T21:31:26

1 posts

AVideo versions prior to 20.0 permit any authenticated user to upload comment images to videos owned by other users. The endpoint validates authentication but omits ownership checks, allowing attackers to perform unauthorized uploads to arbitrary video objects.

CVE-2025-14964
(9.8 CRITICAL)

EPSS: 0.08%

updated 2025-12-19T21:30:26

1 posts

A vulnerability has been found in TOTOLINK T10 4.1.8cu.5083_B20200521. This affects the function sprintf of the file /cgi-bin/cstecgi.cgi. Such manipulation of the argument loginAuthUrl leads to stack-based buffer overflow. The attack may be performed from remote.

CVE-2025-34436
(8.8 HIGH)

EPSS: 0.10%

updated 2025-12-19T21:30:17

1 posts

AVideo versions prior to 20.0 allow any authenticated user to upload files into directories belonging to other users due to an insecure direct object reference. The upload functionality verifies authentication but does not enforce ownership checks.

CVE-2025-66908
(5.3 MEDIUM)

EPSS: 0.04%

updated 2025-12-19T18:32:25

1 posts

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an improper file type validation vulnerability in the OCR image upload functionality. The OcrController in turms-ai-serving/src/main/java/im/turms/ai/domain/ocr/controller/OcrController.java uses the @FormData(contentType = MediaTypeConst.IMAGE) annotation to restrict uploads to image files, but this constraint is not properly enforced.

CVE-2025-65568
(7.5 HIGH)

EPSS: 0.04%

updated 2025-12-19T18:32:20

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a PFCP Session Establishment Request that includes a CreateFAR with an empty or truncated IPv4 address field is not properly validated. During parsing, parseFAR() calls ip2int(), which performs an out-of-bounds read on the IPv4 address buffer and tr

CVE-2025-65565
(7.5 HIGH)

EPSS: 0.05%

updated 2025-12-19T18:32:19

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association is established, a PFCP Session Establishment Request that is missing the mandatory F-SEID (CPF-SEID) Information Element is not properly validated. The session establishment handler calls IE.FSEID() on a nil pointer, which triggers a panic and termin

CVE-2025-65564
(7.5 HIGH)

EPSS: 0.05%

updated 2025-12-19T18:32:19

1 posts

A denial-of-service vulnerability exists in the omec-upf (upf-epc-pfcpiface) in version upf-epc-pfcpiface:2.1.3-dev. When the UPF receives a PFCP Association Setup Request that is missing the mandatory Recovery Time Stamp Information Element, the association setup handler dereferences a nil pointer via IE.RecoveryTimeStamp() instead of validating the message. This results in a panic and terminates

CVE-2025-52692
(8.8 HIGH)

EPSS: 0.02%

updated 2025-12-19T18:31:18

1 posts

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially crafted URL to access certain administration functions without login credentials.

CVE-2025-65567
(7.5 HIGH)

EPSS: 0.04%

updated 2025-12-19T18:15:50.570000

1 posts

A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specially crafted PFCP Session Establishment Request with a CreatePDR that contains a malformed Flow-Description is not robustly validated. The Flow-Description parser (parseFlowDesc) can read beyond the bounds of the provided buffer, causing a pa

CVE-2025-41697
(6.8 MEDIUM)

EPSS: 0.02%

updated 2025-12-19T18:12:09.187000

1 posts

An attacker can use an undocumented UART port on the PCB as a side-channel to get root access e.g. with the credentials obtained from CVE-2025-41692.

CVE-2025-14878
(9.8 CRITICAL)

EPSS: 0.05%

updated 2025-12-19T18:00:54.283000

2 posts

A security flaw has been discovered in Tenda WH450 1.0.0.18. This impacts an unknown function of the file /goform/wirelessRestart of the component HTTP Request Handler. The manipulation of the argument GO results in stack-based buffer overflow. The attack may be performed from remote. The exploit has been released to the public and may be exploited.

CVE-2025-64469
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-19T18:00:54.283000

1 posts

There is a stack-based buffer overflow vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-64466
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-19T18:00:54.283000

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in lvre!ExecPostedProcRecPost() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-66909
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-19T18:00:18.330000

1 posts

Turms AI-Serving module v0.10.0-SNAPSHOT and earlier contains an image decompression bomb denial of service vulnerability. The ExtendedOpenCVImage class in ai/djl/opencv/ExtendedOpenCVImage.java loads images using OpenCV's imread() function without validating dimensions or pixel count before decompression. An attacker can upload a specially crafted compressed image file (e.g., PNG) that is small w

CVE-2025-14882
(0 None)

EPSS: 0.04%

updated 2025-12-19T18:00:18.330000

1 posts

An API endpoint allowed access to sensitive files from other users by knowing the UUID of the file that were not intended to be accessible by UUID only.

CVE-2025-1885
(5.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Phishing, Forceful Browsing.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-11747
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

The Colibri Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the colibri_blog_posts shortcode in all versions up to, and including, 1.0.345 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that

CVE-2025-66521
(6.3 MEDIUM)

EPSS: 0.02%

updated 2025-12-19T18:00:18.330000

1 posts

A stored cross-site scripting (XSS) vulnerability exists in pdfonline.foxit.com within the Trusted Certificates feature. A crafted payload can be injected as the certificate name, which is later rendered into the DOM without proper sanitization. As a result, the injected script executes each time the Trusted Certificates view is loaded.

CVE-2025-67843
(8.3 HIGH)

EPSS: 0.23%

updated 2025-12-19T18:00:18.330000

1 posts

A Server-Side Template Injection (SSTI) vulnerability in the MDX Rendering Engine in Mintlify Platform before 2025-11-15 allows remote attackers to execute arbitrary code via inline JSX expressions in an MDX file.

CVE-2025-11774
(8.2 HIGH)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

2 posts

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in the software keyboard function (hereinafter referred to as "keypad function") of Mitsubishi Electric GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubishi Electric Iconics Digital Solutions GENESIS64 versions 10.97.2 CFR3 and prior, Mitsubishi Electric ICONICS Suite versions 10.97.2 CFR3 and

CVE-2025-14900
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

A security vulnerability has been detected in CodeAstro Real Estate Management System 1.0. Affected is an unknown function of the file /admin/userdelete.php of the component Administrator Endpoint. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-14908
(6.3 MEDIUM)

EPSS: 0.06%

updated 2025-12-19T18:00:18.330000

1 posts

A security flaw has been discovered in JeecgBoot up to 3.9.0. The affected element is an unknown function of the file jeecg-boot/jeecg-module-system/jeecg-system-biz/src/main/java/org/jeecg/modules/system/controller/SysTenantController.java of the component Multi-Tenant Management Module. Performing manipulation of the argument ID results in improper authentication. The attack can be initiated rem

CVE-2025-14899
(4.7 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

A weakness has been identified in CodeAstro Real Estate Management System 1.0. This impacts an unknown function of the file /admin/stateadd.php of the component Administrator Endpoint. This manipulation causes sql injection. The attack may be initiated remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-13427
(0 None)

EPSS: 0.12%

updated 2025-12-19T18:00:18.330000

1 posts

An authentication bypass vulnerability in Google Cloud Dialogflow CX Messenger allowed unauthenticated users to interact with restricted chat agents, gaining access to the agents' knowledge and the ability to trigger their intents, by manipulating initialization parameters or crafting specific API requests. All versions after August 20th, 2025 have been updated to protect from this vulnerability

CVE-2025-64677
(8.2 HIGH)

EPSS: 0.07%

updated 2025-12-19T18:00:18.330000

1 posts

Improper neutralization of input during web page generation ('cross-site scripting') in Office Out-of-Box Experience allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-64676
(7.2 HIGH)

EPSS: 0.11%

updated 2025-12-19T18:00:18.330000

1 posts

'.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network.

CVE-2025-64236
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-12-19T18:00:18.330000

1 posts

Authentication Bypass Using an Alternate Path or Channel vulnerability in AmentoTech Tuturn allows Authentication Abuse.This issue affects Tuturn: from n/a before 3.6.

CVE-2025-14896
(7.5 HIGH)

EPSS: 0.03%

updated 2025-12-19T18:00:18.330000

1 posts

due to insufficient sanitazation in Vega’s `convert()` function when `safeMode` is enabled and the spec variable is an array. An attacker can craft a malicious Vega diagram specification that will allow them to send requests to any URL, including local file system paths, leading to exposure of sensitive information.

CVE-2025-14739
(0 None)

EPSS: 0.01%

updated 2025-12-19T18:00:18.330000

1 posts

Access of Uninitialized Pointer vulnerability in TP-Link WR940N and WR941ND allows local unauthenticated attackers the ability to execute DoS attack and potentially arbitrary code execution under the context of the ‘root’ user.This issue affects WR940N and WR941ND: ≤ WR940N v5 3.20.1 Build 200316, ≤ WR941ND v6 3.16.9 Build 151203.

CVE-2025-63391
(7.5 HIGH)

EPSS: 0.08%

updated 2025-12-19T18:00:18.330000

1 posts

An authentication bypass vulnerability exists in Open-WebUI <=0.6.32 in the /api/config endpoint. The endpoint lacks proper authentication and authorization controls, exposing sensitive system configuration data to unauthenticated remote attackers.

CVE-2025-41749
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:46:12.343000

1 posts

An XSS vulnerability in port_util.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device configu

CVE-2025-41747
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:46:06.333000

1 posts

An XSS vulnerability in pxc_vlanIntfCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to devic

CVE-2025-41751
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-19T16:45:53.940000

1 posts

An XSS vulnerability in pxc_portCntr.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device conf

CVE-2025-1928
(9.1 CRITICAL)

EPSS: 0.05%

updated 2025-12-19T15:31:25

1 posts

Improper Restriction of Excessive Authentication Attempts vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Password Recovery Exploitation.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-1927
(7.1 HIGH)

EPSS: 0.01%

updated 2025-12-19T12:31:33

1 posts

Cross-Site Request Forgery (CSRF) vulnerability in Restajet Information Technologies Inc. Online Food Delivery System allows Cross Site Request Forgery.This issue affects Online Food Delivery System: through 19122025.

CVE-2025-66522
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T09:30:40

1 posts

A stored cross-site scripting (XSS) vulnerability exists in the Digital IDs functionality of the Foxit PDF Editor Cloud (pdfonline.foxit.com). The application does not properly sanitize or encode the Common Name field of Digital IDs before inserting user-supplied content into the DOM. As a result, embedded HTML or JavaScript may execute whenever the Digital IDs dialog is accessed or when the affec

CVE-2025-14151
(6.1 MEDIUM)

EPSS: 0.09%

updated 2025-12-19T09:30:39

1 posts

The SlimStat Analytics plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'outbound_resource' parameter in the slimtrack AJAX action in all versions up to, and including, 5.3.2. This is due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will

CVE-2025-66520
(6.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-19T09:30:39

1 posts

A stored cross-site scripting (XSS) vulnerability exists in the Portfolio feature of the Foxit PDF Editor cloud (pdfonline.foxit.com). User-supplied SVG files are not properly sanitized or validated before being inserted into the HTML structure. As a result, embedded HTML or JavaScript within a crafted SVG may execute whenever the Portfolio file list is rendered.

CVE-2025-68490(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68488(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68487(CVSS UNKNOWN)

EPSS: 0.00%

updated 2025-12-19T06:30:34

1 posts

Rejected reason: Not used

CVE-2025-68491
(0 None)

EPSS: 0.00%

updated 2025-12-19T04:16:02.150000

1 posts

Rejected reason: Not used

CVE-2025-68489
(0 None)

EPSS: 0.00%

updated 2025-12-19T04:16:02.017000

1 posts

Rejected reason: Not used

CVE-2025-13941
(8.8 HIGH)

EPSS: 0.01%

updated 2025-12-19T03:31:18

1 posts

A local privilege escalation vulnerability exists in the Foxit PDF Reader/Editor Update Service. During plugin installation, incorrect file system permissions are assigned to resources used by the update service. A local attacker with low privileges could modify or replace these resources, which are later executed by the service, resulting in execution of arbitrary code with SYSTEM privileges.

CVE-2025-64675
(8.3 HIGH)

EPSS: 0.08%

updated 2025-12-19T00:31:52

1 posts

Improper neutralization of input during web page generation ('cross-site scripting') in Azure Cosmos DB allows an unauthorized attacker to perform spoofing over a network.

CVE-2025-68382
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-12-19T00:31:47

1 posts

Out-of-bounds read (CWE-125) allows an unauthenticated remote attacker to perform a buffer overflow (CAPEC-100) via the NFS protocol dissector, leading to a denial-of-service (DoS) through a reliable process crash when handling truncated XDR-encoded RPC messages.

CVE-2025-65037
(10.0 CRITICAL)

EPSS: 0.10%

updated 2025-12-19T00:31:47

1 posts

Improper control of generation of code ('code injection') in Azure Container Apps allows an unauthorized attacker to execute code over a network.

CVE-2025-64663
(10.0 CRITICAL)

EPSS: 0.08%

updated 2025-12-19T00:31:47

1 posts

Custom Question Answering Elevation of Privilege Vulnerability

CVE-2025-34452(CVSS UNKNOWN)

EPSS: 0.38%

updated 2025-12-19T00:31:47

1 posts

Streama versions 1.10.0 through 1.10.5 and prior to commit b7c8767 contain a combination of path traversal and server-side request forgery (SSRF) vulnerabilities in that allow an authenticated attacker to write arbitrary files to the server filesystem. The issue exists in the subtitle download functionality, where user-controlled parameters are used to fetch remote content and construct file paths

CVE-2025-65041
(10.0 CRITICAL)

EPSS: 0.09%

updated 2025-12-19T00:31:46

2 posts

Improper authorization in Microsoft Partner Center allows an unauthorized attacker to elevate privileges over a network.

CVE-2025-68381
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-12-19T00:31:46

1 posts

Improper Bounds Check (CWE-787) in Packetbeat can allow a remote unauthenticated attacker to exploit a Buffer Overflow (CAPEC-100) and reliably crash the application or cause significant resource exhaustion via a single crafted UDP packet with an invalid fragment sequence number.

CVE-2025-53000(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-18T22:03:09

1 posts

### Summary On Windows, converting a notebook containing SVG output to a PDF results in unauthorized code execution. Specifically, a third party can create a `inkscape.bat` file that defines a [Windows batch script](https://en.wikipedia.org/wiki/Batch_file), capable of arbitrary code execution. When a user runs `jupyter nbconvert --to pdf` on a notebook containing SVG output to a PDF on a Window

CVE-2025-64374
(10.0 CRITICAL)

EPSS: 0.04%

updated 2025-12-18T21:32:49

1 posts

Unrestricted Upload of File with Dangerous Type vulnerability in StylemixThemes Motors motors allows Using Malicious Files.This issue affects Motors: from n/a through <= 5.6.81.

CVE-2025-66923
(7.2 HIGH)

EPSS: 0.12%

updated 2025-12-18T19:52:33.017000

1 posts

A Cross-site scripting (XSS) vulnerability in Create/Update Customer(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the phone_number parameter.

CVE-2025-68434
(8.8 HIGH)

EPSS: 0.08%

updated 2025-12-18T19:45:54.187000

1 posts

Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIgniter framework. Starting in version 3.4.0 and prior to version 3.4.2, a Cross-Site Request Forgery (CSRF) vulnerability exists in the application's filter configuration. The CSRF protection mechanism was **explicitly disabled**, allowing the application to process state-changing requests

1 repos

https://github.com/Nixon-H/CVE-2025-68434-OSPOS-CSRF

CVE-2025-67074
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-12-18T19:16:34.560000

1 posts

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serverName`) to /goform/AdvSetMacMtuWan.

CVE-2025-14837
(4.7 MEDIUM)

EPSS: 0.04%

updated 2025-12-18T19:16:22.103000

1 posts

A vulnerability has been found in ZZCMS 2025. Affected by this issue is the function stripfxg of the file /admin/siteconfig.php of the component Backend Website Settings Module. Such manipulation of the argument icp leads to code injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

CVE-2025-66397
(8.3 HIGH)

EPSS: 0.04%

updated 2025-12-18T19:07:25.637000

1 posts

ChurchCRM is an open-source church management system. Prior to version 6.5.3, the allowRegistration, acceptKiosk, reloadKiosk, and identifyKiosk functions in the Kiosk Manager feature suffers from broken access control, allowing any authenticated user to allow and accept kiosk registrations, and perform other Kiosk Manager actions such as reload and identify. Version 6.5.3 fixes the issue.

CVE-2025-14764
(5.3 MEDIUM)

EPSS: 0.01%

updated 2025-12-18T18:50:44

1 posts

## Summary S3 Encryption Client for Go is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key (EDK) is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders" attack (https://eprint.iacr.org/2019/016), which could allow the EDK to be replaced with a n

CVE-2025-59374
(9.8 CRITICAL)

EPSS: 30.46%

updated 2025-12-18T18:31:33

9 posts

"UNSUPPORTED WHEN ASSIGNED" Certain versions of the ASUS Live Update client were distributed with unauthorized modifications introduced through a supply chain compromise. The modified builds could cause devices meeting specific targeting conditions to perform unintended actions. Only devices that met these conditions and installed the compromised versions were affected. The Live Update client has

CVE-2025-14884
(7.2 HIGH)

EPSS: 0.19%

updated 2025-12-18T18:30:38

2 posts

A vulnerability was detected in D-Link DIR-605 202WWB03. Affected by this issue is some unknown functionality of the component Firmware Update Service. Performing manipulation results in command injection. The attack can be initiated remotely. The exploit is now public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.

CVE-2025-14879
(9.8 CRITICAL)

EPSS: 0.05%

updated 2025-12-18T18:30:37

2 posts

A weakness has been identified in Tenda WH450 1.0.0.18. Affected is an unknown function of the file /goform/onSSIDChange of the component HTTP Request Handler. This manipulation of the argument ssid_index causes stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited.

CVE-2025-14738(CVSS UNKNOWN)

EPSS: 0.06%

updated 2025-12-18T18:30:37

1 posts

Improper authentication vulnerability in TP-Link WA850RE (httpd modules) allows unauthenticated attackers to download the configuration file.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

CVE-2025-14737(CVSS UNKNOWN)

EPSS: 0.42%

updated 2025-12-18T18:30:37

1 posts

Command Injection vulnerability in TP-Link WA850RE (httpd modules) allows authenticated adjacent attacker to inject arbitrary commands.This issue affects: ≤ WA850RE V2_160527, ≤ WA850RE V3_160922.

CVE-2025-68400
(8.8 HIGH)

EPSS: 0.03%

updated 2025-12-18T16:46:12.477000

1 posts

ChurchCRM is an open-source church management system. A SQL Injection vulnerability exists in the legacy endpoint `/Reports/ConfirmReportEmail.php` in ChurchCRM prior to version 6.5.3. Although the feature was removed from the UI, the file remains deployed and reachable directly via URL. This is a classic case of *dead but reachable code*. Any authenticated user - including one with zero assigned

CVE-2025-68401
(4.8 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T16:44:00.020000

1 posts

ChurchCRM is an open-source church management system. Prior to version 6.0.0, the application stores user-supplied HTML/JS without sufficient sanitization/encoding. When other users later view this content, attacker-controlled JavaScript executes in their browser (stored XSS). In affected contexts the script can access web origin data and perform privileged actions as the victim. Where session coo

CVE-2025-14763
(5.3 MEDIUM)

EPSS: 0.01%

updated 2025-12-18T15:47:08

1 posts

## Summary S3 Encryption Client for Java is an open-source client-side encryption library used to facilitate writing and reading encrypted records to S3. When the encrypted data key (EDK) is stored in an "Instruction File" instead of S3's metadata record, the EDK is exposed to an "Invisible Salamanders" attack (https://eprint.iacr.org/2019/016), which could allow the EDK to be replaced with a

CVE-2025-64468
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-18T15:30:51

1 posts

There is a use-after-free vulnerability in sentry!sentry_span_set_data() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions

CVE-2025-13110
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:30:51

1 posts

The HUSKY – Products Filter Professional for WooCommerce plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.3.7.3 via the "woof_add_subscr" function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with subscriber level access and above, to create product messenger subscriptions on be

CVE-2025-14437
(7.5 HIGH)

EPSS: 0.06%

updated 2025-12-18T15:30:51

1 posts

The Hummingbird Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.18.0 via the 'request' function. This makes it possible for unauthenticated attackers to extract sensitive data including Cloudflare API credentials.

CVE-2025-65007(CVSS UNKNOWN)

EPSS: 0.04%

updated 2025-12-18T15:30:51

1 posts

In WODESYS WD-R608U router (also known as WDR122B V2.0 and WDR28) due to lack of authentication in the configuration change module in the adm.cgi endpoint, the unauthenticated attacker can execute commands including backup creation, device restart and resetting the device to factory settings. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerabil

CVE-2025-64467
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-18T15:30:45

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in LVResFile::FindRsrcListEntry() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-64465
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-18T15:30:45

1 posts

There is an out of bounds read vulnerability in NI LabVIEW in lvre!DataSizeTDR() when parsing a corrupted VI file. This vulnerability may result in information disclosure or arbitrary code execution. Successful exploitation requires an attacker to get a user to open a specially crafted VI. This vulnerability affects NI LabVIEW 2025 Q3 (25.3) and prior versions.

CVE-2025-14277
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:30:43

1 posts

The Prime Slider – Addons for Elementor plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 4.0.9 via the import_elementor_template AJAX action. This makes it possible for authenticated attackers, with subscriber level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and m

CVE-2025-46295
(9.8 CRITICAL)

EPSS: 0.33%

updated 2025-12-18T15:08:06.237000

1 posts

Apache Commons Text versions prior to 1.10.0 included interpolation features that could be abused when applications passed untrusted input into the text-substitution API. Because some interpolators could trigger actions like executing commands or accessing external resources, an attacker could potentially achieve remote code execution. This vulnerability has been fully addressed in FileMaker Serve

CVE-2025-68463
(4.9 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:07:42.550000

1 posts

Bio.Entrez in Biopython through 186 allows doctype XXE.

CVE-2025-47382
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-18T15:07:42.550000

1 posts

Memory corruption while loading an invalid firmware in boot loader.

CVE-2025-14856
(6.3 MEDIUM)

EPSS: 0.04%

updated 2025-12-18T15:07:42.550000

1 posts

A security vulnerability has been detected in y_project RuoYi up to 4.8.1. The affected element is an unknown function of the file /monitor/cache/getnames. Such manipulation of the argument fragment leads to code injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

CVE-2025-68129
(6.8 MEDIUM)

EPSS: 0.06%

updated 2025-12-18T15:07:42.550000

1 posts

Auth0-PHP is a PHP SDK for Auth0 Authentication and Management APIs. In applications built with the Auth0-PHP SDK, the audience validation in access tokens is performed improperly. Without proper validation, affected applications may accept ID tokens as Access tokens. Projects are affected if they use Auth0-PHP SDK versions between v8.0.0 and v8.17.0, or applications using the following SDKs that

CVE-2025-14759
(5.3 MEDIUM)

EPSS: 0.01%

updated 2025-12-18T15:07:42.550000

1 posts

Missing cryptographic key commitment in the Amazon S3 Encryption Client for .NET may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade Amazon S3 Encryption Client for .NET to version 3.2.0 or later.

CVE-2025-14762
(5.3 MEDIUM)

EPSS: 0.02%

updated 2025-12-18T15:07:42.550000

1 posts

Missing cryptographic key commitment in the AWS SDK for Ruby may allow a user with write access to the S3 bucket to introduce a new EDK that decrypts to different plaintext when the encrypted data key is stored in an "instruction file" instead of S3's metadata record. To mitigate this issue, upgrade AWS SDK for Ruby to version 1.208.0 or later.

CVE-2022-23851
(9.8 CRITICAL)

EPSS: 0.05%

updated 2025-12-18T15:07:42.550000

1 posts

Netaxis API Orchestrator (APIO) before 0.19.3 allows server side template injection (SSTI).

CVE-2025-14618
(4.3 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T15:07:18.427000

1 posts

The Sweet Energy Efficiency plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on the 'sweet_energy_efficiency_action' AJAX handler in all versions up to, and including, 1.0.6. This makes it possible for authenticated attackers, with subscriber level access and above, to read, modify, and delete arbitrary graphs.

CVE-2025-40602
(6.6 MEDIUM)

EPSS: 1.42%

updated 2025-12-18T12:30:33

5 posts

A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

2 repos

https://github.com/cyberleelawat/CVE-2025-40602

https://github.com/rxerium/CVE-2025-40602

CVE-2025-10910(CVSS UNKNOWN)

EPSS: 0.14%

updated 2025-12-18T12:30:33

2 posts

A flaw in the binding process of Govee’s cloud platform and devices allows a remote attacker to bind an existing, online Govee device to the attacker’s account, resulting in full control of the device and removal of the device from its legitimate owner’s account. The server‑side API allows device association using a set of identifiers: "device", "sku", "type", and a client‑computed "value", that a

CVE-2025-68459
(7.2 HIGH)

EPSS: 0.17%

updated 2025-12-18T06:30:19

2 posts

RG - AP180, Indoor Wall Plate Wireless AP AP180 series provided by Ruijie Networks Co., Ltd. contain an OS command injection vulnerability. An arbitrary OS command may be executed on the product by an attacker who logs in to the CLI service.

CVE-2025-47372
(9.0 None)

EPSS: 0.02%

updated 2025-12-18T06:30:19

1 posts

Memory Corruption when a corrupted ELF image with an oversized file size is read into a buffer without authentication.

CVE-2025-68462
(3.2 LOW)

EPSS: 0.01%

updated 2025-12-18T06:30:19

1 posts

Freedombox before 25.17.1 does not set proper permissions for the backups-data directory, allowing the reading of dump files of databases.

CVE-2025-47387
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-18T06:30:19

1 posts

Memory Corruption when processing IOCTLs for JPEG data without verification.

CVE-2025-12885
(6.4 MEDIUM)

EPSS: 0.03%

updated 2025-12-18T03:30:18

1 posts

The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the sanitize_pdf_src function regex bypass in all versions up to, and including, 2.7.10 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary

CVE-2025-14841
(3.3 LOW)

EPSS: 0.01%

updated 2025-12-18T03:30:18

1 posts

A flaw has been found in OFFIS DCMTK up to 3.6.9. The impacted element is the function DcmQueryRetrieveIndexDatabaseHandle::startFindRequest/DcmQueryRetrieveIndexDatabaseHandle::startMoveRequest in the library dcmqrdb/libsrc/dcmqrdbi.cc of the component dcmqrscp. This manipulation causes null pointer dereference. The attack requires local access. Upgrading to version 3.7.0 is sufficient to resolve

CVE-2025-14202(CVSS UNKNOWN)

EPSS: 0.05%

updated 2025-12-18T00:34:16

2 posts

A vulnerability in the file upload at bookmark + asset rendering pipeline allows an attacker to upload a malicious SVG file with JavaScript content. When an authenticated admin user views the SVG file with embedded JavaScript code of shared bookmark, JavaScript executes in the admin’s browser, retrieves the CSRF token, and sends a request to change the admin's password resulting in a full account

CVE-2023-53933
(8.8 HIGH)

EPSS: 0.24%

updated 2025-12-18T00:34:16

1 posts

Serendipity 2.4.0 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files with .phar extension. Attackers can upload files with system command payloads to the media upload endpoint and execute arbitrary commands on the server.

CVE-2025-67172
(7.2 HIGH)

EPSS: 0.27%

updated 2025-12-17T21:31:53

1 posts

RiteCMS v3.1.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the parse_special_tags() function.

CVE-2025-66924
(6.1 MEDIUM)

EPSS: 0.04%

updated 2025-12-17T21:31:53

1 posts

A Cross-site scripting (XSS) vulnerability in Create/Update Item Kit(s) in Open Source Point of Sale v3.4.1 allows remote attackers to inject arbitrary web script or HTML via the "name" parameter.

CVE-2025-65203
(7.1 HIGH)

EPSS: 0.01%

updated 2025-12-17T21:31:53

1 posts

KeePassXC-Browser thru 1.9.9.2 autofills or prompts to fill stored credentials into documents rendered under a browser-enforced CSP directive and iframe attribute sandbox, allowing attacker-controlled script in the sandboxed document to access populated form fields and exfiltrate credentials.

CVE-2025-67073
(9.8 CRITICAL)

EPSS: 0.15%

updated 2025-12-17T21:30:56

2 posts

A Buffer overflow vulnerability in function fromAdvSetMacMtuWan of bin httpd in Tenda AC10V4.0 V16.03.10.20 allows remote attackers to cause denial of service and possibly code execution by sending a post request with a crafted payload (field `serviceName`) to /goform/AdvSetMacMtuWan.

CVE-2025-13326
(3.9 LOW)

EPSS: 0.01%

updated 2025-12-17T21:30:56

1 posts

Mattermost Desktop App versions <6.0.0 fail to enable the Hardened Runtime on the Mattermost Desktop App when packaged for Mac App Store which allows an attacker to inherit TCC permissions via copying the binary to a tmp folder.

CVE-2025-20393
(10.0 CRITICAL)

EPSS: 4.56%

updated 2025-12-17T21:30:47

15 posts

Cisco is aware of a potential vulnerability.&nbsp; Cisco is currently investigating and&nbsp;will update these details as appropriate&nbsp;as more information becomes available.

5 repos

https://github.com/Ashwesker/Blackash-CVE-2025-20393

https://github.com/StasonJatham/cisco-sa-sma-attack-N9bf4

https://github.com/cyberleelawat/CVE-2025-20393

https://github.com/KingHacker353/CVE-2025-20393

https://github.com/thesystemowner/CVE-2025-20393-POC

CVE-2025-59718
(9.8 CRITICAL)

EPSS: 5.95%

updated 2025-12-17T13:54:45.390000

3 posts

A improper verification of cryptographic signature vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0.0 through 7.0.21, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7

2 repos

https://github.com/exfil0/CVE-2025-59718-PoC

https://github.com/Ashwesker/Blackash-CVE-2025-59718

CVE-2025-68154
(8.1 HIGH)

EPSS: 0.07%

updated 2025-12-16T22:37:26

1 posts

## Summary The `fsSize()` function in `systeminformation` is vulnerable to **OS Command Injection (CWE-78)** on Windows systems. The optional `drive` parameter is directly concatenated into a PowerShell command without sanitization, allowing arbitrary command execution when user-controlled input reaches this function. **Affected Platforms:** Windows only **CVSS Breakdown:** - **Attack Vector

CVE-2025-68260(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-16T15:30:56

3 posts

In the Linux kernel, the following vulnerability has been resolved: rust_binder: fix race condition on death_list Rust Binder contains the following unsafe operation: // SAFETY: A `NodeDeath` is never inserted into the death list // of any node other than its owner, so it is either in this // death list or in no death list. unsafe { node_inner.death_list.remove(self) }; This operation is u

CVE-2025-66471
(7.5 HIGH)

EPSS: 0.02%

updated 2025-12-10T16:10:33.500000

1 posts

urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once. When streaming a compressed response, urllib3 can

CVE-2025-59719
(9.8 CRITICAL)

EPSS: 0.07%

updated 2025-12-09T18:30:52

2 posts

An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through 7.6.4, FortiWeb 7.4.0 through 7.4.9 may allow an unauthenticated attacker to bypass the FortiCloud SSO login authentication via a crafted SAML response message.

CVE-2025-41746
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:45

1 posts

An XSS vulnerability in pxc_portSecCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device

CVE-2025-41748
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_Dot1xCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device conf

CVE-2025-41745
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_portCntr2.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device

CVE-2025-41695
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in dyn_conn.php can be used by an unauthenticated remote attacker to trick an authenticated user to send a manipulated POST request to the device in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-41750
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_PortCfg.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-41696
(4.6 MEDIUM)

EPSS: 0.02%

updated 2025-12-09T18:30:44

1 posts

An attacker can use an undocumented UART port on the PCB as a side-channel with the user hardcoded credentials obtained from CVE-2025-41692 to gain read access to parts of the filesystem of the device.

CVE-2025-41752
(7.1 HIGH)

EPSS: 0.09%

updated 2025-12-09T18:30:44

1 posts

An XSS vulnerability in pxc_portSfp.php can be used by an unauthenticated remote attacker to trick an authenticated user to click on the link provided by the attacker in order to change parameters available via web based management (WBM). The vulnerability does not provide access to system-level resources such as operating system internals or privileged functions. Access is limited to device confi

CVE-2025-41693
(4.3 MEDIUM)

EPSS: 0.23%

updated 2025-12-09T18:30:43

1 posts

A low privileged remote attacker can use the ssh feature to execute commands directly after login. The process stays open and uses resources which leads to a reduced performance of the management functions. Switching functionality is not affected.

CVE-2025-41694
(6.5 MEDIUM)

EPSS: 0.11%

updated 2025-12-09T18:30:43

1 posts

A low privileged remote attacker can run the webshell with an empty command containing whitespace. The server will then block until it receives more data, resulting in a DoS condition of the websserver.

CVE-2025-41692
(6.8 MEDIUM)

EPSS: 0.02%

updated 2025-12-09T18:30:43

1 posts

A high privileged remote attacker with admin privileges for the webUI can brute-force the "root" and "user" passwords of the underlying OS due to a weak password generation algorithm.

CVE-2025-55182
(10.0 CRITICAL)

EPSS: 43.43%

updated 2025-12-09T16:53:25

3 posts

### Impact There is an unauthenticated remote code execution vulnerability in React Server Components. We recommend upgrading immediately. The vulnerability is present in versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 of: * [react-server-dom-webpack](https://www.npmjs.com/package/react-server-dom-webpack) * [react-server-dom-parcel](https://www.npmjs.com/package/react-server-dom-parcel) * [react-s

Nuclei template

100 repos

https://github.com/AdityaBhatt3010/React2Shell-CVE-2025-55182-The-Deserialization-Bug-That-Broke-the-Web

https://github.com/VeilVulp/RscScan-cve-2025-55182

https://github.com/xkillbit/cve-2025-55182-scanner

https://github.com/zr0n/react2shell

https://github.com/f0xyx/CVE-2025-55182-Scanner

https://github.com/hidden-investigations/react2shell-scanner

https://github.com/ejpir/CVE-2025-55182-bypass

https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

https://github.com/subhdotsol/CVE-2025-55182

https://github.com/freeqaz/react2shell

https://github.com/Rsatan/Next.js-Exploit-Tool

https://github.com/raivenLockdown/RCE_React2Shell_ButCooler-SomeUselessUsefulThingsLMAO-

https://github.com/shyambhanushali/React2Shell

https://github.com/kOaDT/poc-cve-2025-55182

https://github.com/nehkark/CVE-2025-55182

https://github.com/MoLeft/React2Shell-Toolbox

https://github.com/hoosin/CVE-2025-55182

https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension

https://github.com/shamo0/react2shell-PoC

https://github.com/techgaun/cve-2025-55182-scanner

https://github.com/Syrins/CVE-2025-55182-React2Shell-RCE

https://github.com/mrknow001/RSC_Detector

https://github.com/cybertechajju/R2C-CVE-2025-55182-66478

https://github.com/Dh4v4l8/CVE-2025-55182-poc-tool

https://github.com/sickwell/CVE-2025-55182

https://github.com/BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

https://github.com/Pizz33/CVE-2025-55182-burpscanner

https://github.com/Cr4at0r/Next.js-RCE-Scanner-BurpSuite-Extension-

https://github.com/LemonTeatw1/CVE-2025-55182-exploit

https://github.com/zzhorc/CVE-2025-55182

https://github.com/sumanrox/rschunter

https://github.com/santihabib/CVE-2025-55182-analysis

https://github.com/aliclub0x00/CVE-2025-55182-POC-NEXTJS

https://github.com/CirqueiraDev/MassExploit-CVE-2025-55182

https://github.com/gensecaihq/react2shell-scanner

https://github.com/alsaut1/react2shell-lab

https://github.com/timsonner/React2Shell-CVE-2025-55182

https://github.com/lachlan2k/React2Shell-CVE-2025-55182-original-poc

https://github.com/songsanggggg/CVE-2025-55182

https://github.com/AliHzSec/CVE-2025-55182

https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool

https://github.com/Spritualkb/CVE-2025-55182-exp

https://github.com/ejpir/CVE-2025-55182-research

https://github.com/RuoJi6/CVE-2025-55182-RCE-shell

https://github.com/EynaExp/CVE-2025-55182-POC

https://github.com/SainiONHacks/CVE-2025-55182-Scanner

https://github.com/logesh-GIT001/CVE-2025-55182

https://github.com/alfazhossain/CVE-2025-55182-Exploiter

https://github.com/surajhacx/react2shellpoc

https://github.com/ZihxS/check-react-rce-cve-2025-55182

https://github.com/andrei2308/react2shell

https://github.com/Ashwesker/Blackash-CVE-2025-55182

https://github.com/xcanwin/CVE-2025-55182-React-RCE

https://github.com/xiaopeng-ye/react2shell-detector

https://github.com/sho-luv/React2Shell

https://github.com/l4rm4nd/CVE-2025-55182

https://github.com/CymulateResearch/React2Shell-Scanner

https://github.com/GelukCrab/React-Server-Components-RCE

https://github.com/ynsmroztas/NextRce

https://github.com/dwisiswant0/CVE-2025-55182

https://github.com/acheong08/CVE-2025-55182-poc

https://github.com/heiheishushu/rsc_detect_CVE-2025-55182

https://github.com/Call123X/-cve-2025-55182

https://github.com/hualy13/CVE-2025-55182

https://github.com/zack0x01/vuln-app-CVE-2025-55182

https://github.com/zack0x01/CVE-2025-55182-advanced-scanner-

https://github.com/c0rydoras/CVE-2025-55182

https://github.com/C00LN3T/React2Shell

https://github.com/yanoshercohen/React2Shell_CVE-2025-55182

https://github.com/MrR0b0t19/CVE-2025-55182-shellinteractive

https://github.com/theori-io/reactguard

https://github.com/StealthMoud/CVE-2025-55182-Scanner

https://github.com/XiaomingX/CVE-2025-55182-poc

https://github.com/AggressiveUser/React2Hell

https://github.com/websecuritylabs/React2Shell-Library

https://github.com/SoICT-BKSEC/CVE-2025-55182-docker-lab

https://github.com/fullhunt/react2shell-test-server

https://github.com/xalgord/React2Shell

https://github.com/emredavut/CVE-2025-55182

https://github.com/fatguru/CVE-2025-55182-scanner

https://github.com/M4xSec/CVE-2025-55182-React2Shell-RCE-Shell

https://github.com/Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478

https://github.com/Chocapikk/CVE-2025-55182

https://github.com/whiteov3rflow/CVE-2025-55182-poc

https://github.com/im-ezboy/CVE-2025-55182-zoomeye

https://github.com/keklick1337/CVE-2025-55182-golang-PoC

https://github.com/BeichenDream/CVE-2025-55182-GodzillaMemoryShell

https://github.com/msanft/CVE-2025-55182

https://github.com/hackersatyamrastogi/react2shell-ultimate

https://github.com/Saturate/CVE-2025-55182-Scanner

https://github.com/sudo-Yangziran/CVE-2025-55182POC

https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script

https://github.com/assetnote/react2shell-scanner

https://github.com/TrixSec/CVE-2025-55182-Scanner

https://github.com/kavienanj/CVE-2025-55182

https://github.com/yz9yt/React2Shell-CTF

https://github.com/jf0x3a/CVE-2025-55182-exploit

https://github.com/onlylovetx/CVE-2025-55182-CVE-2025-66478-Exploit-GUI

https://github.com/7amzahard/React2shell

https://github.com/ThemeHackers/CVE-2025-55182

CVE-2025-37899
(7.8 HIGH)

EPSS: 0.01%

updated 2025-12-06T22:15:50.277000

2 posts

In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix use-after-free in session logoff The sess->user object can currently be in use by another thread, for example if another connection has sent a session setup request to bind to the session being free'd. The handler for that connection could be in the smb2_sess_setup function which makes use of sess->user.

2 repos

https://github.com/SeanHeelan/o3_finds_cve-2025-37899

https://github.com/vett3x/SMB-LINUX-CVE-2025-37899

CVE-2025-65945
(7.5 HIGH)

EPSS: 0.01%

updated 2025-12-04T22:50:04

1 posts

### Overview An improper signature verification vulnerability exists when using auth0/node-jws with the HS256 algorithm under specific conditions. ### Am I Affected? You are affected by this vulnerability if you meet all of the following preconditions: 1. Application uses the auth0/node-jws implementation of JSON Web Signatures, versions <=3.2.2 || 4.0.0 2. Application uses the jws.createVerify(

1 repos

https://github.com/jedisct1/CVE-2025-65945-poc

CVE-2025-66478
(0 None)

EPSS: 0.00%

updated 2025-12-03T18:15:47.200000

1 posts

Rejected reason: This CVE is a duplicate of CVE-2025-55182.

100 repos

https://github.com/Letalandroid/cve-2025-66478_rce_vulnerable

https://github.com/mounta11n/CHECK-CVE-2025-55182-AND-CVE-2025-66478

https://github.com/hidden-investigations/react2shell-scanner

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-npm-hoisting

https://github.com/tobiasGuta/Next.js-RSC-RCE-Scanner-Burp-Suite-Extension

https://github.com/freeqaz/react2shell

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-pnpm-symlinks

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-overrides

https://github.com/shyambhanushali/React2Shell

https://github.com/nehkark/CVE-2025-55182

https://github.com/anuththara2007-W/CVE-2025-55182-Exploit-extension

https://github.com/wangxso/CVE-2025-66478-POC

https://github.com/shamo0/react2shell-PoC

https://github.com/FurkanKAYAPINAR/ReactNext2Shell

https://github.com/namest504/CVE-2025-66478-Exploit-Poc

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-devdeps

https://github.com/vercel-labs/fix-react2shell-next

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-shrinkwrap

https://github.com/Rhyru9/CVE-2025-66478

https://github.com/cybertechajju/R2C-CVE-2025-55182-66478

https://github.com/zhixiangyao/CVE-2025-66478-Exploit-PoC

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-alias

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-yarn-pnp

https://github.com/BankkRoll/Quickcheck-CVE-2025-55182-React-and-CVE-2025-66478-Next.js

https://github.com/cypholab/evilact

https://github.com/sumanrox/rschunter

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-canary-14x

https://github.com/alessiodos/react2shell-scanner

https://github.com/strainxx/react2shell-honeypot

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-yarn

https://github.com/aiexz/CVE-2025-66478-kinda-waf

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-yarn-berry

https://github.com/Jibaru/CVE-2025-66478-github-patcher

https://github.com/lincemorado97/CVE-2025-55182_CVE-2025-66478

https://github.com/Mustafa1p/Next.js-RCE-Scanner---CVE-2025-55182-CVE-2025-66478

https://github.com/Malayke/Next.js-RSC-RCE-Scanner-CVE-2025-66478

https://github.com/songsanggggg/CVE-2025-55182

https://github.com/mattcbarrett/check-cve-2025-66478

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-yarn-zero-installs

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-tag-latest

https://github.com/pyroxenites/Nextjs_RCE_Exploit_Tool

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-yarn-resolutions

https://github.com/DavionGowie/-vercel-application-is-vulnerable-to-CVE-2025-66478.

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-realworld-calcom-yarn-monorepo

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-yarn-workspaces

https://github.com/abtonc/next-cve-2025-66478

https://github.com/ZihxS/check-react-rce-cve-2025-55182

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-tilde

https://github.com/abdozkaya/rsc-security-auditor

https://github.com/xiaopeng-ye/react2shell-detector

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-patch-package

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-pnpm-catalog

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-npm-nested-versions

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-optional-deps

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-transitive

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-canary-16x

https://github.com/l4rm4nd/CVE-2025-55182

https://github.com/arashiyans/CVE-2025-55182-CVE-2025-66478

https://github.com/ancs21/react2shell-scanner-rust

https://github.com/CymulateResearch/React2Shell-Scanner

https://github.com/gagaltotal/tot-react-rce-CVE-2025-55182

https://github.com/aseemyash/krle

https://github.com/grp-ops/react2shell

https://github.com/heiheishushu/rsc_detect_CVE-2025-55182

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-git-dep

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-peer-conflict

https://github.com/dr4xp/react2shell

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-rsc-webpack

https://github.com/enesbuyuk/react2shell-security-tool

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-realworld-supabase-pnpm-monorepo

https://github.com/C00LN3T/React2Shell

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-lockfile-mismatch

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-caret

https://github.com/ExpTechTW/CVE-2025-66478

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-realworld-dub-pnpm-monorepo

https://github.com/emredavut/CVE-2025-55182

https://github.com/changgun-lee/Next.js-RSC-RCE-Scanner-CVE-2025-66478

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-packagemanager-field

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-npm-workspaces

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-bun

https://github.com/Security-Phoenix-demo/react2shell-scanner-rce-react-next-CVE-2025-55182-CVE-2025-66478

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-v-prefix

https://github.com/Geekujin/React2-PowerShell-CVE-Checker

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-pnpm-overrides

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-pnpm

https://github.com/jctommasi/react2shellVulnApp

https://github.com/abhirajranjan/cve-2025-66478

https://github.com/hackersatyamrastogi/react2shell-ultimate

https://github.com/chrahman/react2shell-CVE-2025-55182-full-rce-script

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-monorepo-nextjs-turborepo

https://github.com/pax-k/react2shell-CVE-2025-55182-full-rce-script

https://github.com/assetnote/react2shell-scanner

https://github.com/Code42Cate/nexts-cve-2025-66478-exploit

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-range

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-build-metadata

https://github.com/Saad-Ayady/react2shellNSE

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-canary-15x

https://github.com/react2shell-repo-menagerie/CVE-2025-66478-single-nextjs-npm-no-lockfile

https://github.com/onlylovetx/CVE-2025-55182-CVE-2025-66478-Exploit-GUI

CVE-2025-59230
(7.8 HIGH)

EPSS: 8.49%

updated 2025-12-03T13:47:09.720000

1 posts

Improper access control in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally.

CVE-2025-34352(CVSS UNKNOWN)

EPSS: 0.02%

updated 2025-12-02T21:31:37

1 posts

JumpCloud Remote Assist for Windows versions prior to 0.317.0 include an uninstaller that is invoked by the JumpCloud Windows Agent as NT AUTHORITY\SYSTEM during agent uninstall or update operations. The Remote Assist uninstaller performs privileged create, write, execute, and delete actions on predictable files inside a user-writable %TEMP% subdirectory without validating that the directory is tr

CVE-2025-40300(CVSS UNKNOWN)

EPSS: 0.06%

updated 2025-11-17T18:30:25

1 posts

In the Linux kernel, the following vulnerability has been resolved: x86/vmscape: Add conditional IBPB mitigation VMSCAPE is a vulnerability that exploits insufficient branch predictor isolation between a guest and a userspace hypervisor (like QEMU). Existing mitigations already protect kernel/KVM from a malicious guest. Userspace can additionally be protected by flushing the branch predictors af

CVE-2025-11953
(9.8 CRITICAL)

EPSS: 0.49%

updated 2025-11-13T16:25:27

1 posts

The Metro Development Server, which is opened by the React Native CLI, binds to external interfaces by default. The server exposes an endpoint that is vulnerable to OS command injection. This allows unauthenticated network attackers to send a POST request to the server and run arbitrary executables. On Windows, the attackers can also execute arbitrary shell commands with fully controlled arguments

3 repos

https://github.com/SaidBenaissa/cve-2025-11953-vulnerability-demo

https://github.com/N3k0t-dev/PoC-CVE-collection

https://github.com/Ashwesker/Blackash-CVE-2025-11953

CVE-2025-9242
(9.8 CRITICAL)

EPSS: 73.45%

updated 2025-11-13T15:31:32

1 posts

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and

Nuclei template

2 repos

https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242

https://github.com/Ashwesker/Blackash-CVE-2025-9242

CVE-2025-12480
(9.1 CRITICAL)

EPSS: 78.02%

updated 2025-11-12T15:32:32

1 posts

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

Nuclei template

CVE-2025-59287
(9.8 CRITICAL)

EPSS: 77.27%

updated 2025-11-11T15:32:22

1 posts

Deserialization of untrusted data in Windows Server Update Service allows an unauthorized attacker to execute code over a network.

Nuclei template

21 repos

https://github.com/esteban11121/WSUS-RCE-Mitigation-59287

https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE

https://github.com/FurkanKAYAPINAR/CVE-2025-59287

https://github.com/keeganparr1/CVE-2025-59287-hawktrace

https://github.com/mrk336/Breaking-the-Update-Chain-Inside-CVE-2025-59287-and-the-WSUS-RCE-Threat

https://github.com/0xBruno/WSUSploit.NET

https://github.com/dexterm300/cve-2025-59287-exploit-poc

https://github.com/AdityaBhatt3010/CVE-2025-59287-When-your-patch-server-becomes-the-attack-vector

https://github.com/Twodimensionalitylevelcrossing817/CVE-2025-59287

https://github.com/M507/CVE-2025-59287-PoC

https://github.com/Adel-kaka-dz/cve-2025-59287

https://github.com/Lupovis/Honeypot-for-CVE-2025-59287-WSUS

https://github.com/0x7556/CVE-2025-59287

https://github.com/mubix/Find-WSUS

https://github.com/N3k0t-dev/PoC-CVE-collection

https://github.com/RadzaRr/WSUSResponder

https://github.com/fsanzmoya/wsus_CVE-2025-59287

https://github.com/garvitv14/CVE-2025-59287

https://github.com/mrmtwoj/WSUS-Patch-Level-Scanner-A-Lightweight-Tool-for-Detecting-Vulnerable-Microsoft-WSUS-Deployments

https://github.com/tecxx/CVE-2025-59287-WSUS

https://github.com/jiansiting/CVE-2025-59287

CVE-2025-7962
(7.5 HIGH)

EPSS: 0.01%

updated 2025-11-05T20:31:47

1 posts

In Jakarta Mail 2.2 it is possible to preform a SMTP Injection by utilizing the \r and \n UTF-8 characters to separate different messages.

CVE-2025-53057
(5.9 MEDIUM)

EPSS: 0.09%

updated 2025-11-03T18:32:51

1 posts

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Difficult to exploit vulnerability allows unauthenticated at

CVE-2025-53066
(7.5 HIGH)

EPSS: 0.09%

updated 2025-11-03T18:31:47

1 posts

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JAXP). Supported versions that are affected are Oracle Java SE: 8u461, 8u461-perf, 11.0.28, 17.0.16, 21.0.8, 25; Oracle GraalVM for JDK: 17.0.16 and 21.0.8; Oracle GraalVM Enterprise Edition: 21.3.15. Easily exploitable vulnerability allows unauthenticated attacker

CVE-2025-31324
(10.0 CRITICAL)

EPSS: 40.17%

updated 2025-10-22T00:34:21

1 posts

SAP NetWeaver Visual Composer Metadata Uploader is not protected with a proper authorization, allowing unauthenticated agent to upload potentially malicious executable binaries that could severely harm the host system. This could significantly affect the confidentiality, integrity, and availability of the targeted system.

Nuclei template

19 repos

https://github.com/nairuzabulhul/nuclei-template-cve-2025-31324-check

https://github.com/harshitvarma05/CVE-2025-31324-Exploits

https://github.com/abrewer251/CVE-2025-31324_PoC_SAP

https://github.com/JonathanStross/CVE-2025-31324

https://github.com/respondiq/jsp-webshell-scanner

https://github.com/ODST-Forge/CVE-2025-31324_PoC

https://github.com/Alizngnc/SAP-CVE-2025-31324

https://github.com/Onapsis/Onapsis-Mandiant-CVE-2025-31324-Vuln-Compromise-Assessment

https://github.com/redrays-io/CVE-2025-31324

https://github.com/BlueOWL-overlord/Burp_CVE-2025-31324

https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324

https://github.com/moften/CVE-2025-31324

https://github.com/nullcult/CVE-2025-31324-File-Upload

https://github.com/rxerium/CVE-2025-31324

https://github.com/Onapsis/Onapsis_CVE-2025-31324_Scanner_Tools

https://github.com/sug4r-wr41th/CVE-2025-31324

https://github.com/NULLTRACE0X/CVE-2025-31324

https://github.com/rf-peixoto/sap_netweaver_cve-2025-31324-

https://github.com/moften/CVE-2025-31324-NUCLEI

CVE-2025-23006
(9.8 CRITICAL)

EPSS: 56.66%

updated 2025-10-22T00:34:17

1 posts

Pre-authentication deserialization of untrusted data vulnerability has been identified in the SMA1000 Appliance Management Console (AMC) and Central Management Console (CMC), which in specific conditions could potentially enable a remote unauthenticated attacker to execute arbitrary OS commands.

CVE-2024-53704
(9.8 CRITICAL)

EPSS: 93.82%

updated 2025-10-22T00:34:16

1 posts

An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.

Nuclei template

1 repos

https://github.com/istagmbh/CVE-2024-53704

CVE-2023-22518
(9.1 CRITICAL)

EPSS: 94.38%

updated 2025-10-22T00:32:54

1 posts

All versions of Confluence Data Center and Server are affected by this unexploited vulnerability. There is no impact to confidentiality as an attacker cannot exfiltrate any instance data. Atlassian Cloud sites are not affected by this vulnerability. If your Confluence site is accessed via an atlassian.net domain, it is hosted by Atlassian and is not vulnerable to this issue.

Nuclei template

9 repos

https://github.com/bibo318/CVE-2023-22518

https://github.com/ForceFledgling/CVE-2023-22518

https://github.com/0x0d3ad/CVE-2023-22518

https://github.com/0x00sector/CVE_2023_22518_Checker

https://github.com/ductink98lhp/analyze-Exploit-CVE-2023-22518-Confluence

https://github.com/davidfortytwo/CVE-2023-22518

https://github.com/RevoltSecurities/CVE-2023-22518

https://github.com/C1ph3rX13/CVE-2023-22518

https://github.com/Lilly-dox/Exploit-CVE-2023-22518

CVE-2025-50165
(9.8 CRITICAL)

EPSS: 3.84%

updated 2025-08-12T18:31:39

1 posts

Untrusted pointer dereference in Microsoft Graphics Component allows an unauthorized attacker to execute code over a network.

1 repos

https://github.com/encrypter15/CVE-2025-50165-x64-Exploit

CVE-2025-25231
(7.5 HIGH)

EPSS: 10.75%

updated 2025-08-11T19:15:27.343000

1 posts

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to gain access to sensitive information by sending crafted GET requests (read-only) to restricted API endpoints.

Nuclei template

1 repos

https://github.com/ashkan-pu/CVE-CVE-2025-25231

CVE-2025-24294
(5.3 MEDIUM)

EPSS: 0.06%

updated 2025-07-15T22:56:20

1 posts

A denial of service vulnerability has been discovered in the resolv gem bundled with Ruby. ## Details The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a l

CVE-2025-30023
(9.1 CRITICAL)

EPSS: 1.92%

updated 2025-07-11T06:30:36

1 posts

The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execution attack.

CVE-2025-30026(CVSS UNKNOWN)

EPSS: 0.03%

updated 2025-07-11T06:30:36

1 posts

The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required.

CVE-2025-6514
(9.7 CRITICAL)

EPSS: 0.73%

updated 2025-07-09T18:08:46

1 posts

mcp-remote is exposed to OS command injection when connecting to untrusted MCP servers due to crafted input from the authorization_endpoint response URL

2 repos

https://github.com/Cyberency/CVE-2025-6514

https://github.com/ChaseHCS/CVE-2025-6514

CVE-2025-49146
(8.2 HIGH)

EPSS: 0.01%

updated 2025-06-11T16:17:03

1 posts

### Impact When the PostgreSQL JDBC driver is configured with channel binding set to `required` (default value is `prefer`), the driver would incorrectly allow connections to proceed with authentication methods that do not support channel binding (such as password, MD5, GSS, or SSPI authentication). This could allow a man-in-the-middle attacker to intercept connections that users believed were pr

CVE-2025-5516
(2.4 LOW)

EPSS: 0.05%

updated 2025-06-06T17:42:29.520000

1 posts

A vulnerability, which was classified as problematic, was found in TOTOLINK X2000R 1.0.0-B20230726.1108. This affects an unknown part of the file /boafrm/formFilter of the component URL Filtering Page. The manipulation of the argument URL Address leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor w

CVE-2025-5499
(7.3 HIGH)

EPSS: 0.11%

updated 2025-06-03T15:31:27

1 posts

A vulnerability classified as critical has been found in slackero phpwcms up to 1.9.45/1.10.8. Affected is the function is_file/getimagesize of the file image_resized.php. The manipulation of the argument imgfile leads to deserialization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.9.46 and 1.10.9 is able to add

CVE-2025-29970
(7.8 HIGH)

EPSS: 0.07%

updated 2025-05-19T14:20:49.300000

2 posts

Use after free in Microsoft Brokering File System allows an authorized attacker to elevate privileges locally.

CVE-2025-2039
(4.7 MEDIUM)

EPSS: 0.10%

updated 2025-05-13T20:57:18.117000

1 posts

A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/delete_members.php. The manipulation of the argument member_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

4 repos

https://github.com/Ashwesker/Blackash-CVE-2025-20393

https://github.com/cyberleelawat/CVE-2025-20393

https://github.com/KingHacker353/CVE-2025-20393

https://github.com/thesystemowner/CVE-2025-20393-POC

CVE-2025-32210
(6.5 MEDIUM)

EPSS: 0.04%

updated 2025-04-11T15:39:52.920000

1 posts

Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CM Registration and Invitation Codes: from n/a through 2.5.2.

CVE-2024-44067
(8.4 HIGH)

EPSS: 0.04%

updated 2024-08-20T20:35:34.497000

1 posts

The T-Head XuanTie C910 CPU in the TH1520 SoC and the T-Head XuanTie C920 CPU in the SOPHON SG2042 have instructions that allow unprivileged attackers to write to arbitrary physical memory locations, aka GhostWrite.

CVE-2025-14282
(0 None)

EPSS: 0.00%

1 posts

N/A

CVE-2025-66387
(0 None)

EPSS: 0.00%

1 posts

N/A