The archive.

CVE-2025-61546 · mitre

There is an issue on the /PSP/appNET/Store/CartV12.aspx/GetUnitPrice endpoint in edu Business Solutions Print Shop Pro WebDesk version 18…

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-60534 · mitre

Blue Access Cobalt v02.000.195 suffers from an authentication bypass vulnerability, which allows an attacker to selectively proxy request…

EPSS 0.7%CVSS 9.8

CVE-2025-56425 · mitre

An issue was discovered in the AppConnector component version 10.10.0.183 and earlier of enaio 10.10, in the AppConnector component versi…

EPSS 0.7%CVSS 9.1

rustfs1 vulnerability on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-68705 · rustfs rustfs

RustFS Path Traversal Vulnerability

EPSS 7%public exploit CVSS 9.8

Tenda1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2026-0640 · Tenda AC23

Tenda AC23 PowerSaveSet sscanf buffer overflow

EPSS 3%public exploit CVSS 9.8

danny-avila1 vulnerability on this pageMax CVSS 9.1Priority 56KEV 0

CVE-2025-69222 · danny-avila LibreChat

LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions

EPSS 5%public exploit CVSS 9.1

coollabsio1 vulnerability on this pageMax CVSS 9.4Priority 55KEV 0

CVE-2025-64424 · coollabsio coolify

Colify has command injection vulnerability in project git source

EPSS 2%public exploit CVSS 9.4

MacWarrior1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2026-21875 · MacWarrior clipbucket-v5

ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Comments

EPSS 2%public exploit CVSS 9.8

OpenFlagr1 vulnerability on this pageMax CVSS 9.3Priority 53KEV 0

CVE-2026-0650 · OpenFlagr Flagr

OpenFlagr <= 1.1.18 Authentication Bypass via Prefix Whitelist Path Normalization

EPSS 2%public exploit CVSS 9.3

Red Hat1 vulnerability on this pageMax CVSS 9.6Priority 53KEV 0

CVE-2025-12543 · Red Hat Red Hat build of Apache Camel 4.14.4 for Spring Boot 3.5.11

Undertow-core: undertow http server fails to reject malformed host headers leading to potential cache poisoning and ssrf

EPSS 1%public exploit CVSS 9.6

pnpm1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-69264 · pnpm pnpm

pnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"

EPSS 1%public exploit CVSS 9.8

Sony Electronics Inc.1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2020-36923 · Sony Electronics Inc. Sony BRAVIA Digital Signage

Sony BRAVIA Digital Signage 1.7.8 Client-Side Protection Bypass via IDOR

EPSS 1.0%public exploit CVSS 9.8

Arteco-Global1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2020-36925 · Arteco-Global Arteco Web Client DVR/NVR

Arteco Web Client DVR/NVR Session ID Brute Force Authentication Bypass

EPSS 0.7%public exploit CVSS 9.8

n8n-io1 vulnerability on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2026-21858 · n8n-io n8n

n8n Vulnerable to Unauthenticated File Access via Improper Webhook Request Handling

EPSS 78%CVSS 10.0

ggml-org1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-21869 · ggml-org llama.cpp

llama.cpp has Out-of-bounds Write in llama-server

Panda3D1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-22189 · Panda3D Panda3D

Panda3D <= 1.10.16 egg-mkfont Stack Buffer Overflow

the-hideout2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2026-21854 · the-hideout tarkov-data-manager

Tarkov Data Manager Authentication Bypass vulnerability

CVE-2026-21855 · the-hideout tarkov-data-manager

Tarkov Data Manager has Unauthenticated Reflected XSS

EPSS 0.2%public exploit CVSS 9.3

code-projects2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-0606 · code-projects Online Music Site

code-projects Online Music Site Albums.php sql injection

CVE-2026-0607 · code-projects Online Music Site

code-projects Online Music Site AdminViewSongs.php sql injection

craftcms1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-68456 · craftcms cms

Unauthenticated Craft CMS users can trigger a database backup

EPSS 0.6%public exploit CVSS 9.1

InternationalColorConsortium2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-21675 · InternationalColorConsortium iccDEV

iccDEV has a Use After Free vulnerability in CIccCmm class via improper hint manager object deletion

CVE-2026-21679 · InternationalColorConsortium iccDEV

iccDEV has heap-buffer-overflow vulnerability in CIccLocalizedUnicode::GetText()

Plexus1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2020-36912 · Plexus Plexus anblick Digital Signage Management

Plexus anblick Digital Signage Management 3.1.13 Open Redirect via Pagina Parameter

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2026-0643 · projectworlds House Rental and Property Listing

projectworlds House Rental and Property Listing Signup register.php unrestricted upload

vega1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-65110 · vega vega

Vega Cross-Site Scripting (XSS) via expression abusing vlSelectionTuples function array map calls in environments with satisfactory function gadgets in the global scope

EPSS 0.5%public exploit CVSS 9.3

parallax1 vulnerability on this pageMax CVSS 9.2Priority 44KEV 0

CVE-2025-68428 · parallax jsPDF

jsPDF has Local File Inclusion/Path Traversal vulnerability

EPSS 2%CVSS 9.2

D-Link1 vulnerability on this pageMax CVSS 9.3Priority 40KEV 0

CVE-2026-0625 · D-Link DSL-2640B

D-Link DSL/DIR/DNS Authentication Bypass via DNS Configuration Endpoint

EPSS 1.0%CVSS 9.3

Themify1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-30996 · Themify Themify Sidepane WordPress Theme

Arbitrary File Upload Vulnerability in WordPress themes by Themify

EPSS 0.5%CVSS 9.9

fsylum1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-15001 · fsylum FS Registration Password

FS Registration Password <= 1.0.1 - Unauthenticated Privilege Escalation via Account Takeover

aksharsoftsolutions1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-14996 · aksharsoftsolutions AS Password Field In Default Registration Form

AS Password Field In Default Registration Form <= 2.0.0 - Unauthenticated Privilege Escalation via Account Takeover

Digital zoom studio1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-47552 · Digital zoom studio DZS Video Gallery

WordPress DZS Video Gallery plugin <= 12.37 - PHP Object Injection Vulnerability

wolfSSL2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-14942 · wolfSSL wolfSSH

Authentication Bypass