The archive.

CVE-2025-14590 · code-projects Prison Management System

code-projects Prison Management System search1.php sql injection

opensolution1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2024-58308 · opensolution Quick.CMS

Quick.CMS 6.7 SQL Injection Authentication Bypass via Admin Login

EPSS 0.7%public exploit CVSS 9.8

xbtitfm1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2024-58309 · xbtitfm xbtitFM

xbtitFM 4.1.18 Unauthenticated SQL Injection in shoutedit.php

EPSS 0.6%public exploit CVSS 9.8

campcodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14583 · campcodes Online Student Enrollment System

campcodes Online Student Enrollment System register.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-65854 · mitre

Insecure permissions in the scheduled tasks feature of MineAdmin v3.x allows attackers to execute arbitrary commands and execute a full a…

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-66430 · mitre

Plesk 18.0 has Incorrect Access Control.

EPSS 0.6%CVSS 9.1

cszcms1 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2024-58307 · cszcms CSZCMS

CSZCMS 1.3.0 Authenticated SQL Injection via Members View Endpoint

EPSS 0.5%public exploit CVSS 9.3

dormakaba1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-58311 · dormakaba Dormakaba Saflok System 6000

Dormakaba Saflok System 6000 Key Generation Cryptographic Weakness

itsourcecode5 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14585 · itsourcecode COVID Tracking System

itsourcecode COVID Tracking System page sql injection

CVE-2025-14578 · itsourcecode Student Management System

itsourcecode Student Management System update_account.php sql injection

CVE-2025-14584 · itsourcecode COVID Tracking System

itsourcecode COVID Tracking System Admin Login login.php sql injection

CVE-2025-14587 · itsourcecode Online Pet Shop Management System

itsourcecode Online Pet Shop Management System available.php sql injection

CVE-2025-14588 · itsourcecode Student Management System

itsourcecode Student Management System update_program.php sql injection

kidaze2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14566 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem reg.php sql injection

CVE-2025-14565 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem login1.php sql injection

projectworlds2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14570 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System view_admin.php sql injection

CVE-2025-14571 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System borrow_book.php sql injection

recorp1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-11693 · recorp Export WordPress Pages to Static HTML & PDF — Static Site Export

Export WP Page to Static HTML & PDF <= 4.3.4 - Unauthenticated Cookie Exposure via Log File

EPSS 2%CVSS 9.8

Elements1 vulnerability on this pageMax CVSS 9.3Priority 44KEV 0

CVE-2024-58290 · Elements Xhibiter NFT Marketplace

Xhibiter NFT Marketplace 1.10.2 SQL Injection via Collections Endpoint

EPSS 0.4%public exploit CVSS 9.3

purei1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2024-58301 · purei Purei CMS

Purei CMS 1.0 SQL Injection via Multiple Vulnerable Endpoints

EPSS 0.3%public exploit CVSS 9.3

jayarsiech1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-14440 · jayarsiech JAY Login & Register

JAY Login & Register <= 2.4.01 - Authentication Bypass via Cookie

EPSS 0.8%CVSS 9.8

ShaneIsrael1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-67728 · ShaneIsrael fireshare

Fireshare Public Uploads feature is vulnerable to OS Command Injection (RCE)

EPSS 0.7%CVSS 9.8

sh1zen1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-14344 · sh1zen Multi Uploader for Gravity Forms

Multi Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File Deletion

EPSS 0.5%CVSS 9.8

Apache Software Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-54947 · Apache Software Foundation Apache StreamPark

Apache StreamPark: Use hard-coded key vulnerability

EPSS 0.5%CVSS 9.8

CVE-2025-58130 · Apache Software Foundation Apache Fineract

Apache Fineract: Server Key not masked

EPSS 0.4%CVSS 9.1

Apple2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-46287 · Apple iOS and iPadOS

An inconsistent user interface issue was addressed with improved state management.

EPSS 0.5%CVSS 9.8

CVE-2025-43416 · Apple macOS

A logic issue was addressed with improved restrictions.

node-saml1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-54369 · node-saml node-saml

Node-SAML SAML Authentication Bypass

EPSS 0.5%CVSS 9.3

parse-community1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-67727 · parse-community parse-server

Parse Server GitHub CI workflow vulnerable to RCE through Improper Privilege Management

rupok981 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-10738 · rupok98 URL Shortener Plugin For WordPress

URL Shortener Plugin For WordPress <= 3.0.7 - Unauthenticated SQL Injection

AzeoTech3 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-66590 · AzeoTech DAQFactory

Out-of-bounds Write vulnerability in AzeoTech DAQFactory

CVE-2025-66588 · AzeoTech DAQFactory

Access of Uninitialized Pointer vulnerability in AzeoTech DAQFactory

CVE-2025-66589 · AzeoTech DAQFactory

Out-of-bounds Read vulnerability in AzeoTech DAQFactory

EPSS 0.4%CVSS 9.1

lazycoders1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-12963 · lazycoders LazyTasks – Project & Task Management with Collaboration, Kanban and Gantt Chart

LazyTasks – Project & Task Management with Collaboration, Kanban and Gantt Chart <= 1.2.29 - Missing Authorization to Uanuthenticated Privilege Escalation

1Panel-dev1 vulnerability on this pageMax CVSS 10.0Priority 35KEV 0

CVE-2025-66419 · 1Panel-dev MaxKB

MaxKB vulnerable to privilege escalation through sandbox bypass

EPSS 0.3%CVSS 10.0

Growatt5 vulnerabilities on this pageMax CVSS 9.8Priority 34KEV 0

CVE-2025-36747 · Growatt ShineLan-X

Hardcoded FTP Credentials within the firmware

CVE-2025-36752 · Growatt ShineLan-X

Undocumented backup Account and No Password Configuration Capability

CVE-2025-36753 · Growatt ShineLan-X

SWD Interface Open on Growatt ShineLan-X