Critical vulnerability archive — page 251

Langflow1 vulnerability on this pageMax CVSS 9.4Priority 98KEV 1

CVE-2025-34291 · Langflow Langflow

Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

KEV · due 4 Jun EPSS 93%public exploit SSVC act CVSS 9.4

ajitdas1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-12673 · ajitdas Flex QR Code Generator

Flex QR Code Generator <= 1.2.7 - Unauthenticated Arbitrary File Upload

EPSS 0.8%public exploit CVSS 9.8

UTT2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-14141 · UTT 进取 520W

UTT 进取 520W formArpBindConfig strcpy buffer overflow

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-14191 · UTT 进取 512W

UTT 进取 512W formP2PLimitConfig strcpy buffer overflow

EPSS 0.9%public exploit CVSS 9.8

Yottamaster1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-14224 · Yottamaster DM2

Yottamaster DM2/DM3/DM200 File Upload path traversal

EPSS 0.8%public exploit CVSS 9.8

mitre8 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-61318 · mitre

Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.

EPSS 0.8%public exploit CVSS 9.1

CVE-2025-65741 · mitre

Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63721 · mitre

HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API…

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-64081 · mitre

SQL injection vulnerability in /php/api_patient_schedule.php in SourceCodester Patients Waiting Area Queue Management System v1 allows at…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-65548 · mitre

NUT-14 allows cashu tokens to be created with a preimage hash.

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-65882 · mitre

An issue was discovered in openmptcprouter thru 0.64 in file common/package/utils/sys-upgrade-helper/src/tools/sysupgrade.c in function c…

EPSS 0.7%CVSS 9.8

CVE-2025-63742 · mitre

SQL Injection vulnerability in function setwxqyAction in file webmain/task/api/loginAction.php in Xinhu Rainrock RockOA 2.7.0 allowing at…

EPSS 0.4%CVSS 9.8

CVE-2025-65849 · mitre

A cryptanalytic break in Altcha Proof-of-Work obfuscation mode version 0.8.0 and later allows for remote visitors to recover the Proof-of…

EPSS 0.2%CVSS 9.1

ThinkInAIXYZ1 vulnerability on this pageMax CVSS 9.7Priority 49KEV 0

CVE-2025-66481 · ThinkInAIXYZ deepchat

DeepChat's Incomplete XSS Fix Allows RCE through Mermaid Content

EPSS 0.6%public exploit CVSS 9.7

gofiber1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-66565 · gofiber utils

Fiber Utils UUIDv4 and UUID Silent Fallback to Predictable Values

EPSS 0.5%public exploit CVSS 9.8

itsourcecode4 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14256 · itsourcecode Student Management System

itsourcecode Student Management System newcurriculm.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-14257 · itsourcecode Student Management System

itsourcecode Student Management System newrecord.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-14226 · itsourcecode Student Management System

itsourcecode Student Management System edit_user.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14258 · itsourcecode Student Management System

itsourcecode Student Management System newsubject.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Sobey1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-14182 · Sobey Media Convergence System

Sobey Media Convergence System upload path traversal

EPSS 0.5%public exploit CVSS 9.8

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14209 · Campcodes School File Management System

Campcodes School File Management System update_query.php sql injection

EPSS 0.4%public exploit CVSS 9.8

code-projects12 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14215 · code-projects Currency Exchange System

code-projects Currency Exchange System edit.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14216 · code-projects Currency Exchange System

code-projects Currency Exchange System viewserial.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14217 · code-projects Currency Exchange System

code-projects Currency Exchange System edittrns.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14218 · code-projects Currency Exchange System

code-projects Currency Exchange System editotheraccount.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14223 · code-projects Simple Leave Manager

code-projects Simple Leave Manager request.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14248 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart adminlogin.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14249 · code-projects Online Ordering System

code-projects Online Ordering System user_school.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14250 · code-projects Online Ordering System

code-projects Online Ordering System user_contact.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14251 · code-projects Online Ordering System

code-projects Online Ordering System Admin Login admin sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14285 · code-projects Employee Profile Management System

code-projects Employee Profile Management System edit_personnel.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14246 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart settings.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14247 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart additems.php sql injection

EPSS 0.4%public exploit CVSS 9.8

projectworlds3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14210 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System delete_member.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14211 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System delete_book.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-14212 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System member_search.php sql injection

EPSS 0.4%public exploit CVSS 9.8

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-14245 · VulDB

IdeaCMS Coupon.php whereRaw sql injection

EPSS 0.4%public exploit CVSS 9.8

Philipinho1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14227 · Philipinho Simple-PHP-Blog

Philipinho Simple-PHP-Blog edit.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Verysync1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-14199 · Verysync 微力同步

Verysync 微力同步 Web Administration text.txt unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

Linux5 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

n8n-io1 vulnerability on this pageMax CVSS 9.4Priority 39KEV 0

CVE-2025-65964 · n8n-io n8n

n8n Vulnerable to Remote Code Execution via Git Node Custom Pre-Commit Hook

EPSS 0.7%CVSS 9.4

10web1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2025-13377 · 10web 10Web Booster – Website speed optimization, Cache & Page Speed optimizer

10Web Booster <= 2.32.7 - Authenticated (Subscriber+) Arbitrary Folder Deletion via two_clear_page_cache

EPSS 0.5%CVSS 9.6

Infinera2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-27020 · Infinera MTC-9

Improper configuration of SSH service in Infinera MTC-9

EPSS 0.5%CVSS 9.8

CVE-2025-27019 · Infinera MTC-9

Remote shell service (RSH) in Infinera MTC-9

EPSS 0.4%CVSS 9.8

Google1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-48626 · Google Android

In multiple locations, there is a possible way to launch an application from the background due to a precondition check failure.

EPSS 0.4%CVSS 9.8

yhirose1 vulnerability on this pageMax CVSS 10.0Priority 36KEV 0

CVE-2025-66570 · yhirose cpp-httplib

cpp-httplib Untrusted HTTP Header Handling: Internal Header Shadowing (REMOTE/LOCAL)

EPSS 0.3%CVSS 10.0

The archive.