The archive.

CVE-2025-63525 · mitre

An issue was discovered in Blood Bank Management System 1.0 allowing authenticated attackers to perform actions with escalated privileges…

EPSS 0.5%public exploit CVSS 9.6

CVE-2025-65656 · mitre

dcat-admin v2.2.3-beta and before is vulnerable to file inclusion in admin/src/Extend/VersionManager.php.

CVE-2025-65358 · mitre

Edoc-doctor-appointment-system v1.0.1 was discovered to contain SQl injection vulnerability via the 'docid' parameter at /admin/appointme…

CVE-2025-51683 · mitre

A blind SQL Injection (SQLi) vulnerability in mJobtime v15.7.2 allows unauthenticated attackers to execute arbitrary SQL statements via a…

EPSS 2%CVSS 9.8

CVE-2025-59703 · mitre

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a Ph…

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-63532 · mitre

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the cancel.php component.

EPSS 0.4%public exploit CVSS 9.6

CVE-2025-63535 · mitre

A SQL injection vulnerability exists in the Blood Bank Management System 1.0 within the abs.php component.

EPSS 0.4%public exploit CVSS 9.6

CVE-2025-60854 · mitre

A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below.

EPSS 1%CVSS 9.8

CVE-2025-65836 · mitre

PublicCMS V5.202506.b is vulnerable to SSRF.

EPSS 0.4%public exploit CVSS 9.1

CVE-2025-59695 · mitre

Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), allow a us…

EPSS 0.7%CVSS 9.8

CVE-2025-65896 · mitre

SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.

EPSS 0.5%CVSS 9.8

CVE-2025-58386 · mitre

In Terminalfour 8 through 8.4.1.1, the userLevel parameter in the user management function is not subject to proper server-side authoriza…

getgrav1 vulnerability on this pageMax CVSS 9.6Priority 54KEV 0

CVE-2025-66301 · getgrav grav

Grav ihas Broken Access Control which allows an Editor to modify the page's YAML Frontmatter to alter form processing actions

EPSS 1%public exploit CVSS 9.6

jvde-github1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-66216 · jvde-github AIS-catcher

AIS-catcher has a Buffer Overflow vulnerability in `AIS::Message` leading to DoS/RCE

moxi1597532 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-13814 · moxi159753 Mogu Blog v2

moxi159753 Mogu Blog v2 uploadPicsByUrl LocalFileServiceImpl.uploadPictureByUrl server-side request forgery

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-13815 · moxi159753 Mogu Blog v2

moxi159753 Mogu Blog v2 pictures unrestricted upload

taosir3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-13786 · taosir WTCMS

taosir WTCMS index.php fetch code injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-13782 · taosir WTCMS

taosir WTCMS SlideController SlideController.class.php delete sql injection

CVE-2025-13783 · taosir WTCMS

taosir WTCMS CommentadminController CommentadminController.class.php delete sql injection

EPSS 0.3%public exploit CVSS 9.8

nutzam1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13806 · nutzam NutzBoot

nutzam NutzBoot Transaction API EthModule.java improper authorization

Chanjet1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13788 · Chanjet CRM

Chanjet CRM upgradeattribute.php sql injection

flipped-aurora1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-66410 · flipped-aurora gin-vue-admin

Gin-vue-admin has an arbitrary file deletion vulnerability

EPSS 0.6%public exploit CVSS 9.1

VulDB1 vulnerability on this pageMax CVSS 9.1Priority 44KEV 0

CVE-2025-13787 · VulDB

ZenTao File control.php delete privileges management

EPSS 0.4%public exploit CVSS 9.1

SGE-PLC1000 SGE-PLC507 vulnerabilities on this pageMax CVSS 10.0Priority 43KEV 0

CVE-2025-11779 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50

EPSS 1%CVSS 9.8

CVE-2025-11783 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50

EPSS 0.6%CVSS 9.8

CVE-2025-11778 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50

EPSS 0.4%CVSS 10.0

CVE-2025-11782 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50

CVE-2025-11784 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50

CVE-2025-11785 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnerability in Circutor SGE-PLC1000/SGE-PLC50

CVE-2025-11780 · SGE-PLC1000 SGE-PLC50 Circutor

Stack-based buffer overflow vulnreability in Circutor SGE-PLC1000/SGE-PLC50

EPSS 0.3%CVSS 9.8

Avast1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-3500 · Avast Antivirus

Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

EPSS 0.5%CVSS 9.8

Sprecher Automation2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-41742 · Sprecher Automation SPRECON-E-C

Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components

EPSS 0.5%CVSS 9.8

CVE-2025-41744 · Sprecher Automation SPRECON-E-C

Sprecher Automation: SPRECON-E series has static default key material for TLS connections

EPSS 0.4%CVSS 9.1

OpenVPN1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-12106 · OpenVPN OpenVPN

Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing…

EPSS 0.6%CVSS 9.1

orangehrm1 vulnerability on this pageMax CVSS 9.0Priority 37KEV 0

CVE-2025-66224 · orangehrm orangehrm

OrangeHRM is Vulnerable to Code Execution Through Arbitrary File Write from Sendmail Parameter Injection

EPSS 0.6%CVSS 9.0

phpface1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-13615 · phpface StreamTube Core

StreamTube Core <= 4.78 - Unauthenticated Arbitrary User Password Change

Portkey-AI1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-66405 · Portkey-AI gateway

Portkey.ai Gateway: Server-Side Request Forgery (SSRF) in Custom Host