The archive.

CVE-2025-66250 · DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter

Unauthenticated Arbitrary File Upload (status_contents.php)

EPSS 0.5%CVSS 9.8

CVE-2025-66251 · DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter

Unauthenticated Path Traversal with Arbitrary File Deletion

EPSS 0.5%CVSS 9.1

SDMC1 vulnerability on this pageMax CVSS 9.3Priority 52KEV 0

CVE-2025-8890 · SDMC NE6037

Authenticated RCE in SDMC NE6037 router

EPSS 1%public exploit CVSS 9.3

factionsecurity1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-66022 · factionsecurity faction

FACTION Unauthenticated Custom Extension Upload leads to RCE

EPSS 0.7%public exploit CVSS 9.8

fonttools1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-66034 · fonttools fonttools

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

EPSS 0.6%public exploit CVSS 9.8

mitre9 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-50433 · mitre

An issue was discovered in imonnit.com (2025-04-24) allowing malicious actors to gain escalated privileges via crafted password reset to…

CVE-2025-65235 · mitre

OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter…

CVE-2025-65236 · mitre

OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /…

CVE-2025-50399 · mitre

FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter password.

CVE-2025-50402 · mitre

FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password.

CVE-2025-55469 · mitre

Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.

CVE-2025-65276 · mitre

An unauthenticated administrative access vulnerability exists in the open-source HashTech project (https://github.com/henzljw/hashtech) 1…

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-65669 · mitre

An issue was discovered in classroomio 0.1.13.

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-26155 · mitre

NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.

EPSS 0.6%CVSS 9.8

ricardoboss1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-65112 · ricardoboss PubNet

PubNet Critical Authentication Bypass Allows Unauthenticated Package Upload and Identity Spoofing

Zenitel4 vulnerabilities on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-64126 · Zenitel TCIV-3+

Zenitel TCIV-3+ OS Command Injection

EPSS 2%CVSS 10.0

CVE-2025-64127 · Zenitel TCIV-3+

Zenitel TCIV-3+ OS Command Injection

EPSS 2%CVSS 10.0

CVE-2025-64128 · Zenitel TCIV-3+

Zenitel TCIV-3+ OS Command Injection

EPSS 2%CVSS 10.0

CVE-2025-64130 · Zenitel TCIV-3+

Zenitel TCIV-3+ Cross-site Scripting

EPSS 1.0%CVSS 9.8

cursor1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-62354 · cursor cursor

Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to exec…

EPSS 1%CVSS 9.8

soportecibeles2 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-13595 · soportecibeles CIBELES AI

CIBELES AI <= 1.10.8 - Unauthenticated Arbitrary File Upload

EPSS 1%CVSS 9.8

CVE-2025-13597 · soportecibeles AI Feeds

AI Feeds <= 1.0.11 - Unauthenticated Arbitrary File Upload

EPSS 1%CVSS 9.8

Apache Software Foundation1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-59390 · Apache Software Foundation Apache Druid

Apache Druid: Kerberos authenticaton chooses a cryptographically unsecure secret if not configured explicitly.

Microsoft2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-64656 · Microsoft Azure App Gateway

Azure Application Gateway Elevation of Privilege Vulnerability

CVE-2025-64657 · Microsoft Azure App Gateway

Azure Application Gateway Elevation of Privilege Vulnerability

Elated Themes2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-13539 · Elated Themes FindAll Membership

FindAll Membership <= 1.0.4 - Authentication Bypass via Social Login

EPSS 0.5%CVSS 9.8

CVE-2025-13538 · Elated Themes FindAll Listing

FindAll Listing <= 1.0.5 - Unauthenticated Privilege Escalation

Mattermost2 vulnerabilities on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-12421 · Mattermost Mattermost

Account Takeover via Code Exchange Endpoint

EPSS 0.4%CVSS 9.9

CVE-2025-12419 · Mattermost Mattermost

Account takeover on OAuth/OpenID-enabled servers

EPSS 0.4%CVSS 9.9

Ashlar-Vellum1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-65085 · Ashlar-Vellum Cobalt

Heap-based Buffer Overflow in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

cerebrate-project1 vulnerability on this pageMax CVSS 9.4Priority 36KEV 0

CVE-2025-66385 · cerebrate-project Cerebrate

UsersController::edit in Cerebrate before 1.30 allows an authenticated non-privileged user to escalate their privileges (e.g., obtain a h…

EPSS 0.5%CVSS 9.4

DirectoryThemes1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-13675 · DirectoryThemes Tiger

Tiger <= 101.2.1 - Unauthenticated Privilege Escalation

Qode Interactive1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-13540 · Qode Interactive Tiare Membership

Tiare Membership <= 1.2 - Unauthenticated Privilege Escalation