The archive.

CVE-2025-51743 · mitre

An issue was discovered in jishenghua JSH_ERP 2.3.1.

CVE-2025-51744 · mitre

An issue was discovered in jishenghua JSH_ERP 2.3.1.

CVE-2025-51745 · mitre

An issue was discovered in jishenghua JSH_ERP 2.3.1.

CVE-2025-51746 · mitre

An issue was discovered in jishenghua JSH_ERP 2.3.1.

CVE-2025-61168 · mitre

An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.

CVE-2025-63729 · mitre

An issue was discovered in Syrotech SY-GPON-1110-WDONT SYRO_3.7L_3.1.02-240517 allowing attackers to exctract the SSL Private Key, CA Cer…

EPSS 0.1%public exploit CVSS 9.0

CVE-2025-64063 · mitre

Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests.

Sneeit1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-6389 · Sneeit Sneeit Framework

Sneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback

EPSS 76%CVSS 9.8

wazuh1 vulnerability on this pageMax CVSS 9.1Priority 49KEV 0

CVE-2025-30201 · wazuh wazuh

Wazuh NetNTLMv2 Hash Theft In Multiple Centralized Configuration Capabilities

EPSS 0.8%public exploit CVSS 9.1

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13572 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System delete_admin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

ashraf-kabir2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13544 · ashraf-kabir travel-agency

ashraf-kabir travel-agency customer_register.php unrestricted upload

CVE-2025-13546 · ashraf-kabir travel-agency

ashraf-kabir travel-agency Search results.php sql injection

ASUS1 vulnerability on this pageMax CVSS 9.2Priority 47KEV 0

CVE-2025-59366 · ASUS Router

An authentication-bypass vulnerability exists in AiCloud.

EPSS 12%CVSS 9.2

Campcodes4 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13554 · Campcodes Supplier Management System

Campcodes Supplier Management System Login index.php sql injection

CVE-2025-13555 · Campcodes School File Management System

Campcodes School File Management System Login index.php sql injection

CVE-2025-13556 · Campcodes Online Polling System

Campcodes Online Polling System checklogin.php sql injection

CVE-2025-13557 · Campcodes Online Polling System

Campcodes Online Polling System registeracc.php sql injection

code-projects3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13578 · code-projects Library System

code-projects Library System Login index.php sql injection

CVE-2025-13582 · code-projects Jonnys Liquor

code-projects Jonnys Liquor GET Parameter detail.php sql injection

CVE-2025-13583 · code-projects Question Paper Generator

code-projects Question Paper Generator POST Parameter signupscript.php sql injection

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13585 · itsourcecode COVID Tracking System

itsourcecode COVID Tracking System login.php sql injection

CVE-2025-13485 · itsourcecode Online File Management System

itsourcecode Online File Management System ajax.php sql injection

ml-explore1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-62608 · ml-explore mlx

MLX has heap-buffer-overflow in load()

EPSS 0.6%public exploit CVSS 9.1

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13560 · SourceCodester Company Website CMS

SourceCodester Company Website CMS reset-password.php sql injection

CVE-2025-13561 · SourceCodester Company Website CMS

SourceCodester Company Website CMS index.php sql injection

CVE-2025-13565 · SourceCodester Inventory Management System

SourceCodester Inventory Management System resetPassword.php password recovery

EPSS 0.5%public exploit CVSS 9.1

lunary-ai1 vulnerability on this pageMax CVSS 9.3Priority 46KEV 0

CVE-2025-9803 · lunary-ai lunary-ai/lunary

Improper Authentication in lunary-ai/lunary

EPSS 0.5%public exploit CVSS 9.3

elextensions1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-11456 · elextensions ELEX WordPress HelpDesk & Customer Ticketing System

ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.1 - Unauthenticated Arbitrary File Upload

EPSS 0.8%CVSS 9.8

Microsoft1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-62207 · Microsoft Azure Monitor Control Service

Azure Monitor Elevation of Privilege Vulnerability

EPSS 0.8%CVSS 9.8

dajiaji1 vulnerability on this pageMax CVSS 9.1Priority 40KEV 0

CVE-2025-64767 · dajiaji hpke-js

hpke-js reuses AEAD nonces

EPSS 0.2%public exploit CVSS 9.1

Intercom, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-62691 · Intercom, Inc. Security Point (Windows) of MaLion

Security Point (Windows) of MaLion and MaLionCloud contains a stack-based buffer overflow vulnerability in processing HTTP headers.

EPSS 0.7%CVSS 9.8

CVE-2025-64693 · Intercom, Inc. Security Point (Windows) of MaLion

Security Point (Windows) of MaLion and MaLionCloud contains a heap-based buffer overflow vulnerability in processing Content-Length.

EPSS 0.7%CVSS 9.8

anthropics1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-64755 · anthropics claude-code

@anthropic-ai/claude-code has Sed Command Validation Bypass that Allows Arbitrary File Writes

EPSS 0.6%CVSS 9.8

Beijing Star-Net Ruijie Network Technology Co., Ltd.1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2023-7330 · Beijing Star-Net Ruijie Network Technology Co., Ltd. NBR Series Routers

Ruijie Networks NBR Routers Unauthenticated Arbitrary File Upload via fileupload.php

EPSS 0.7%CVSS 9.3

FluentBit1 vulnerability on this pageMax CVSS 9.1Priority 38KEV 0

CVE-2025-12977 · FluentBit Fluent Bit

CVE-2025-12977

EPSS 0.8%CVSS 9.1

HashiCorp1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-13357 · HashiCorp Tooling

Vault Terraform Provider Applied Incorrect Defaults for LDAP Auth Method

SEIKO EPSON CORPORATION1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-64310 · SEIKO EPSON CORPORATION EPSON WebConfig for SEIKO EPSON Projector Products

EPSON WebConfig and Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts.

Linux1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-40212 · Linux Linux

nfsd: fix refcount leak in nfsd_set_fh_dentry()

venusweb1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-13559 · venusweb EduKart Pro

EduKart Pro <= 1.0.3 - Unauthenticated Privilege Escalation

Ashlar-Vellum1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-65084 · Ashlar-Vellum Cobalt

Out-of-bounds Write in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, Cobalt Share

Unknown1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-11127 · Unknown Mstoreapp Mobile App

Mstoreapp Mobile (App <= 2.08, Multivendor <= 9.0.1) - Unauthenticated Privilege Escalation