Critical vulnerability archive — page 257

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 57KEV 0

CVE-2025-13305 · D-Link DWR-M920

D-Link DWR-M920/DWR-M921/DWR-M960/DIR-822K/DIR-825M formTracerouteDiagnosticRun buffer overflow

EPSS 4%public exploit CVSS 9.8

mitre10 vulnerabilities on this pageMax CVSS 10.0Priority 51KEV 0

CVE-2025-63216 · mitre

The Itel DAB Gateway (IDGat build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices.

EPSS 0.8%public exploit CVSS 10.0

CVE-2025-63225 · mitre

The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on c…

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63217 · mitre

The Itel DAB MUX (IDMUX build c041640a) is vulnerable to Authentication Bypass due to improper JWT validation across devices.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-63747 · mitre

QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the…

EPSS 0.5%public exploit CVSS 9.8

CVE-2024-44659 · mitre

PHPGurukul Online Shopping Portal 2.0 is vulnerable to SQL Injection via the email parameter in forgot-password.php.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-63695 · mitre

DzzOffice v2.3.7 and before is vulnerable to Arbitrary File Upload in /dzz/system/ueditor/php/controller.php.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-63694 · mitre

DzzOffice v2.3.7 and before is vulnerable to SQL Injection in explorer/groupmanage.

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-63228 · mitre

The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in th…

EPSS 0.8%CVSS 9.8

CVE-2025-54321 · mitre

In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an email bombing vulner…

EPSS 0.5%CVSS 9.8

CVE-2025-56643 · mitre

Requarks Wiki.js 2.5.307 does not properly revoke or invalidate active JWT tokens when a user logs out.

EPSS 0.4%CVSS 9.1

lsfusion2 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-13262 · lsfusion platform

lsfusion platform UploadFileRequestHandler.java UploadFileRequestHandler path traversal

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-13265 · lsfusion platform

lsfusion platform ZipUtils.java unpackFile path traversal

EPSS 0.6%public exploit CVSS 9.1

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-13344 · SourceCodester Train Station Ticketing System

SourceCodester Train Station Ticketing System ajax.php sql injection

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-13248 · SourceCodester Patients Waiting Area Queue Management System

SourceCodester Patients Waiting Area Queue Management System api_patient_schedule.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13267 · SourceCodester Dental Clinic Appointment Reservation System

SourceCodester Dental Clinic Appointment Reservation System success.php sql injection

EPSS 0.4%public exploit CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-13240 · code-projects Student Information System

code-projects Student Information System searchquery.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13241 · code-projects Student Information System

code-projects Student Information System index.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13242 · code-projects Student Information System

code-projects Student Information System register.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13277 · code-projects Nero Social Networking Site

code-projects Nero Social Networking Site friendsphoto.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13302 · code-projects Courier Management System

code-projects Courier Management System add-new-officer.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13303 · code-projects Courier Management System

code-projects Courier Management System search-edit.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13323 · code-projects Simple Pizza Ordering System

code-projects Simple Pizza Ordering System listorder.php sql injection

EPSS 0.5%CVSS 9.8

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13271 · Campcodes School Fees Payment Management System

Campcodes School Fees Payment Management System ajax.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13272 · Campcodes School Fees Payment Management System

Campcodes School Fees Payment Management System manage_course.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13291 · Campcodes Supplier Management System

Campcodes Supplier Management System confirm_order.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CodeAstro1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13280 · CodeAstro Simple Inventory System

CodeAstro Simple Inventory System Login index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode9 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13237 · itsourcecode Inventory Management System

itsourcecode Inventory Management System LogSignModal.PHP sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13257 · itsourcecode Inventory Management System

itsourcecode Inventory Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13285 · itsourcecode Online Voting System

itsourcecode Online Voting System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13297 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13298 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-13299 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13300 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13301 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System controller.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-13236 · itsourcecode Inventory Management System

itsourcecode Inventory Management System index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-13247 · PHPGurukul Tourism Management System

PHPGurukul Tourism Management System user-bookings.php sql injection

EPSS 0.4%public exploit CVSS 9.8

Unknown1 vulnerability on this pageMax CVSS 9.0Priority 47KEV 0

CVE-2025-9501 · Unknown W3 Total Cache

W3 Total Cache < 2.8.13 - Unauthenticated Command Injection

EPSS 22%CVSS 9.0

ThinPLUS1 vulnerability on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-13284 · ThinPLUS ThinPLUS

ThinPLUS｜ThinPLUS - OS Command Injection

EPSS 2%CVSS 9.8

Rumpus2 vulnerabilities on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-55055 · Rumpus FTP Server

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

EPSS 0.8%CVSS 9.8

CVE-2025-55058 · Rumpus FTP Server

CWE-20 Improper Input Validation

EPSS 0.3%CVSS 9.8

SolarWinds3 vulnerabilities on this pageMax CVSS 9.1Priority 41KEV 0

CVE-2025-40549 · SolarWinds Serv-U

SolarWinds Serv-U Path Restriction Bypass Vulnerability

EPSS 1%CVSS 9.1

CVE-2025-40547 · SolarWinds Serv-U

SolarWinds Serv-U Logic Abuse - Remote Code Execution Vulnerability

EPSS 1.0%CVSS 9.1

CVE-2025-40548 · SolarWinds Serv-U

SolarWinds Serv-U Broken Access Control - Remote Code Execution Vulnerability

EPSS 0.8%CVSS 9.1

METZ CONNECT2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-41733 · METZ CONNECT Energy-Controlling EWIO2-M

Possible malfunction credential injection

EPSS 0.6%CVSS 9.8

CVE-2025-41734 · METZ CONNECT Energy-Controlling EWIO2-M

Unauthenticated Local File Inclusion in php module

EPSS 0.6%CVSS 9.8

Informatica del Este3 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-41348 · Informatica del Este WinPlus

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

EPSS 0.6%CVSS 9.8

CVE-2025-41347 · Informatica del Este WinPlus

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

EPSS 0.4%CVSS 9.8

CVE-2025-41346 · Informatica del Este WinPlus

Stored Cross-Site Scripting (XSS) in WinPlus by Informática del Este

EPSS 0.3%CVSS 9.8

BEIMS1 vulnerability on this pageMax CVSS 9.4Priority 33KEV 0

CVE-2025-10460 · BEIMS Contractor Web

Unsanitized parameter input leading to SQL Injection vulnerability

EPSS 0.3%CVSS 9.4

The archive.