Critical vulnerability archive — page 269

FlowiseAI1 vulnerability on this pageMax CVSS 10.0Priority 59KEV 0

CVE-2025-61913 · FlowiseAI Flowise

Flowise is vulnerable to arbitrary file read, arbitrary file write

EPSS 14%public exploit CVSS 10.0

D-Link2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-11407 · D-Link DI-7001 MINI

D-Link DI-7001 MINI upgrade_filter.asp os command injection

EPSS 4%public exploit CVSS 9.8

CVE-2025-11408 · D-Link DI-7001 MINI

D-Link DI-7001 MINI dbsrv.asp buffer overflow

EPSS 0.9%public exploit CVSS 9.8

Tenda2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-11418 · Tenda CH22

Tenda CH22 HTTP Request AdvSetWrlsafeset formWrlsafeset stack-based overflow

EPSS 7%public exploit CVSS 9.8

CVE-2025-11423 · Tenda CH22

Tenda CH22 SafeEmailFilter formSafeEmailFilter memory corruption

EPSS 0.9%public exploit CVSS 9.8

wonderwhy-er2 vulnerabilities on this pageMax CVSS 9.8Priority 58KEV 0

CVE-2025-11491 · wonderwhy-er DesktopCommanderMCP

wonderwhy-er DesktopCommanderMCP command-manager.ts CommandManager os command injection

EPSS 4%public exploit CVSS 9.8

CVE-2025-11490 · wonderwhy-er DesktopCommanderMCP

wonderwhy-er DesktopCommanderMCP Absolute Path command-manager.ts extractBaseCommand os command injection

EPSS 4%public exploit CVSS 9.8

Melis Technology3 vulnerabilities on this pageMax CVSS 9.3Priority 55KEV 0

CVE-2025-10353 · Melis Technology Melis Platform

Missing Authorization vulnerability in Melis Platform

EPSS 3%public exploit CVSS 9.3

CVE-2025-10351 · Melis Technology Melis Platform

SQL injection vulnerability in Melis Platform

EPSS 0.4%public exploit CVSS 9.3

CVE-2025-10352 · Melis Technology Melis Platform

Missing Authorization vulnerability in Melis Platform

EPSS 0.3%public exploit CVSS 9.3

Campcodes1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11422 · Campcodes Advanced Online Voting Management System

Campcodes Advanced Online Voting Management System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

code-projects7 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11424 · code-projects Web-Based Inventory and POS System

code-projects Web-Based Inventory and POS System login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11513 · code-projects E-Commerce Website

code-projects E-Commerce Website supplier_update.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11420 · code-projects E-Commerce Website

code-projects E-Commerce Website edit_order_details.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11431 · code-projects Web-Based Inventory and POS System

code-projects Web-Based Inventory and POS System transaction.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11508 · code-projects Voting System

code-projects Voting System voters_add.php unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11509 · code-projects E-Commerce Website

code-projects E-Commerce Website product_add.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11511 · code-projects E-Commerce Website

code-projects E-Commerce Website supplier_add.php sql injection

EPSS 0.4%public exploit CVSS 9.8

itsourcecode2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11432 · itsourcecode Leave Management System

itsourcecode Leave Management System reset.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11434 · itsourcecode Student Transcript Processing System

itsourcecode Student Transcript Processing System login.php sql injection

EPSS 0.4%public exploit CVSS 9.8

PHPGurukul6 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11503 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System manage-services.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11505 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System new-appointment.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11415 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System customer-list.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11416 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System invoices.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11506 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System search-appointment.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11507 · PHPGurukul Beauty Parlour Management System

PHPGurukul Beauty Parlour Management System search-invoices.php sql injection

EPSS 0.4%public exploit CVSS 9.8

SourceCodester19 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11471 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System edit_customer.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11473 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System edit_curr.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-11430 · SourceCodester Simple E-Commerce Bookstore

SourceCodester Simple E-Commerce Bookstore cart.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11474 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System edit_booking.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11476 · SourceCodester Simple E-Commerce Bookstore

SourceCodester Simple E-Commerce Bookstore index.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11477 · SourceCodester Wedding Reservation Management System

SourceCodester Wedding Reservation Management System global.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11479 · SourceCodester Wedding Reservation Management System

SourceCodester Wedding Reservation Management System function.php insertReservation sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11480 · SourceCodester Simple E-Commerce Bookstore

SourceCodester Simple E-Commerce Bookstore register.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11399 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System save_room.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11400 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System del_room.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11401 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System save_curr.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11402 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System del_curr.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11403 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System del_booking.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11405 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System del_tax.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11469 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System save_customer.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11486 · SourceCodester Farm Management System

SourceCodester Farm Management System buyNow.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11487 · SourceCodester Farm Management System

SourceCodester Farm Management System uploadProduct.php sql injection

EPSS 0.4%public exploit CVSS 9.8

CVE-2025-11472 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System edit_room.php sql injection

EPSS 0.5%CVSS 9.8

CVE-2025-11404 · SourceCodester Hotel and Lodge Management System

SourceCodester Hotel and Lodge Management System save_tax.php sql injection

EPSS 0.4%CVSS 9.8

projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11475 · projectworlds Advanced Library Management System

projectworlds Advanced Library Management System view_member.php sql injection

EPSS 0.4%public exploit CVSS 9.8

varunsardana0041 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11481 · varunsardana004 Blood-Bank-And-Donation-Management-System

varunsardana004 Blood-Bank-And-Donation-Management-System donate_blood.php sql injection

EPSS 0.4%public exploit CVSS 9.8

jackdewey1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-10587 · jackdewey Community Events

Community Events <= 1.5.1 - Unauthenticated SQL Injection

EPSS 0.4%CVSS 9.8

B&R Industrial Automation1 vulnerability on this pageMax CVSS 10.0Priority 34KEV 0

CVE-2025-3450 · B&R Industrial Automation Automation Runtime

Automation Runtime SDM requests may impact system

EPSS 0.3%CVSS 10.0

AWS1 vulnerability on this pageMax CVSS 9.3Priority 30KEV 0

CVE-2025-11462 · AWS Client VPN

Local Privilege Escalation Vulnerability in AWS Client VPN macOS Client

EPSS 0.2%CVSS 9.3

The archive.