The archive.

CVE-2025-11062 · Campcodes Online Learning Management System

Campcodes Online Learning Management System save_student.php sql injection

CVE-2025-11063 · Campcodes Online Learning Management System

Campcodes Online Learning Management System edit_department.php sql injection

CVE-2025-11064 · Campcodes Online Learning Management System

Campcodes Online Learning Management System teachers.php sql injection

CVE-2025-11075 · Campcodes Online Learning Management System

Campcodes Online Learning Management System de_activate.php sql injection

CVE-2025-11039 · Campcodes Computer Sales and Inventory System

Campcodes Computer Sales and Inventory System us_edit1.php sql injection

code-projects5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11036 · code-projects E-Commerce Website

code-projects E-Commerce Website admin_account_update.php sql injection

CVE-2025-11037 · code-projects E-Commerce Website

code-projects E-Commerce Website admin_index_search.php sql injection

CVE-2025-11066 · code-projects Online Bidding System

code-projects Online Bidding System bidlist.php sql injection

CVE-2025-11074 · code-projects Project Monitoring System

code-projects Project Monitoring System login.php sql injection

CVE-2025-11040 · code-projects Hostel Management System

code-projects Hostel Management System index.php sql injection

Projectworlds1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11070 · Projectworlds Online Shopping System

Projectworlds Online Shopping System cart_add.php sql injection

Red Hat1 vulnerability on this pageMax CVSS 9.6Priority 48KEV 0

CVE-2025-10894 · Red Hat Multicluster Global Hub

Nx: nx/devkit: malicious versions of nx and plugins published to npm

EPSS 0.6%public exploit CVSS 9.6

SourceCodester2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11055 · SourceCodester Online Hotel Reservation System

SourceCodester Online Hotel Reservation System updateaddress.php sql injection

CVE-2025-11057 · SourceCodester Pet Grooming Management Software

SourceCodester Pet Grooming Management Software print_inv.php sql injection

Tencent1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-11046 · Tencent WeKnora

Tencent WeKnora test testEmbeddingModel server-side request forgery

horilla-opensource1 vulnerability on this pageMax CVSS 9.9Priority 47KEV 0

CVE-2025-59832 · horilla-opensource horilla

Horrila Stored XSS Vulnerability via Ticket Comment section

EPSS 0.4%public exploit CVSS 9.9

Jinher1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11035 · Jinher OA

Jinher OA text xml external entity reference

kidaze3 vulnerabilities on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11032 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT3s6.php sql injection

CVE-2025-11033 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT3s7.php sql injection

CVE-2025-11052 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT3s5.php sql injection

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11053 · PHPGurukul Small CRM

PHPGurukul Small CRM forgot-password.php sql injection

ProjectsAndPrograms1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-11056 · ProjectsAndPrograms School Management System

ProjectsAndPrograms School Management System select-students.php sql injection

nearform1 vulnerability on this pageMax CVSS 9.4Priority 46KEV 0

CVE-2025-59936 · nearform get-jwks

get-jwks poisoned JWKS cache allows post-fetch issuer validation bypass

EPSS 0.4%public exploit CVSS 9.4

mitre3 vulnerabilities on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-58384 · mitre

In DOXENSE WATCHDOC before 6.1.1.5332, Deserialization of Untrusted Data can lead to remote code execution through the .NET Remoting libr…

EPSS 0.7%CVSS 10.0

CVE-2025-57347 · mitre

A vulnerability exists in the 'dagre-d3-es' Node.js package version 7.0.9, specifically within the 'bk' module's addConflict function, wh…

EPSS 0.5%CVSS 9.8

CVE-2025-55187 · mitre

In DriveLock 24.1.4 before 24.1.5, 24.2.5 before 24.2.6, and 25.1.2 before 25.1.4, attackers can gain elevated privileges.

EPSS 0.5%CVSS 9.9

Rob--W / cors-anywhere1 vulnerability on this pageMax CVSS 9.5Priority 40KEV 0

CVE-2020-36851 · Rob--W / cors-anywhere Rob--W / cors-anywhere

Rob--W cors-anywhere Misconfigured CORS Proxy Allows SSRF

EPSS 0.8%CVSS 9.5

gardener1 vulnerability on this pageMax CVSS 9.9Priority 38KEV 0

CVE-2025-59823 · gardener gardener-extension-provider-aws

Gardener providers vulnerable to code injection when Terraformer is used for infrastructure provisioning

EPSS 0.5%CVSS 9.9

GitLab1 vulnerability on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2025-9642 · GitLab GitLab

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab

EPSS 0.6%CVSS 9.6

WAGO1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-41715 · WAGO Device Sphere

Missing Authentication for Database Access in Web Application

EPSS 0.5%CVSS 9.8

Ericsson2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-40836 · Ericsson Indoor Connect 8855

Ericsson Indoor Connect 8855 - Improper Input Validation Vulnerability

CVE-2025-27261 · Ericsson Indoor Connect 8855

Ericsson Indoor Connect 8855 - Improper Neutralization of Special Elements used in an SQL Command Vulnerability

EPSS 0.3%CVSS 9.8

HaruTheme1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-60219 · HaruTheme WooCommerce Designer Pro

WordPress WooCommerce Designer Pro Plugin <= 1.9.24 - Arbitrary File Upload Vulnerability

EPSS 0.4%CVSS 10.0

Qualcomm, Inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-21483 · Qualcomm, Inc. Snapdragon

Improper Restriction of Operations within the Bounds of a Memory Buffer in Data Network Stack & Connectivity

CVE-2025-27034 · Qualcomm, Inc. Snapdragon

Improper Validation of Array Index in Multi-Mode Call Processor

anthropics1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-59828 · anthropics claude-code

Claude Code Vulnerable to Arbitrary Code Execution via Plugin Autoloading with Specific Yarn Versions

FlagForgeCTF2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-59827 · FlagForgeCTF flagForge

FlagForgeCTF is Missing Authorization in main-v2

CVE-2025-59841 · FlagForgeCTF flagForge

FlagForgeCTF's Improper Session Handling Allows Access After Logout

Techspawn1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-9054 · Techspawn MultiLoca - WooCommerce Multi Locations Inventory Management

MultiLoca - WooCommerce Multi Locations Inventory Management <= 4.2.8 - Missing Authorization to Unauthenticated Arbitrary Options Update via 'wcmlim_settings_ajax_handler'