The archive.

CVE-2025-10621 · SourceCodester Hotel Reservation System

SourceCodester Hotel Reservation System editroomimage.php sql injection

CVE-2025-10623 · SourceCodester Hotel Reservation System

SourceCodester Hotel Reservation System deleteuser.php sql injection

CVE-2025-10598 · SourceCodester Pet Grooming Management Software

SourceCodester Pet Grooming Management Software search_product.php sql injection

CVE-2025-10601 · SourceCodester Online Exam Form Submission

SourceCodester Online Exam Form Submission index.php sql injection

CVE-2025-10600 · SourceCodester Online Exam Form Submission

SourceCodester Online Exam Form Submission register.php unrestricted upload

EPSS 0.5%CVSS 9.8

Unknown3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-9083 · Unknown Ninja Forms

Ninja-forms < 3.11.1 - Unauthenticated PHP Objection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-5305 · Unknown Password Reset with Code for WordPress REST API

Password Reset with Code < 0.0.17 - Insecure Password Reset Code Creation

EPSS 0.2%public exploit CVSS 9.8

CVE-2025-8942 · Unknown WP Hotel Booking

WP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation

EPSS 0.3%public exploit CVSS 9.1

Campcodes3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10563 · Campcodes Grocery Sales and Inventory System

Campcodes Grocery Sales and Inventory System ajax.php sql injection

CVE-2025-10564 · Campcodes Grocery Sales and Inventory System

Campcodes Grocery Sales and Inventory System ajax.php sql injection

CVE-2025-10565 · Campcodes Grocery Sales and Inventory System

Campcodes Grocery Sales and Inventory System ajax.php sql injection

itsourcecode3 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10599 · itsourcecode Web-Based Internet Laboratory Management System

itsourcecode Web-Based Internet Laboratory Management System login.php AuthenticateUser sql injection

CVE-2025-10667 · itsourcecode Online Discussion Forum

itsourcecode Online Discussion Forum compose_msg.php sql injection

CVE-2025-10668 · itsourcecode Online Discussion Forum

itsourcecode Online Discussion Forum compose_msg_admin.php sql injection

kidaze2 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10597 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT2.php sql injection

CVE-2025-10665 · kidaze CourseSelectionSystem

kidaze CourseSelectionSystem COUNT3s3.php sql injection

PHPGurukul5 vulnerabilities on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-10624 · PHPGurukul User Management System

PHPGurukul User Management System login.php sql injection

CVE-2025-10603 · PHPGurukul Online Discussion Forum

PHPGurukul Online Discussion Forum search_result.php sql injection

CVE-2025-10604 · PHPGurukul Online Discussion Forum

PHPGurukul Online Discussion Forum edit_member.php sql injection

CVE-2025-10663 · PHPGurukul Online Course Registration

PHPGurukul Online Course Registration my-profile.php sql injection

CVE-2025-10664 · PHPGurukul Small CRM

PHPGurukul Small CRM create-ticket.php sql injection

HubSpot1 vulnerability on this pageMax CVSS 10.0Priority 47KEV 0

CVE-2025-59340 · HubSpot jinjava

jinjava Sandbox Bypass via JavaType-Based Deserialization

EPSS 2%CVSS 10.0

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-10662 · VulDB

SeaCMS admin_members.php sql injection

invoke-ai1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-6237 · invoke-ai invoke-ai/invokeai

Path Traversal and Arbitrary File Deletion in invoke-ai/invokeai

Planet Technology2 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-9972 · Planet Technology ICG-2510WG-LTE (EU/US)

Planet Technology｜Industrial Cellular Gateway - OS Command Injection

EPSS 2%CVSS 9.8

CVE-2025-9971 · Planet Technology ICG-2510WG-LTE (EU/US)

Planet Technology｜Industrial Cellular Gateway - Missing Authentication

EPSS 0.9%CVSS 9.8

Wondershare2 vulnerabilities on this pageMax CVSS 9.4Priority 46KEV 0

CVE-2025-10644 · Wondershare Repairit

Wondershare Repairit SAS Token Incorrect Permission Assignment Authentication Bypass Vulnerability

EPSS 3%CVSS 9.4

CVE-2025-10643 · Wondershare Repairit

Wondershare Repairit Incorrect Permission Assignment Authentication Bypass Vulnerability

EPSS 3%CVSS 9.1

CISA1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-35434 · CISA Thorium

CISA Thorium does not validate TLS connections to Elasticsearch

EPSS 0.2%public exploit CVSS 9.8

dragonflyoss2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-59352 · dragonflyoss dragonfly

Dragonfly allows arbitrary file read and write on a peer machine

EPSS 0.7%CVSS 9.8

CVE-2025-59345 · dragonflyoss dragonfly

Dragonfly did not enable authentication for some Manager’s endpoints

EPSS 0.4%CVSS 9.1

NVIDIA2 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-23316 · NVIDIA Triton Inference Server

NVIDIA Triton Inference Server for Windows and Linux contains a vulnerability in the Python backend, where an attacker could cause a remo…

EPSS 0.7%CVSS 9.8

CVE-2025-23268 · NVIDIA Triton Inference Server

NVIDIA Triton Inference Server contains a vulnerability in the DALI backend where an attacker may cause an improper input validation issue.

EPSS 0.5%CVSS 9.8

Linux4 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2023-53338 · Linux Linux

lwt: Fix return values of BPF xmit ops

EPSS 0.6%CVSS 9.8

CVE-2022-50363 · Linux Linux

skmsg: pass gfp argument to alloc_sk_msg()

CVE-2023-53360 · Linux Linux

NFSv4.2: Rework scratch handling for READ_PLUS (again)

CVE-2022-50373 · Linux Linux

fs: dlm: fix race in lowcomms

SUSE1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-8077 · SUSE neuvector

NeuVector admin account has insecure default password

EPSS 0.6%CVSS 9.8

JetBrains1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-59458 · JetBrains Junie

In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66, 252.284.61, 251.284.61, 243.284.61, 252.284.50, 252.284.54, 251.284.54, 251…

EPSS 0.5%CVSS 9.8

dyad-sh1 vulnerability on this pageMax CVSS 9.1Priority 35KEV 0

CVE-2025-58766 · dyad-sh dyad

Dyad Vulnerable to Remote Code Execution via Top-level Navigation in Preview Window

EPSS 0.4%CVSS 9.1

ESBI Information and Telecommunication Industry and Trade Limited Company1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2024-13151 · ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software

SQLi in ESBI Informatics's Auto Service Software

Yordam Informatics1 vulnerability on this pageMax CVSS 9.8Priority 35KEV 0

CVE-2025-10439 · Yordam Informatics Yordam Library Automation System

SQLi in Yordam Library Automation System