Critical vulnerability archive — page 300

huggingface1 vulnerability on this pageMax CVSS 10.0Priority 60KEV 0

CVE-2025-5120 · huggingface huggingface/smolagents

Sandbox Escape Vulnerability in huggingface/smolagents

EPSS 31%public exploit CVSS 10.0

D-Link4 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

Gardyn3 vulnerabilities on this pageMax CVSS 9.8Priority 56KEV 0

CVE-2025-29631 · Gardyn Home Kit Firmware

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 allow comm…

EPSS 2%public exploit CVSS 9.8

CVE-2025-29629 · Gardyn Home Kit Firmware

Gardyn Home Kit firmware before master.619, Home Kit Mobile Application before 2.11.0, and Home Kit Cloud API before 2.12.2026 use weak d…

EPSS 0.5%public exploit CVSS 9.1

CVE-2025-29628 · Gardyn Home Kit Firmware

A Gardyn Azure IoT Hub connection string is downloaded over an insecure HTTP connection in Gardyn Home Kit firmware before master.619, Ho…

EPSS 0.3%public exploit CVSS 9.4

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2025-8244 · TOTOLINK X15

TOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflow

EPSS 1%public exploit CVSS 9.8

mitre6 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-46199 · mitre

Cross Site Scripting vulnerability in grav v.1.7.48 and before allows an attacker to execute arbitrary code via a crafted script to the f…

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-45777 · mitre

An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via…

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-30133 · mitre

An issue was discovered on IROAD Dashcam FX2 devices.

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-30125 · mitre

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-30124 · mitre

An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices.

EPSS 0.3%public exploit CVSS 9.8

CVE-2025-30135 · mitre

An issue was discovered on IROAD Dashcam FX2 devices.

EPSS 0.6%CVSS 9.4

lf-edge1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-54379 · lf-edge ekuiper

eKuiper API endpoints handling SQL queries with user-controlled table names.

EPSS 0.9%public exploit CVSS 9.8

code-projects13 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-8166 · code-projects Church Donation System

code-projects Church Donation System HTTP POST Request index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8232 · code-projects Online Ordering System

code-projects Online Ordering System delete_user.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8233 · code-projects Online Ordering System

code-projects Online Ordering System user.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8234 · code-projects Online Ordering System

code-projects Online Ordering System delete_member.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8235 · code-projects Online Ordering System

code-projects Online Ordering System product.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8236 · code-projects Online Ordering System

code-projects Online Ordering System edit_product.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8237 · code-projects Exam Form Submission

code-projects Exam Form Submission update_s1.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8238 · code-projects Exam Form Submission

code-projects Exam Form Submission update_s2.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8239 · code-projects Exam Form Submission

code-projects Exam Form Submission admin sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8240 · code-projects Exam Form Submission

code-projects Exam Form Submission dashboard.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8249 · code-projects Exam Form Submission

code-projects Exam Form Submission update_s3.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8250 · code-projects Exam Form Submission

code-projects Exam Form Submission update_s4.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8248 · code-projects Online Ordering System

code-projects Online Ordering System signup.php sql injection

EPSS 0.5%public exploit CVSS 9.8

yanyutao04022 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-8226 · yanyutao0402 ChanCMS

yanyutao0402 ChanCMS find information disclosure

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-8227 · yanyutao0402 ChanCMS

yanyutao0402 ChanCMS getArticle deserialization

EPSS 0.7%public exploit CVSS 9.8

1000 Projects3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8173 · 1000 Projects ABC Courier Management System

1000 Projects ABC Courier Management System Add_reciver.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8241 · 1000 Projects ABC Courier Management System

1000 Projects ABC Courier Management System report.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-8185 · 1000 Projects ABC Courier Management System

1000 Projects ABC Courier Management System getbyid.php sql injection

EPSS 0.5%CVSS 9.8

Engeman1 vulnerability on this pageMax CVSS 9.4Priority 49KEV 0

CVE-2025-8220 · Engeman Web

Engeman Web Password Recovery RecoveryPass sql injection

EPSS 0.7%public exploit CVSS 9.4

PHPGurukul1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-8179 · PHPGurukul Local Services Search Engine Management System

PHPGurukul Local Services Search Engine Management System changeimage.php sql injection

EPSS 0.6%public exploit CVSS 9.8

xwiki2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-32429 · xwiki xwiki-platform

XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

EPSS 85%CVSS 9.8

CVE-2025-54385 · xwiki xwiki-platform

XWiki Platform's searchDocuments API allows for SQL injection

EPSS 0.7%CVSS 9.8

astronomer1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2025-54415 · astronomer dag-factory

dag-factory's CI/CD Workflow Allows for Repository Takeover and Secret Exfiltration

EPSS 0.8%public exploit CVSS 9.1

deerwms1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-8125 · deerwms deer-wms-2

deerwms deer-wms-2 allocatedList sql injection

EPSS 0.5%public exploit CVSS 9.8

Jingmen Zeyou1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-8203 · Jingmen Zeyou Large File Upload Control

Jingmen Zeyou Large File Upload Control index.jsp sql injection

EPSS 0.5%public exploit CVSS 9.8

tj-actions1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2025-54416 · tj-actions branch-names

tj-actions/branch-names Contains Command Injection Vulnerability

EPSS 0.7%public exploit CVSS 9.1

comex1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-58266 · comex shlex

The shlex crate before 1.2.1 for Rust allows unquoted and unescaped instances of the { and \xa0 characters, which may facilitate command…

EPSS 0.8%CVSS 9.8

melapress1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-6895 · melapress Melapress Login Security

MelaPress Login Security 2.1.0 - 2.1.1 - Authentication Bypass to Privilege Escalation via get_valid_user_based_on_token Function

EPSS 0.8%CVSS 9.8

Linux5 vulnerabilities on this pageMax CVSS 10.0Priority 39KEV 0

Shanghai Lingdang Information Technology1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-8219 · Shanghai Lingdang Information Technology Lingdang CRM

Shanghai Lingdang Information Technology Lingdang CRM HTTP POST Request tabdetail_moduleSave_dxkp.php sql injection

EPSS 0.5%CVSS 9.8

The archive.