The archive.

CVE-2025-49834 · RVC-Boss GPT-SoVITS

GHSL-2025-046: GPT-SoVITS Command Injection vulnerability

CVE-2025-49835 · RVC-Boss GPT-SoVITS

GHSL-2025-047: GPT-SoVITS Command Injection vulnerability

CVE-2025-49836 · RVC-Boss GPT-SoVITS

GHSL-2025-048: GPT-SoVITS Command Injection vulnerability

CVE-2025-49837 · RVC-Boss GPT-SoVITS

GHSL-2025-049: GPT-SoVITS Deserialization of Untrusted Data vulnerability

CVE-2025-49838 · RVC-Boss GPT-SoVITS

GHSL-2025-050: GPT-SoVITS Deserialization of Untrusted Data vulnerability

CVE-2025-49839 · RVC-Boss GPT-SoVITS

GHSL-2025-051: GPT-SoVITS Deserialization of Untrusted Data vulnerability

CVE-2025-49841 · RVC-Boss GPT-SoVITS

GHSL-2025-053: GPT-SoVITS Deserialization of Untrusted Data vulnerability

filebrowser1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-53826 · filebrowser filebrowser

FileBrowser Has Insecure JWT Handling Which Allows Session Replay Attacks after Logout

EPSS 0.6%public exploit CVSS 9.8

LabRedesCefetRJ1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-53937 · LabRedesCefetRJ WeGIA

WeGIA has SQL Injection (Blind Time-Based) Vulnerability in `cargo` Parameter on `control.php` Endpoint

EPSS 0.6%public exploit CVSS 9.8

Tiki Software Community Association1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-34111 · Tiki Software Community Association Wiki CMS Groupware

Tiki Wiki <= 15.1 ELFinder Unauthenticated File Upload RCE

Flexense1 vulnerability on this pageMax CVSS 10.0Priority 45KEV 0

CVE-2025-34105 · Flexense DiskBoss Enterprise

DiskBoss Enterprise Stack-Based Buffer Overflow RCE

EPSS 2%CVSS 10.0

VMware3 vulnerabilities on this pageMax CVSS 9.3Priority 45KEV 0

CVE-2025-41236 · VMware ESXi

VMXNET3 integer-overflow vulnerability

EPSS 3%CVSS 9.3

CVE-2025-41237 · VMware Cloud Foundation

VMCI integer-underflow vulnerability

EPSS 0.5%CVSS 9.3

CVE-2025-41238 · VMware ESXi

PVSCSI heap-overflow vulnerability

EPSS 0.5%CVSS 9.3

cyberark2 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-49827 · cyberark conjur

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) Vulnerable to Bypass of IAM Authenticator

EPSS 1%CVSS 9.8

CVE-2025-49831 · cyberark conjur

Conjur OSS and Secrets Manager, Self-Hosted (formerly Conjur Enterprise) vulnerable to IAM Authenticator Bypass via Mis-configured Network Device

EPSS 1%CVSS 9.8

Piwik (now Matomo)1 vulnerability on this pageMax CVSS 9.4Priority 44KEV 0

CVE-2025-34104 · Piwik (now Matomo) Web Analytics Platform

Piwik Authenticated RCE via Custom Plugin Upload

EPSS 2%CVSS 9.4

Merit LILIN1 vulnerability on this pageMax CVSS 9.3Priority 43KEV 0

CVE-2025-34132 · Merit LILIN DVR Firmware

LILIN DVR Command Injection via NTPUpdate in dvr_box

EPSS 2%CVSS 9.3

Samsung Electronics1 vulnerability on this pageMax CVSS 9.3Priority 41KEV 0

CVE-2025-34068 · Samsung Electronics WLAN AP WEA453e

Samsung WLAN AP WEA453e < 5.2.4.T1 Unauthenticated RCE via command1 and command2 Parameters

EPSS 1%CVSS 9.3

Hewlett Packard Enterprise3 vulnerabilities on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-37105 · Hewlett Packard Enterprise HPE AutoPass License Server

An hsqldb-related remote code execution vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

EPSS 0.7%CVSS 9.8

CVE-2025-37106 · Hewlett Packard Enterprise HPE AutoPass License Server

An authentication bypass and disclosure of information vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

CVE-2025-37107 · Hewlett Packard Enterprise HPE AutoPass License Server

An authentication bypass vulnerability exists in HPE AutoPass License Server (APLS) prior to 9.18.

Webkul1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-29009 · Webkul Medical Prescription Attachment Plugin for WooCommerce

WordPress Medical Prescription Attachment Plugin for WooCommerce <= 1.2.3 - Arbitrary File Upload Vulnerability

EPSS 0.6%CVSS 10.0

Zyxel1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-7673 · Zyxel VMG8825-T50K firmware

A buffer overflow vulnerability in the URL parser of the zhttpd web server in Zyxel VMG8825-T50K firmware versions prior to V5.50(ABOM.5)…

EPSS 0.7%CVSS 9.8

Codexpert, Inc1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-30973 · Codexpert, Inc CoSchool LMS

WordPress CoSchool LMS plugin <= 1.4.3 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

Guru Team1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-30949 · Guru Team Site Chat on Telegram

WordPress Site Chat on Telegram plugin <= 1.0.4 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

Md Yeasin Ul Haider2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-28961 · Md Yeasin Ul Haider URL Shortener

WordPress URL Shortener <= 3.0.7 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

CVE-2025-28959 · Md Yeasin Ul Haider URL Shortener

WordPress URL Shortener <= 3.0.7 - SQL Injection Vulnerability

Eclipse Foundation2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-9342 · Eclipse Foundation Eclipse Glassfish

In Eclipse GlassFish versions before 8.0.3 it is possible to perform Login Brute Force attacks as there is no limitation in the number of…

CVE-2024-9408 · Eclipse Foundation Eclipse Glassfish

In Eclipse GlassFish since version 6.2.5 it is possible to perform a Server Side Request Forgery attack in specific endpoints.

EPSS 0.3%CVSS 9.8

ThimPress1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-28982 · ThimPress WP Pipes

WordPress WP Pipes plugin <= 1.4.3 - SQL Injection Vulnerability

Unity Business Technology Pty Ltd1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-52836 · Unity Business Technology Pty Ltd The E-Commerce ERP

WordPress The E-Commerce ERP <= 2.1.1.3 - Privilege Escalation Vulnerability

Adrian Tobey1 vulnerability on this pageMax CVSS 9.1Priority 36KEV 0

CVE-2025-48300 · Adrian Tobey Groundhogg

WordPress Groundhogg plugin <= 4.2.1 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.1

shinetheme1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-52714 · shinetheme Traveler

WordPress Traveler theme < 3.2.2 - SQL Injection Vulnerability

Torod Company for Information Technology1 vulnerability on this pageMax CVSS 9.3Priority 36KEV 0

CVE-2025-30936 · Torod Company for Information Technology Torod

WordPress Torod plugin <= 2.1 - SQL Injection vulnerability

CMSJunkie - WordPress Business Directory Plugins1 vulnerability on this pageMax CVSS 9.3Priority 35KEV 0

CVE-2025-24759 · CMSJunkie - WordPress Business Directory Plugins WP-BusinessDirectory

WordPress WP-BusinessDirectory <= 3.1.5 - SQL Injection vulnerability