Critical vulnerability archive — page 305

mitre2 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-52376 · mitre

An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7…

EPSS 14%public exploit CVSS 9.8

CVE-2025-50756 · mitre

Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter.

EPSS 2%CVSS 9.8

ColoradoFTP1 vulnerability on this pageMax CVSS 9.3Priority 54KEV 0

CVE-2025-34110 · ColoradoFTP Server

ColoradoFTP Server <= 1.3 Build 8 Path Traversal Information Disclosure

EPSS 2%public exploit CVSS 9.3

pyload1 vulnerability on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2025-53890 · pyload pyload

pyLoad vulnerable to remote code execution through js2py onCaptchaResult

EPSS 1%public exploit CVSS 9.8

ImageMagick2 vulnerabilities on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-53101 · ImageMagick ImageMagick

ImageMagick has Stack Buffer Overflow in image.c

EPSS 0.9%public exploit CVSS 9.8

CVE-2025-53014 · ImageMagick ImageMagick

ImageMagick has Heap Buffer Overflow in InterpretImageFilename

EPSS 0.7%public exploit CVSS 9.8

LB-LINK1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-7574 · LB-LINK BL-AC1900

LB-LINK BL-WR9000 Web Interface lighttpd.cgi restore improper authentication

EPSS 0.9%public exploit CVSS 9.8

Jinher1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-7523 · Jinher OA

Jinher OA DelTemp.aspx xml external entity reference

EPSS 0.7%public exploit CVSS 9.8

xwiki2 vulnerabilities on this pageMax CVSS 10.0Priority 50KEV 0

CVE-2025-53836 · xwiki xwiki-rendering

XWiki Rendering is vulnerable to RCE attacks when processing nested macros

EPSS 0.6%public exploit CVSS 10.0

CVE-2025-53835 · xwiki xwiki-rendering

XWiki Rendering is vulnerable to XSS attacks through insecure XHTML syntax

EPSS 0.4%public exploit CVSS 9.1

Bearsthemes2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5394 · Bearsthemes Alone – Charity Multipurpose Non-profit WordPress Theme

Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via Plugin Installation

EPSS 53%CVSS 9.8

CVE-2025-5393 · Bearsthemes Alone – Charity Multipurpose Non-profit WordPress Theme

Alone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.5 - Missing Authorization to Unauthenticated Arbitrary File Deletion

EPSS 0.6%CVSS 9.1

Campcodes5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7535 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System reprint_cash.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7536 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System receipt_credit.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7537 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System product_update.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7538 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System product_update.php unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7547 · Campcodes Online Movie Theater Seat Reservation System

Campcodes Online Movie Theater Seat Reservation System admin_class.php save_movie unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

code-projects19 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7541 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System get_town.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7612 · code-projects Mobile Shop

code-projects Mobile Shop login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7515 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System ulocateus.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7516 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System cancelbookingpatient.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7517 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System getDay.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7533 · code-projects Job Diary

code-projects Job Diary view-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7539 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System getdoctordaybooking.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7540 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System getclinic.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7587 · code-projects Online Appointment Booking System

code-projects Online Appointment Booking System cover.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7593 · code-projects Job Diary

code-projects Job Diary view-all.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7594 · code-projects Job Diary

code-projects Job Diary view-emp.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7595 · code-projects Job Diary

code-projects Job Diary view-cad.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7605 · code-projects AVL Rooms

code-projects AVL Rooms profile.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7606 · code-projects AVL Rooms

code-projects AVL Rooms city.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7607 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart save_order.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7608 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart userlogin.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7609 · code-projects Simple Shopping Cart

code-projects Simple Shopping Cart register.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7610 · code-projects Electricity Billing System

code-projects Electricity Billing System change_password.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7611 · code-projects Wedding Reservation

code-projects Wedding Reservation global.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Dokploy1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-53825 · Dokploy dokploy

Dokploy's Preview Deployments are vulnerable to Remote Code Execution

EPSS 0.6%public exploit CVSS 9.8

LabRedesCefetRJ1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-53823 · LabRedesCefetRJ WeGIA

WeGIA vulnerable to SQL Injection (Blind Time-Based) in `processa_deletar_socio.php` parameter `id_socio`

EPSS 0.6%public exploit CVSS 10.0

PHPGurukul4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-7521 · PHPGurukul Vehicle Parking Management System

PHPGurukul Vehicle Parking Management System index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7534 · PHPGurukul Student Result Management System

PHPGurukul Student Result Management System GET Parameter notice-details.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-7542 · PHPGurukul User Registration & Login and User Management System

PHPGurukul User Registration & Login and User Management System user-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-7604 · PHPGurukul Hospital Management System

PHPGurukul Hospital Management System user-login.php sql injection

EPSS 0.5%public exploit CVSS 9.8

saleem-hadad1 vulnerability on this pageMax CVSS 10.0Priority 49KEV 0

CVE-2025-53833 · saleem-hadad larecipe

LaRecipe is vulnerable to Server-Side Template Injection attacks

EPSS 9%CVSS 10.0

YiJiuSmile1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-7627 · YiJiuSmile kkFileViewOfficeEdit

YiJiuSmile kkFileViewOfficeEdit fileUpload unrestricted upload

EPSS 0.5%public exploit CVSS 9.8

htplugins3 vulnerabilities on this pageMax CVSS 9.8Priority 45KEV 0

CVE-2025-7340 · htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Upload

EPSS 2%CVSS 9.8

CVE-2025-7360 · htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Directory Traversal to Arbitrary File Move

EPSS 1%CVSS 9.8

CVE-2025-7341 · htplugins HT Contact Form – Drag & Drop Form Builder for WordPress

HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder. <= 2.2.1 - Unauthenticated Arbitrary File Deletion

EPSS 1%CVSS 9.8

Hgiga1 vulnerability on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-7451 · Hgiga iSherlock-maillog-4.5

Hgiga｜iSherlock - OS Command Injection

EPSS 1%CVSS 9.8

ProTNS1 vulnerability on this pageMax CVSS 9.6Priority 39KEV 0

CVE-2025-3621 · ProTNS ActADUR

Remote Code Execution in ProTNS ActADUR

EPSS 0.7%CVSS 9.6

metersphere1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-53639 · metersphere metersphere

Metersphere has SQL Injection Vulnerability in Sorting Field

EPSS 0.4%CVSS 9.8

The archive.