The archive.

CVE-2025-5443 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection

CVE-2025-5444 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injection

CVE-2025-5445 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkFWByBBS os command injection

CVE-2025-5446 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection

CVE-2025-5447 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection

EPSS 33%public exploit CVSS 9.8

CVE-2025-5441 · Linksys RE6500

Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection

EPSS 14%CVSS 9.8

mitre5 vulnerabilities on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-44148 · mitre

Cross Site Scripting (XSS) vulnerability in MailEnable before v10 allows a remote attacker to execute arbitrary code via the failure.aspx…

EPSS 55%public exploit CVSS 9.8

CVE-2025-32105 · mitre

A buffer overflow in the the Sangoma IMG2020 HTTP server through 2.3.9.6 allows an unauthenticated user to achieve remote code execution.

CVE-2025-32106 · mitre

In Audiocodes Mediapack MP-11x through 6.60A.369.002, a crafted POST request request may result in an unauthenticated remote user's abili…

CVE-2025-23097 · mitre

An issue was discovered in Samsung Mobile Processor Exynos 1380.

EPSS 0.4%CVSS 9.1

CVE-2025-23099 · mitre

An issue was discovered in Samsung Mobile Processor Exynos 1480 and 2400.

EPSS 0.4%CVSS 9.1

TOTOLINK1 vulnerability on this pageMax CVSS 9.8Priority 59KEV 0

CVE-2025-5502 · TOTOLINK X15

TOTOLINK X15 formMapReboot command injection

EPSS 10%public exploit CVSS 9.8

JEHc1 vulnerability on this pageMax CVSS 10.0Priority 58KEV 0

CVE-2025-45854 · JEHc JEHC-BPM

/server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.

EPSS 3%public exploit CVSS 10.0

Netgear1 vulnerability on this pageMax CVSS 9.8Priority 52KEV 0

CVE-2025-5495 · Netgear WNR614

Netgear WNR614 URL improper authentication

EPSS 1%public exploit CVSS 9.8

quequnlong3 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-5509 · quequnlong shiyi-blog

quequnlong shiyi-blog upload path traversal

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-5512 · quequnlong shiyi-blog

quequnlong shiyi-blog Administrator Backend verifyPassword improper authentication

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-5510 · quequnlong shiyi-blog

quequnlong shiyi-blog optimize server-side request forgery

run-llama1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-1750 · run-llama run-llama/llama_index

SQL Injection in run-llama/llama_index

EPSS 0.9%public exploit CVSS 9.8

slackero2 vulnerabilities on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-5499 · slackero phpwcms

slackero phpwcms image_resized.php getimagesize deserialization

EPSS 0.8%public exploit CVSS 9.8

CVE-2025-5497 · slackero phpwcms

slackero phpwcms Feedimport processing.inc.php deserialization

EPSS 0.7%public exploit CVSS 9.8

chaitak-gorai3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-5400 · chaitak-gorai Blogbook

chaitak-gorai Blogbook GET Parameter user.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-5401 · chaitak-gorai Blogbook

chaitak-gorai Blogbook GET Parameter post.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-5402 · chaitak-gorai Blogbook

chaitak-gorai Blogbook GET Parameter edit_post.php sql injection

EPSS 0.6%public exploit CVSS 9.8

Mist1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-5409 · Mist Community Edition

Mist Community Edition API Token views.py create_token access control

EPSS 0.7%public exploit CVSS 9.8

AssamLook2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-5430 · AssamLook CMS

AssamLook CMS product.php sql injection

CVE-2025-5432 · AssamLook CMS

AssamLook CMS view_tender.php sql injection

Baison1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-5493 · Baison Channel Middleware Product

Baison Channel Middleware Product ToJsonByControlName sql injection

Hewlett Packard Enterprise (HPE)8 vulnerabilities on this pageMax CVSS 9.8Priority 44KEV 0

CVE-2025-37089 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVE-2025-37091 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVE-2025-37092 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVE-2025-37096 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

A command injection remote code execution vulnerability exists in HPE StoreOnce Software.

CVE-2025-37093 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

An authentication bypass vulnerability exists in HPE StoreOnce Software.

CVE-2025-37095 · Hewlett Packard Enterprise (HPE) HPE StoreOnce Software

A directory traversal information disclosure vulnerability exists in HPE StoreOnce Software.