Critical vulnerability archive — page 329

PCMan1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2025-4871 · PCMan FTP Server

PCMan FTP Server REST Command buffer overflow

EPSS 2%public exploit CVSS 9.8

FreeFloat1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4872 · FreeFloat FTP Server

FreeFloat FTP Server CCC Command buffer overflow

EPSS 0.7%public exploit CVSS 9.8

PHPGurukul18 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4873 · PHPGurukul News Portal

PHPGurukul News Portal Login index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4874 · PHPGurukul News Portal Project

PHPGurukul News Portal Project contactus.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4880 · PHPGurukul News Portal

PHPGurukul News Portal aboutus.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4906 · PHPGurukul Notice Board System

PHPGurukul Notice Board System login.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4907 · PHPGurukul Daily Expense Tracker System

PHPGurukul Daily Expense Tracker System forgot-password.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4908 · PHPGurukul Daily Expense Tracker System

PHPGurukul Daily Expense Tracker System expense-datewise-reports-detailed.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4910 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System edit-animal-details.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4913 · PHPGurukul Auto Taxi Stand Management System

PHPGurukul Auto Taxi Stand Management System index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4914 · PHPGurukul Auto Taxi Stand Management System

PHPGurukul Auto Taxi Stand Management System forgot-password.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4915 · PHPGurukul Auto Taxi Stand Management System

PHPGurukul Auto Taxi Stand Management System auto-taxi-entry-detail.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4916 · PHPGurukul Auto Taxi Stand Management System

PHPGurukul Auto Taxi Stand Management System admin-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4917 · PHPGurukul Auto Taxi Stand Management System

PHPGurukul Auto Taxi Stand Management System new-autoortaxi-entry-form.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4911 · PHPGurukul Zoo Management System

PHPGurukul Zoo Management System view-foreigner-ticket.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4925 · PHPGurukul Daily Expense Tracker System

PHPGurukul Daily Expense Tracker System expense-monthwise-reports-detailed.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4927 · PHPGurukul Online Marriage Registration System

PHPGurukul Online Marriage Registration System between-dates-application-report.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4934 · PHPGurukul User Registration & Login and User Management System

PHPGurukul User Registration & Login and User Management System edit-profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4938 · PHPGurukul Employee Record Management System

PHPGurukul Employee Record Management System registererms.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-4941 · PHPGurukul Credit Card Application Management System

PHPGurukul Credit Card Application Management System index.php sql injection

EPSS 0.6%CVSS 9.8

SourceCodester5 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4937 · SourceCodester Apartment Visitor Management System

SourceCodester Apartment Visitor Management System profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4895 · SourceCodester Doctors Appointment System

SourceCodester Doctors Appointment System delete-session.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4912 · SourceCodester Student Result Management System

SourceCodester Student Result Management System Image File update_student.php path traversal

EPSS 0.9%public exploit CVSS 9.1

CVE-2025-4935 · SourceCodester Stock Management System

SourceCodester Stock Management System changePassword.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4924 · SourceCodester Client Database Management System

SourceCodester Client Database Management System user_void_transaction.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Campcodes5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4875 · Campcodes Online Shopping Portal

Campcodes Online Shopping Portal forgot-password.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4899 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System transaction_update.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4900 · Campcodes Sales and Inventory System

Campcodes Sales and Inventory System payment.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4929 · Campcodes Online Shopping Portal

Campcodes Online Shopping Portal my-account.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4930 · Campcodes Online Shopping Portal

Campcodes Online Shopping Portal my-cart.php sql injection

EPSS 0.5%public exploit CVSS 9.8

itsourcecode6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4870 · itsourcecode Restaurant Management System

itsourcecode Restaurant Management System menu_save.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4881 · itsourcecode Restaurant Management System

itsourcecode Restaurant Management System user_save.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4882 · itsourcecode Restaurant Management System

itsourcecode Restaurant Management System team_update.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4884 · itsourcecode Restaurant Management System

itsourcecode Restaurant Management System assign_save.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4885 · itsourcecode Sales and Inventory System

itsourcecode Sales and Inventory System product_add.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4886 · itsourcecode Sales and Inventory System

itsourcecode Sales and Inventory System product_update.php sql injection

EPSS 0.6%public exploit CVSS 9.8

ponaravindb1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4933 · ponaravindb Hospital-Management-System

ponaravindb Hospital-Management-System doctor-panel.php sql injection

EPSS 0.6%public exploit CVSS 9.8

projectworlds4 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4928 · projectworlds Online Lawyer Management System

projectworlds Online Lawyer Management System save_lawyer_edit_profile.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4931 · projectworlds Online Lawyer Management System

projectworlds Online Lawyer Management System user_registation.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4932 · projectworlds Online Lawyer Management System

projectworlds Online Lawyer Management System lawyer_registation.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4936 · projectworlds Online Food Ordering System

projectworlds Online Food Ordering System admin-page.php sql injection

EPSS 0.6%public exploit CVSS 9.8

iop-apl-uw1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-4905 · iop-apl-uw basestation3

iop-apl-uw basestation3 QC.py load_qc_pickl deserialization

EPSS 0.5%public exploit CVSS 9.8

Ubiquiti Inc1 vulnerability on this pageMax CVSS 10.0Priority 44KEV 0

CVE-2025-23123 · Ubiquiti Inc UniFi Protect Cameras

A malicious actor with access to the management network could execute a remote code execution (RCE) by exploiting a heap buffer overflow…

EPSS 1%CVSS 10.0

PgPool Global Development Group1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-46801 · PgPool Global Development Group Pgpool-II

Pgpool-II provided by PgPool Global Development Group contains an authentication bypass by primary weakness vulnerability.

EPSS 0.9%CVSS 9.8

gardener1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2025-47282 · gardener external-dns-management

Malicious google credential in DNS secret can lead to privilege escalation

EPSS 0.7%CVSS 9.9

dkszone2 vulnerabilities on this pageMax CVSS 9.9Priority 40KEV 0

CVE-2025-26892 · dkszone Celestial Aura

WordPress Celestial Aura plugin <= 2.2 - Arbitrary File Upload vulnerability

EPSS 0.7%CVSS 9.9

CVE-2025-26872 · dkszone Eximius

WordPress Eximius theme <= 2.2 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 9.9

QuantumCloud1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-47582 · QuantumCloud WPBot Pro Wordpress Chatbot

WordPress WPBot Pro Wordpress Chatbot <= 12.7.0 - PHP Object Injection Vulnerability

EPSS 0.6%CVSS 9.8

appleple inc.2 vulnerabilities on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-36560 · appleple inc. a-blog cms

Server-side request forgery vulnerability exists in a-blog cms multiple versions.

EPSS 0.5%CVSS 9.2

CVE-2025-41429 · appleple inc. a-blog cms

a-blog cms multiple versions neutralize logs improperly.

EPSS 0.4%CVSS 9.8

The archive.