The archive.

CVE-2024-57230 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the a…

CVE-2024-57231 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the a…

CVE-2024-57232 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the a…

CVE-2024-57233 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) v1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vi…

CVE-2024-57234 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the ifname parameter in the a…

CVE-2024-57235 · mitre

NETGEAR RAX5 (AX1600 WiFi Router) V1.0.2.26 was discovered to contain a command injection vulnerability via the iface parameter in the vi…

CVE-2025-45607 · mitre

An issue in the component /manage/ of itranswarp v2.19 allows attackers to bypass authentication via a crafted request.

CVE-2025-45238 · mitre

foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.

EPSS 0.7%public exploit CVSS 9.1

CVE-2025-45322 · mitre

kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter.

CVE-2025-45615 · mitre

Incorrect access control in the /admin/ API of yaoqishan v0.0.1-SNAPSHOT allows attackers to gain access to Admin rights via a crafted re…

CVE-2025-45616 · mitre

Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.

CVE-2025-44071 · mitre

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php.

CVE-2025-45611 · mitre

Incorrect access control in the /user/edit/ component of hope-boot v1.0.0 allows attackers to bypass authentication via a crafted GET req…

CVE-2025-45612 · mitre

Incorrect access control in xmall v1.1 allows attackers to bypass authentication via a crafted GET request to /index.

CVE-2025-44072 · mitre

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.

CVE-2025-44074 · mitre

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.

Amazon1 vulnerability on this pageMax CVSS 9.0Priority 50KEV 0

CVE-2025-4318 · Amazon Amplify Studio

Input validation issue in AWS Amplify Studio UI component properties

EPSS 1.0%public exploit CVSS 9.0

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4250 · code-projects Nero Social Networking Site

code-projects Nero Social Networking Site index.php sql injection

EPSS 0.6%public exploit CVSS 9.8

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-4283 · SourceCodester Stock Management System

SourceCodester/oretnom23 Stock Management System Login.php sql injection

EPSS 0.7%public exploit CVSS 9.8

PHPGurukul6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4249 · PHPGurukul e-Diary Management System

PHPGurukul e-Diary Management System manage-categories.php sql injection

EPSS 0.6%public exploit CVSS 9.8

CVE-2025-4262 · PHPGurukul Online DJ Booking Management System

PHPGurukul Online DJ Booking Management System user-search.php sql injection

CVE-2025-4263 · PHPGurukul Online DJ Booking Management System

PHPGurukul Online DJ Booking Management System booking-search.php sql injection

CVE-2025-4264 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal edit-ambulance.php sql injection

CVE-2025-4265 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal contact-us.php sql injection

CVE-2025-4266 · PHPGurukul Notice Board System

PHPGurukul Notice Board System bwdates-reports-details.php sql injection

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-4259 · VulDB

newbee-mall UploadController.java upload unrestricted upload

langroid1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2025-46726 · langroid langroid

Langroid Vulnerable to XXE Injection via XMLToolMessage

EPSS 0.7%public exploit CVSS 9.1

PCMan5 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-4255 · PCMan FTP Server

PCMan FTP Server RMD Command buffer overflow

CVE-2025-4251 · PCMan FTP Server

PCMan FTP Server RMDIR Command buffer overflow

CVE-2025-4252 · PCMan FTP Server

PCMan FTP Server APPEND Command buffer overflow

CVE-2025-4253 · PCMan FTP Server

PCMan FTP Server HASH Command buffer overflow

CVE-2025-4254 · PCMan FTP Server

PCMan FTP Server LIST Command buffer overflow

RVC-Project11 vulnerabilities on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-43842 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-012_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43843 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-013_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43844 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-014_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43845 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-015_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43846 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-016_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43847 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-017_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43848 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-018_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43849 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-019_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43850 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-020_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43851 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-021_Retrieval-based-Voice-Conversion-WebUI

CVE-2025-43852 · RVC-Project Retrieval-based-Voice-Conversion-WebUI

GHSL-2025-022_Retrieval-based-Voice-Conversion-WebUI

WSO21 vulnerability on this pageMax CVSS 9.1Priority 42KEV 0

CVE-2025-2905 · WSO2 WSO2 API Manager

An XML External Entity (XXE) vulnerability in Multiple WSO2 Products

EPSS 1%CVSS 9.1

BuddyBoss1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1909 · BuddyBoss BuddyBoss Platform Pro

BuddyBoss Platform Pro <= 2.7.01 - Authentication Bypass via Apple OAuth provider