The archive.

CVE-2021-27289 · mitre

A replay attack vulnerability was discovered in a Zigbee smart home kit manufactured by Ksix (Zigbee Gateway Module = v1.0.3, Door Sensor…

EPSS 0.9%CVSS 9.1

CVE-2025-22900 · mitre

Totolink N600R v4.3.0cu.7647_B20210106 was discovered to contain a stack overflow via the macCloneMac parameter in the setWanConfig funct…

EPSS 0.6%CVSS 9.8

donknap1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-30206 · donknap dpanel

Dpanel's hard-coded JWT secret leads to remote code execution

EPSS 0.9%public exploit CVSS 9.8

ghostxbh2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-3558 · ghostxbh uzy-ssm-mall

ghostxbh uzy-ssm-mall uploadUserHeadImage unrestricted upload

CVE-2025-3559 · ghostxbh uzy-ssm-mall

ghostxbh uzy-ssm-mall 20 ForeProductListController sql injection

nats-io1 vulnerability on this pageMax CVSS 9.6Priority 49KEV 0

CVE-2025-30215 · nats-io nats-server

NATS-Server Fails to Authorize Certain Jetstream Admin APIs

EPSS 0.6%public exploit CVSS 9.6

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-3589 · SourceCodester Music Class Enrollment System

SourceCodester Music Class Enrollment System manage_class.php sql injection

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-3553 · VulDB

phpshe admin.php pe_delete sql injection

ZHENFENG131 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-3593 · ZHENFENG13 My-Blog-layui

ZHENFENG13/code-projects My-Blog-layui authorImg upload unrestricted upload

DevDojo1 vulnerability on this pageMax CVSS 9.1Priority 47KEV 0

CVE-2025-32931 · DevDojo Voyager

DevDojo Voyager 1.4.0 through 1.8.0, when Laravel 8 or later is used, allows authenticated administrators to execute arbitrary OS command…

EPSS 0.6%public exploit CVSS 9.1

Lissy931 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-32778 · Lissy93 web-check

Web-Check allows command Injection via Unvalidated URL in Screenshot API

EPSS 20%CVSS 9.3

SQLite1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-3277 · SQLite sqlite

An integer overflow can be triggered in SQLite’s `concat_ws()` function.

EPSS 1%CVSS 9.8

wpeverest1 vulnerability on this pageMax CVSS 9.8Priority 43KEV 0

CVE-2025-3439 · wpeverest Everest Forms – Contact Form, Payment Form, Quiz, Survey & Custom Form Builder

Everest Forms – Contact Form, Quiz, Survey, Newsletter & Payment Form Builder for WordPress <= 3.1.1 - Unauthenticated PHP Object Injection

EPSS 1%CVSS 9.8

empik1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-32568 · empik EmpikPlace for Woocommerce

WordPress EmpikPlace for Woocommerce Plugin <= 1.4.3 - PHP Object Injection vulnerability

Foysal Imran1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-32519 · Foysal Imran IDonate

WordPress IDonate plugin <= 2.1.18 - Local File Inclusion vulnerability

magepeopleteam1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-32607 · magepeopleteam WpBookingly

WordPress WpBookingly plugin <= 1.3.0 - PHP Object Injection vulnerability

RealMag7771 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2025-32569 · RealMag777 TableOn

WordPress TableOn plugin <= 1.0.4.3 - PHP Object Injection vulnerability

argoproj1 vulnerability on this pageMax CVSS 10.0Priority 41KEV 0

CVE-2025-32445 · argoproj argo-events

Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

EPSS 0.8%CVSS 10.0

hakeemnala1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-32577 · hakeemnala Build App Online

WordPress Build App Online Plugin <= 1.0.23 - Local File Inclusion vulnerability

EPSS 0.8%CVSS 9.8

meshtastic1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-24797 · meshtastic firmware

Meshtastic incorrectly hands malformed packets leads to controlled buffer overflow

Rankology1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-32491 · Rankology Rankology SEO – On-site SEO

WordPress Rankology SEO – On-site SEO plugin <= 2.2.4 - Privilege Escalation Vulnerability

EPSS 0.8%CVSS 9.8

SoftClever Limited1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2025-32579 · SoftClever Limited Sync Posts

WordPress Sync Posts Plugin <= 1.0 - Arbitrary File Upload vulnerability

EPSS 0.8%CVSS 9.9

Red Hat1 vulnerability on this pageMax CVSS 9.0Priority 40KEV 0

CVE-2025-32911 · Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

Libsoup: double free on soup_message_headers_get_content_disposition() through "soup-message-headers.c" via "params" ghashtable value

EPSS 1.0%CVSS 9.0

ifax1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2025-1782 · ifax HylaFAX

Unsanitized input in language form field

EPSS 0.6%CVSS 9.9

jupyterhub1 vulnerability on this pageMax CVSS 9.0Priority 39KEV 0

CVE-2025-32428 · jupyterhub jupyter-remote-desktop-proxy

Jupyter Remote Desktop Proxy makes TigerVNC accessible via the network and not just via a UNIX socket as intended

EPSS 0.9%CVSS 9.0

Oracle Corporation1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-30727 · Oracle Corporation Oracle Scripting

Vulnerability in the Oracle Scripting product of Oracle E-Business Suite (component: iSurvey Module).

EPSS 0.6%CVSS 9.8

AiDex2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-3579 · AiDex AiDex

Code Injection Vulnerability in AiDex

EPSS 0.7%CVSS 9.3

CVE-2025-3578 · AiDex AiDex

Adversarial Input Handling Vulnerability in AiDex

Growatt2 vulnerabilities on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-24297 · Growatt Cloud portal

Growatt Cloud portal Cross-site Scripting

EPSS 0.5%CVSS 9.8

CVE-2025-30510 · Growatt Cloud portal

Growatt Cloud portal Insufficient Type Distinction

EPSS 0.3%CVSS 9.8

kagla1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-30985 · kagla GNUCommerce

WordPress GNUCommerce plugin <= 1.5.4 - PHP Object Injection vulnerability

EPSS 0.5%CVSS 9.8

Lantronix1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-2567 · Lantronix Xport

Lantronix Xport Missing Authentication for Critical Function

EPSS 0.5%CVSS 9.8

LiquidThemes1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-26927 · LiquidThemes AI Hub

WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability

EPSS 0.5%CVSS 10.0

Lisandro Martinez1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-31565 · Lisandro Martinez WPSmartContracts

WordPress WPSmartContracts plugin <= 2.0.12 - SQL Injection vulnerability

EPSS 0.7%CVSS 9.3

N-Media1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-31599 · N-Media Bulk Product Sync

WordPress Bulk Product Sync plugin <= 8.6 - SQL Injection vulnerability

EPSS 0.7%CVSS 9.3

SicommNet2 vulnerabilities on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-22371 · SicommNet BASEC

SQL-injection in admin_login_handler allows unauthenticated user to log in as an administrator in SicommNet BASEC

EPSS 0.6%CVSS 9.3

CVE-2025-22372 · SicommNet BASEC

Insecure password storage in SicommNet BASEC

EPSS 0.2%CVSS 9.3

HK1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-32603 · HK WP Online Users Stats

WordPress WP Online Users Stats plugin <= 1.0.0 - SQL Injection vulnerability

LABCAT1 vulnerability on this pageMax CVSS 9.1Priority 37KEV 0

CVE-2025-32206 · LABCAT Processing Projects

WordPress Processing Projects Plugin <= 1.0.2 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 9.1

vertim1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-32565 · vertim Neon Product Designer

WordPress Neon Product Designer Plugin <= 2.2.0 - Unauthenticated SQL Injection vulnerability

Videx Inc.1 vulnerability on this pageMax CVSS 9.3Priority 37KEV 0

CVE-2025-22375 · Videx Inc. CyberAudit-Web

Authentication Bypass in CyberAudit-Web