The archive.

CVE-2025-2034 · PHPGurukul Pre-School Enrollment System

PHPGurukul Pre-School Enrollment System edit-class.php sql injection

CVE-2025-2050 · PHPGurukul User Registration & Login and User Management System

PHPGurukul User Registration & Login and User Management System login.php sql injection

CVE-2025-2058 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal search.php sql injection

CVE-2025-2059 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal booking-details.php sql injection

CVE-2025-2060 · PHPGurukul Emergency Ambulance Hiring Portal

PHPGurukul Emergency Ambulance Hiring Portal admin-profile.php sql injection

CVE-2025-2088 · PHPGurukul Pre-School Enrollment System

PHPGurukul Pre-School Enrollment System profile.php sql injection

zzskzy1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-2115 · zzskzy Warehouse Refinement Management System

zzskzy Warehouse Refinement Management System AcceptZip.ashx ProcessRequest unrestricted upload

AT Software Solutions1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2113 · AT Software Solutions ATSVD

AT Software Solutions ATSVD Esqueceu a senha sql injection

mmaitre3141 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1945 · mmaitre314 picklescan

picklescan - Zip Flag Bit Exploit Crashes Picklescan But Not PyTorch

projectworlds6 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2062 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System clientStatus.php sql injection

CVE-2025-2063 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System deleteNominee.php sql injection

CVE-2025-2064 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System deletePayment.php sql injection

CVE-2025-2065 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System editAgent.php sql injection

CVE-2025-2066 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System updateAgent.php sql injection

CVE-2025-2067 · projectworlds Life Insurance Management System

projectworlds Life Insurance Management System search.php sql injection

s-a-zhd3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2035 · s-a-zhd Ecommerce-Website-using-PHP

s-a-zhd Ecommerce-Website-using-PHP customer_register.php unrestricted upload

CVE-2025-2036 · s-a-zhd Ecommerce-Website-using-PHP

s-a-zhd Ecommerce-Website-using-PHP details.php sql injection

CVE-2025-2041 · s-a-zhd Ecommerce-Website-using-PHP

s-a-zhd Ecommerce-Website-using-PHP shop.php sql injection

user-xiangpeng1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-2112 · user-xiangpeng yaoqishan

user-xiangpeng yaoqishan MediaInfoService.java getMediaLisByFilter sql injection

Open Asset Import Library1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-2152 · Open Asset Import Library Assimp

Open Asset Import Library Assimp File BaseImporter.cpp ConvertToUTF8 heap-based overflow

SourceCodester1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2025-2046 · SourceCodester Best Employee Management System

SourceCodester Best Employee Management System print1.php sql injection

xwikisas1 vulnerability on this pageMax CVSS 9.1Priority 48KEV 0

CVE-2025-27603 · xwikisas application-confluence-migrator-pro

XWiki Confluence Migrator Pro allows Remote Code Execution via unescaped translations

EPSS 0.7%public exploit CVSS 9.1

wppost1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2025-1323 · wppost WP-Recall – Registration, Profile, Commerce & More

WP-Recall – Registration, Profile, Commerce & More <= 16.26.10 - Unauthenticated SQL Injection

EPSS 3%CVSS 9.8

QNAP Systems Inc.3 vulnerabilities on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-50390 · QNAP Systems Inc. QuRouter

QHora

EPSS 1%CVSS 9.8

CVE-2024-48864 · QNAP Systems Inc. File Station 5

File Station 5

EPSS 0.5%CVSS 9.1

CVE-2024-53695 · QNAP Systems Inc. HBS 3 Hybrid Backup Sync

HBS 3 Hybrid Backup Sync

EPSS 0.5%CVSS 9.1

truefoundry1 vulnerability on this pageMax CVSS 9.3Priority 42KEV 0

CVE-2025-27519 · truefoundry cognita

Cognita Arbitrary File Write

EPSS 1%CVSS 9.3

tychesoftwares1 vulnerability on this pageMax CVSS 9.8Priority 42KEV 0

CVE-2024-13359 · tychesoftwares Product Input Fields for WooCommerce

Product Input Fields for WooCommerce <= 1.12.0 - Unauthenticated Limited File Upload

EPSS 1%CVSS 9.8

whyun1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1475 · whyun WPCOM Member

WPCOM Member <= 1.7.5 - Authentication Bypass via 'user_phone'

EPSS 0.6%CVSS 9.8

cyberlord921 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2024-11087 · cyberlord92 miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn)

miniOrange Social Login and Register (Discord, Google, Twitter, LinkedIn) Pro Addon <= 200.3.9 - Authentication Bypass

fleetdm1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-27509 · fleetdm fleet

SAML authentication vulnerability due to improper SAML response validation

EPSS 0.7%CVSS 9.3

sfwebservice1 vulnerability on this pageMax CVSS 9.8Priority 38KEV 0

CVE-2025-1315 · sfwebservice InWave Jobs

InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset

Finder Fire Safety1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-12144 · Finder Fire Safety Finder ERP/CRM (Old System)

SQLi in Finder Fire Safety's Finder ERP/CRM (Old System)

javothemes1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-0177 · javothemes Javo Core

Javo Core <= 3.0.0.080 - Unauthenticated Privilege Escalation in ajax_signup

Nintex1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-27925 · Nintex Automation

Nintex Automation 5.6 and 5.7 before 5.8 has insecure deserialization of user input.

uxper1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2024-12876 · uxper Golo - City Travel Guide WordPress Theme

Golo - Directory & Listing, Travel WordPress Theme <= 1.6.10 - Missing Authorization to Privilege Escalation via Unauthenticated Arbitrary User Password Change

GraphicsMagick1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-27796 · GraphicsMagick GraphicsMagick

ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memor…

Linux1 vulnerability on this pageMax CVSS 9.8Priority 36KEV 0

CVE-2025-21829 · Linux Linux

RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"