The archive.

CVE-2025-1841 · ESAFENET CDG

ESAFENET CDG ClientSortLog.jsp sql injection

CVE-2025-1844 · ESAFENET CDG

ESAFENET CDG backupLogDetail.jsp sql injection

EPSS 0.4%public exploit CVSS 9.8

Tenda3 vulnerabilities on this pageMax CVSS 9.8Priority 54KEV 0

CVE-2025-1853 · Tenda AC8

Tenda AC8 Parameter SetIpMacBind sub_49E098 stack-based overflow

EPSS 1%public exploit CVSS 9.8

CVE-2025-1819 · Tenda AC7 1200M

Tenda AC7 1200M telnet TendaTelnet os command injection

EPSS 2%CVSS 9.8

CVE-2025-1814 · Tenda AC6

Tenda AC6 WifiExtraSet stack-based overflow

EPSS 1%CVSS 9.8

Totolink1 vulnerability on this pageMax CVSS 9.8Priority 51KEV 0

CVE-2025-1852 · Totolink EX1800T

Totolink EX1800T cstecgi.cgi loginAuth buffer overflow

EPSS 0.9%public exploit CVSS 9.8

zj19834 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

Codezips3 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1850 · Codezips College Management System

Codezips College Management System university.php sql injection

CVE-2025-1856 · Codezips Gym Management System

Codezips Gym Management System gen_invoice.php sql injection

CVE-2025-1858 · Codezips Online Shopping Website

Codezips Online Shopping Website success.php sql injection

Oxidized Web project1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-27590 · Oxidized Web project Oxidized Web

In oxidized-web (aka Oxidized Web) before 0.15.0, the RANCID migration page allows an unauthenticated user to gain control over the Linux…

EPSS 28%CVSS 9.8

PHPGurukul2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1857 · PHPGurukul Nipah Virus Testing Management System

PHPGurukul Nipah Virus Testing Management System check_availability.php sql injection

CVE-2025-1859 · PHPGurukul News Portal

PHPGurukul News Portal login.php sql injection

VulDB1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1843 · VulDB

Mini-Tmall ProductMapper.java select sql injection

WP Swings1 vulnerability on this pageMax CVSS 9.8Priority 48KEV 0

CVE-2024-8425 · WP Swings WooCommerce Ultimate Gift Card

WooCommerce Ultimate Gift Card <= 2.9.2 - Unauthenticated Arbitrary File Upload

EPSS 4%CVSS 9.8

creativeon1 vulnerability on this pageMax CVSS 9.8Priority 47KEV 0

CVE-2024-9193 · creativeon WHMpress - WHMCS WordPress Integration Plugin

WHMpress <= 6.3-revision-0 - Unauthenticated Local File Inclusion to Arbitrary Options Update

EPSS 3%CVSS 9.8

mitre3 vulnerabilities on this pageMax CVSS 9.1Priority 46KEV 0

CVE-2025-25948 · mitre

Incorrect access control in the component /rest/staffResource/create of Serosoft Solutions Pvt Ltd Academia Student Information System (S…

EPSS 7%CVSS 9.1

CVE-2025-26206 · mitre

Cross Site Request Forgery vulnerability in sell done storefront v.1.0 allows a remote attacker to escalate privileges via the index.html…

EPSS 0.6%CVSS 9.0

CVE-2025-27583 · mitre

Incorrect access control in the component /rest/staffResource/findAllUsersAcrossOrg of Serosoft Solutions Pvt Ltd Academia Student Inform…

EPSS 0.4%CVSS 9.1

scriptsbundle1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2024-12824 · scriptsbundle Nokri – Job Board WordPress Theme

Nokri – Job Board WordPress Theme <= 1.6.2 - Unauthenticated Arbitrary Password Change

EPSS 2%CVSS 9.8

Zorlan1 vulnerability on this pageMax CVSS 9.8Priority 46KEV 0

CVE-2025-1791 · Zorlan SkyCaiji

Zorlan SkyCaiji Tool.php fileAction unrestricted upload

EPSS 0.4%public exploit CVSS 9.8

MediaTek, Inc.1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2025-20646 · MediaTek, Inc. MT6890, MT7915, MT7916, MT7981, MT7986

In wlan AP FW, there is a possible out of bounds write due to improper input validation.

EPSS 0.9%CVSS 9.8

ToDesktop1 vulnerability on this pageMax CVSS 9.9Priority 41KEV 0

CVE-2025-27554 · ToDesktop ToDesktop

ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary com…

EPSS 0.8%CVSS 9.9

Edge-Themes1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1638 · Edge-Themes Alloggio Membership

Alloggio Membership <= 1.1 - Authentication Bypass via Social Login Account Takeover

EPSS 0.6%CVSS 9.8

Elated-Themes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-1671 · Elated-Themes Academist Membership

Academist Membership <= 1.1.6 - Authentication Bypass via Account Takeover

EPSS 0.6%CVSS 9.8

IBM2 vulnerabilities on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-0159 · IBM Storage Virtualize

IBM FlashSystem authentication bypass

EPSS 0.9%CVSS 9.1

CVE-2025-0160 · IBM Storage Virtualize

IBM FlashSystem code execution

EPSS 0.5%CVSS 9.8

Select-Themes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-1564 · Select-Themes SetSail Membership

SetSail Membership <= 1.0.3 - Authentication Bypass via Account Takeover

EPSS 0.6%CVSS 9.8

SiteSao1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-8420 · SiteSao DHVC Form

DHVC Form <= 2.4.7 - Unauthenticated Privilege Escalation

EPSS 0.5%CVSS 9.8

CyberArk1 vulnerability on this pageMax CVSS 9.3Priority 38KEV 0

CVE-2025-22273 · CyberArk Endpoint Privilege Manager

Lack of rate-limiting in password change mechanism in CyberArk Endpoint Privilege Manager

EPSS 0.6%CVSS 9.3

radareorg1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-1864 · radareorg radare2

Buffer Overflow and Potential Code Execution in Radare2

EPSS 0.5%CVSS 10.0

Ubiquiti Inc2 vulnerabilities on this pageMax CVSS 9.6Priority 38KEV 0

CVE-2025-23115 · Ubiquiti Inc UniFi Protect Cameras

A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to Uni…

EPSS 0.7%CVSS 9.0

CVE-2025-23116 · Ubiquiti Inc UniFi Protect Application

An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor…

EPSS 0.5%CVSS 9.6

warmcat1 vulnerability on this pageMax CVSS 10.0Priority 38KEV 0

CVE-2025-1866 · warmcat libwebsockets

Undefined Behavior Due to Out-of-Bounds Pointer Arithmetic in libwebsockets

EPSS 0.4%CVSS 10.0

ithewei1 vulnerability on this pageMax CVSS 10.0Priority 37KEV 0

CVE-2025-1867 · ithewei libhv

HTTP Response Smuggling Vulnerability in libhv

EPSS 0.4%CVSS 10.0

Mayuri K7 vulnerabilities on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-1869 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1870 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1871 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1872 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1873 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1874 · Mayuri K 101news

SQL injection vulnerability in 101news

CVE-2025-1875 · Mayuri K 101news

SQL injection vulnerability in 101news

wpwax1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-1570 · wpwax Directorist: AI-Powered Business Directory, Listings & Classified Ads

Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings <= 8.1 - Privilege Escalation and Account Takeover via Weak OTP