The archive.

CVE-2025-25664 · mitre

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function.

CVE-2025-25667 · mitre

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.

CVE-2025-25668 · mitre

Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function.

CVE-2025-25662 · mitre

Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via…

CVE-2025-25674 · mitre

Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.

CVE-2025-25676 · mitre

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.

CVE-2025-25678 · mitre

Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.

CVE-2020-35546 · mitre

Lexmark MX6500 LW75.JD.P296 and previous devices have Incorrect Access Control via the access control settings.

EPSS 0.4%CVSS 9.1

D-Link1 vulnerability on this pageMax CVSS 9.8Priority 55KEV 0

CVE-2025-1539 · D-Link DAP-1320

D-Link DAP-1320 storagein.pd-XXXXXX replace_special_char stack-based overflow

EPSS 2%public exploit CVSS 9.8

hzmanyun1 vulnerability on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-1555 · hzmanyun Education and Training System

hzmanyun Education and Training System saveImage unrestricted upload

EPSS 0.7%public exploit CVSS 9.8

SourceCodester3 vulnerabilities on this pageMax CVSS 9.8Priority 50KEV 0

CVE-2025-1596 · SourceCodester Best Church Management Software

SourceCodester Best Church Management Software fpassword.php sql injection

CVE-2025-1598 · SourceCodester Best Church Management Software

SourceCodester Best Church Management Software asset_crud.php unrestricted upload

EPSS 0.7%public exploit CVSS 9.8

CVE-2025-1593 · SourceCodester Best Employee Management System

SourceCodester Best Employee Management System Profile Picture unrestricted upload

EPSS 0.5%CVSS 9.8

ChurchCRM4 vulnerabilities on this pageMax CVSS 9.3Priority 49KEV 0

code-projects1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1576 · code-projects Real Estate Property Management System

code-projects Real Estate Property Management System ajax_state.php sql injection

Exim1 vulnerability on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-26794 · Exim Exim

Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.

EPSS 78%CVSS 9.8

LabRedesCefetRJ2 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-27096 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'html/personalizacao_upload.php' parameter 'id_campo' in WeGIA

CVE-2025-26605 · LabRedesCefetRJ WeGIA

SQL Injection endpoint 'deletar_cargo.php' parameter 'id_cargo' in WeGIA

EPSS 0.5%public exploit CVSS 9.4

PHPGurukul5 vulnerabilities on this pageMax CVSS 9.8Priority 49KEV 0

CVE-2025-1582 · PHPGurukul Online Nurse Hiring System

PHPGurukul Online Nurse Hiring System all-request.php sql injection

CVE-2025-1583 · PHPGurukul Online Nurse Hiring System

PHPGurukul Online Nurse Hiring System search-report-details.php sql injection

CVE-2025-1588 · PHPGurukul Online Nurse Hiring System

PHPGurukul Online Nurse Hiring System manage-nurse.php path traversal

EPSS 0.8%public exploit CVSS 9.1

CVE-2025-1580 · PHPGurukul Nipah Virus Testing Management System

PHPGurukul Nipah Virus Testing Management System search-report-result.php sql injection

EPSS 0.5%public exploit CVSS 9.8

CVE-2025-1581 · PHPGurukul Online Nurse Hiring System

PHPGurukul Online Nurse Hiring System book-nurse.php sql injection

EPSS 0.5%public exploit CVSS 9.8

Arc531 vulnerability on this pageMax CVSS 9.3Priority 47KEV 0

CVE-2025-0868 · Arc53 DocsGPT

Remote Code Execution in DocsGPT

EPSS 17%CVSS 9.3

Elseta1 vulnerability on this pageMax CVSS 9.9Priority 44KEV 0

CVE-2025-1265 · Elseta Vinci Protocol Analyzer

Elseta Vinci Protocol Analyzer OS Command Injection

EPSS 1%CVSS 9.9

Ivanti1 vulnerability on this pageMax CVSS 9.1Priority 43KEV 0

CVE-2024-38657 · Ivanti Connect Secure

External control of a file name in Ivanti Connect Secure before version 22.7R2.4 and Ivanti Policy Secure before version 22.7R1.3 allows…

EPSS 2%CVSS 9.1

matiskiba1 vulnerability on this pageMax CVSS 9.8Priority 41KEV 0

CVE-2024-13789 · matiskiba ravpage

Ravpage <= 2.31 - PHP Object Injection

EPSS 0.8%CVSS 9.8

abseil1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-0838 · abseil abseil-cpp

Heap Buffer overflow in Abseil

keesiemeijer1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1510 · keesiemeijer Custom Post Type Date Archives

Custom Post Type Date Archives <= 2.7.1 - Missing Authorization to Unauthenticated Arbitrary Shortcode Execution

MetaSlider1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-26763 · MetaSlider Responsive Slider by MetaSlider

WordPress Slider, Gallery, and Carousel by MetaSlider – Image Slider, Video Slider Plugin <= 3.94.0 - PHP Object Injection vulnerability

EPSS 0.7%CVSS 9.8

NotFound1 vulnerability on this pageMax CVSS 10.0Priority 40KEV 0

CVE-2025-26776 · NotFound Chaty Pro

WordPress Chaty Pro Plugin <= 3.3.3 - Arbitrary File Upload vulnerability

EPSS 0.6%CVSS 10.0

Ping Identity1 vulnerability on this pageMax CVSS 9.2Priority 40KEV 0

CVE-2025-20059 · Ping Identity PingAM Java Policy Agent

PingAM Java Policy Agent path traversal

EPSS 1.0%CVSS 9.2

westboy1 vulnerability on this pageMax CVSS 9.8Priority 40KEV 0

CVE-2025-1556 · westboy CicadasCMS

westboy CicadasCMS Template Management system deserialization

EPSS 0.7%CVSS 9.8

Ex-Themes1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2024-13792 · Ex-Themes WooCommerce Food - Restaurant Menu & Food ordering

WooCommerce Food - Restaurant Menu & Food ordering <= 3.3.2 - Unauthenticated Arbitrary Shortcode Execution via ids

EPSS 0.5%CVSS 9.8

Hitachi Vantara1 vulnerability on this pageMax CVSS 9.9Priority 39KEV 0

CVE-2024-37361 · Hitachi Vantara Pentaho Data Integration & Analytics

Hitachi Vantara Pentaho Business Analytics Server - Deserialization of Untrusted Data

EPSS 0.5%CVSS 9.9

versluis1 vulnerability on this pageMax CVSS 9.8Priority 39KEV 0

CVE-2025-1509 · versluis Show Me The Cookies

Show Me The Cookies <= 1.0 - Unauthenticated Arbitrary Shortcode Execution

openfga1 vulnerability on this pageMax CVSS 9.8Priority 37KEV 0

CVE-2025-25196 · openfga openfga

OpenFGA Authorization Bypass