The most featured CVEs in this year’s security newsletters, with public Proof-of-Concepts, ordered by mention count.

For the most up-to-date and accurate info, visit the NIST links. Always audit PoCs thoroughly before running them. Follow links with caution.

CVE-2025-53770

• Severity: 8.8 HIGH
• Impacted Products: Microsoft SharePoint Server (Subscription Edition, 2016, 2019)
• Description: Microsoft SharePoint Server is affected by a deserialization of untrusted data vulnerability that allows for unauthenticated remote code execution. This flaw can be chained with an authentication bypass to enable full system compromise.
• Remediation:
  • Microsoft SharePoint Server Remote Code Execution Vulnerability
  • Microsoft KB 5002753
  • Microsoft KB 5002759
• More Info: NVD - CVE-2025-53770
• PoC:
  • https://github.com/3a7/CVE-2025-53770
  • https://github.com/Agampreet-Singh/CVE-2025-53770/blob/main/cve-2025-53770.py
  • https://github.com/kaizensecurity/CVE-2025-53770/blob/master/payload

CVE-2025-31324

• Severity: 10.0 CRITICAL
• Impacted Products: SAP NetWeaver Visual Composer, VCFRAMEWORK version 7.50
• Description: SAP NetWeaver Visual Composer contains an improper authorization vulnerability in its Metadata Uploader component, allowing unauthenticated attackers to upload arbitrary files. This flaw can lead to unauthorized access and potentially remote code execution.
• Remediation:
  • SAP Security Patch Day - April 2025
  • SAP Security Patch Day – May 2025
• More Info: NVD - CVE-2025-31324
• PoC:
  • https://github.com/rf-peixoto/sap_netweaver_cve-2025-31324-
  • https://github.com/ODST-Forge/CVE-2025-31324_PoC/blob/main/PoC.py
  • https://github.com/nullcult/CVE-2025-31324-File-Upload/blob/main/sap_vc_poc.py

CVE-2025-59287

• Severity: 9.8 CRITICAL
• Impacted Products: Microsoft Windows Server Update Services (WSUS) 2012, Microsoft Windows Server Update Services (WSUS) 2016, Microsoft Windows Server Update Services (WSUS) 2019, Microsoft Windows Server Update Services (WSUS) 2022, Microsoft Windows Server Update Services (WSUS) 2025
• Description: Microsoft Windows Server Update Services (WSUS) is affected by a deserialization vulnerability that allows for unauthenticated remote code execution. This issue occurs when the service processes specially crafted requests sent to its web service endpoints, such as those used for client authentication or event reporting.
• Remediation:
  • Windows Server Update Service (WSUS) Remote Code Execution Vulnerability
  • October 23, 2025—KB5070883 (OS Build 17763.7922) Out-of-band - Microsoft Support
  • Microsoft KB 5066586
• More Info: NVD - CVE-2025-59287
• PoC:
  • https://github.com/QurtiDev/WSUS-CVE-2025-59287-RCE/blob/main/exploit.cs
  • https://github.com/garvitv14/CVE-2025-59287/blob/main/CVE-2025-59287.py
  • https://github.com/M507/CVE-2025-59287-PoC/blob/main/PoC.py

CVE-2025-29824

• Severity: 7.8 HIGH
• Impacted Products: Microsoft Windows Common Log File System (CLFS) Driver
• Description: Microsoft Windows Common Log File System (CLFS) Driver is affected by a use-after-free vulnerability. An authorized local attacker can exploit this flaw to elevate privileges on the system.
• Remediation:
  • Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Unisphere 360, Dell Solutions Enabler and Dell Solutions Enabler Virtual Appliance Security Update for Multiple Vulnerabilit
  • Windows Common Log File System Driver Elevation of Privilege Vulnerability
  • Microsoft KB 5055518
• More Info: NVD - CVE-2025-29824
• PoC:
  • https://github.com/encrypter15/CVE-2025-29824
  • https://github.com/zmkeh/CVE-2025-29824-CLFS-Local-privilege-escalation/blob/main/CVE-2025-29824CLFS.md
  • https://github.com/AfanPan/CVE-2025-29824-Exploit

CVE-2025-53771

• Severity: 6.5 MEDIUM
• Impacted Products: Microsoft SharePoint Server Subscription Edition, Microsoft SharePoint Server 2019, Microsoft SharePoint Server 2016
• Description: Microsoft SharePoint Server is affected by a path traversal and spoofing vulnerability (CVE-2025-53771) that acts as a patch bypass for CVE-2025-49706, enabling unauthenticated remote code execution when chained with other vulnerabilities. This flaw allows an attacker to bypass authentication mechanisms.
• Remediation:
  • Microsoft SharePoint Server Spoofing Vulnerability
  • Microsoft KB 5002753
  • Microsoft KB 5002759
• More Info: NVD - CVE-2025-53771
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb

CVE-2025-32433

• Severity: 10.0 CRITICAL
• Impacted Products: Erlang/OTP 27.3.3, Erlang/OTP 26.2.5.11, Erlang/OTP 25.3.2.20
• Description: Erlang/OTP is affected by a vulnerability in its SSH server implementation that allows for unauthenticated remote code execution. This issue stems from the improper handling of SSH protocol messages during the initial handshake phase.
• Remediation:
  • Erlang/OTP SSH Protocol Flaw Allows Remote Code Execution
  • [R1] Tenable Identity Exposure Version 3.77.11 Fixes Multiple Vulnerabilities - Security Advisory | Tenable®
  • Security Update for Dell VxRail for Multiple Third-Party Component Vulnerabilities
• More Info: NVD - CVE-2025-32433
• PoC:
  • https://github.com/meloppeitreet/CVE-2025-32433-Remote-Shell
  • https://github.com/soltanali0/CVE-2025-32433-Eploit/blob/main/exploit.py
  • https://github.com/0xPThree/cve-2025-32433

CVE-2025-42999

• Severity: 9.1 CRITICAL
• Impacted Products: SAP NetWeaver Visual Composer Metadata Uploader
• Description: SAP NetWeaver Visual Composer Metadata Uploader is vulnerable when a privileged user can upload untrusted or malicious content which, when deserialized, could potentially lead to a compromise of confidentiality, integrity, and availability of the host system.
• Remediation:
  • SAP Security Patch Day – May 2025
• More Info: NVD - CVE-2025-42999
• PoC:
  • https://github.com/antichainalysis/sap-netweaver-0day-CVE-2025-31324/blob/main/sap7.4poc.py

CVE-2024-55591

• Severity: 9.8 CRITICAL
• Impacted Products: FortiOS 7.0.0 through 7.0.16, FortiProxy 7.0.0 through 7.0.19, FortiProxy 7.2.0 through 7.2.12
• Description: An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS version 7.0.0 through 7.0.16 and FortiProxy version 7.0.0 through 7.0.19 and 7.2.0 through 7.2.12 allows a remote attacker to gain super-admin privileges via crafted requests to Node.js websocket module.
• Remediation:
  • Authentication bypass in Node.js websocket module and CSF requests
  • Authentication bypass in Node.js websocket module
• More Info: NVD - CVE-2024-55591
• PoC:
  • https://github.com/watchtowrlabs/fortios-auth-bypass-check-CVE-2024-55591/blob/main/CVE-2024-55591-check.py
  • https://github.com/rawtips/CVE-2024-55591/blob/main/exploit.py
  • https://github.com/robomusk52/exp-cmd-add-admin-vpn-CVE-2024-55591/blob/main/poc.py

CVE-2025-55182

• Severity: 10.0 CRITICAL
• Impacted Products: React Server Components (RSC) 19.0.0, React Server Components (RSC) 19.1.0, React Server Components (RSC) 19.1.1, React Server Components (RSC) 19.2.0
• Description: React Server Components (RSC) versions 19.0.0, 19.1.0, 19.1.1, and 19.2.0 are affected by a deserialization of untrusted data vulnerability. This flaw allows an unauthenticated, remote attacker to achieve arbitrary code execution on affected systems.
• Remediation:
  • oss-security - CVE-2025-55182: RCE in React Server Components
  • Critical Security Vulnerability in React Server Components – React
  • GCP-2025-072
• More Info: NVD - CVE-2025-55182
• PoC:
  • https://github.com/assetnote/react2shell-scanner/blob/master/scanner.py
  • https://github.com/sickwell/CVE-2025-55182/blob/main/cve-2025-55182.yaml
  • https://github.com/Cillian-Collins/CVE-2025-55182/blob/main/CVE-2025-55182.py

CVE-2025-43300

• Severity: 8.8 HIGH
• Impacted Products: Apple iOS, Apple iPadOS, Apple macOS
• Description: Apple iOS, iPadOS, and macOS are affected by an out-of-bounds write vulnerability in the Image I/O framework. Processing a specially crafted image file can lead to memory corruption and arbitrary code execution.
• Remediation:
  • About the security content of iOS 18.6.2 and iPadOS 18.6.2
  • About the security content of iPadOS 17.7.10
  • About the security content of macOS Sequoia 15.6.1
• More Info: NVD - CVE-2025-43300
• PoC:
  • https://github.com/PwnToday/CVE-2025-43300/blob/main/README.md
  • https://github.com/hunters-sec/CVE-2025-43300
  • https://github.com/PwnToday/CVE-2025-43300

CVE-2025-5777

• Severity: 10.0 CRITICAL
• Impacted Products: Citrix NetScaler ADC, Citrix NetScaler Gateway
• Description: Citrix NetScaler ADC and Gateway are affected by an out-of-bounds read vulnerability due to insufficient input validation. This flaw can lead to memory overread, allowing an attacker to bypass security mechanisms by disclosing sensitive information.
• Remediation:
  • NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-5349 and CVE-2025-5777
• More Info: NVD - CVE-2025-5777
• PoC:
  • https://github.com/FrenzisRed/CVE-2025-5777/blob/main/powershell-poc
  • https://github.com/rashedhasan090/CVE-2025-5777
  • https://github.com/SleepNotF0und/CVE-2025-5777/blob/main/CVE%E2%80%912025%E2%80%915777.py

CVE-2021-20016

• Severity: 9.8 CRITICAL
• Impacted Products: SonicWall SSLVPN SMA100 build version 10.x
• Description: A SQL-Injection vulnerability in the SonicWall SSLVPN SMA100 product allows a remote unauthenticated attacker to perform SQL query to access username password and other session related information. This vulnerability impacts SMA100 build version 10.x.
• Remediation:
  • Confirmed Zero-day vulnerability in the SonicWall SMA100 build version 10.x
• More Info: NVD - CVE-2021-20016
• PoC:
  • https://temp.sh/zAtuM/ebalbabusmelynca.zip

CVE-2025-21298

• Severity: 8.8 HIGH
• Impacted Products: Microsoft Office Word
• Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Office Word. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of RTF files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition.
• Remediation:
  • Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Unisphere 360, Dell Solutions Enabler, Dell Solutions Enabler Virtual Appliance Security Update for Multiple Vulnerabilities
  • Windows OLE Remote Code Execution Vulnerability
  • Microsoft KB 5049981
• More Info: NVD - CVE-2025-21298
• PoC:
  • https://github.com/ynwarcs/CVE-2025-21298/blob/main/poc/cve-2025-21298-poc.rtf
  • https://github.com/mr-big-leach/CVE-2025-21298

CVE-2025-0282

• Severity: 9.0 CRITICAL
• Impacted Products: Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, Ivanti Neurons for ZTA gateways before version 22.7R2.3
• Description: Ivanti Connect Secure before version 22.7R2.5, Ivanti Policy Secure before version 22.7R1.2, and Ivanti Neurons for ZTA gateways before version 22.7R2.3 are affected by a stack-based buffer overflow that allows a remote unauthenticated attacker to achieve arbitrary code execution. This vulnerability stems from improper handling of the clientCapabilities parameter in IF-T/TLS GET requests.
• Remediation:
  • Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-0282, CVE-2025-0283)
  • Security Update: Ivanti Connect Secure, Policy Secure and Neurons for ZTA Gateways
• More Info: NVD - CVE-2025-0282
• PoC:
  • https://www.exploit-db.com/exploits/52213
  • https://github.com/sfewer-r7/CVE-2025-0282/blob/main/CVE-2025-0282.rb
  • https://github.com/watchtowrlabs/CVE-2025-0282

CVE-2025-53766

• Severity: 9.8 CRITICAL
• Impacted Products: Windows GDI+
• Description: Heap-based buffer overflow in Windows GDI+ allows an unauthorized attacker to execute code over a network.
• Remediation:
  • GDI+ Remote Code Execution Vulnerability
  • Microsoft KB 5063709
  • Microsoft KB 5063812
• More Info: NVD - CVE-2025-53766
• PoC:
  • https://github.com/rich98/cve_2025_53766/blob/main/gdi%2B.ps1

CVE-2025-50165

• Severity: 9.8 CRITICAL
• Impacted Products: Microsoft Windows Graphics Component, windowscodecs.dll
• Description: The Microsoft Windows Graphics Component is affected by an untrusted pointer dereference vulnerability. This flaw allows an unauthorized attacker to execute arbitrary code remotely by enticing a user to view a specially crafted image.
• Remediation:
  • Windows Graphics Component Remote Code Execution Vulnerability
  • Microsoft KB 5063878
  • Microsoft KB 5064010
• More Info: NVD - CVE-2025-50165
• PoC:
  • https://github.com/encrypter15/CVE-2025-50165-x64-Exploit

CVE-2025-26633

• Severity: 7.0 HIGH
• Impacted Products: Microsoft Windows Management Console (MMC)
• Description: Microsoft Windows Management Console (MMC) contains an improper neutralization vulnerability that allows remote attackers to execute arbitrary code. This flaw enables an attacker to bypass security features by convincing a user to open a malicious file or visit a malicious web page.
• Remediation:
  • Microsoft Management Console Security Feature Bypass Vulnerability
  • Microsoft KB 5053594
  • Microsoft KB 5053596
• More Info: NVD - CVE-2025-26633
• PoC:
  • https://github.com/sandsoncosta/CVE-2025-26633
  • https://sandsoncosta.github.io/blog/cve-2025-26633-como-simular-e-identificar-o-ataque-msc-eviltwin/#5-mitre-attck

CVE-2025-22457

• Severity: 9.0 CRITICAL
• Impacted Products: Ivanti Connect Secure before version 22.7R2.6, Ivanti Policy Secure before version 22.7R1.4, Ivanti ZTA Gateways before version 22.8R2.2, Pulse Connect Secure 9.1x
• Description: Ivanti Connect Secure, Ivanti Policy Secure, and Ivanti ZTA Gateways are affected by a stack-based buffer overflow vulnerability that allows a remote, unauthenticated attacker to achieve remote code execution. This flaw exists due to improper handling of input that can corrupt memory.
• Remediation:
  • April Security Advisory Ivanti Connect Secure, Policy Secure & ZTA Gateways (CVE-2025-22457)
  • Licensing Portal (Login Required)
• More Info: NVD - CVE-2025-22457
• PoC:
  • https://labs.watchtowr.com/is-the-sofistication-in-the-room-with-us-x-forwarded-for-and-ivanti-connect-secure-cve-2025-22457
  • https://github.com/securekomodo/CVE-2025-22457
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/ivanti_connect_secure_stack_overflow_rce_cve_2025_22457.rb

CVE-2025-21333

• Severity: 7.8 HIGH
• Impacted Products: Windows Hyper-V
• Description: Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
• Remediation:
  • Dell PowerMaxOS, Dell PowerMax EEM, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Unisphere 360, Dell Solutions Enabler, Dell Solutions Enabler Virtual Appliance Security Update for Multiple Vulnerabilities
  • Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
  • Microsoft KB 5049981
• More Info: NVD - CVE-2025-21333
• PoC:
  • https://github.com/MrAle98/CVE-2025-21333-POC/blob/master/CVE-2025-21333-POC/CVE-2025-21333-POC.cpp
  • https://www.exploit-db.com/exploits/52436

CVE-2025-61884

• Severity: 10.0 CRITICAL
• Impacted Products: Oracle Configurator 12.2.3 through 12.2.14
• Description: Oracle Configurator, a component of Oracle E-Business Suite, contains a Server-Side Request Forgery (SSRF) vulnerability that allows an unauthenticated attacker to gain unauthorized access to data or achieve remote code execution. This flaw affects supported versions 12.2.3 through 12.2.14.
• Remediation:
  • Oracle Critical Patch Update Advisory - October 2025
• More Info: NVD - CVE-2025-61884
• PoC:
  • https://www.virustotal.com/gui/file/76b6d36e04e367a2334c445b51e1ecce97e4c614e88dfb4f72b104ca0f31235d
  • https://github.com/Zhert-lab/CVE-2025-61882-CVE-2025-61884
  • https://github.com/watchtowrlabs/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882/blob/main/watchTowr-vs-Oracle-E-Business-Suite-CVE-2025-61882.py

CVE-2025-59718

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiOS, Fortinet FortiProxy, Fortinet FortiSwitchManager
• Description: Fortinet FortiOS, FortiProxy, and FortiSwitchManager contain an improper verification of cryptographic signature vulnerability that allows an unauthenticated attacker to bypass FortiCloud SSO login authentication. This flaw can be exploited by sending a specially crafted SAML response message.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59718
• PoC:
  • https://github.com/Ashwesker/Blackash-CVE-2025-59718
  • https://github.com/exfil0/CVE-2025-59718-PoC

CVE-2025-49704

• Severity: 8.8 HIGH
• Impacted Products: Microsoft SharePoint Server 2016, Microsoft SharePoint Server 2019, Microsoft SharePoint Server Subscription Edition
• Description: Microsoft SharePoint Server is affected by a code injection and insecure deserialization vulnerability that allows an authenticated attacker to achieve remote code execution. This flaw can be chained with other vulnerabilities to bypass authentication.
• Remediation:
  • Microsoft SharePoint Remote Code Execution Vulnerability
  • Microsoft KB 5002741
  • Microsoft KB 5002744
• More Info: NVD - CVE-2025-49704
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb

CVE-2025-62215

• Severity: 7.0 HIGH
• Impacted Products: Microsoft Windows
• Description: Microsoft Windows is affected by a race condition vulnerability in the kernel that allows a local, authenticated attacker to elevate their privileges to SYSTEM. This flaw stems from improper synchronization during concurrent execution when multiple processes or threads access shared resources.
• Remediation:
  • Windows Kernel Elevation of Privilege Vulnerability
  • Microsoft KB 5068779
  • Microsoft KB 5068781
• More Info: NVD - CVE-2025-62215
• PoC:
  • https://github.com/mrk336/Kernel-Chaos-Weaponizing-CVE-2025-62215-for-SYSTEM-Privilege-Escalation/blob/main/README.md
  • https://github.com/theman001/CVE-2025-62215
  • https://github.com/abrewer251/CVE-2025-62215_Windows_Kernel_PE

CVE-2025-57819

• Severity: 9.8 CRITICAL
• Impacted Products: FreePBX 15, FreePBX 16, FreePBX 17
• Description: FreePBX is an open-source web-based graphical user interface. FreePBX 15, 16, and 17 endpoints are vulnerable due to insufficiently sanitized user-supplied data allowing unauthenticated access to FreePBX Administrator leading to arbitrary database manipulation and remote code execution. This issue has been patched in endpoint versions 15.0.66, 16.0.89, and 17.0.3.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57819
• PoC:
  • https://github.com/MuhammadWaseem29/SQL-Injection-and-RCE_CVE-2025-57819/blob/main/Readme.md
  • https://github.com/ImBIOS/lab-cve-2025-57819/blob/master/templates/CVE-2025-57819.yaml
  • https://github.com/blueisbeautiful/CVE-2025-57819/blob/main/exploit.py

CVE-2025-48828

• Severity: 9.0 CRITICAL
• Impacted Products: vBulletin
• Description: Certain vBulletin versions might allow attackers to execute arbitrary PHP code by abusing Template Conditionals in the template engine. By crafting template code in an alternative PHP function invocation syntax, such as the “var_dump”(“test”) syntax, attackers can bypass security checks and execute arbitrary PHP code, as exploited in the wild in May 2025.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-48828
• PoC:
  • https://github.com/SystemVll/CVE-2025-48827
  • https://karmainsecurity.com/pocs/vBulletin-replaceAdTemplate-RCE.php
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/vbulletin_replace_ad_template_rce.rb

CVE-2025-48827

• Severity: 9.1 CRITICAL
• Impacted Products: vBulletin 5.0.0 through 5.7.5, vBulletin 6.0.0 through 6.0.3
• Description: vBulletin 5.0.0 through 5.7.5 and 6.0.0 through 6.0.3 allows unauthenticated users to invoke protected API controllers' methods when running on PHP 8.1 or later, as demonstrated by the /api.php?method=protectedMethod pattern, as exploited in the wild in May 2025.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-48827
• PoC:
  • https://karmainsecurity.com/dont-call-that-protected-method-vbulletin-rce
  • https://karmainsecurity.com/pocs/vBulletin-replaceAdTemplate-RCE.php
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/vbulletin_replace_ad_template_rce.rb

CVE-2025-48384

• Severity: 8.0 HIGH
• Impacted Products: Git v2.43.7, Git v2.44.4, Git v2.45.4, Git v2.46.4, Git v2.47.3
• Description: Git is a fast, scalable, distributed revision control system with an unusually rich command set that provides both high-level operations and full access to internals. When reading a config value, Git strips any trailing carriage return and line feed (CRLF). When writing a config entry, values with a trailing CR are not quoted, causing the CR to be lost when the config is later read.
• Remediation:
  • Important: git security update
  • Important: git security update
  • Important: git security update
• More Info: NVD - CVE-2025-48384
• PoC:
  • https://github.com/nguyentranbaotran/cve-2025-48384-poc/blob/main/README.md
  • https://github.com/IK-20211125/CVE-2025-48384
  • https://github.com/ECHO6789/CVE-2025-48384-submodule

CVE-2025-33073

• Severity: 8.8 HIGH
• Impacted Products: Windows SMB
• Description: Improper access control in Windows SMB allows an authorized attacker to elevate privileges over a network.
• Remediation:
  • Windows SMB Client Elevation of Privilege Vulnerability
  • Microsoft KB 5060118
  • Microsoft KB 5060525
• More Info: NVD - CVE-2025-33073
• PoC:
  • https://www.exploit-db.com/raw/52330
  • https://github.com/B1ack4sh/Blackash-CVE-2025-33073
  • https://github.com/joaozixx/CVE-2025-33073

CVE-2025-33053

• Severity: 8.8 HIGH
• Impacted Products: Microsoft Windows, versions prior to 6.0.6003.23351
• Description: Microsoft Windows is affected by an external control of file name or path vulnerability in Internet Shortcut Files (.url files) that allows for remote code execution. This flaw enables an unauthorized attacker to execute arbitrary code by manipulating the working directory of a legitimate application.
• Remediation:
  • Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability
  • Microsoft KB 5060118
  • Microsoft KB 5060525
• More Info: NVD - CVE-2025-33053
• PoC:
  • https://www.exploit-db.com/raw/52334
  • https://github.com/4n4s4zi/CVE-2025-33053_PoC
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/unc_url_cve_2025_33053.rb

CVE-2025-30397

• Severity: 7.5 HIGH
• Impacted Products: Microsoft Scripting Engine
• Description: Access of resource using incompatible type (‘type confusion’) in Microsoft Scripting Engine allows an unauthorized attacker to execute code over a network.
• Remediation:
  • Scripting Engine Memory Corruption Vulnerability
  • Microsoft KB 5058380
  • Microsoft KB 5058379
• More Info: NVD - CVE-2025-30397
• PoC:
  • https://www.exploit-db.com/exploits/52315
  • https://github.com/mbanyamer/CVE-2025-30397---Windows-Server-2025-JScript-RCE-Use-After-Free-
  • https://github.com/B1ack4sh/Blackash-CVE-2025-30397/blob/main/README.md

CVE-2025-29927

• Severity: 9.1 CRITICAL
• Impacted Products: Next.js 12.3.5, Next.js 13.5.9, Next.js 14.2.25, Next.js 15.2.3
• Description: Next.js is affected by an improper authorization vulnerability that allows attackers to bypass security checks implemented within the application’s middleware. This flaw arises because the framework improperly trusts the x-middleware-subrequest internal HTTP header when provided by external clients.
• Remediation:
  • https://github.com/vercel/next.js/commit/52a078da3884efe6501613c7834a3d02a91676d2
  • https://github.com/vercel/next.js/commit/5fd3ae8f8542677c6294f32d18022731eab6fe48
  • CVE-2025-29927 | Next.js
• More Info: NVD - CVE-2025-29927
• PoC:
  • https://github.com/KamalideenAK/poc-cve-2025-29927
  • https://github.com/aydinnyunus/CVE-2025-29927/blob/main/exploit-test.js
  • https://github.com/sdrtba/CVE-2025-29927/blob/main/README.md

CVE-2025-2783

• Severity: 8.3 HIGH
• Impacted Products: Google Chrome 134.0.6998.177
• Description: Google Chrome on Windows is affected by a sandbox escape vulnerability in its Mojo inter-process communication (IPC) component. This flaw allows a remote attacker to bypass the browser’s sandbox protection via a malicious file or website.
• Remediation:
  • Chromium: CVE-2025-2783 Incorrect handle provided in unspecified circumstances in Mojo on Windows
  • Update your browser: Security fixes for latest Chrome zero-day | Opera Security
  • Product Release Advisory - Tanzu Hub 10.2.1
• More Info: NVD - CVE-2025-2783
• PoC:
  • https://github.com/Alchemist3dot14/CVE-2025-2783
  • https://github.com/byteReaper77/CVE-2025-2783-SandboxEscape
  • https://www.exploit-db.com/exploits/52403

CVE-2025-27363

• Severity: 8.1 HIGH
• Impacted Products: FreeType 2.13.0 and below
• Description: FreeType versions 2.13.0 and below are affected by an out-of-bounds write vulnerability when parsing font subglyph structures, which can lead to arbitrary code execution. This flaw occurs due to an integer wrap-around during buffer allocation for font data.
• Remediation:
  • IBM Cognos Analytics has addressed a vulnerability in FreeType (CVE-2025-27363)
  • IBM Cognos PowerPlay has addressed a vulnerability in FreeType (CVE-2025-27363)
  • IBM Cognos Transformer has addressed a vulnerability in FreeType (CVE-2025-27363)
• More Info: NVD - CVE-2025-27363
• PoC:
  • https://github.com/ov3rf1ow/CVE-2025-27363
  • https://github.com/zhuowei/CVE-2025-27363-proof-of-concept

CVE-2018-0171

• Severity: 9.8 CRITICAL
• Impacted Products: Cisco IOS
• Description: Cisco IOS is an operating system used in most Cisco routers, network switches, and appliances. A vulnerability exists within the Smart Install feature in IOS because it does not perform proper input validation of packet data. This vulnerability can only be triggered by traffic that is destined to the affected device that is listening on TCP 4786.
• Remediation:
  • cisco-sa-20180328-smi2
  • 1073268 (login required)
  • 1073313 (login required)
• More Info: NVD - CVE-2018-0171
• PoC:
  • https://www.exploit-db.com/exploits/44451
  • https://embedi.com/blog/cisco-smart-install-remote-code-execution

CVE-2025-7775

• Severity: 9.8 CRITICAL
• Impacted Products: NetScaler ADC 13.1, NetScaler ADC 14.1, NetScaler ADC 13.1-FIPS, NetScaler ADC NDcPP, NetScaler Gateway 13.1
• Description: Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway when NetScaler is configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) or AAA virtual server.
• Remediation:
  • CITRIX | Support
• More Info: NVD - CVE-2025-7775
• PoC:
  • https://github.com/hacker-r3volv3r/CVE-2025-7775-PoC/blob/main/CVE-2025-7775-PoC.py
  • https://github.com/rxerium/CVE-2025-7775

CVE-2025-64446

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiWeb 8.0.0 through 8.0.1, Fortinet FortiWeb 7.6.0 through 7.6.4, Fortinet FortiWeb 7.4.0 through 7.4.9, Fortinet FortiWeb 7.2.0 through 7.2.11, Fortinet FortiWeb 7.0.0 through 7.0.11
• Description: Fortinet FortiWeb is affected by a relative path traversal vulnerability combined with an authentication bypass that allows an unauthenticated attacker to execute administrative commands. This flaw permits the creation of new administrative user accounts on the system via crafted HTTP or HTTPS requests.
• Remediation:
  • PSIRT | FortiGuard Labs
• More Info: NVD - CVE-2025-64446
• PoC:
  • https://github.com/sensepost/CVE-2025-64446/blob/main/scanner.py
  • https://x.com/defusedcyber/status/1975242250373517373
  • https://github.com/lincemorado97/CVE-2025-64446_CVE-2025-58034/blob/main/exploit.py

CVE-2025-61757

• Severity: 9.8 CRITICAL
• Impacted Products: Oracle Fusion Middleware Identity Manager 12.2.1.4.0, Oracle Fusion Middleware Identity Manager 14.1.2.1.0
• Description: Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.1.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Identity Manager. Successful attacks of this vulnerability can result in takeover of Identity Manager.
• Remediation:
  • Oracle Critical Patch Update Advisory - October 2025
  • Text Form of Oracle Critical Patch Update - October 2025 Risk Matrices
• More Info: NVD - CVE-2025-61757
• PoC:
  • https://github.com/Jinxia62/Oracle-Identity-Manager-CVE-2025-61757/blob/main/CVE-2025-61757.py
  • https://github.com/B1ack4sh/Blackash-CVE-2025-61757/blob/main/CVE-2025-61757.py

CVE-2025-25257

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiWeb 7.6.0 through 7.6.3, Fortinet FortiWeb 7.4.0 through 7.4.7, Fortinet FortiWeb 7.2.0 through 7.2.10, Fortinet FortiWeb below 7.0.10
• Description: Fortinet FortiWeb is affected by an SQL Injection vulnerability that allows an unauthenticated attacker to execute unauthorized SQL code or commands via crafted HTTP or HTTPS requests, which can be escalated to remote code execution. This flaw exists due to improper neutralization of special elements in SQL commands.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-25257
• PoC:
  • https://github.com/TheStingR/CVE-2025-25257
  • https://github.com/segfault-it/CVE-2025-25257
  • https://github.com/B1ack4sh/Blackash-CVE-2025-25257

CVE-2025-24990

• Severity: 7.8 HIGH
• Impacted Products: Agere Modem driver, Windows (supported versions)
• Description: Microsoft is aware of vulnerabilities in the third party Agere Modem driver that ships natively with supported Windows operating systems. This is an announcement of the upcoming removal of ltmdm64.sys driver. The driver has been removed in the October cumulative update. Fax modem hardware dependent on this specific driver will no longer work on Windows. Microsoft recommends removing any existing dependencies on this hardware.
• Remediation:
  • Windows Agere Modem Driver Elevation of Privilege Vulnerability
  • Microsoft KB 5066586
  • Microsoft KB 5066780
• More Info: NVD - CVE-2025-24990
• PoC:
  • https://github.com/moiz-2x/CVE-2025-24990_POC

CVE-2025-20352

• Severity: 9.1 CRITICAL
• Impacted Products: Cisco IOS Software, Cisco IOS XE Software
• Description: A vulnerability in the Simple Network Management Protocol (SNMP) subsystem of Cisco IOS Software and Cisco IOS XE Software could allow the following: An authenticated, remote attacker with low privileges could cause a denial of service (DoS) condition on an affected device that is running Cisco IOS Software or Cisco IOS XE Software.
• Remediation:
  • Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability
• More Info: NVD - CVE-2025-20352
• PoC:
  • https://github.com/scadastrangelove/CVE-2025-20352

CVE-2025-1974

• Severity: 10.0 CRITICAL
• Impacted Products: Kubernetes, ingress-nginx controller
• Description: A security issue was discovered in Kubernetes where under certain conditions, an unauthenticated attacker with access to the pod network can achieve arbitrary code execution in the context of the ingress-nginx controller. This can lead to disclosure of Secrets accessible to the controller. (Note that in the default installation, the controller can access all Secrets cluster-wide.)
• Remediation:
  • Multiple Vulnerabilities in IBM API Connect
  • Security Update for Dell SmartFabric Manager Multiple Third-Party Component Vulnerabilities
  • Security Update for Dell Container Storage Modules (CSM) Third Party Vulnerabilities
• More Info: NVD - CVE-2025-1974
• PoC:
  • https://github.com/chhhd/CVE-2025-1974
  • https://github.com/hi-unc1e/CVE-2025-1974-poc/blob/master/poc.py
  • https://github.com/zulloper/CVE-2025-1974/blob/main/exploit.py

CVE-2024-50603

• Severity: 10.0 CRITICAL
• Impacted Products: Aviatrix Controller before 7.1.4191, Aviatrix Controller 7.2.x before 7.2.4996
• Description: An issue was discovered in Aviatrix Controller before 7.1.4191 and 7.2.x before 7.2.4996. Due to the improper neutralization of special elements used in an OS command, an unauthenticated attacker is able to execute arbitrary code. Shell metacharacters can be sent to /v1/api in cloud_type for list_flightpath_destination_instances, or src_cloud_type for flightpath_connection_test.
• Remediation:
  • Remote Code Execution Vulnerability in Aviatrix Controllers
• More Info: NVD - CVE-2024-50603
• PoC:
  • https://github.com/th3gokul/CVE-2024-50603/blob/main/cvehunter.py
  • https://github.com/newlinesec/CVE-2024-50603/blob/main/CVE-2024-50603.yaml
  • https://www.securing.pl/en/cve-2024-50603-aviatrix-network-controller-command-injection-vulnerability

CVE-2024-3721

• Severity: 9.8 CRITICAL
• Impacted Products: TBK DVR-4104, TBK DVR-4216, up to version 20240412
• Description: TBK DVR-4104 and DVR-4216 devices are affected by an OS command injection vulnerability in the /device.rsp endpoint. This flaw allows a remote attacker to execute arbitrary operating system commands by manipulating specific parameters in an HTTP request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-3721
• PoC:
  • https://github.com/qalvynn/Mirai-Based-CVE-2024-3721-Selfrep/blob/main/tbk.c
  • https://github.com/qalvynn/CVE-2024-3721---POC/blob/main/poc.go

CVE-2025-6558

• Severity: 8.8 HIGH
• Impacted Products: Google Chrome prior to version 138.0.7204.157
• Description: Google Chrome, and other browsers utilizing Chromium’s ANGLE and GPU components, are affected by an improper input validation vulnerability that can lead to a sandbox escape. This flaw can be triggered by a remote attacker via a crafted HTML page.
• Remediation:
  • Important: webkit2gtk3 security update
  • Important: webkit2gtk3 security update
  • Important: webkit2gtk3 security update
• More Info: NVD - CVE-2025-6558
• PoC:
  • https://github.com/DevBuiHieu/CVE-2025-6558-Proof-Of-Concept

CVE-2025-61882

• Severity: 9.8 CRITICAL
• Impacted Products: Oracle E-Business Suite Concurrent Processing 12.2.3, Oracle E-Business Suite Concurrent Processing 12.2.4, Oracle E-Business Suite Concurrent Processing 12.2.5, Oracle E-Business Suite Concurrent Processing 12.2.6, Oracle E-Business Suite Concurrent Processing 12.2.7
• Description: Oracle E-Business Suite Concurrent Processing versions 12.2.3 through 12.2.14 are affected by an improper authentication vulnerability within the BI Publisher Integration component. This flaw allows an unauthenticated, remote attacker with network access via HTTP to achieve arbitrary code execution.
• Remediation:
  • Oracle Security Alerts CVE-2025-61882
  • Oracle Critical Patch Update Advisory - October 2025
• More Info: NVD - CVE-2025-61882
• PoC:
  • https://github.com/GhoStZA-debug/CVE-2025-61882
  • https://github.com/Zhert-lab/CVE-2025-61882-CVE-2025-61884

CVE-2025-54236

• Severity: 9.1 CRITICAL
• Impacted Products: Adobe Commerce, Magento Open Source
• Description: Adobe Commerce and Magento Open Source are affected by an improper input validation vulnerability that can lead to session takeover and, under specific conditions, unauthenticated remote code execution. This flaw exists due to insufficient validation of input within the Commerce REST API.
• Remediation:
  • Patch for CVE-2025-54236 - WebAPI-improvement
  • Adobe Security Bulletin
• More Info: NVD - CVE-2025-54236
• PoC:
  • https://slcyber.io/assetnote-security-research-center/why-nested-deserialization-is-still-harmful-magento-rce-cve-2025-54236
  • https://nullsecurityx.codes/cve-2025-54236-sessionreaper-unauthenticated-rce-in-magento
  • https://github.com/crondenice/CVE-2025-54236

CVE-2025-32756

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiVoice 7.2.0, Fortinet FortiVoice 7.0.0 through 7.0.6, Fortinet FortiVoice 6.4.0 through 6.4.10, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5
• Description: A stack-based buffer overflow vulnerability.
• Remediation:
  • Stack-based buffer overflow vulnerability in API
• More Info: NVD - CVE-2025-32756
• PoC:
  • https://github.com/kn0x0x/CVE-2025-32756-POC
  • https://github.com/shan0ar/cve-2025-32756
  • https://github.com/exfil0/CVE-2025-32756-POC/blob/main/forti_poc.py

CVE-2025-31200

• Severity: 7.5 HIGH
• Impacted Products: tvOS 18.4.1, visionOS 2.4.1, iOS 18.4.1, iPadOS 18.4.1, macOS Sequoia 15.4.1
• Description: A memory corruption issue was addressed with improved bounds checking. This issue is fixed in tvOS 18.4.1, visionOS 2.4.1, iOS iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1. Processing an audio stream in a maliciously crafted media file may result in code execution. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals on iOS.
• Remediation:
  • About the security content of iOS 18.4.1 and iPadOS 18.4.1 - Apple Support
  • About the security content of macOS Sequoia 15.4.1
  • About the security content of tvOS 18.4.1
• More Info: NVD - CVE-2025-31200
• PoC:
  • https://github.com/JGoyd/CVE-2025-31200-iOS-AudioConverter-RCE
  • https://github.com/hunters-sec/CVE-2025-31200

CVE-2025-20337

• Severity: 10.0 CRITICAL
• Impacted Products: Cisco ISE, Cisco ISE-PIC
• Description: Multiple vulnerabilities in a specific API of Cisco ISE and Cisco ISE-PIC could allow an unauthenticated, remote attacker to execute arbitrary code on the underlying operating system as root. The attacker does not require any valid credentials to exploit these vulnerabilities.
• Remediation:
  • Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities
• More Info: NVD - CVE-2025-20337
• PoC:
  • https://www.zerodayinitiative.com/blog/2025/7/24/cve-2025-20281-cisco-ise-api-unauthenticated-remote-code-execution-vulnerability

CVE-2025-10035

• Severity: 10.0 CRITICAL
• Impacted Products: Fortra GoAnywhere MFT < 7.6.3, Fortra GoAnywhere MFT 7.7.0 - 7.8.3
• Description: Fortra GoAnywhere MFT contains a deserialization vulnerability in its License Servlet that allows an actor with a validly forged license response signature to deserialize an arbitrary actor-controlled object. This flaw can lead to command injection and remote code execution.
• Remediation:
  • Deserialization Vulnerability in GoAnywhere MFT’s License Servlet | Fortra
• More Info: NVD - CVE-2025-10035
• PoC:
  • https://github.com/B1ack4sh/Blackash-CVE-2025-10035/blob/main/CVE-2025-10035.yaml
  • https://github.com/rxerium/CVE-2025-10035

CVE-2024-7399

• Severity: 9.8 CRITICAL
• Impacted Products: Samsung MagicInfo Server
• Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Samsung MagicInfo Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the getFileFromMultipartFile method. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-7399
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/magicinfo_traversal.rb
  • https://github.com/davidxbors/CVE-2024-7399-POC
  • https://ssd-disclosure.com/ssd-advisory-samsung-magicinfo-unauthenticated-rce

CVE-2024-12847

• Severity: 9.8 CRITICAL
• Impacted Products: NETGEAR DGN1000 (prior to firmware version 1.1.00.48), NETGEAR DGN2000 v1
• Description: NETGEAR DGN1000 and DGN2000 routers are affected by an authentication bypass and OS command injection vulnerability in the setup.cgi component. This flaw allows a remote, unauthenticated attacker to execute arbitrary commands on the device with root privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-12847
• PoC:
  • https://www.exploit-db.com/exploits/43055
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn1000_setup_unauth_exec.rb

CVE-2025-59489

• Severity: 7.4 HIGH
• Impacted Products: Unity Runtime before 2025-10-02, Unity Editor
• Description: Unity Runtime before 2025-10-02 on Android, Windows, macOS, and Linux allows argument injection that can result in loading of library code from an unintended location. If an application was built with a version of Unity Editor that had the vulnerable Unity Runtime code, then an adversary may be able to execute code on, and exfiltrate confidential information from, the machine on which that application is running.
• Remediation:
  • MITRE: CVE-2025-59489 Unity Gaming Engine Editor vulnerability
• More Info: NVD - CVE-2025-59489
• PoC:
  • https://flatt.tech/research/posts/arbitrary-code-execution-in-unity-runtime
  • https://github.com/taptap/cve-2025-59489

CVE-2025-55315

• Severity: 9.9 CRITICAL
• Impacted Products: ASP.NET Core Kestrel
• Description: ASP.NET Core’s Kestrel web server is affected by an HTTP request smuggling vulnerability that allows an authenticated attacker to bypass security features. This flaw stems from inconsistent interpretation of HTTP requests, leading to desynchronization between proxy servers and the Kestrel backend.
• Remediation:
  • Important: .NET 8.0 security update
  • Important: .NET 8.0 security update
  • Important: .NET 9.0 security update
• More Info: NVD - CVE-2025-55315
• PoC:
  • https://github.com/nickcopi/CVE-2025-55315-detection-playground
  • https://andrewlock.net/understanding-the-worst-dotnet-vulnerability-request-smuggling-and-cve-2025-55315
  • https://github.com/ZemarKhos/CVE-2025-55315-PoC-Exploit

CVE-2025-5086

• Severity: 9.0 CRITICAL
• Impacted Products: DELMIA Apriso Release 2020, DELMIA Apriso Release 2021, DELMIA Apriso Release 2022, DELMIA Apriso Release 2023, DELMIA Apriso Release 2024
• Description: A deserialization of untrusted data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025 could lead to a remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5086
• PoC:
  • https://isc.sans.edu/diary/32256

CVE-2025-50154

• Severity: 7.1 HIGH
• Impacted Products: Microsoft Windows
• Description: Microsoft Windows is affected by a security bypass vulnerability in File Explorer related to LNK file parsing. This flaw allows for the relay or disclosure of NTLM credentials when a user interacts with a specially crafted LNK file.
• Remediation:
  • Microsoft Windows File Explorer Spoofing Vulnerability
  • Microsoft KB 5063709
  • Microsoft KB 5063812
• More Info: NVD - CVE-2025-50154
• PoC:
  • https://www.exploit-db.com/exploits/52415
  • https://cymulate.com/blog/zero-click-one-ntlm-microsoft-security-patch-bypass-cve-2025-50154
  • https://github.com/rubenformation/CVE-2025-50154

CVE-2025-4428

• Severity: 7.2 HIGH
• Impacted Products: Ivanti Endpoint Manager Mobile (EPMM) 12.5.0.0 and prior
• Description: Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior are affected by a remote code execution vulnerability in its API component. This flaw allows an authenticated attacker to execute arbitrary code via crafted API requests, and can lead to unauthenticated remote code execution when chained with an authentication bypass.
• Remediation:
  • Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 (CVE-2025-4427 and CVE-2025-4428)
• More Info: NVD - CVE-2025-4428
• PoC:
  • https://www.exploit-db.com/exploits/52421
  • https://github.com/rxerium/CVE-2025-4427-CVE-2025-4428
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb

CVE-2025-4427

• Severity: 5.3 MEDIUM
• Impacted Products: Ivanti Endpoint Manager Mobile 12.5.0.0 and prior
• Description: An authentication bypass in the API component of Ivanti Endpoint Manager Mobile 12.5.0.0 and prior allows attackers to access protected resources without proper credentials via the API.
• Remediation:
  • Security Advisory Ivanti Endpoint Manager Mobile (EPMM) May 2025 (CVE-2025-4427 and CVE-2025-4428)
• More Info: NVD - CVE-2025-4427
• PoC:
  • https://www.exploit-db.com/exploits/52421
  • https://github.com/xie-22/CVE-2025-4428/blob/main/CVE-2025-4428.py
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/ivanti_epmm_rce_cve_2025_4427_4428.rb

CVE-2025-34028

• Severity: 10.0 CRITICAL
• Impacted Products: Commvault Command Center Innovation Release: 11.38.0 to 11.38.20, Commvault Command Center Innovation Release: 11.38.20, Commvault Command Center Innovation Release: 11.38.25
• Description: The Commvault Command Center Innovation Release allows an unauthenticated actor to upload ZIP files that represent install packages that, when expanded by the target server, are vulnerable to path traversal vulnerability that can result in Remote Code Execution via malicious JSP. This issue affects Command Center Innovation Release: 11.38.0 to 11.38.20. The vulnerability is fixed in 11.38.20 with SP38-CU20-433 and SP38-CU20-436 and also fixed in 11.38.25 with SP38-CU25-434 and SP38-CU25-438.
• Remediation:
  • CV_2025_04_1: Vulnerability in Commvault Command Center Installation
• More Info: NVD - CVE-2025-34028
• PoC:
  • https://github.com/becrevex/Commvault-CVE-2025-34028/blob/main/CVE-2025-34028.nse
  • https://github.com/tinkerlev/commvault-cve2025-34028-check
  • https://labs.watchtowr.com/fire-in-the-hole-were-breaching-the-vault-commvault-remote-code-execution-cve-2025-34028

CVE-2025-3248

• Severity: 9.8 CRITICAL
• Impacted Products: Langflow < 1.3.0
• Description: Langflow versions prior to 1.3.0 are susceptible to unauthenticated remote code execution through a code injection vulnerability in the /api/v1/validate/code endpoint. This flaw allows a remote attacker to execute arbitrary code by sending crafted HTTP requests.
• Remediation:
  • https://github.com/langflow-ai/langflow/pull/6911
• More Info: NVD - CVE-2025-3248
• PoC:
  • https://github.com/imbas007/CVE-2025-3248
  • https://github.com/wand3rlust/CVE-2025-3248/blob/main/cve-2025-3248.py
  • https://github.com/vigilante-1337/CVE-2025-3248

CVE-2025-30400

• Severity: 7.8 HIGH
• Impacted Products: Information not available
• Description: Use after free in Windows DWM allows an authorized attacker to elevate privileges locally.
• Remediation:
  • Microsoft DWM Core Library Elevation of Privilege Vulnerability
  • Microsoft KB 5058379
  • Microsoft KB 5058384
• More Info: NVD - CVE-2025-30400
• PoC:
  • https://github.com/encrypter15/CVE-2025-30400

CVE-2025-26399

• Severity: 9.8 CRITICAL
• Impacted Products: SolarWinds Web Help Desk
• Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Web Help Desk. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AjaxProxy class. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
• Remediation:
  • SolarWinds Trust Center Security Advisories | CVE-2025-26399
• More Info: NVD - CVE-2025-26399
• PoC:
  • https://github.com/rxerium/CVE-2025-26399/blob/main/CVE-2025-26339.yaml

CVE-2025-25256

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiSIEM 7.3.0 through 7.3.1, Fortinet FortiSIEM 7.2.0 through 7.2.5, Fortinet FortiSIEM 7.1.0 through 7.1.7, Fortinet FortiSIEM 7.0.0 through 7.0.3, Fortinet FortiSIEM before 6.7.9
• Description: An improper neutralization of special elements used in an OS command (‘OS Command Injection’) vulnerability [CWE-78] in Fortinet FortiSIEM version 7.3.0 through 7.3.1, 7.2.0 through 7.2.5, 7.1.0 through 7.1.7, 7.0.0 through 7.0.3 and before 6.7.9 allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-25256
• PoC:
  • https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256/blob/main/watchTowr-vs-FortiSIEM-CVE-2025-25256.py

CVE-2025-24893

• Severity: 9.8 CRITICAL
• Impacted Products: XWiki Platform 15.10.11, XWiki Platform 16.4.1, XWiki Platform 16.5.0RC1
• Description: XWiki Platform contains an eval injection vulnerability in its SolrSearch component that allows any unauthenticated guest to perform arbitrary remote code execution. This flaw exists due to improper neutralization of directives in dynamically evaluated code.
• Remediation:
  • ZDI-CAN-23994: New Vulnerability Report
  • https://github.com/xwiki/xwiki-platform/commit/67021db9b8ed26c2236a653269302a86bf01ef40
• More Info: NVD - CVE-2025-24893
• PoC:
  • https://github.com/CMassa/CVE-2025-24893
  • https://github.com/zs1n/CVE-2025-24893/blob/main/CVE-2025-24893.py
  • https://github.com/Infinit3i/CVE-2025-24893

CVE-2025-24252

• Severity: 6.5 MEDIUM
• Impacted Products: macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5
• Description: A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Sequoia 15.4, tvOS 18.4, macOS Ventura 13.7.5, iPadOS 17.7.6, macOS Sonoma 14.7.5, iOS 18.4 and iPadOS 18.4, visionOS 2.4. An attacker on the local network may be able to corrupt process memory.
• Remediation:
  • About the security content of iOS 18.4 and iPadOS 18.4
  • About the security content of iPadOS 17.7.6
  • About the security content of macOS Sequoia 15.4
• More Info: NVD - CVE-2025-24252
• PoC:
  • https://github.com/cakescats/airborn-IOS-CVE-2025-24252/blob/main/airborn_arts_CVE-2025-24252_extractor.sh

CVE-2025-24201

• Severity: 8.8 HIGH
• Impacted Products: visionOS, iOS, iPadOS, macOS, Safari
• Description: WebKit, the browser engine used in Apple products and other software, contains an out-of-bounds write vulnerability. This flaw allows maliciously crafted web content to break out of the Web Content sandbox.
• Remediation:
  • Important: webkitgtk4 security update
  • Important: webkit2gtk3 security update
  • Important: webkit2gtk3 security update
• More Info: NVD - CVE-2025-24201
• PoC:
  • https://github.com/JGoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201
  • https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

CVE-2025-24016

• Severity: 9.9 CRITICAL
• Impacted Products: Wazuh 4.4.0, Wazuh 4.9.0
• Description: Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using as\_wazuh\_object (in framework/wazuh/core/cluster/common.py).
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-24016
• PoC:
  • https://github.com/huseyinstif/CVE-2025-24016-Nuclei-Template/blob/main/CVE-2025-24016.yaml
  • https://github.com/B1ack4sh/Blackash-CVE-2025-24016
  • https://github.com/MuhammadWaseem29/CVE-2025-24016

CVE-2025-20281

• Severity: 10.0 CRITICAL
• Impacted Products: Cisco Identity Services Engine (ISE) 3.3, Cisco Identity Services Engine (ISE) 3.4, Cisco ISE Passive Identity Connector (ISE-PIC) 3.3, Cisco ISE Passive Identity Connector (ISE-PIC) 3.4
• Description: Cisco Identity Services Engine (ISE) and ISE Passive Identity Connector (ISE-PIC) are affected by multiple vulnerabilities in a specific API that allow an unauthenticated, remote attacker to execute arbitrary code with root privileges on the underlying operating system. This flaw is due to insufficient validation of user-supplied input.
• Remediation:
  • Cisco Identity Services Engine Unauthenticated Remote Code Execution Vulnerabilities
• More Info: NVD - CVE-2025-20281
• PoC:
  • https://github.com/grupooruss/CVE-2025-20281-Cisco
  • https://github.com/abrewer251/CVE-2025-20281-2-Citrix-ISE-RCE
  • https://www.zerodayinitiative.com/blog/2025/7/24/cve-2025-20281-cisco-ise-api-unauthenticated-remote-code-execution-vulnerability

CVE-2024-54794

• Severity: 9.1 CRITICAL
• Impacted Products: SpagoBI 3.5.1
• Description: The script input feature of SpagoBI 3.5.1 allows arbitrary code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-54794
• PoC:
  • https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2024-54794
  • https://github.com/MarioTesoro/CVE-2024-54794

CVE-2024-48887

• Severity: 9.8 CRITICAL
• Impacted Products: Fortinet FortiSwitch GUI
• Description: A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request
• Remediation:
  • PSIRT | FortiGuard Labs
• More Info: NVD - CVE-2024-48887
• PoC:
  • https://github.com/cybersecplayground/CVE-2024-48887-FortiSwitch-Exploit

CVE-2024-3400

• Severity: 10.0 CRITICAL
• Impacted Products: Palo Alto Networks PAN-OS
• Description: A command injection as a result of arbitrary file creation vulnerability in the GlobalProtect feature of Palo Alto Networks PAN-OS software for specific PAN-OS versions and distinct feature configurations may enable an unauthenticated attacker to execute arbitrary code with root privileges on the firewall. Cloud NGFW, Panorama appliances, and Prisma Access are not impacted by this vulnerability.
• Remediation:
  • CVE-2024-3400 PAN-OS: Arbitrary File Creation Leads to OS Command Injection Vulnerability in GlobalProtect
  • Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 devices
  • Impact of CVE-2024-3400 on RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW
• More Info: NVD - CVE-2024-3400
• PoC:
  • https://github.com/h4x0r-dz/CVE-2024-3400
  • https://github.com/Ravaan21/CVE-2024-3400
  • https://github.com/Kr0ff/cve-2024-3400/blob/main/exploit.py

CVE-2017-11882

• Severity: 7.8 HIGH
• Impacted Products: Microsoft Office
• Description: Microsoft Office is a suite of productivity tools, applications and services. A vulnerability exists within the Microsoft Equation Editor when parsing certain files in Office where the software does not properly handle objects in memory, leading to memory corruption.
• Remediation:
  • CVE-2017-11882 | Microsoft Office Memory Corruption Vulnerability
  • https://0patch.blogspot.com/2017/11/official-patch-for-cve-2017-11882-meets.html
• More Info: NVD - CVE-2017-11882
• PoC:
  • https://github.com/Sunqiz/CVE-2017-11882-reproduction
  • https://github.com/lisinan988/CVE-2017-11882-exp
  • https://github.com/kautilyagupt/CVE-2024-26169-Detail-1

CVE-2025-54336

• Severity: 9.8 CRITICAL
• Impacted Products: Plesk Obsidian 18.0.70
• Description: In Plesk Obsidian 18.0.70, _isAdminPasswordValid uses an == comparison. Thus, if the correct password is “0e” followed by any digit string, then an attacker can login with any other string that evaluates to 0.0 (such as the 0e0 string). This occurs in admin/plib/LoginManager.php.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-54336
• PoC:
  • https://blog.aziz.tn/2025/08/cve-2025-54336.html

CVE-2025-54100

• Severity: 7.8 HIGH
• Impacted Products: Microsoft Windows PowerShell 5.1
• Description: Microsoft Windows PowerShell 5.1 contains a command injection vulnerability in the Invoke-WebRequest cmdlet that allows for security bypass and remote code execution. This flaw enables an attacker to execute arbitrary code by crafting malicious web content that is processed by Invoke-WebRequest.
• Remediation:
  • PowerShell Remote Code Execution Vulnerability
  • Microsoft KB 5074204
  • Microsoft KB 5071417
• More Info: NVD - CVE-2025-54100
• PoC:
  • https://github.com/ThemeHackers/CVE-2025-54100
  • https://github.com/xiaoLvChen/CVE-2025-54100

CVE-2025-53690

• Severity: 9.8 CRITICAL
• Impacted Products: Sitecore Experience Manager (XM): through 9.0, Sitecore Experience Platform (XP): through 9.0
• Description: Deserialization of Untrusted Data vulnerability in Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Code Injection.This issue affects Experience Manager (XM): through 9.0; Experience Platform (XP): through 9.0.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-53690
• PoC:
  • https://github.com/m0d0ri205/CVE-2025-53690-Analysis/blob/main/README.md
  • https://github.com/ErikLearningSec/CVE-2025-53690-POC
  • https://github.com/rxerium/CVE-2025-53690

CVE-2025-52376

• Severity: 9.8 CRITICAL
• Impacted Products: Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below
• Description: An authentication bypass vulnerability in the /web/um_open_telnet.cgi endpoint in Nexxt Solutions NCM-X1800 Mesh Router firmware UV1.2.7 and below, allowing an attacker to remotely enable the Telnet service without authentication, bypassing security controls. The Telnet server is then accessible with hard-coded credentials, allowing attackers to gain administrative shell access and execute arbitrary commands on the device.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52376
• PoC:
  • https://github.com/Vagebondcur/nexxt-solutions-NCM-X1800-exploits/blob/main/CVE-2025-52376/writeup.md

CVE-2025-49844

• Severity: 9.8 CRITICAL
• Impacted Products: Redis 8.2.1 and below, Redis earlier versions with Lua scripting enabled
• Description: Redis is affected by a use-after-free vulnerability in its embedded Lua interpreter, allowing remote attackers to execute arbitrary code without requiring authentication. This flaw exists due to improper handling of certain string values by the Lua interpreter.
• Remediation:
  • Important: redis:7 security update
  • Important: redis security update
  • Important: redis security update
• More Info: NVD - CVE-2025-49844
• PoC:
  • https://github.com/pedrorichil/CVE-2025-49844
  • https://github.com/imbas007/CVE-2025-49844-Vulnerability-Scanner
  • https://github.com/saneki/cve-2025-49844

CVE-2025-49706

• Severity: 6.5 MEDIUM
• Impacted Products: Microsoft SharePoint Server 14, Microsoft SharePoint Server 15
• Description: Microsoft SharePoint Server contains an improper authentication vulnerability that allows an unauthorized attacker to bypass authentication mechanisms. This flaw enables spoofing and can be chained with other vulnerabilities to achieve remote code execution.
• Remediation:
  • Microsoft SharePoint Server Spoofing Vulnerability
  • Microsoft KB 5002741
  • Microsoft KB 5002744
• More Info: NVD - CVE-2025-49706
• PoC:
  • https://github.com/AdityaBhatt3010/CVE-2025-53770-SharePoint-Zero-Day-Variant-Exploited-for-Full-RCE/blob/main/README.md
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sharepoint_toolpane_rce.rb

CVE-2025-44148

• Severity: 9.8 CRITICAL
• Impacted Products: MailEnable 10
• Description: MailEnable versions prior to 10 contain a Cross-Site Scripting (XSS) vulnerability in the failure.aspx component. This flaw allows a remote attacker to execute arbitrary code in the context of a victim’s browser session.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-44148
• PoC:
  • https://github.com/barisbaydur/CVE-2025-44148

CVE-2025-4404

• Severity: 9.1 CRITICAL
• Impacted Products: FreeIPA
• Description: A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the krbCanonicalName for the admin account by default, allowing users to create services with the same canonical name as the REALM admin.
• Remediation:
  • Important: ipa security update
  • Important: ipa security update
  • Important: ipa security update
• More Info: NVD - CVE-2025-4404
• PoC:
  • https://github.com/Cyxow/CVE-2025-4404-POC

CVE-2025-32711

• Severity: 9.3 CRITICAL
• Impacted Products: M365 Copilot
• Description: Ai command injection in M365 Copilot allows an unauthorized attacker to disclose information over a network.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-32711
• PoC:
  • https://github.com/daryllundy/cve-2025-32711

CVE-2025-32710

• Severity: 8.1 HIGH
• Impacted Products: Windows Remote Desktop Services
• Description: Use after free in Windows Remote Desktop Services allows an unauthorized attacker to execute code over a network.
• Remediation:
  • Windows Remote Desktop Services Remote Code Execution Vulnerability
  • Microsoft KB 5058383
  • Microsoft KB 5058384
• More Info: NVD - CVE-2025-32710
• PoC:
  • https://github.com/Sincan2/RCE-CVE-2025-32710

CVE-2025-31161

• Severity: 10.0 CRITICAL
• Impacted Products: CrushFTP 10.0.0 through 10.8.3, CrushFTP 11.0.0 through 11.3.0
• Description: CrushFTP versions 10.0.0 through 10.8.3 and 11.0.0 through 11.3.0 are affected by a vulnerability in the S3 authorization header processing that allows authentication bypass. Remote and unauthenticated HTTP requests to CrushFTP with known usernames can be used to impersonate a user and conduct actions on their behalf, including administrative actions and data retrieval.
• Remediation:
  • CrushFTP 11.0.0 to 11.3.0 are vulnerable. Update to 11.3.1+ immediately.
• More Info: NVD - CVE-2025-31161
• PoC:
  • https://github.com/WOOOOONG/CVE-2025-2825/blob/main/exploit_crushftp.sh
  • https://github.com/ch3m1calspain/CVE-2025-31161
  • https://github.com/cesarbtakeda/CVE-2025-31161

CVE-2025-27480

• Severity: 8.1 HIGH
• Impacted Products: Remote Desktop Gateway Service
• Description: Use after free in Remote Desktop Gateway Service allows an unauthorized attacker to execute code over a network.
• Remediation:
  • Windows Remote Desktop Services Remote Code Execution Vulnerability
  • Microsoft KB 5055519
  • Microsoft KB 5055521
• More Info: NVD - CVE-2025-27480
• PoC:
  • https://github.com/mrk336/CVE-2025-27480-The-Silent-Gateway-Risk/blob/main/README.md
  • https://github.com/mrk336/CVE-2025-27480/blob/main/README.md

CVE-2025-27218

• Severity: 5.3 MEDIUM
• Impacted Products: Sitecore Experience Manager (XM) 10.4, Sitecore Experience Platform (XP) 10.4
• Description: Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-27218
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sitecore_xp_cve_2025_27218.rb
  • https://www.exploit-db.com/exploits/52344

CVE-2024-53704

• Severity: 8.2 HIGH
• Impacted Products: SonicWALL NSv
• Description: This vulnerability allows remote attackers to bypass authentication on affected installations of SonicWALL NSv. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of Base64-encoded session cookies. The issue results from an incorrect implementation of an authentication algorithm. An attacker can leverage this vulnerability to bypass authentication on the system.
• Remediation:
  • SonicOS Affected By Multiple Vulnerabilities
• More Info: NVD - CVE-2024-53704
• PoC:
  • https://github.com/istagmbh/CVE-2024-53704/blob/main/CVE-2024-53704.py
  • https://bishopfox.com/blog/sonicwall-cve-2024-53704-ssl-vpn-session-hijacking

CVE-2024-40891

• Severity: 9.8 CRITICAL
• Impacted Products: Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615
• Description: **UNSUPPORTED WHEN ASSIGNED** A post-authentication command injection vulnerability in the management commands of the legacy DSL CPE Zyxel VMG4325-B10A firmware version 1.00(AAFR.4)C0_20170615 could allow an authenticated attacker to execute operating system (OS) commands on an affected device via Telnet.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-40891
• PoC:
  • https://vulncheck.com/blog/zyxel-telnet-vulns

CVE-2017-17761

• Severity: 9.8 CRITICAL
• Impacted Products: Google Nexus, Google Pixel
• Description: Google devices are a line of mobile devices that run the Android operating system including Nexus and Pixel. A vulnerability exists within the WLan component in Google devices. Limited information exists about this vulnerability. FireEye iSIGHT Intelligence will update this report when more information becomes available.
• Remediation:
  • Android Security Bulletin—February 2018
• More Info: NVD - CVE-2017-17761
• PoC:
  • https://www.exploit-db.com/exploits/44048

CVE-2025-8723

• Severity: 9.8 CRITICAL
• Impacted Products: Cloudflare Image Resizing plugin for WordPress, 1.5.6
• Description: The Cloudflare Image Resizing plugin for WordPress is vulnerable to Remote Code Execution due to missing authentication and insufficient sanitization within its hook_rest_pre_dispatch() method in all versions up to, and including, 1.5.6. This makes it possible for unauthenticated attackers to inject arbitrary PHP into the codebase, achieving remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8723
• PoC:
  • https://github.com/Nxploited/CVE-2025-8723

CVE-2025-8356

• Severity: 9.8 CRITICAL
• Impacted Products: Xerox FreeFlow Core 8.0.4
• Description: In Xerox FreeFlow Core version 8.0.4, an attacker can exploit a Path Traversal vulnerability to access unauthorized files on the server. This can lead to Remote Code Execution (RCE), allowing the attacker to run arbitrary commands on the system.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8356
• PoC:
  • https://horizon3.ai/attack-research/attack-blogs/from-support-ticket-to-zero-day

CVE-2025-7340

• Severity: 9.8 CRITICAL
• Impacted Products: HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress, 2.2.1
• Description: The HT Contact Form Widget For Elementor Page Builder &amp;amp; Gutenberg Blocks &amp;amp; Form Builder. plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the temp_file_upload function in all versions up to, and including, 2.2.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.
• Remediation:
  • https://plugins.trac.wordpress.org/changeset/3326887/ht-contactform/trunk/admin/Includes/Services/FileManager.php?contextall=1&old=3316109&old_path=%2Fht-contactform%2Ftrunk%2Fadmin%2FIncludes%2FServices%2FFileManager.php
• More Info: NVD - CVE-2025-7340
• PoC:
  • https://github.com/Kai-One001/WordPress-HT-Contact-CVE-2025-7340-RCE
  • https://github.com/Nxploited/CVE-2025-7340

CVE-2025-6758

• Severity: 9.8 CRITICAL
• Impacted Products: Real Spaces - WordPress Properties Directory Theme, 3.6
• Description: The Real Spaces - WordPress Properties Directory Theme theme for WordPress is vulnerable to privilege escalation via the ‘imic_agent_register’ function in all versions up to, and including, 3.6. This is due to a lack of restriction in the registration role. This makes it possible for unauthenticated attackers to arbitrarily choose their role, including the Administrator role, during user registration.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6758
• PoC:
  • https://github.com/Nxploited/CVE-2025-6758

CVE-2025-67506

• Severity: 9.8 CRITICAL
• Impacted Products: PipesHub 0.1.0-beta
• Description: PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buffer/convert through missing authentication. The endpoint accepts a file upload and converts it to PDF via LibreOffice by uploading payload to os.path.join(tmpdir, file.filename) without normalizing the filename.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-67506
• PoC:
  • https://github.com/pipeshub-ai/pipeshub-ai/security/advisories/GHSA-w398-9m55-2357

CVE-2025-67494

• Severity: 9.3 CRITICAL
• Impacted Products: ZITADEL 4.7.0 and below
• Description: ZITADEL is an open-source identity infrastructure tool. Versions 4.7.0 and below are vulnerable to an unauthenticated, full-read SSRF vulnerability. The ZITADEL Login UI (V2) treats the x-zitadel-forward-host header as a trusted fallback for all deployments, including self-hosted instances.
• Remediation:
  • https://github.com/zitadel/zitadel/commit/4c879b47334e01d4fcab921ac1b44eda39acdb96
• More Info: NVD - CVE-2025-67494
• PoC:
  • https://github.com/Chocapikk/CVE-2025-67494

CVE-2025-67489

• Severity: 9.8 CRITICAL
• Impacted Products: @vitejs/plugin-rs 0.5.5 and below
• Description: @vitejs/plugin-rs provides React Server Components (RSC) support for Vite. Versions 0.5.5 and below are vulnerable to arbitrary remote code execution on the development server through unsafe dynamic imports in server function APIs (loadServerAction, decodeReply, decodeAction) when integrated into RSC applications that expose server function endpoints. Attackers with network access to the development server can read/modify files, exfiltrate sensitive data etc.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-67489
• PoC:
  • https://github.com/advisories/GHSA-j76j-5p5g-9wfr

CVE-2025-64095

• Severity: 10.0 CRITICAL
• Impacted Products: DNN (formerly DotNetNuke) versions prior to 10.1.1
• Description: DNN (formerly DotNetNuke) versions prior to 10.1.1 contain an unrestricted file upload vulnerability in the default HTML editor provider. This flaw allows an unauthenticated user to upload arbitrary files and overwrite existing ones.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-64095
• PoC:
  • https://github.com/0xr2r/CVE-2025-64095/blob/main/CVE-2025-64095.py
  • https://github.com/NationalServices/CVE-2025-64095-DotNetNuke-DNN_PoC/blob/main/PoC-CVE-2025-64095.py

CVE-2025-62481

• Severity: 9.8 CRITICAL
• Impacted Products: Oracle Marketing, Oracle E-Business Suite 12.2.3-12.2.14
• Description: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing.
• Remediation:
  • Oracle Critical Patch Update Advisory - October 2025
  • Text Form of Oracle Critical Patch Update - October 2025 Risk Matrices
• More Info: NVD - CVE-2025-62481
• PoC:
  • https://github.com/rxerium/CVE-2025-53072-CVE-2025-62481

CVE-2025-59528

• Severity: 10.0 CRITICAL
• Impacted Products: Flowise 3.0.5, Flowise 3.0.6
• Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5, Flowise is vulnerable to remote code execution. The CustomMCP node allows users to input configuration settings for connecting to an external MCP server. This node parses the user-provided mcpServerConfig string to build the MCP server configuration. However, during this process, it executes JavaScript code without any security validation.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59528
• PoC:
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-3gcm-f6qx-ff7p
  • https://github.com/zimshk/CVE-2025-59528.yaml
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/flowise_js_rce.rb

CVE-2025-59434

• Severity: 9.6 CRITICAL
• Impacted Products: Cloud-Hosted Flowise, August 2025
• Description: Flowise is a drag & drop user interface to build a customized large language model flow. Prior to August 2025 Cloud-Hosted Flowise, an authenticated vulnerability in Flowise Cloud allows any user on the free tier to access sensitive environment variables from other tenants via the Custom JavaScript Function node. This includes secrets such as OpenAI API keys, AWS credentials, Supabase tokens, and Google Cloud secrets — resulting in a full cross-tenant data exposure.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59434
• PoC:
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-435c-mg9p-fv22

CVE-2025-59046

• Severity: 9.8 CRITICAL
• Impacted Products: interactive-git-checkout 1.1.4
• Description: The npm package interactive-git-checkout is an interactive command-line tool that allows users to checkout a git branch while it prompts for the branch name on the command-line. It is available as an npm package and can be installed via npm install -g interactive-git-checkout. Versions up to and including 1.1.4 of the interactive-git-checkout tool are vulnerable to a command injection vulnerability.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59046
• PoC:
  • https://github.com/ninofiliu/interactive-git-checkout/security/advisories/GHSA-4wcm-7hjf-6xw5
  • https://github.com/advisories/GHSA-4wcm-7hjf-6xw5

CVE-2025-58768

• Severity: 9.6 CRITICAL
• Impacted Products: DeepChat 0.3.5
• Description: DeepChat is a smart assistant uses artificial intelligence. Prior to version 0.3.5, in the Mermaid chart rendering component, there is a risky operation of directly using innerHTML to set user content. Therefore, any malicious content rendered via Mermaid will directly trigger the exploit chain, leading to command execution. This vulnerability is primarily caused by a failure to fully address the existing XSS issue in the project, leading to another exploit chain.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-58768
• PoC:
  • https://github.com/ThinkInAIXYZ/deepchat/security/advisories/GHSA-f7q5-vc93-wp6j

CVE-2025-58762

• Severity: 9.1 CRITICAL
• Impacted Products: Tautulli v2.15.3 and earlier, Tautulli v2.16.0
• Description: Tautulli is a Python based monitoring and tracking tool for Plex Media Server. In Tautulli v2.15.3 and earlier, an attacker with administrative access can use the pms\_image\_proxy endpoint to write arbitrary python scripts into the application filesystem. This leads to remote code execution when combined with the Script notification agent.
• Remediation:
  • https://github.com/Tautulli/Tautulli/commit/26e6b328112eb2cf35c164f981e0718f3a3d31a7
• More Info: NVD - CVE-2025-58762
• PoC:
  • https://github.com/Tautulli/Tautulli/security/advisories/GHSA-pxhr-29gv-4j8v

CVE-2025-58034

• Severity: 7.2 HIGH
• Impacted Products: Fortinet FortiWeb 7.0.0 through 7.0.11, Fortinet FortiWeb 7.2.0 through 7.2.11, Fortinet FortiWeb 7.4.0 through 7.4.10, Fortinet FortiWeb 7.6.0 through 7.6.5, Fortinet FortiWeb 8.0.0 through 8.0.1
• Description: Fortinet FortiWeb contains an OS Command Injection vulnerability that allows an authenticated attacker to execute arbitrary code on the underlying system. This flaw stems from improper validation of user-supplied input before it is used in a system call.
• Remediation:
  • PSIRT | FortiGuard Labs
• More Info: NVD - CVE-2025-58034
• PoC:
  • https://github.com/B1ack4sh/Blackash-CVE-2025-58034/blob/main/CVE-2025-58034.py
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/fortinet_fortiweb_rce.rb

CVE-2025-57441

• Severity: 9.8 CRITICAL
• Impacted Products: Blackmagic ATEM Mini Pro 2.7
• Description: The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990. Upon connection, the attacker can access a protocol preamble that leaks the video mode, routing configuration, input/output labels, device model, and even internal identifiers such as the unique ID. This can be used for reconnaissance and planning further attacks.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57441
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57441

CVE-2025-57437

• Severity: 9.8 CRITICAL
• Impacted Products: Blackmagic Web Presenter HD firmware version 3.3
• Description: The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream platform, stream key, and streaming URL - Audio/video configuration This data can be used to hijack live streams or perform network reconnaissance.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57437
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57437

CVE-2025-57432

• Severity: 7.3 HIGH
• Impacted Products: Blackmagic Web Presenter version 3.3
• Description: Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57432
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432

CVE-2025-56074

• Severity: 9.8 CRITICAL
• Impacted Products: PHPGurukul Park Ticketing Management System v2.0
• Description: A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56074
• PoC:
  • https://github.com/baixiaobi/Park/blob/main/foreigner-bwdates-reports-details.php%20SQL%20Injection.md

CVE-2025-55730

• Severity: 10.0 CRITICAL
• Impacted Products: XWiki Remote Macros 1.0, XWiki Remote Macros 1.26.5
• Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the title in the confluence paste code macro allows remote code execution for any user who can edit any page. The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-55730
• PoC:
  • https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-5w8v-h22g-j2mp

CVE-2025-55727

• Severity: 9.8 CRITICAL
• Impacted Products: XWiki Remote Macros 1.0, XWiki Remote Macros 1.26.5
• Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the width parameter in the column macro allows remote code execution for any user who can edit any page or who can access the CKEditor converter.
• Remediation:
  • https://github.com/xwikisas/xwiki-pro-macros/commit/05651adb4b58d03ba862d5290c645feeffd2121b
• More Info: NVD - CVE-2025-55727
• PoC:
  • https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-hxqp-983c-m8h9

CVE-2025-54802

• Severity: 9.8 CRITICAL
• Impacted Products: pyLoad 0.5.0b3.dev89 and below, pyLoad-ng 0.5.0b3.dev89 and below
• Description: pyLoad is the free and open-source Download Manager written in pure Python. In versions 0.5.0b3.dev89 and below, there is an opportunity for path traversal in pyLoad-ng CNL Blueprint via package parameter, allowing Arbitrary File Write which leads to Remote Code Execution (RCE). The addcrypted endpoint in pyload-ng suffers from an unsafe path construction vulnerability, allowing unauthenticated attackers to write arbitrary files outside the designated storage directory.
• Remediation:
  • Fix uncontrolled data used in path expression
  • Fix uncontrolled data used in path expression on dlc_path blueprints by ptrgits · Pull Request #4596 · pyload/pyload · GitHub
• More Info: NVD - CVE-2025-54802
• PoC:
  • https://github.com/pyload/pyload/security/advisories/GHSA-48rp-jc79-2264

CVE-2025-54381

• Severity: 9.9 CRITICAL
• Impacted Products: BentoML 1.4.0, BentoML 1.4.1, BentoML 1.4.2, BentoML 1.4.3, BentoML 1.4.4
• Description: BentoML is a Python library for building online serving systems optimized for AI apps and model inference. In versions 1.4.0 until 1.4.19, the file upload processing system contains an SSRF vulnerability that allows unauthenticated remote attackers to force the server to make arbitrary HTTP requests.
• Remediation:
  • https://github.com/bentoml/BentoML/commit/534c3584621da4ab954bdc3d814cc66b95ae5fb8
• More Info: NVD - CVE-2025-54381
• PoC:
  • https://github.com/B1ack4sh/Blackash-CVE-2025-54381/blob/main/README.md

CVE-2025-54253

• Severity: 10.0 CRITICAL
• Impacted Products: Adobe Experience Manager Forms
• Description: An authentication bypass vulnerability in Adobe Experience Manager Forms allows for remote command execution. The ‘com.adobe.framework.SecurityFilter’ in the ‘adminui.war’ module can be bypassed by including ‘login.’ in the URL. This allows unauthenticated access to the ‘/adminui’ endpoints. Because Struts2 Devmode is enabled by default in this module, an attacker can execute OGNL expressions, leading to remote command execution.
• Remediation:
  • Adobe Security Bulletin
• More Info: NVD - CVE-2025-54253
• PoC:
  • https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms
  • https://github.com/barbaraeivyu/CVE-2025-54253-e/blob/main/README.md

CVE-2025-5394

• Severity: 9.8 CRITICAL
• Impacted Products: Alone – Charity Multipurpose Non-profit WordPress Theme, 7.8.3
• Description: The Alone – Charity Multipurpose Non-profit WordPress Theme theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check on the alone_import_pack_install_plugin() function in all versions up to, and including, 7.8.3. This makes it possible for unauthenticated attackers to upload zip files containing webshells disguised as plugins from remote locations to achieve remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5394
• PoC:
  • https://github.com/Yucaerin/CVE-2025-5394
  • https://github.com/Nxploited/CVE-2025-5394
  • https://github.com/fokda-prodz/CVE-2025-5394/blob/main/exploit.py

CVE-2025-53890

• Severity: 5.4 MEDIUM
• Impacted Products: pyload 0.5.0b3.dev89
• Description: pyload is an open-source Download Manager written in pure Python. An unsafe JavaScript evaluation vulnerability in pyLoad’s CAPTCHA processing code allows unauthenticated remote attackers to execute arbitrary code in the client browser and potentially the backend server. Exploitation requires no user interaction or authentication and can result in session hijacking, credential theft, and full system remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-53890
• PoC:
  • https://github.com/pyload/pyload/security/advisories/GHSA-8w3f-4r8f-pf53

CVE-2025-53072

• Severity: 9.8 CRITICAL
• Impacted Products: Oracle Marketing, 12.2.3-12.2.14
• Description: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Marketing. Successful attacks of this vulnerability can result in takeover of Oracle Marketing.
• Remediation:
  • Oracle Critical Patch Update Advisory - October 2025
  • Text Form of Oracle Critical Patch Update - October 2025 Risk Matrices
• More Info: NVD - CVE-2025-53072
• PoC:
  • https://github.com/rxerium/CVE-2025-53072-CVE-2025-62481

CVE-2025-50567

• Severity: 10.0 CRITICAL
• Impacted Products: Saurus CMS Community Edition 4.7.1
• Description: Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters. This leads to injection of user-controlled SQL statements, potentially leading to arbitrary PHP code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50567
• PoC:
  • https://github.com/rahulhoysala/security-research/blob/main/CVE-2025-50567.md

CVE-2025-4978

• Severity: 9.8 CRITICAL
• Impacted Products: Netgear DGND3700 1.1.00.15_1.00.15NA
• Description: A vulnerability, which was classified as very critical, was found in Netgear DGND3700 1.1.00.15_1.00.15NA. This affects an unknown part of the file /BRS_top.html of the component Basic Authentication. The manipulation leads to improper authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other products might be affected as well. The vendor was contacted early about this disclosure.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-4978
• PoC:
  • https://github.com/at0de/my_vulns/blob/main/Netgear/DGND3700v2/backdoor.md

CVE-2025-49533

• Severity: 9.8 CRITICAL
• Impacted Products: Adobe Experience Manager Forms 6.5.23.0 and earlier
• Description: Adobe Experience Manager Forms versions 6.5.23.0 and earlier are affected by a deserialization of untrusted data vulnerability. This flaw allows an unauthenticated remote attacker to achieve arbitrary code execution without requiring user interaction.
• Remediation:
• Adobe Security Bulletin
• More Info: NVD - CVE-2025-49533
• PoC:
  • https://slcyber.io/assetnote-security-research-center/struts-devmode-in-2025-critical-pre-auth-vulnerabilities-in-adobe-experience-manager-forms

CVE-2025-48703

• Severity: 9.0 CRITICAL
• Impacted Products: CWP before 0.9.8.1205
• Description: CWP (aka Control Web Panel or CentOS Web Panel) before 0.9.8.1205 allows unauthenticated remote code execution via shell metacharacters in the t_total parameter in a filemanager changePerm request. A valid non-root username must be known.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-48703
• PoC:
  • https://github.com/Skynoxk/CVE-2025-48703
  • https://github.com/Sq-CC/CVE-2025-48703
  • https://fenrisk.com/rce-centos-webpanel

CVE-2025-46724

• Severity: 9.8 CRITICAL
• Impacted Products: Langroid 0.53.15
• Description: Langroid is a Python framework to build large language model (LLM)-powered applications. Prior to version 0.53.15, TableChatAgent uses pandas eval(). If fed by untrusted user input, like the case of a public-facing LLM application, it may be vulnerable to code injection. Langroid 0.53.15 sanitizes input to TableChatAgent by default to tackle the most common attack vectors, and added several warnings about the risky behavior in the project documentation.
• Remediation:
  • https://github.com/langroid/langroid/commit/0d9e4a7bb3ae2eef8d38f2e970ff916599a2b2a6
• More Info: NVD - CVE-2025-46724
• PoC:
  • https://github.com/advisories/GHSA-jqq5-wc57-f8hj

CVE-2025-4632

• Severity: 9.8 CRITICAL
• Impacted Products: Samsung MagicINFO 9 Server version before 21.1052
• Description: Improper limitation of a pathname to a restricted directory vulnerability in Samsung MagicINFO 9 Server version before 21.1052 allows attackers to write arbitrary file as system authority.
• Remediation:
  • Samsung Security for Smart TV, Audio and Displays
• More Info: NVD - CVE-2025-4632
• PoC:
  • https://ssd-disclosure.com/ssd-advisory-samsung-magicinfo-unauthenticated-rce

CVE-2025-46059

• Severity: 8.2 HIGH
• Impacted Products: langchain-ai v0.3.51
• Description: langchain-ai v0.3.51 was discovered to contain an indirect prompt injection vulnerability in the GmailToolkit component. This vulnerability allows attackers to execute arbitrary code and compromise the application via a crafted email message. NOTE: this is disputed by the Supplier because the code-execution issue was introduced by user-written code that does not adhere to the LangChain security practices.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-46059
• PoC:
  • https://github.com/langchain-ai/langchain-community/issues/217

CVE-2025-45854

• Severity: 10.0 CRITICAL
• Impacted Products: JEHC-BPM 2.0.1
• Description: /server/executeExec of JEHC-BPM 2.0.1 allows attackers to execute arbitrary code via execParams.
• Remediation:
  • Revisions · CVE-2025-45854 · GitHub
• More Info: NVD - CVE-2025-45854
• PoC:
  • https://gist.github.com/Cafe-Tea/bc14b38f4bfd951de2979a24c3358460

CVE-2025-44823

• Severity: 9.9 CRITICAL
• Impacted Products: Nagios Log Server before 2024R1.3.2
• Description: Nagios Log Server before 2024R1.3.2 allows authenticated users to retrieve cleartext administrative API keys via a /nagioslogserver/index.php/api/system/get_users call. This is GL:NLS#475.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-44823
• PoC:
  • https://www.exploit-db.com/exploits/52177
  • https://github.com/skraft9/CVE-2025-44823/blob/main/README.md

CVE-2025-44136

• Severity: 9.8 CRITICAL
• Impacted Products: MapTiler Tileserver-php v2.0
• Description: MapTiler Tileserver-php v2.0 is vulnerable to Cross Site Scripting (XSS). The GET parameter “layer” is reflected in an error message without html encoding. This leads to XSS and allows an unauthenticated attacker to execute arbitrary HTML or JavaScript code on a victim’s browser.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-44136
• PoC:
  • https://github.com/mheranco/CVE-2025-44136/blob/master/README.md

CVE-2025-4322

• Severity: 9.8 CRITICAL
• Impacted Products: Motors theme for WordPress, 5.6.67
• Description: The Motors theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 5.6.67. This is due to the theme not properly validating a user’s identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user passwords, including those of administrators, and leverage that to gain access to their account.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-4322
• PoC:
  • https://github.com/maximo896/CVE-2025-4322
  • https://github.com/Yucaerin/CVE-2025-4322

CVE-2025-42957

• Severity: 9.9 CRITICAL
• Impacted Products: SAP S/4HANA
• Description: SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-42957
• PoC:
  • https://github.com/mrk336/CVE-2025-42957-SAP-S-4HANA-Under-Siege/blob/main/README.md

CVE-2025-42944

• Severity: 10.0 CRITICAL
• Impacted Products: SAP NetWeaver
• Description: Due to a deserialization vulnerability in SAP NetWeaver, an unauthenticated attacker could exploit the system through the RMI-P4 module by submitting malicious payload to an open port. The deserialization of such untrusted Java objects could lead to arbitrary OS command execution, posing a high impact to the application’s confidentiality, integrity, and availability.
• Remediation:
  • SAP Security Patch Day - November 2025
  • SAP Security Patch Day - October 2025
• More Info: NVD - CVE-2025-42944
• PoC:
  • https://github.com/rxerium/CVE-2025-42944

CVE-2025-41744

• Severity: 9.1 CRITICAL
• Impacted Products: Sprecher Automations SPRECON-E series
• Description: Sprecher Automations SPRECON-E series uses default cryptographic keys that allow an unprivileged remote attacker to access all encrypted communications, thereby compromising confidentiality and integrity.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-41744
• PoC:
  • https://github.com/boeseejykbtanke348/CVE-2025-38001/blob/main/README.md
  • https://github.com/sinrinmagic43/CVE-2025-41744-Poc/blob/main/README.md
  • https://github.com/gromila7813/CVE-2025-41744/blob/main/README.md

CVE-2025-30406

• Severity: 9.8 CRITICAL
• Impacted Products: Gladinet CentreStack 16.1.10296.56315
• Description: Gladinet CentreStack is affected by a deserialization vulnerability due to the use of a hardcoded machineKey in its portal configuration. This flaw allows an attacker to achieve remote code execution by crafting malicious serialized payloads.
• Remediation:
  • Security Advisory for CVE-2025-30406
• More Info: NVD - CVE-2025-30406
• PoC:
  • https://github.com/mchklt/CVE-2025-30406
  • https://github.com/W01fh4cker/CVE-2025-30406
  • https://github.com/threadpoolx/CVE-2025-30406-CentreStack-Triofox-Deserialization-RCE/blob/main/README.md

CVE-2025-30216

• Severity: 9.4 CRITICAL
• Impacted Products: CryptoLib 1.3.3 and prior
• Description: CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In versions 1.3.3 and prior, a Heap Overflow vulnerability occurs in the Crypto\_TM\_ProcessSecurity function (crypto\_tm.c:1735:8).
• Remediation:
  • https://github.com/nasa/CryptoLib/commit/810fd66d592c883125272fef123c3240db2f170f
• More Info: NVD - CVE-2025-30216
• PoC:
  • https://github.com/oliviaisntcringe/CVE-2025-30216-PoC/blob/main/poc.py

CVE-2025-28915

• Severity: 9.1 CRITICAL
• Impacted Products: ThemeEgg ToolKit: from n/a through 1.2.9
• Description: Unrestricted Upload of File with Dangerous Type vulnerability in Theme Egg ThemeEgg ToolKit allows Upload a Web Shell to a Web Server. This issue affects ThemeEgg ToolKit: from n/a through 1.2.9.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28915
• PoC:
  • https://github.com/Pei4AN/CVE-2025-28915/blob/master/CVE-2025-28915.py
  • https://github.com/Nxploited/CVE-2025-28915/blob/main/CVE-2025-28915.py

CVE-2025-27364

• Severity: 10.0 CRITICAL
• Impacted Products: MITRE Caldera 4.2.0, MITRE Caldera 5.0.0
• Description: In MITRE Caldera through 4.2.0 and 5.0.0 before 35bc06e, a Remote Code Execution (RCE) vulnerability was found in the dynamic agent (implant) compilation functionality of the server. This allows remote attackers to execute arbitrary code on the server that Caldera is running on via a crafted web request to the Caldera server API used for compiling and downloading of Caldera’s Sandcat or Manx agent (implants). This web request can use the gcc -extldflags linker flag with sub-commands.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-27364
• PoC:
  • https://medium.com/@mitrecaldera/mitre-caldera-security-advisory-remote-code-execution-cve-2025-27364-5f679e2e2a0e

CVE-2025-26410

• Severity: 9.8 CRITICAL
• Impacted Products: Wattsense Bridge devices, BSP >= 6.4.1
• Description: The firmware of all Wattsense Bridge devices contain the same hard-coded user and root credentials. The user password can be easily recovered via password cracking attempts. The recovered credentials can be used to log into the device via the login shell that is exposed by the serial interface. The backdoor user has been removed in firmware BSP >= 6.4.1.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-26410
• PoC:
  • https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-wattsense-bridge
  • https://seclists.org/fulldisclosure/2025/Feb/9

CVE-2025-25014

• Severity: 9.1 CRITICAL
• Impacted Products: Kibana
• Description: A Prototype pollution vulnerability in Kibana leads to arbitrary code execution via crafted HTTP requests to machine learning and reporting endpoints.
• Remediation:
  • Kibana 8.17.6, 8.18.1, or 9.0.1 Security Update (ESA-2025-07) - Announcements / Security Announcements - Discuss the Elastic Stack
• More Info: NVD - CVE-2025-25014
• PoC:
  • https://github.com/davidxbors/CVE-2025-25014/blob/main/CVE-2025-25014.py
  • https://github.com/B1ack4sh/Blackash-CVE-2025-25014

CVE-2025-24797

• Severity: 9.4 CRITICAL
• Impacted Products: Meshtastic 2.6.2
• Description: Meshtastic is an open source mesh networking solution. A fault in the handling of mesh packets containing invalid protobuf data can result in an attacker-controlled buffer overflow, allowing an attacker to hijack execution flow, potentially resulting in remote code execution. This attack does not require authentication or user interaction, as long as the target device rebroadcasts packets on the default channel. This vulnerability fixed in 2.6.2.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-24797
• PoC:
  • https://github.com/Alainx277/CVE-2025-24797

CVE-2025-24118

• Severity: 7.4 HIGH
• Impacted Products: iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3
• Description: The issue was addressed with improved memory handling. This issue is fixed in iPadOS 17.7.4, macOS Sequoia 15.3, macOS Sonoma 14.7.3. An app may be able to cause unexpected system termination or write kernel memory.
• Remediation:
  • About the security content of iPadOS 17.7.4
  • About the security content of macOS Sequoia 15.3
  • About the security content of macOS Sonoma 14.7.3
• More Info: NVD - CVE-2025-24118
• PoC:
  • https://github.com/rawtips/-CVE-2025-24118/blob/main/exp.py
  • https://github.com/jprx/CVE-2025-24118/blob/main/TRAVERTINE.c

CVE-2025-23211

• Severity: 9.9 CRITICAL
• Impacted Products: Tandoor Recipes 1.5.24
• Description: Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. A Jinja2 SSTI vulnerability allows any user to execute commands on the server. In the case of the provided Docker Compose file as root. This vulnerability is fixed in 1.5.24.
• Remediation:
  • https://github.com/TandoorRecipes/recipes/commit/e6087d5129cc9d0c24278948872377e66c2a2c20
• More Info: NVD - CVE-2025-23211
• PoC:
  • https://www.offsec.com/blog/cve-2025-23211

CVE-2025-23061

• Severity: 9.0 CRITICAL
• Impacted Products: Mongoose < 8.9.5
• Description: Mongoose versions prior to 8.9.5 are susceptible to a search injection vulnerability due to the improper handling of nested $where filters within a populate() match, which can lead to arbitrary code execution. This flaw represents an incomplete fix for a previously identified vulnerability, CVE-2024-53900.
• Remediation:
• https://github.com/Automattic/mongoose/commit/64a9f9706f2428c49e0cfb8e223065acc645f7bc
• More Info: NVD - CVE-2025-23061
• PoC:
  • https://github.com/dajneem23/CVE-2025-23061

CVE-2025-1932

• Severity: 8.1 HIGH
• Impacted Products: Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, Thunderbird < 128.8
• Description: An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. This vulnerability affects Firefox < 136, Firefox ESR < 128.8, Thunderbird < 136, and Thunderbird < 128.8.
• Remediation:
  • Important: firefox security update
  • Important: firefox security update
  • Important: firefox security update
• More Info: NVD - CVE-2025-1932
• PoC:
  • https://project-zero.issues.chromium.org/issues/392850860

CVE-2025-1307

• Severity: 9.8 CRITICAL
• Impacted Products: Newscrunch theme for WordPress, 1.8.4.1
• Description: The Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the newscrunch_install_and_activate_plugin() function in all versions up to, and including, 1.8.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site’s server which may make remote code execution possible.
• Remediation:
  • https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=261789%40newscrunch&new=261789%40newscrunch&sfp_email=&sfph_mail=
• More Info: NVD - CVE-2025-1307
• PoC:
  • https://github.com/Nxploited/CVE-2025-1307/blob/main/CVE-2025-1307.py

CVE-2025-12539

• Severity: 10.0 CRITICAL
• Impacted Products: TNC Toolbox: Web Performance plugin for WordPress, 1.4.2
• Description: The TNC Toolbox: Web Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.4.2. This is due to the plugin storing cPanel API credentials (hostname, username, and API key) in files within the web-accessible wp-content directory without adequate protection in the “Tnc_Wp_Toolbox_Settings::save_settings” function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-12539
• PoC:
  • https://github.com/Nxploited/CVE-2025-12539

CVE-2025-11423

• Severity: 9.8 CRITICAL
• Impacted Products: Tenda CH22 1.0.0.1
• Description: A vulnerability was found in Tenda CH22 1.0.0.1. This affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. Performing manipulation of the argument page results in memory corruption. The attack is possible to be carried out remotely. The exploit has been made public and could be used.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-11423
• PoC:
  • https://github.com/f000x0/cve/issues/7

CVE-2025-11418

• Severity: 9.8 CRITICAL
• Impacted Products: Tenda CH22 up to 1.0.0.1
• Description: A security vulnerability has been detected in Tenda CH22 up to 1.0.0.1. This issue affects the function formWrlsafeset of the file /goform/AdvSetWrlsafeset of the component HTTP Request Handler. The manipulation of the argument mit_ssid_index leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-11418
• PoC:
  • https://github.com/Sxxxw/cve/issues/2

CVE-2025-11170

• Severity: 9.8 CRITICAL
• Impacted Products: WP移行専用プラグイン for CPI, 1.0.2
• Description: The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the Cpiwm_Import_Controller::import function in all versions up to, and including, 1.0.2. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-11170
• PoC:
  • https://github.com/Nxploited/CVE-2025-11170

CVE-2025-1094

• Severity: 10.0 CRITICAL
• Impacted Products: PostgreSQL before 17.3, PostgreSQL 16.7, PostgreSQL 15.11, PostgreSQL 14.16, PostgreSQL 13.19
• Description: PostgreSQL is affected by an SQL injection vulnerability in its libpq functions and command-line utilities due to improper neutralization of quoting syntax. This flaw can allow a database input provider to achieve SQL injection and, in certain configurations, arbitrary command execution.
• Remediation:
  • PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
  • IBM QRadar SIEM contains multiple vulnerabilities
  • IBM Observability with Instana (OnPrem) is affected by multiple security vulnerabilities
• More Info: NVD - CVE-2025-1094
• PoC:
  • https://github.com/PinkArmor/CVE-2025-1094-Lab-Setup
  • https://github.com/shacojx/CVE-2025-1094-Exploit/blob/main/Exploit-CVE-2025-1094/src/main/java/WebSocketExploit.java
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/beyondtrust_pra_rs_unauth_rce.rb

CVE-2025-10916

• Severity: 9.1 CRITICAL
• Impacted Products: FormGent WordPress plugin before 1.0.4
• Description: The FormGent WordPress plugin before 1.0.4 is vulnerable to arbitrary file deletion due to insufficient file path validation. This makes it possible for unauthenticated attackers to delete arbitrary files on the server.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-10916
• PoC:
  • https://wpscan.com/vulnerability/81c23998-1abb-495f-890a-79624a4cab9a

CVE-2025-10183

• Severity: 9.1 CRITICAL
• Impacted Products: TecCom TecConnect 4.1, TecCom Connect 5
• Description: A blind XML External Entity (XXE) injection in the OpenMessaging webservice in TecCom TecConnect 4.1 allows an unauthenticated attacker to exfiltrate arbitrary files to an attacker-controlled server. TecConnect 4.1 is considered end-of-life as of December 2023. Users are advised to upgrade to TecCom Connect 5.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-10183
• PoC:
  • https://blog.blacklanternsecurity.com/p/teccom-tecconnect-41-xml-external

CVE-2024-57595

• Severity: 7.2 HIGH
• Impacted Products: DLINK DIR-825 REVB 2.03
• Description: DLINK DIR-825 REVB 2.03 devices have an OS command injection vulnerability in the CGl interface apc_client_pin.cgi, which allows remote attackers to execute arbitrary commands via the parameter “wps_pin” passed to the apc_client_pin.cgi binary through a POST request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-57595
• PoC:
  • https://github.com/IdaJea/IOT_vuln_1/blob/master/DIR825/wps_pin.md

CVE-2024-53944

• Severity: 9.8 CRITICAL
• Impacted Products: Tuoshi/Dionlink LT15D 4G Wi-Fi M7628NNxlSPv2xUI_v1.0.1802.10.08_P4, LT21B M7628xUSAxUIv2_v1.0.1481.15.02_P0
• Description: An issue was discovered on Tuoshi/Dionlink LT15D 4G Wi-Fi devices through M7628NNxlSPv2xUI_v1.0.1802.10.08_P4 and LT21B devices through M7628xUSAxUIv2_v1.0.1481.15.02_P0. A unauthenticated remote attacker with network access can exploit a command injection vulnerability. The /goform/formJsonAjaxReq endpoint fails to sanitize shell metacharacters sent via JSON parameters, thus allowing attackers to execute arbitrary OS commands with root privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-53944
• PoC:
  • https://github.com/actuator/cve/blob/main/Tuoshi/CVE-2024-53944-Whitepaper.pdf

CVE-2024-51978

• Severity: 8.6 HIGH
• Impacted Products: No specific product names or version numbers are mentioned in the CVE description provided.
• Description: An unauthenticated attacker who knows the target device’s serial number, can generate the default administrator password for the device. An unauthenticated attacker can first discover the target device’s serial number via CVE-2024-51977 over HTTP/HTTPS/IPP, or via a PJL request, or via an SNMP request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-51978
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/misc/brother_default_admin_auth_bypass_cve_2024_51978.rb

CVE-2024-48841

• Severity: 10.0 CRITICAL
• Impacted Products: FLXEON 9.3.4 and older
• Description: Network access can be used to execute arbitrary code with elevated privileges. This issue affects FLXEON 9.3.4 and older.
• Remediation:
  • FLXeon Controllers Cyber Security Advisory FLXeon Controllers
• More Info: NVD - CVE-2024-48841
• PoC:
  • https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5911.php
  • https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5909.php
  • https://www.zeroscience.mk/en/vulnerabilities/ZSL-2025-5907.php

CVE-2024-46506

• Severity: 10.0 CRITICAL
• Impacted Products: NetAlertX 23.01.14 through 24.x prior to 24.10.12
• Description: NetAlertX is affected by an unauthenticated command injection vulnerability within its settings management component. This flaw allows a remote attacker to execute arbitrary commands on the host system by modifying application configurations without providing credentials.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-46506
• PoC:
  • https://github.com/fufu-byte/CVE-2024-46506/blob/main/CVE-2024-46506.py
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netalertx_rce_cve_2024_46506.rb

CVE-2024-21413

• Severity: 9.8 CRITICAL
• Impacted Products: Microsoft Outlook
• Description: Microsoft Outlook Remote Code Execution Vulnerability
• Remediation:
  • Security Update for Dell Client Platform for Intel® Processor and Intel® Core Ultra Processor Advisories
  • Microsoft Outlook Remote Code Execution Vulnerability
  • Microsoft KB 5002467
• More Info: NVD - CVE-2024-21413
• PoC:
  • https://github.com/hau2212/Moniker-Link-CVE-2024-21413-
  • https://github.com/duy-31/CVE-2024-21413/blob/main/cve-2024-21413.sh
  • https://github.com/Mdusmandasthaheer/CVE-2024-21413-Microsoft-Outlook-Remote-Code-Execution-Vulnerability/blob/main/outlook-exploit.py

CVE-2024-13161

• Severity: 9.8 CRITICAL
• Impacted Products: Ivanti EPM before the 2024 January-2025 Security Update, Ivanti EPM 2022 SU6 January-2025 Security Update
• Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
• Remediation:
  • Security Advisory EPM January 2025 for EPM 2024 and EPM 2022 SU6
• More Info: NVD - CVE-2024-13161
• PoC:
  • https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities

CVE-2024-13160

• Severity: 9.8 CRITICAL
• Impacted Products: Ivanti EPM before the 2024 January-2025 Security Update, Ivanti EPM 2022 SU6 January-2025 Security Update
• Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
• Remediation:
  • Security Advisory EPM January 2025 for EPM 2024 and EPM 2022 SU6
• More Info: NVD - CVE-2024-13160
• PoC:
  • https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities

CVE-2024-13159

• Severity: 9.8 CRITICAL
• Impacted Products: Ivanti EPM before the 2024 January-2025 Security Update, Ivanti EPM 2022 SU6 January-2025 Security Update
• Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
• Remediation:
  • Security Advisory EPM January 2025 for EPM 2024 and EPM 2022 SU6
• More Info: NVD - CVE-2024-13159
• PoC:
  • https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities/blob/main/CVE-2024-13159.py
  • https://www.horizon3.ai/attack-research/attack-blogs/ivanti-endpoint-manager-multiple-credential-coercion-vulnerabilities

CVE-2024-10811

• Severity: 9.8 CRITICAL
• Impacted Products: Ivanti EPM before the 2024 January-2025 Security Update, Ivanti EPM 2022 SU6 January-2025 Security Update
• Description: Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information.
• Remediation:
  • Security Advisory EPM January 2025 for EPM 2024 and EPM 2022 SU6
• More Info: NVD - CVE-2024-10811
• PoC:
  • https://github.com/horizon3ai/Ivanti-EPM-Coercion-Vulnerabilities/blob/main/CVE-2024-13159.py

CVE-2022-3365

• Severity: 9.8 CRITICAL
• Impacted Products: Remote Mouse Server 4.110
• Description: Due to reliance on a trivial substitution cipher, sent in cleartext, and the reliance on a default password when the user does not set a password, the Remote Mouse Server by Emote Interactive can be abused by attackers to inject OS commands over theproduct’s custom control protocol. A Metasploit module was written and tested against version 4.110, the current version when this CVE was reserved.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2022-3365
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/remote_mouse_rce.rb

CVE-2019-0211

• Severity: 7.8 HIGH
• Impacted Products: Apache HTTP Server
• Description: A vulnerability exists within Apache HTTP Server because it does not check for worker processes with low privileges to be executed, that could allow the user to obtain root privileges.
• Remediation:
  • 0880413
  • 0881246
  • 6489787
• More Info: NVD - CVE-2019-0211
• PoC:
  • https://www.exploit-db.com/exploits/46676
  • https://github.com/cfreal/exploits/tree/master/CVE-2019-0211-apache

CVE-2015-10137

• Severity: 9.8 CRITICAL
• Impacted Products: Website Contact Form With File Upload plugin for WordPress 1.3.4
• Description: The Website Contact Form With File Upload plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the ‘upload_file()’ function in versions up to, and including, 1.3.4. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected sites server which may make remote code execution possible.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2015-10137
• PoC:
  • https://github.com/Kai-One001/-CVE-2015-10137-WordPress-N-Media-Website-Contact-Form-with-File-Upload-1.3.4

CVE-2013-3893

• Severity: 8.8 HIGH
• Impacted Products: Microsoft Internet Explorer
• Description: Microsoft Internet Explorer is Microsoft’s web browser that ships by default with the Windows operating system. A vulnerability exists in the CDoc::SetMouseCapture(long,CElement *,int,int,int) method in the mshtml.dll library. The method does not properly check specific flags in the CElement object structure.
• Remediation:
  • Cumulative Security Update for Internet Explorer (2879017)
  • Microsoft Security Advisory (2887505)
• More Info: NVD - CVE-2013-3893
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/ie_setmousecapture_uaf.rb
  • https://packetstormsecurity.com/files/162585/Microsoft-Internet-Explorer-8-SetMouseCapture-Use-After-Free.html
  • https://www.exploit-db.com/exploits/49872

CVE-2025-9242

• Severity: 9.8 CRITICAL
• Impacted Products: WatchGuard Fireware OS 11.10.2 through 11.12.4_Update1, WatchGuard Fireware OS 12.0 through 12.11.3, WatchGuard Fireware OS 2025.1
• Description: WatchGuard Fireware OS is affected by an out-of-bounds write vulnerability in the iked process that allows remote, unauthenticated attackers to execute arbitrary code. This flaw occurs during the processing of IKEv2 VPN negotiation packets.
• Remediation:
  • WatchGuard Firebox iked Out of Bounds Write Vulnerability | WatchGuard Technologies
• More Info: NVD - CVE-2025-9242
• PoC:
  • https://github.com/watchtowrlabs/watchTowr-vs-WatchGuard-CVE-2025-9242/blob/main/watchTowr-vs-WatchGuard-CVE-2025-9242.py

CVE-2025-8943

• Severity: 7.3 HIGH
• Impacted Products: Flowise < 3.0.1
• Description: The Custom MCPs feature is designed to execute OS commands, for instance, using tools like npx to spin up local MCP Servers. However, Flowise’s inherent authentication and authorization model is minimal and lacks role-based access controls (RBAC). Furthermore, in Flowise versions before 3.0.1 the default installation operates without authentication unless explicitly configured. This combination allows unauthenticated network attackers to execute unsandboxed OS commands.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8943
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/flowise_custommcp_rce.rb
  • https://research.jfrog.com/vulnerabilities/flowise-os-command-remote-code-execution-jfsa-2025-001380578

CVE-2025-8088

• Severity: 8.8 HIGH
• Impacted Products: WinRAR
• Description: A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET.
• Remediation:
  • WinRAR 7.13 Final released
• More Info: NVD - CVE-2025-8088
• PoC:
  • https://github.com/ghostn4444/CVE-2025-8088
  • https://github.com/0xAbolfazl/CVE-2025-8088-WinRAR-PathTraversal-PoC
  • https://github.com/pentestfunctions/best-CVE-2025-8088/blob/main/CVE-2025-8088.py

CVE-2025-6543

• Severity: 9.8 CRITICAL
• Impacted Products: NetScaler ADC, NetScaler Gateway
• Description: Memory overflow vulnerability leading to unintended control flow and Denial of Service in NetScaler ADC and NetScaler Gateway when configured as Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
• Remediation:
  • NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2025-6543
• More Info: NVD - CVE-2025-6543
• PoC:
  • https://doublepulsar.com/citrix-netscaler-backdoors-part-one-may-2025-activity-against-governments-f48037199c3f
  • https://github.com/abrewer251/CVE-2025-6543_CitrixNetScaler_PoC
  • https://github.com/seabed-atavism/CVE-2025-6543/blob/main/exploit.py

CVE-2025-64459

• Severity: 9.1 CRITICAL
• Impacted Products: Django 5.1 before 5.1.14, Django 4.2 before 4.2.26, Django 5.2 before 5.2.8, Django 5.0.x, Django 4.1.x
• Description: Django is affected by a SQL injection vulnerability in its QuerySet methods and Q() class, which can be exploited to manipulate data and bypass authorization. This flaw arises when a crafted dictionary with dictionary expansion is used for the \_connector argument.
• Remediation:
  • Important: Red Hat Ansible Automation Platform 2.5 Product Security and Bug Fix Update
  • Important: Red Hat Ansible Automation Platform 2.6 Product Security and Bug Fix Update
  • SUSE-SU-2025:4100-1: important: Security update for python-Django
• More Info: NVD - CVE-2025-64459
• PoC:
  • https://github.com/nunpa/CVE-2025-64459/blob/main/CVE-2025-64459.sh
  • https://shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html
  • https://www.exploit-db.com/exploits/52456

CVE-2025-55346

• Severity: 9.8 CRITICAL
• Impacted Products: No specific product names or versions are mentioned in the CVE description provided.
• Description: User-controlled input flows to an unsafe implementation of a dynamic Function constructor, allowing network attackers to run arbitrary unsandboxed JS code in the context of the host, by sending a simple POST request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-55346
• PoC:
  • https://github.com/advisories/GHSA-hmgh-466j-fx4c
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-hmgh-466j-fx4c
  • https://research.jfrog.com/vulnerabilities/flowise-js-injection-remote-code-exection-jfsa-2025-001379925

CVE-2025-49113

• Severity: 9.9 CRITICAL
• Impacted Products: Roundcube Webmail
• Description: Roundcube Webmail is affected by a PHP object deserialization vulnerability that allows authenticated users to execute arbitrary code. This flaw exists because the application fails to properly validate the _from URL parameter within the program/actions/settings/upload.php component.
• Remediation:
  • USN-7584-1: Roundcube vulnerability | Ubuntu security notices | Ubuntu
  • roundcubemail-1.6.11-1.fc42
  • roundcubemail-1.6.11-1.fc41
• More Info: NVD - CVE-2025-49113
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/roundcube_auth_rce_cve_2025_49113.rb
  • https://github.com/AC8999/CVE-2025-49113/blob/main/exploit.py
  • https://github.com/B1ack4sh/Blackash-CVE-2025-49113

CVE-2025-47812

• Severity: 10.0 CRITICAL
• Impacted Products: Wing FTP Server before 7.4.4
• Description: In Wing FTP Server before 7.4.4. the user and admin web interfaces mishandle ‘\0’ bytes, ultimately allowing injection of arbitrary Lua code into user session files. This can be used to execute arbitrary system commands with the privileges of the FTP service (root or SYSTEM by default). This is thus a remote code execution vulnerability that guarantees a total server compromise. This is also exploitable via anonymous FTP accounts.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-47812
• PoC:
  • https://github.com/4m3rr0r/CVE-2025-47812-poc
  • https://github.com/ill-deed/WingFTP-CVE-2025-47812-illdeed
  • https://github.com/B1ack4sh/Blackash-CVE-2025-47812

CVE-2025-4123

• Severity: 8.8 HIGH
• Impacted Products: Grafana, Grafana Image Renderer plugin
• Description: A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permissions and if anonymous access is enabled, the XSS will work. If the Grafana Image Renderer plugin is installed, it is possible to exploit the open redirect to achieve a full read SSRF.
• Remediation:
  • Important: grafana security update
  • Important: grafana security update
  • Important: grafana security update
• More Info: NVD - CVE-2025-4123
• PoC:
  • https://github.com/punitdarji/Grafana-cve-2025-4123
  • https://github.com/kk12-30/CVE-2025-4123
  • https://github.com/NightBloodz/CVE-2025-4123

CVE-2025-34033

• Severity: 8.8 HIGH
• Impacted Products: Blue Angel Software Suite
• Description: An OS command injection vulnerability exists in the Blue Angel Software Suite running on embedded Linux devices via the ping_addr parameter in the webctrl.cgi script. The application fails to properly sanitize input before passing it to the system-level ping command. An authenticated attacker can inject arbitrary commands by appending shell metacharacters to the ping_addr parameter in a crafted GET request to /cgi-bin/webctrl.cgi?action=pingtest_update.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-34033
• PoC:
  • https://www.exploit-db.com/exploits/46792

CVE-2025-2776

• Severity: 9.3 CRITICAL
• Impacted Products: SysAid On-Prem <= 23.3.40
• Description: SysAid On-Prem versions <= 23.3.40 are vulnerable to an unauthenticated XML External Entity (XXE) vulnerability in the Server URL processing functionality, allowing for administrator account takeover and file read primitives.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-2776
• PoC:
  • https://github.com/watchtowrlabs/watchTowr-vs-SysAid-PreAuth-RCE-Chain

CVE-2025-26319

• Severity: 9.8 CRITICAL
• Impacted Products: FlowiseAI Flowise v2.2.6
• Description: FlowiseAI Flowise v2.2.6 was discovered to contain an arbitrary file upload vulnerability in /api/v1/attachments.
• Remediation:
  • https://github.com/dorattias/CVE-2025-26319
• More Info: NVD - CVE-2025-26319
• PoC:
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-35g6-rrw3-v6xc
  • https://github.com/YuoLuo/CVE-2025-26319/blob/main/CVE-2025-26319_exp.py

CVE-2025-24085

• Severity: 10.0 CRITICAL
• Impacted Products: visionOS 2.3, iOS 18.3, iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3
• Description: A use after free issue was addressed with improved memory management. This issue is fixed in visionOS 2.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, watchOS 11.3, tvOS 18.3. A malicious application may be able to elevate privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 17.2.
• Remediation:
  • About the security content of iOS 18.3 and iPadOS 18.3
  • About the security content of macOS Sequoia 15.3
  • About the security content of watchOS 11.3
• More Info: NVD - CVE-2025-24085
• PoC:
  • https://www.exploit-db.com/exploits/52316
  • https://github.com/JGoyd/glass-cage-ios18-cve-2025-24085-cve-2025-24201
  • https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

CVE-2025-23266

• Severity: 8.8 HIGH
• Impacted Products: NVIDIA Container Toolkit
• Description: This vulnerability allows local attackers to escalate privileges on affected installations of NVIDIA Container Toolkit. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of hooks. The issue results from the lack of restrictions on environment variables prior to spawning a hook process.
• Remediation:
  • Important: toolbox security update
  • Important: toolbox security update
  • toolbox-0.2-1.fc41
• More Info: NVD - CVE-2025-23266
• PoC:
  • https://github.com/r0binak/CVE-2025-23266/blob/main/evil.go
  • https://github.com/mrk336/CVE-2025-23266/blob/main/README.md
  • https://github.com/Mindasy/cve-2025-23266-migration-bypass

CVE-2025-13486

• Severity: 9.8 CRITICAL
• Impacted Products: Advanced Custom Fields: Extended plugin for WordPress 0.9.0.5 through 0.9.1.1
• Description: The Advanced Custom Fields: Extended plugin for WordPress versions 0.9.0.5 through 0.9.1.1 is vulnerable to remote code execution. This flaw allows unauthenticated attackers to execute arbitrary code on the server due to improper handling of user-supplied input.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-13486
• PoC:
  • https://github.com/0xanis/CVE-2025-13486-POC/blob/main/poc.py
  • https://github.com/lasthero-887/CVE-2025-13486---Poc/blob/main/README.md
  • https://github.com/0xgh057r3c0n/CVE-2025-13486

CVE-2024-8963

• Severity: 9.4 CRITICAL
• Impacted Products: Ivanti CSA before 4.6 Patch 519
• Description: Path Traversal in the Ivanti CSA before 4.6 Patch 519 allows a remote unauthenticated attacker to access restricted functionality.
• Remediation:
  • Security Advisory Ivanti CSA 4.6 (Cloud Services Appliance) (CVE-2024-8963)
  • Security Advisory Ivanti CSA (Cloud Services Appliance) (CVE-2024-9379, CVE-2024-9380, CVE-2024-9381)
• More Info: NVD - CVE-2024-8963
• PoC:
  • https://github.com/patfire94/CVE-2024-8963/blob/main/CVE-2024-8963.py
  • https://github.com/flyingllama87/CVE-2024-8190-unauth/blob/main/cve-2024-8190.py

CVE-2024-54820

• Severity: 9.8 CRITICAL
• Impacted Products: XOne Web Monitor v02.10.2024.530, framework 1.0.4.9
• Description: XOne Web Monitor v02.10.2024.530 framework 1.0.4.9 was discovered to contain a SQL injection vulnerability in the login page. This vulnerability allows attackers to extract all usernames and passwords via a crafted input.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-54820
• PoC:
  • https://github.com/jcarabantes/CVE-2024-54820

CVE-2023-20198

• Severity: 10.0 CRITICAL
• Impacted Products: Cisco IOS XE Software
• Description: Multiple vulnerabilities in the web UI feature of Cisco IOS XE Software could allow an authenticated, remote attacker to elevate privileges on an affected device.
• Remediation:
  • Cisco IOS XE Software Web UI Privilege Escalation Vulnerability
  • Cisco IOS XE Software Web UI Privilege Escalation Vulnerability
• More Info: NVD - CVE-2023-20198
• PoC:
  • https://github.com/mr-r3b00t/CVE-2023-20198-IOS-XE-Scanner
  • https://github.com/smokeintheshell/CVE-2023-20198/blob/main/exploit.py
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/misc/cisco_ios_xe_rce.rb

CVE-2025-6554

• Severity: 8.1 HIGH
• Impacted Products: Google Chrome prior to version 138.0.7204.96
• Description: Google Chrome’s V8 JavaScript engine contains a type confusion vulnerability that allows a remote attacker to achieve arbitrary read/write capabilities and arbitrary code execution. This can be triggered by a specially crafted HTML page.
• Remediation:
  • Security Update for Dell ThinOS 10 for Multiple Google Chrome Vulnerabilities
  • Product Release Advisory - Tanzu Hub 10.2.1
  • chromium-138.0.7204.92-1.fc41
• More Info: NVD - CVE-2025-6554
• PoC:
  • https://github.com/9Insomnie/CVE-2025-6554
  • https://github.com/PwnToday/CVE-2025-6554/blob/main/PoC.html
  • https://github.com/mistymntncop/CVE-2025-6554

CVE-2025-63666

• Severity: 9.8 CRITICAL
• Impacted Products: Tenda AC15 v15.03.05.18_multi
• Description: Tenda AC15 v15.03.05.18_multi) issues an authentication cookie that exposes the account password hash to the client and uses a short, low-entropy suffix as the session identifier. An attacker with network access or the ability to run JS in a victim browser can steal the cookie and replay it to access protected resources.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63666
• PoC:
  • https://github.com/Remenis/CVE-2025-63666/blob/main/README.md

CVE-2025-61303

• Severity: 5.3 MEDIUM
• Impacted Products: Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14), Hatching Triage Sandbox Windows 10 LTSC 2021 (2025-08-14)
• Description: Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61303
• PoC:
  • https://github.com/eGkritsis/CVE-2025-61303
  • https://www.virustotal.com/gui/file/3c52178c27d2a0336f6286f6cf0a4a253a507273b1a19303edcacb39d2659a4b

CVE-2025-60736

• Severity: 9.8 CRITICAL
• Impacted Products: code-projects Online Medicine Guide 1.0
• Description: code-projects Online Medicine Guide 1.0 is vulnerable to SQL Injection in /login.php via the upass parameter.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-60736
• PoC:
  • https://github.com/WinDyAlphA/CVE-2025-60736/blob/main/README.md

CVE-2025-55729

• Severity: 10.0 CRITICAL
• Impacted Products: XWiki Remote Macros 1.0, XWiki Remote Macros 1.26.5
• Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the ac:type in the ConfluenceLayoutSection macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 has a fix for the issue.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-55729
• PoC:
  • https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-22xj-jpjg-gpgw

CVE-2025-55728

• Severity: 10.0 CRITICAL
• Impacted Products: XWiki Remote Macros 1.0, XWiki Remote Macros 1.26.5
• Description: XWiki Remote Macros provides XWiki rendering macros that are useful when migrating content from Confluence. Starting in version 1.0 and prior to version 1.26.5, missing escaping of the classes parameter in the panel macro allows remote code execution for any user who can edit any page The classes parameter is used without escaping in XWiki syntax, thus allowing XWiki syntax injection which enables remote code execution. Version 1.26.5 contains a patch for the issue.
• Remediation:
  • https://github.com/xwikisas/xwiki-pro-macros/commit/3ca815294bf54fc024b2363efbece7aa08b8efd5
• More Info: NVD - CVE-2025-55728
• PoC:
  • https://github.com/xwikisas/xwiki-pro-macros/security/advisories/GHSA-48f4-h726-74p5

CVE-2025-54914

• Severity: 10.0 CRITICAL
• Impacted Products: Azure Networking
• Description: Azure Networking Elevation of Privilege Vulnerability
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-54914
• PoC:
  • https://github.com/Ash1996x/CVE-2025-54914-PoC
  • https://github.com/mrk336/Azure-Networking-Privilege-Escalation-Exploit-CVE-2025-54914/blob/main/README.md

CVE-2025-45746

• Severity: 6.5 MEDIUM
• Impacted Products: ZKT ZKBio CVSecurity 6.4.1_R
• Description: In ZKT ZKBio CVSecurity 6.4.1_R an unauthenticated attacker can craft JWT token using the hardcoded secret to authenticate to the service console. NOTE: the Supplier disputes the significance of this report because the service console is typically only accessible from a local area network, and because access to the service console does not result in login access or data access in the context of the application software platform.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45746
• PoC:
  • https://github.com/mrojz/ZKT-Bio-CVSecurity/blob/main/CVE-2025-45746.md

CVE-2025-40547

• Severity: 9.1 CRITICAL
• Impacted Products: Serv-U
• Description: A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-40547
• PoC:
  • https://github.com/zigzagymym1986/CVE-2025-40547

CVE-2025-29891

• Severity: 4.8 MEDIUM
• Impacted Products: Apache Camel: 4.10.0 before 4.10.2, 4.8.0 before 4.8.5, 3.10.0 before 3.22.4
• Description: Bypass/Injection vulnerability in Apache Camel.
• Remediation:
  • Oracle Critical Patch Update Advisory - July 2025
  • Text Form of Oracle CPU July 2025 Risk Matrices
• More Info: NVD - CVE-2025-29891
• PoC:
  • https://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC

CVE-2025-28242

• Severity: 9.8 CRITICAL
• Impacted Products: DAEnetIP4 METO v1.25
• Description: Improper session management in the /login_ok.htm endpoint of DAEnetIP4 METO v1.25 allows attackers to execute a session hijacking attack.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28242
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28242/README.md

CVE-2025-28238

• Severity: 9.8 CRITICAL
• Impacted Products: Elber REBLE310 Firmware v5.5.1.R
• Description: Improper session management in Elber REBLE310 Firmware v5.5.1.R , Equipment Model: REBLE310/RX10/4ASI allows attackers to execute a session hijacking attack.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28238
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-28238

CVE-2025-28236

• Severity: 9.8 CRITICAL
• Impacted Products: Nautel VX Series transmitters VX SW v6.4.0 and below
• Description: Nautel VX Series transmitters VX SW v6.4.0 and below was discovered to contain a remote code execution (RCE) vulnerability in the firmware update process. This vulnerability allows attackers to execute arbitrary code via supplying a crafted update package to the /#/software/upgrades endpoint.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28236
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28236/README.md

CVE-2025-28233

• Severity: 9.1 CRITICAL
• Impacted Products: BW Broadcast TX600 (14980), BW Broadcast TX300 (32990) (31448), BW Broadcast TX150, BW Broadcast TX1000, BW Broadcast TX30
• Description: Incorrect access control in BW Broadcast TX600 (14980), TX300 (32990) (31448), TX150, TX1000, TX30, and TX50 Hardware Version: 2, Software Version: 1.6.0, Control Version: 1.0, AIO Firmware Version: 1.7 allows attackers to access log files and extract session identifiers to execute a session hijacking attack.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28233
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28233/poc0.py

CVE-2025-28232

• Severity: 9.1 CRITICAL
• Impacted Products: JMBroadcast JMB0150 Firmware v1.0
• Description: Incorrect access control in the HOME.php endpoint of JMBroadcast JMB0150 Firmware v1.0 allows attackers to access the Admin panel without authentication.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28232
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28232/README.md

CVE-2025-28231

• Severity: 9.1 CRITICAL
• Impacted Products: Itel Electronics IP Stream v1.7.0.6
• Description: Incorrect access control in Itel Electronics IP Stream v1.7.0.6 allows unauthorized attackers to execute arbitrary commands with Administrator privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28231
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28231/poc.py

CVE-2025-28230

• Severity: 9.1 CRITICAL
• Impacted Products: JMBroadcast JMB0150 Firmware v1.0
• Description: Incorrect access control in JMBroadcast JMB0150 Firmware v1.0 allows attackers to access hardcoded administrator credentials.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28230
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28230/poc.sh

CVE-2025-28229

• Severity: 9.8 CRITICAL
• Impacted Products: Orban OPTIMOD 5950 Firmware v1.0.0.2, Orban OPTIMOD System v2.2.15
• Description: Incorrect access control in Orban OPTIMOD 5950 Firmware v1.0.0.2 and System v2.2.15 allows attackers to bypass authentication and gain Administrator privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28229
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/blob/main/CVE-2025-28229/README.md

CVE-2025-28009

• Severity: 9.8 CRITICAL
• Impacted Products: Dietiqa App v1.0.20
• Description: A SQL Injection vulnerability exists in the u parameter of the progress-body-weight.php endpoint of Dietiqa App v1.0.20.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-28009
• PoC:
  • https://github.com/beardenx/CVE-2025-28009

CVE-2025-27636

• Severity: 6.3 MEDIUM
• Impacted Products: Apache Camel 4.10.0, Apache Camel 4.10.1, Apache Camel 4.8.0, Apache Camel 4.8.1, Apache Camel 4.8.2
• Description: Apache Camel contains a security bypass and injection vulnerability due to improper case-sensitive handling in its default header filter, allowing attackers to inject malicious headers and alter application behavior. This flaw can lead to unauthorized method invocation, message redirection, or arbitrary command execution under specific component usage.
• Remediation:
  • Moderate: Red Hat Build of Apache Camel 4.8 for Quarkus 3.15 update is now available (RHBQ 3.15.3.SP2)
  • Important: Red Hat Build of Apache Camel 4.8.5 for Spring Boot security update.
  • Apache Camel Security Advisory - CVE-2025-27636
• More Info: NVD - CVE-2025-27636
• PoC:
  • https://github.com/Crystallen1/CVE-2025-27636-demo
  • https://github.com/akamai/CVE-2025-27636-Apache-Camel-PoC

CVE-2025-26794

• Severity: 7.5 HIGH
• Impacted Products: Exim 4.98, Exim 4.98.1
• Description: Exim 4.98 before 4.98.1 is susceptible to a remote SQL injection vulnerability when configured to use SQLite hints and ETRN serialization, which can lead to a denial-of-service condition. This flaw allows an attacker to inject malicious SQL queries into the application’s database interactions.
• Remediation:
• exim-4.98.1-1.fc41
• exim-4.98.1-1.fc40
• CVE 2025-26794
• More Info: NVD - CVE-2025-26794
• PoC:
  • https://github.com/OscarBataille/CVE-2025-26794

CVE-2025-24132

• Severity: 6.5 MEDIUM
• Impacted Products: AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1
• Description: The issue was addressed with improved memory handling. This issue is fixed in AirPlay audio SDK 2.7.1, AirPlay video SDK 3.6.0.126, CarPlay Communication Plug-in R18.1. An attacker on the local network may cause an unexpected app termination.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-24132
• PoC:
  • https://github.com/Feralthedogg/CVE-2025-24132-Scanner

CVE-2025-24076

• Severity: 7.3 HIGH
• Impacted Products: Windows Cross Device Service
• Description: Improper access control in Windows Cross Device Service allows an authorized attacker to elevate privileges locally.
• Remediation:
  • Microsoft Windows Cross Device Service Elevation of Privilege Vulnerability
  • Microsoft KB 5053598
  • Microsoft KB 5053599
• More Info: NVD - CVE-2025-24076
• PoC:
  • https://www.exploit-db.com/exploits/52320
  • https://github.com/mbanyamer/CVE-2025-24076

CVE-2025-24071

• Severity: 6.5 MEDIUM
• Impacted Products: Microsoft Windows File Explorer
• Description: Microsoft Windows File Explorer contains an information disclosure vulnerability that allows an unauthorized attacker to obtain sensitive NTLM hashes. This flaw exists due to the way File Explorer processes specially crafted .library-ms files.
• Remediation:
  • Microsoft Windows File Explorer Spoofing Vulnerability
  • Microsoft KB 5053594
  • Microsoft KB 5053596
• More Info: NVD - CVE-2025-24071
• PoC:
  • https://github.com/TH-SecForge/CVE-2025-24071
  • https://github.com/pswalia2u/CVE-2025-24071_POC
  • https://github.com/LOOKY243/CVE-2025-24071-PoC

CVE-2025-21420

• Severity: 7.8 HIGH
• Impacted Products: Windows Disk Cleanup Tool
• Description: Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
• Remediation:
  • Windows Disk Cleanup Tool Elevation of Privilege Vulnerability
  • Microsoft KB 5051974
  • Microsoft KB 5051979
• More Info: NVD - CVE-2025-21420
• PoC:
  • https://github.com/moiz-2x/CVE-2025-21420_POC
  • https://github.com/Network-Sec/CVE-2025-21420-PoC

CVE-2025-20682

• Severity: 9.8 CRITICAL
• Impacted Products: wlan AP driver
• Description: In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416937; Issue ID: MSV-3445.
• Remediation:
  • July 2025
• More Info: NVD - CVE-2025-20682
• PoC:
  • https://github.com/Caztemaz/Phantom-Registy-Exploit-Cve2025-20682-Runtime-Fud-Lnk

CVE-2025-14611

• Severity: 10.0 CRITICAL
• Impacted Products: Gladinet CentreStack prior to version 16.12.10420.56791, Triofox prior to version 16.12.10420.56791
• Description: Gladinet CentreStack and Triofox products contain a hardcoded cryptographic key vulnerability in their AES implementation, which can lead to information disclosure and potentially arbitrary local file inclusion or remote code execution. This flaw stems from the use of static, predictable keys for cryptographic operations.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-14611
• PoC:
  • https://github.com/pl4tyz/CVE-2025-14611-CentreStack-and-Triofox-full-Poc-Exploit

CVE-2024-57430

• Severity: 9.8 CRITICAL
• Impacted Products: PHPJabbers Cinema Booking System v2.0
• Description: An SQL injection vulnerability in the pjActionGetUser function of PHPJabbers Cinema Booking System v2.0 allows attackers to manipulate database queries via the column parameter. Exploiting this flaw can lead to unauthorized information disclosure, privilege escalation, or database manipulation.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-57430
• PoC:
  • https://github.com/ahrixia/CVE-2024-57430

CVE-2024-57428

• Severity: 9.3 CRITICAL
• Impacted Products: PHPJabbers Cinema Booking System v2.0
• Description: A stored cross-site scripting (XSS) vulnerability in PHPJabbers Cinema Booking System v2.0 exists due to unsanitized input in file upload fields (event_img, seat_maps) and seat number configurations (number[new_X] in pjActionCreate). Attackers can inject persistent JavaScript, leading to phishing, malware injection, and session hijacking.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-57428
• PoC:
  • https://github.com/ahrixia/CVE-2024-57428

CVE-2024-57401

• Severity: 9.8 CRITICAL
• Impacted Products: Uniclare Student portal v.2 and before
• Description: SQL Injection vulnerability in Uniclare Student portal v.2 and before allows a remote attacker to execute arbitrary code via the Forgot Password function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-57401
• PoC:
  • https://github.com/aksingh82/CVE-2024-57401/blob/main/Uniclare_Student_portal_V.2.pdf

CVE-2024-57032

• Severity: 9.8 CRITICAL
• Impacted Products: WeGIA < 3.2.0
• Description: WeGIA < 3.2.0 is vulnerable to Incorrect Access Control in controle/control.php. The application does not validate the value of the old password, so it is possible to change the password by placing any value in the senha_antiga field.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-57032
• PoC:
  • https://github.com/nmmorette/vulnerability-research/blob/main/CVE-2024-57032

CVE-2024-55460

• Severity: 9.8 CRITICAL
• Impacted Products: BoardRoom Limited Dividend Distribution Tax Election System v2.0
• Description: A time-based SQL injection vulnerability in the login page of BoardRoom Limited Dividend Distribution Tax Election System Version v2.0 allows attackers to execute arbitrary code via a crafted input.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2024-55460
• PoC:
  • https://github.com/Ap0k4L1p5/CVE-research/tree/master/CVE-2024-55460

CVE-2024-4577

• Severity: 9.8 CRITICAL
• Impacted Products: PHP 8.1., PHP 8.2., PHP 8.3.*
• Description: PHP installations on Windows using CGI configurations are vulnerable to an argument injection flaw that allows for remote code execution. This vulnerability arises from how Windows' “Best-Fit” character replacement interacts with the PHP-CGI module, enabling attackers to inject PHP options.
• Remediation:
  • [R1] Security Center Version 6.5.0 Fixes Multiple Vulnerabilities
  • PHP: Multiple Vulnerabilities (GLSA 202408-32) — Gentoo security
  • PHP ChangeLog
• More Info: NVD - CVE-2024-4577
• PoC:
  • https://github.com/K3ysTr0K3R/CVE-2024-4577-EXPLOIT/blob/main/CVE-2024-4577.py
  • https://github.com/chihyeonwon/php-cgi-cve-2024-4577
  • https://github.com/bibo318/CVE-2024-4577-RCE-ATTACK

CVE-2024-38193

• Severity: 7.8 HIGH
• Impacted Products: Windows Ancillary Function Driver for WinSock
• Description: Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
• Remediation:
  • Dell PowerMaxOS 5978.714.714, Dell PowerMax OS 10.1.0.5, Dell Unisphere 360, Dell Unisphere for PowerMax, Dell Unisphere for PowerMax Virtual Appliance, Dell Solutions Enabler Virtual Appliance, and Dell PowerMax EEM Security Update for Mult
  • Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability
  • Microsoft KB 5041160
• More Info: NVD - CVE-2024-38193
• PoC:
  • https://github.com/Nephster/CVE-2024-38193/blob/main/Poc/poc.cpp
  • https://www.exploit-db.com/exploits/52284

CVE-2024-12084

• Severity: 9.8 CRITICAL
• Impacted Products: rsync
• Description: A heap-based buffer overflow flaw was found in the rsync daemon. This issue is due to improper handling of attacker-controlled checksum lengths (s2length) in the code. When MAX_DIGEST_LEN exceeds the fixed SUM_LENGTH (16 bytes), an attacker can write out of bounds in the sum2 buffer.
• Remediation:
  • Security Update for Dell VxRail for Multiple Third-Party Component Vulnerabilities
  • Security Update for Dell Networking OS10 Vulnerabilities
  • Security Update for Dell Networking OS10 Vulnerabilities
• More Info: NVD - CVE-2024-12084
• PoC:
  • https://github.com/InkeyP/CVE-2024-12084/blob/main/CVE-2024-12084.py
  • https://github.com/themirze/cve-2024-12084/blob/main/cve-2024-12084.py
  • https://github.com/rxerium/CVE-2024-12084/blob/main/template.yaml

CVE-2022-40684

• Severity: 9.8 CRITICAL
• Impacted Products: FortiOS, FortiProxy, FortiSwitchManager
• Description: An authentication bypass using an alternate path or channel vulnerability [CWE-288] in FortiOS, FortiProxy and FortiSwitchManager exists in the handling of HTTP or HTTPS requests.
• Remediation:
  • FortiOS 7.0 Release Notes
  • FortiOS 7.2 Release Notes
  • FortiOS / FortiProxy / FortiSwitchManager - Authentication bypass on administrative interface
• More Info: NVD - CVE-2022-40684
• PoC:
  • https://github.com/und3sc0n0c1d0/CVE-2022-40684
  • https://github.com/carlosevieira/CVE-2022-40684
  • https://github.com/Chocapikk/CVE-2022-40684

CVE-2018-4063

• Severity: 9.9 CRITICAL
• Impacted Products: ACEManager
• Description: A vulnerability exists within the upload.cgi in the ACEManager webserver which allows template file uploads without the need for authorization. The ACEManager webserver runs as root and therefore, so will executables.
• Remediation:
  • SWI-PSA-2019-003
• More Info: NVD - CVE-2018-4063
• PoC:
  • https://www.talosintelligence.com/reports/TALOS-2018-0748

CVE-2025-9697

• Severity: 9.8 CRITICAL
• Impacted Products: Ajax WooSearch WordPress plugin through 1.0.0
• Description: The Ajax WooSearch WordPress plugin through 1.0.0 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-9697
• PoC:
  • https://wpscan.com/vulnerability/38939152-e54e-4f8f-996b-592de195570d

CVE-2025-9286

• Severity: 9.8 CRITICAL
• Impacted Products: Appy Pie Connect for WooCommerce 1.1.2
• Description: The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-9286
• PoC:
  • https://github.com/Nxploited/CVE-2025-9286

CVE-2025-9209

• Severity: 9.8 CRITICAL
• Impacted Products: RestroPress – Online Food Ordering System plugin for WordPress 3.0.0 to 3.1.9.2
• Description: The RestroPress – Online Food Ordering System plugin for WordPress is vulnerable to Authentication Bypass in versions 3.0.0 to 3.1.9.2. This is due to the plugin exposing user private tokens and API data via the /wp-json/wp/v2/users REST API endpoint. This makes it possible for unauthenticated attackers to forge JWT tokens for other users, including administrators, and authenticate as them.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-9209
• PoC:
  • https://github.com/Nxploited/CVE-2025-9209

CVE-2025-9083

• Severity: 9.8 CRITICAL
• Impacted Products: Ninja Forms WordPress plugin before 3.11.1
• Description: The Ninja Forms WordPress plugin before 3.11.1 unserializes user input via form field, which could allow Unauthenticated users to perform PHP Object Injection when a suitable gadget is present on the blog.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-9083
• PoC:
  • https://wpscan.com/vulnerability/60b4d7fc-5d23-4dcf-bd7f-e202cabc2625

CVE-2025-9074

• Severity: Unknown
• Impacted Products: Docker Desktop prior to version 4.44.3
• Description: Docker Desktop is affected by an exposure of resource to wrong sphere vulnerability that allows locally running containers to access the Docker Engine API. This unintended access enables command execution and potential host system compromise from within a container.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-9074
• PoC:
  • https://github.com/Shaoshi17/CVE-2025-9074-Docker-Exploit
  • https://github.com/BridgerAlderson/CVE-2025-9074-PoC/blob/main/cve-2025-9074.sh
  • https://github.com/pucagit/CVE-2025-9074/blob/main/README.md

CVE-2025-8942

• Severity: 9.1 CRITICAL
• Impacted Products: WP Hotel Booking WordPress plugin before 2.2.3
• Description: The WP Hotel Booking WordPress plugin before 2.2.3 lacks proper server-side validation for review ratings, allowing an attacker to manipulate the rating value (e.g., sending negative or out-of-range values) by intercepting and modifying requests.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8942
• PoC:
  • https://wpscan.com/vulnerability/d89bb3b2-40ad-4c4f-9f17-4ccacc0f6e1a

CVE-2025-8876

• Severity: 9.9 CRITICAL
• Impacted Products: N-able N-central: before 2025.3.1
• Description: Improper Input Validation vulnerability in N-able N-central allows OS Command Injection.This issue affects N-central: before 2025.3.1.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8876
• PoC:
  • https://github.com/rxerium/CVE-2025-8875-CVE-2025-8876

CVE-2025-8875

• Severity: 7.8 HIGH
• Impacted Products: N-able N-central: before 2025.3.1
• Description: Deserialization of Untrusted Data vulnerability in N-able N-central allows Local Execution of Code.This issue affects N-central: before 2025.3.1.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8875
• PoC:
  • https://github.com/rxerium/CVE-2025-8875-CVE-2025-8876

CVE-2025-8730

• Severity: 9.8 CRITICAL
• Impacted Products: Belkin F9K1009 2.00.04, Belkin F9K1010 2.00.09
• Description: A vulnerability was found in Belkin F9K1009 and F9K1010 2.00.04/2.00.09 and classified as critical. Affected by this issue is some unknown functionality of the component Web Interface. The manipulation leads to hard-coded credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8730
• PoC:
  • https://github.com/byteReaper77/CVE-2025-8730
  • https://www.exploit-db.com/exploits/52407

CVE-2025-8699

• Severity: 9.1 CRITICAL
• Impacted Products: KioSoft “Stored Value” Unattended Payment Solutions
• Description: The account balance is stored on an insecure MiFare Classic NFC card in some KioSoft “Stored Value” Unattended Payment Solutions. This means the cards can be read and written back. By manipulating the right field, one can “create money out of thin air” and use it to pay for goods.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8699
• PoC:
  • https://r.sec-consult.com/kiosoft

CVE-2025-8625

• Severity: 9.8 CRITICAL
• Impacted Products: Copypress Rest API plugin for WordPress 1.1 to 1.2
• Description: The Copypress Rest API plugin for WordPress is vulnerable to Remote Code Execution via copyreap_handle_image() Function in versions 1.1 to 1.2. The plugin falls back to a hard-coded JWT signing key when no secret is defined and does not restrict which file types can be fetched and saved as attachments.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8625
• PoC:
  • https://github.com/Nxploited/CVE-2025-8625
  • https://github.com/ret0x2A/CVE-2025-8625/blob/main/exploit/CVE-2025-8625.py

CVE-2025-8570

• Severity: 9.8 CRITICAL
• Impacted Products: BeyondCart Connector plugin for WordPress, 1.4.2 through 2.1.0
• Description: The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 2.1.0. This makes it possible for unauthenticated attackers to craft valid tokens and assume any user’s identity.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8570
• PoC:
  • https://github.com/chimdi2700/CVE-2025-8571/blob/main/CVE-2025-8570.py
  • https://github.com/Nxploited/CVE-2025-8570

CVE-2025-8359

• Severity: 9.8 CRITICAL
• Impacted Products: AdForest theme for WordPress, 6.0.9
• Description: The AdForest theme for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 6.0.9. This is due to the plugin not properly verifying a user’s identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as other users, including administrators, without access to a password.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8359
• PoC:
  • https://github.com/Nxploited/CVE-2025-8359/blob/main/CVE-2025-8359.py

CVE-2025-8355

• Severity: 7.5 HIGH
• Impacted Products: Xerox FreeFlow Core 8.0.4
• Description: In Xerox FreeFlow Core version 8.0.4, improper handling of XML input allows injection of external entities. An attacker can craft malicious XML containing references to internal URLs, this results in a Server-Side Request Forgery (SSRF).
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-8355
• PoC:
  • https://horizon3.ai/attack-research/attack-blogs/from-support-ticket-to-zero-day

CVE-2025-7851

• Severity: 9.8 CRITICAL
• Impacted Products: Omada gateways
• Description: An attacker may obtain the root shell on the underlying OS system with the restricted conditions on Omada gateways.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-7851
• PoC:
  • https://www.forescout.com/blog/new-tp-link-router-vulnerabilities-a-primer-on-rooting-routers

CVE-2025-7441

• Severity: 9.8 CRITICAL
• Impacted Products: StoryChief plugin for WordPress, 1.0.42
• Description: The StoryChief plugin for WordPress is vulnerable to arbitrary file uploads in all versions up to, and including, 1.0.42. This vulnerability occurs through the /wp-json/storychief/webhook REST-API endpoint that does not have sufficient filetype validation. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-7441
• PoC:
  • https://www.exploit-db.com/exploits/52422
  • https://github.com/Nxploited/CVE-2025-7441
  • https://github.com/Pwdnx1337/CVE-2025-7441

CVE-2025-7401

• Severity: 9.8 CRITICAL
• Impacted Products: Premium Age Verification / Restriction for WordPress plugin, 3.0.2
• Description: The Premium Age Verification / Restriction for WordPress plugin for WordPress is vulnerable to arbitrary file read and write due to the existence of an insufficiently protected remote support functionality in remote_tunnel.php in all versions up to, and including, 3.0.2. This makes it possible for unauthenticated attackers to read from or write to arbitrary files on the affected site’s server which may make the exposure of sensitive information or remote code execution possible.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-7401
• PoC:
  • https://github.com/Nxploited/CVE-2025-7401

CVE-2025-6934

• Severity: 9.8 CRITICAL
• Impacted Products: Opal Estate Pro – Property Management and Submission plugin for WordPress, FullHouse - Real Estate Responsive WordPress Theme, 1.7.5
• Description: The Opal Estate Pro – Property Management and Submission plugin for WordPress, used by the FullHouse - Real Estate Responsive WordPress Theme, is vulnerable to privilege escalation via in all versions up to, and including, 1.7.5. This is due to a lack of role restriction during registration in the ‘on_regiser_user’ function. This makes it possible for unauthenticated attackers to arbitrarily choose the role, including the Administrator role, assigned when registering.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6934
• PoC:
  • https://github.com/Nxploited/CVE-2025-6934
  • https://github.com/Rosemary1337/CVE-2025-6934
  • https://github.com/Jenderal92/WP-CVE-2025-6934

CVE-2025-6715

• Severity: 9.8 CRITICAL
• Impacted Products: LatePoint WordPress plugin before 5.1.94
• Description: The LatePoint WordPress plugin before 5.1.94 is vulnerable to Local File Inclusion via the layout parameter. This makes it possible for attackers to include and execute PHP files on the server, allowing the execution of any PHP code in those files.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6715
• PoC:
  • https://wpscan.com/vulnerability/357aba51-b65e-4691-864b-fef1c78a9362

CVE-2025-66438

• Severity: 9.8 CRITICAL
• Impacted Products: Frappe ERPNext through 15.89.0
• Description: A Server-Side Template Injection (SSTI) vulnerability exists in the Frappe ERPNext through 15.89.0 Print Format rendering mechanism. Specifically, the API frappe.www.printview.get_html_and_style() triggers the rendering of the html field inside a Print Format document using frappe.render_template(template, doc) via the get_rendered_template() call chain.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-66438
• PoC:
  • https://www.notion.so/SSTI-bug-5-239e6086eadc80a48f17c1257a604d2c?source=copy_link

CVE-2025-66434

• Severity: 8.8 HIGH
• Impacted Products: Frappe ERPNext through 15.89.0
• Description: An SSTI (Server-Side Template Injection) vulnerability exists in the get_dunning_letter_text method of Frappe ERPNext through 15.89.0. The function renders attacker-controlled Jinja2 templates (body_text) using frappe.render_template() with a user-supplied context (doc). Although Frappe uses a custom SandboxedEnvironment, several dangerous globals such as frappe.db.sql are still available in the execution context via get_safe_globals().
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-66434
• PoC:
  • https://www.notion.so/SSTI-bug-1-239e6086eadc8096bfcfe90551a3a483?source=copy_link

CVE-2025-66401

• Severity: 9.8 CRITICAL
• Impacted Products: MCP Watch 0.1.2 and earlier
• Description: MCP Watch is a comprehensive security scanner for Model Context Protocol (MCP) servers. In 0.1.2 and earlier, the MCPScanner class contains a critical Command Injection vulnerability in the cloneRepo method. The application passes the user-supplied githubUrl argument directly to a system shell via execSync without sanitization. This allows an attacker to execute arbitrary commands on the host machine by appending shell metacharacters to the URL.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-66401
• PoC:
  • https://github.com/advisories/GHSA-27m7-ffhq-jqrm

CVE-2025-65741

• Severity: 9.8 CRITICAL
• Impacted Products: Sublime Text 3 Build 3208 or prior
• Description: Sublime Text 3 Build 3208 or prior for MacOS is vulnerable to Dylib Injection. An attacker could compile a .dylib file and force the execution of this library in the context of the Sublime Text application.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-65741
• PoC:
  • https://github.com/vinicius-batistella/CVE-2025-65741/blob/main/README.md

CVE-2025-64522

• Severity: 9.1 CRITICAL
• Impacted Products: Soft Serve < 0.11.1
• Description: Soft Serve is a self-hostable Git server for the command line. Versions prior to 0.11.1 have a SSRF vulnerability where webhook URLs are not validated, allowing repository administrators to create webhooks targeting internal services, private networks, and cloud metadata endpoints. Version 0.11.1 fixes the vulnerability.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-64522
• PoC:
  • https://github.com/charmbracelet/soft-serve/security/advisories/GHSA-vwq2-jx9q-9h9f

CVE-2025-6440

• Severity: 9.8 CRITICAL
• Impacted Products: WooCommerce Designer Pro plugin for WordPress, 1.9.26
• Description: The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company &amp;amp; Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the ‘wcdp_save_canvas_design_ajax’ function in all versions up to, and including, 1.9.26. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site’s server which may make remote code execution possible.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6440
• PoC:
  • https://github.com/smuft1707/CVE-2025-6440
  • https://github.com/xxoprt/CVE-2025-6440
  • https://github.com/Pwdnx1337/CVE-2025-6440/blob/main/CVE-2025-6440.py

CVE-2025-64180

• Severity: 9.0 CRITICAL
• Impacted Products: Manager Desktop 25.11.1.3085 and below, Manager Server 25.11.1.3085 and below
• Description: Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check Time-of-Use (TOCTOU) condition that allows attackers to bypass network isolation and access internal services, cloud metadata endpoints, and protected network segments.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-64180
• PoC:
  • https://github.com/Manager-io/Manager/security/advisories/GHSA-j2xj-xhph-p74j

CVE-2025-64164

• Severity: 9.8 CRITICAL
• Impacted Products: Dataease 2.10.14 and below, Dataease 2.10.15
• Description: Dataease is an open source data visualization analysis tool. In versions 2.10.14 and below, DataEase did not properly filter when establishing JDBC connections to Oracle, resulting in a risk of JNDI injection (Java Naming and Directory Interface injection). This issue is fixed in version 2.10.15.
• Remediation:
  • https://github.com/dataease/dataease/commit/7b68eb3dfccbbd12ec977e6320dbd3e32a7bbfe6
  • DataEase Oracle JNDI Injection Vulnerability · Advisory · dataease/dataease · GitHub
• More Info: NVD - CVE-2025-64164
• PoC:
  • https://github.com/dataease/dataease/security/advisories/GHSA-q754-4pc2-wjqw

CVE-2025-64163

• Severity: 9.8 CRITICAL
• Impacted Products: DataEase 2.10.14 and below, DataEase 2.10.15
• Description: DataEase is an open source data visualization analysis tool. In versions 2.10.14 and below, the vendor added a blacklist to filter ldap:// and ldaps://. However, omission of protection for the dns:// protocol results in an SSRF vulnerability. This issue is fixed in version 2.10.15.
• Remediation:
  • https://github.com/dataease/dataease/commit/869b7fb8b10069ac6c326554bfa8f060a539ba85
  • DataEase DB2 SSRF Vulnerability · Advisory · dataease/dataease · GitHub
• More Info: NVD - CVE-2025-64163
• PoC:
  • https://github.com/dataease/dataease/security/advisories/GHSA-8397-v66p-539m

CVE-2025-6389

• Severity: 9.8 CRITICAL
• Impacted Products: Sneeit Framework plugin for WordPress, 8.3
• Description: The Sneeit Framework plugin for WordPress, in all versions up to and including 8.3, is susceptible to a remote code execution vulnerability. This flaw allows unauthenticated attackers to execute arbitrary code on the server due to improper handling of user-supplied input.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6389
• PoC:
  • https://github.com/itsismarcos/SneeitScanner-CVE-2025-6389/blob/main/SneeitScanner.py
  • https://github.com/Ashwesker/Blackash-CVE-2025-6389/blob/main/CVE-2025-6389.py
  • https://www.wordfence.com/blog/2025/12/attackers-actively-exploiting-critical-vulnerability-in-sneeit-framework-plugin

CVE-2025-63747

• Severity: 9.8 CRITICAL
• Impacted Products: QaTraq 6.9.2
• Description: QaTraq 6.9.2 ships with administrative account credentials which are enabled in default installations and permit immediate login via the web application login page. Because the account provides administrative privileges in the default configuration, an attacker who can reach the login page can gain administrative access.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63747
• PoC:
  • https://bitsbyamg.com/blog/post/2025/10/19/qatraq-692-default-creds-and-file-upload-rce

CVE-2025-63691

• Severity: 9.6 CRITICAL
• Impacted Products: pig-mesh In Pig version 3.8.2 and below
• Description: In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This interface can be called by any user who has completed login authentication, and it returns the plaintext authentication Tokens of all users currently logged in to the system.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63691
• PoC:
  • https://github.com/LockeTom/vulnerability/blob/main/md/pig_Information_disclosure_vulnerability.md

CVE-2025-63690

• Severity: 9.1 CRITICAL
• Impacted Products: pig-mesh Pig 3.8.2 and below, Tomcat
• Description: In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor and its methods with parameter type String through reflection. At this time, the eval method in Tomcat’s built-in class jakarta.el.ELProcessor can be used to execute commands, leading to a remote code execution vulnerability.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63690
• PoC:
  • https://github.com/LockeTom/vulnerability/blob/main/md/pig_Remote_Code_Execution_Vulnerability.md

CVE-2025-63689

• Severity: 8.8 HIGH
• Impacted Products: ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59
• Description: Multiple SQL injection vulnerabilitites in ycf1998 money-pos system before commit 11f276bd20a41f089298d804e43cb1c39d041e59 (2025-09-14) allows a remote attacker to execute arbitrary code via the orderby parameter
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63689
• PoC:
  • https://github.com/ycf1998/money-pos/issues/3
  • https://gist.github.com/LockeTom/2ed0f3751c88542f48b7c230468d2a46

CVE-2025-63679

• Severity: 5.3 MEDIUM
• Impacted Products: free5gc v4.1.0 and before
• Description: free5gc v4.1.0 and before is vulnerable to Buffer Overflow. When AMF receives an UplinkRANConfigurationTransfer NGAP message from a gNB, the AMF process crashes.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63679
• PoC:
  • https://gist.github.com/DDGod2025/5483d94b028d7a0c111ca23844e8a94d

CVE-2025-63622

• Severity: 9.8 CRITICAL
• Impacted Products: code-projects Online Complaint Site 1.0
• Description: A vulnerability was found in code-projects Online Complaint Site 1.0. This issue affects some unknown processing of the file /cms/admin/subcategory.php. This manipulation of the argument category causes SQL injection.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63622
• PoC:
  • https://github.com/xmqaq/cve/issues/2

CVE-2025-63453

• Severity: 9.8 CRITICAL
• Impacted Products: Car-Booking-System-PHP v.1.0
• Description: Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/contact.php.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63453
• PoC:
  • https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-14

CVE-2025-63452

• Severity: 9.4 CRITICAL
• Impacted Products: Car-Booking-System-PHP v.1.0
• Description: Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/forgot-pass.php.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63452
• PoC:
  • https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-13

CVE-2025-63451

• Severity: 9.8 CRITICAL
• Impacted Products: Car-Booking-System-PHP v.1.0
• Description: Car-Booking-System-PHP v.1.0 is vulnerable to SQL Injection in /carlux/sign-in.php.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63451
• PoC:
  • https://github.com/sanin-s1r3n/CVE-Research/blob/main/CVE-12

CVE-2025-63416

• Severity: 9.1 CRITICAL
• Impacted Products: SelfBest platform 2023.3
• Description: ** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authenticated low-privileged attackers to execute arbitrary JavaScript in the context of other users' sessions.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63416
• PoC:
  • https://rohitchaudhary045.medium.com/cve-2025-63416-the-admin-panel-heist-stored-xss-to-privilege-escalation-b4c69d8487f1

CVE-2025-63353

• Severity: 6.3 MEDIUM
• Impacted Products: FiberHome GPON ONU HG6145F1 RP4423
• Description: A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device’s factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63353
• PoC:
  • http://github.com/0xA1M/CVE-2025-63353

CVE-2025-63334

• Severity: 9.8 CRITICAL
• Impacted Products: PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1
• Description: PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-63334
• PoC:
  • https://gist.github.com/mamdouhalrekabi-ops/e7686a0bdd197c77c1b54191e1a2880f

CVE-2025-62515

• Severity: 9.8 CRITICAL
• Impacted Products: pyquokka 0.3.1 and prior
• Description: pyquokka is a framework for making data lakes work for time series. In versions 0.3.1 and prior, the FlightServer class directly uses pickle.loads() to deserialize action bodies received from Flight clients without any sanitization or validation in the do_action() method. The vulnerable code is located in pyquokka/flight.py at line 283 where arbitrary data from Flight clients is directly passed to pickle.loads().
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-62515
• PoC:
  • https://github.com/advisories/GHSA-f74j-gffq-vm9p

CVE-2025-62353

• Severity: 9.8 CRITICAL
• Impacted Products: Windsurf IDE
• Description: A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and outside of current projects on an end user’s system. The vulnerability can be reached directly and through indirect prompt injection.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-62353
• PoC:
  • https://hiddenlayer.com/sai_security_advisor/2025-10-windsurf

CVE-2025-6218

• Severity: 7.8 HIGH
• Impacted Products: RARLAB WinRAR 7.11 and earlier
• Description: RARLAB WinRAR versions 7.11 and earlier contain a path traversal vulnerability that allows for arbitrary code execution. This flaw enables a specially crafted archive to write files to unintended directories during extraction.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6218
• PoC:
  • https://github.com/ignis-sec/CVE-2025-6218
  • https://github.com/speinador/CVE-2025-6218_WinRAR
  • https://github.com/mulwareX/CVE-2025-6218-POC

CVE-2025-62168

• Severity: 10.0 CRITICAL
• Impacted Products: Squid < 7.2
• Description: Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the credentials a trusted client uses to authenticate. This potentially allows a remote client to identify security tokens or credentials used internally by a web application using Squid for backend load balancing.
• Remediation:
  • Important: squid:4 security update
  • Important: squid security update
  • Important: squid security update
• More Info: NVD - CVE-2025-62168
• PoC:
  • https://github.com/monzaviman/CVE-2025-62168
  • https://github.com/shahroodcert/CVE-2025-62168

CVE-2025-6205

• Severity: 9.1 CRITICAL
• Impacted Products: Dassault Systèmes DELMIA Apriso
• Description: Dassault Systèmes DELMIA Apriso is affected by a missing authorization vulnerability in its SOAP message processor component. This flaw allows an unauthenticated remote attacker to create new accounts with administrative privileges by sending specially crafted XML requests.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6205
• PoC:
  • https://cloud.projectdiscovery.io/library/CVE-2025-6205

CVE-2025-61913

• Severity: 9.9 CRITICAL
• Impacted Products: Flowise prior to 3.0.8
• Description: Flowise is a drag & drop user interface to build a customized large language model flow. In versions prior to 3.0.8, WriteFileTool and ReadFileTool in Flowise do not restrict file path access, allowing authenticated attackers to exploit this vulnerability to read and write arbitrary files to any path in the file system, potentially leading to remote command execution. Flowise 3.0.8 fixes this vulnerability.
• Remediation:
  • https://github.com/FlowiseAI/Flowise/commit/1fb12cd93143592a18995f63b781d25b354d48a3
• More Info: NVD - CVE-2025-61913
• PoC:
  • https://github.com/advisories/GHSA-jv9m-vf54-chjj
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-jv9m-vf54-chjj
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-j44m-5v8f-gc9c

CVE-2025-6179

• Severity: 4.4 MEDIUM
• Impacted Products: Google ChromeOS 16181.27.0
• Description: Permissions Bypass in Extension Management in Google ChromeOS 16181.27.0 on managed Chrome devices allows a local attacker to disable extensions and access Developer Mode, including loading additional extensions via exploiting vulnerabilities using the ExtHang3r and ExtPrint3r tools.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6179
• PoC:
  • https://github.com/Blobby-Boi/ExtHang3r
  • https://github.com/Blobby-Boi/ExtPrint3r

CVE-2025-6169

• Severity: 9.8 CRITICAL
• Impacted Products: WIMP website co-construction management platform
• Description: The WIMP website co-construction management platform from HAMASTAR Technology has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6169
• PoC:
  • https://github.com/Yuri08loveElaina/CVE_2025_6169

CVE-2025-61622

• Severity: 9.8 CRITICAL
• Impacted Products: pyfory 0.12.0 through 0.12.2, pyfury 0.1.0 through 0.10.3
• Description: Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of pickle.loads, which is vulnerable to remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61622
• PoC:
  • https://github.com/fa1consec/cve_2025_61622_poc/blob/main/cve_2025_61622_poc.py

CVE-2025-61605

• Severity: 9.8 CRITICAL
• Impacted Products: WeGIA 3.4.12 and below, WeGIA 3.5.0
• Description: WeGIA is an open source web manager with a focus on charitable institutions. Versions 3.4.12 and below contain an SQL Injection vulnerability which was identified in the /pet/profile_pet.php endpoint, specifically in the id_pet parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0.
• Remediation:
  • https://github.com/LabRedesCefetRJ/WeGIA/commit/176733543c9b6762bef5ddec7c9c555f76fafa1d
• More Info: NVD - CVE-2025-61605
• PoC:
  • https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-8963-9833-gpx7

CVE-2025-61603

• Severity: 9.8 CRITICAL
• Impacted Products: WeGIA 3.4.12 and below, WeGIA 3.5.0
• Description: WeGIA is a Web manager for charitable institutions. Versions 3.4.12 and below include an SQL Injection vulnerability which was identified in the /controle/control.php endpoint, specifically in the descricao parameter. This vulnerability allows attackers to execute arbitrary SQL commands, compromising the confidentiality, integrity, and availability of the database. This issue is fixed in version 3.5.0.
• Remediation:
  • https://github.com/LabRedesCefetRJ/WeGIA/commit/84958eed73741a544859eea297908db3b83b3833
• More Info: NVD - CVE-2025-61603
• PoC:
  • https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-v8hm-pq8g-c7j4

CVE-2025-61481

• Severity: 10.0 CRITICAL
• Impacted Products: MikroTik RouterOS v.7.14.2, SwOS v.2.18
• Description: An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61481
• PoC:
  • https://svarthatt.se/cve/mikrotik-swos-cve-2025-61481

CVE-2025-61455

• Severity: 9.8 CRITICAL
• Impacted Products: Bhabishya-123 E-commerce 1.0
• Description: SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. The application directly incorporates unsanitized user inputs into SQL queries, allowing unauthenticated attackers to bypass authentication and gain full access.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61455
• PoC:
  • https://github.com/tansique-17/CVE-2025-61455

CVE-2025-61304

• Severity: 8.8 HIGH
• Impacted Products: Dynatrace ActiveGate ping extension up to 1.016
• Description: OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61304
• PoC:
  • https://github.com/pentastic-be/CVE-2025-61304

CVE-2025-61128

• Severity: 9.1 CRITICAL
• Impacted Products: WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730
• Description: Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61128
• PoC:
  • https://gist.github.com/shinobu-alpha/6dd5ad7f83c16360f6564db0bc121e99

CVE-2025-61043

• Severity: 9.1 CRITICAL
• Impacted Products: Monkey’s Audio 11.31
• Description: An out-of-bounds read vulnerability has been discovered in Monkey’s Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 function. The issue arises from improper handling of the length of the input UTF-8 string, causing the function to read past the memory boundary. This vulnerability may result in a crash or expose sensitive data.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-61043
• PoC:
  • https://tzh00203.notion.site/Monkey-s-Audio-Out-of-Bounds-Read-Vulnerability-Report-version-11-31-249b5c52018a80739852d0d9660994c9?source=copy_link

CVE-2025-60854

• Severity: 9.8 CRITICAL
• Impacted Products: D-Link R15 (AX1500) 1.20.01 and below
• Description: A vulnerability has been found in D-Link R15 (AX1500) 1.20.01 and below. By manipulating the model name parameter during a password change request in the web administrator page, it is possible to trigger a command injection in httpd.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-60854
• PoC:
  • https://github.com/K0n9-log/CVE-2025-60854/blob/main/exploit.md

CVE-2025-60803

• Severity: 9.8 CRITICAL
• Impacted Products: Antabot White-Jotter up to commit 9bcadc
• Description: Antabot White-Jotter up to commit 9bcadc was discovered to contain an unauthenticated remote code execution (RCE) vulnerability via the component /api/aaa;/../register.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-60803
• PoC:
  • https://github.com/Antabot/White-Jotter/issues/162

CVE-2025-6065

• Severity: 9.1 CRITICAL
• Impacted Products: Image Resizer On The Fly plugin for WordPress, 1.1
• Description: The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ‘delete’ task in all versions up to, and including, 1.1. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-6065
• PoC:
  • https://github.com/Yuri08loveElaina/CVE_2025_6065

CVE-2025-59934

• Severity: 9.4 CRITICAL
• Impacted Products: Formbricks < 4.0.1
• Description: Formbricks is an open source qualtrics alternative. Prior to version 4.0.1, Formbricks is missing JWT signature verification. This vulnerability stems from a token validation routine that only decodes JWTs (jwt.decode) without verifying their signatures. Both the email verification token login path and the password reset server action use the same validator, which does not check the token’s signature, expiration, issuer, or audience.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59934
• PoC:
  • https://github.com/formbricks/formbricks/security/advisories/GHSA-7229-q9pv-j6p4
  • https://github.com/formbricks/formbricks/pull/6596

CVE-2025-59834

• Severity: 9.8 CRITICAL
• Impacted Products: ADB MCP Server 0.1.0 and prior
• Description: ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. This issue has been patched via commit 041729c.
• Remediation:
  • https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c
• More Info: NVD - CVE-2025-59834
• PoC:
  • https://github.com/advisories/GHSA-54j7-grvr-9xwg
  • https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg

CVE-2025-59832

• Severity: 9.9 CRITICAL
• Impacted Products: Horilla, prior to version 1.4.0
• Description: Horilla is a free and open source Human Resource Management System (HRMS). Prior to version 1.4.0, there is a stored XSS vulnerability in the ticket comment editor. A low-privilege authenticated user could run arbitrary JavaScript in an admin’s browser, exfiltrate the admin’s cookies/CSRF token, and hijack their session. This issue has been patched in version 1.4.0.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59832
• PoC:
  • https://github.com/horilla-opensource/horilla/security/advisories/GHSA-8x78-6q9g-hv2h

CVE-2025-5947

• Severity: 9.8 CRITICAL
• Impacted Products: Service Finder Bookings plugin for WordPress, 6.0
• Description: The Service Finder Bookings plugin for WordPress is vulnerable to privilege escalation via authentication bypass in all versions up to, and including, 6.0. This is due to the plugin not properly validating a user’s cookie value prior to logging them in through the service_finder_switch_back() function. This makes it possible for unauthenticated attackers to login as any user including admins.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5947
• PoC:
  • https://github.com/M4rgs/CVE-2025-5947_Exploit/blob/main/README.md

CVE-2025-59407

• Severity: 9.8 CRITICAL
• Impacted Products: Flock Safety DetectionProcessing 6.35.33
• Description: The Flock Safety DetectionProcessing com.flocksafety.android.objects application 6.35.33 for Android (installed on Falcon and Sparrow License Plate Readers and Bravo Edge AI Compute Devices) bundles a Java Keystore (flock_rye.bks) along with its hardcoded password (flockhibiki17) in its code. The keystore contains a private key.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59407
• PoC:
  • https://gainsec.com/2025/09/27/fly-by-device-2-the-falcon-sparrow-gated-wireless-rce-camera-feed-dos-information-disclosure-and-more

CVE-2025-59396

• Severity: 9.8 CRITICAL
• Impacted Products: WatchGuard Firebox
• Description: The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 with the readwrite password for the admin account.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59396
• PoC:
  • https://github.com/cyberbyte000/CVE-2025-59396/blob/main/CVE-2025-59396.txt

CVE-2025-59390

• Severity: 9.8 CRITICAL
• Impacted Products: Apache Druid 34.0.0
• Description: Apache Druid’s Kerberos authenticator, when not explicitly configured with druid.auth.authenticator.kerberos.cookieSignatureSecret, generates a weak fallback secret using ThreadLocalRandom, enabling potential authentication bypass or token forgery. This also causes authentication failures in distributed deployments due to inconsistent secrets across nodes.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59390
• PoC:
  • https://github.com/Daeda1usUK/CVE-2025-59390-

CVE-2025-59359

• Severity: 9.8 CRITICAL
• Impacted Products: Chaos Controller Manager
• Description: The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this allows unauthenticated in-cluster attackers to perform remote code execution across the cluster.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59359
• PoC:
  • https://github.com/mrk336/Cluster-Chaos-Exploiting-CVE-2025-59359-for-Kubernetes-Takeover

CVE-2025-59352

• Severity: 8.8 HIGH
• Impacted Products: Dragonfly, prior to 2.1.0
• Description: Dragonfly is an open source P2P-based file distribution and image acceleration system. Prior to 2.1.0, the gRPC API and HTTP APIs allow peers to send requests that force the recipient peer to create files in arbitrary file system locations, and to read arbitrary files. This allows peers to steal other peers’ secret data and to gain remote code execution (RCE) capabilities on the peer’s machine.This vulnerability is fixed in 2.1.0.
• Remediation:
  • Arbitrary file read and write on a peer machine · Advisory · dragonflyoss/dragonfly · GitHub
• More Info: NVD - CVE-2025-59352
• PoC:
  • https://github.com/dragonflyoss/dragonfly/blob/main/docs/security/dragonfly-comprehensive-report-2023.pdf

CVE-2025-59340

• Severity: 9.8 CRITICAL
• Impacted Products: jinjava, 2.8.1
• Description: jinjava is a Java-based template engine based on django template syntax, adapted to render jinja templates. Priori to 2.8.1, by using mapper.getTypeFactory().constructFromCanonical(), it is possible to instruct the underlying ObjectMapper to deserialize attacker-controlled input into arbitrary classes. This enables the creation of semi-arbitrary class instances without directly invoking restricted methods or class literals.
• Remediation:
  • https://github.com/HubSpot/jinjava/commit/66df351e7e8ad71ca04dcacb4b65782af820b8b1
• More Info: NVD - CVE-2025-59340
• PoC:
  • https://github.com/HubSpot/jinjava/security/advisories/GHSA-m49c-g9wr-hv6v
  • https://github.com/advisories/GHSA-m49c-g9wr-hv6v

CVE-2025-59304

• Severity: 9.8 CRITICAL
• Impacted Products: Swetrix Web Analytics API 3.1.1
• Description: A directory traversal issue in Swetrix Web Analytics API 3.1.1 before 7d8b972 allows a remote attacker to achieve Remote Code Execution via a crafted HTTP request.
• Remediation:
  • (fix) Remote Code Execution Vulnerability via Arbitrary File Upload and Path Traversal by DepthFirstDisclosures · Pull Request #397 · Swetrix/swetrix · GitHub
• More Info: NVD - CVE-2025-59304
• PoC:
  • https://www.depthfirst.com/post/anatomy-of-an-automated-patch-fixing-a-file-upload-rce-cve-2025-59304

CVE-2025-59159

• Severity: 9.6 CRITICAL
• Impacted Products: SillyTavern < 1.13.4
• Description: SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing attacks, etc.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59159
• PoC:
  • https://github.com/advisories/GHSA-7cxj-w27x-x78q
  • https://github.com/SillyTavern/SillyTavern/security/advisories/GHSA-7cxj-w27x-x78q

CVE-2025-59053

• Severity: 9.6 CRITICAL
• Impacted Products: AIRI v0.7.2-beta.2, AIRI v0.7.2-beta.3
• Description: AIRI is a self-hosted, artificial intelligence based Grok Companion. In v0.7.2-beta.2 in the packages/stage-ui/src/components/MarkdownRenderer.vue path, the Markdown content is processed using the useMarkdown composable, and the processed HTML is rendered directly into the DOM using v-html.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-59053
• PoC:
  • https://github.com/moeru-ai/airi/security/advisories/GHSA-9832-f8jx-hw6f

CVE-2025-58746

• Severity: 9.0 CRITICAL
• Impacted Products: Volkov Labs Business Links panel for Grafana, prior to version 2.4.0
• Description: The Volkov Labs Business Links panel for Grafana provides an interface to navigate using external links, internal dashboards, time pickers, and dropdown menus. Prior to version 2.4.0, a malicious actor with Editor privileges can escalate their privileges to Administrator and perform arbitrary administrative actions. This is possible because the plugin allows arbitrary JavaScript code injection in the [Layout] → [Link] → [URL] field. Version 2.4.0 contains a fix for the issue.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-58746
• PoC:
  • https://github.com/VolkovLabs/business-links/security/advisories/GHSA-93qj-gv4p-mf53

CVE-2025-58434

• Severity: 9.8 CRITICAL
• Impacted Products: Flowise 3.0.5 and earlier, Flowise 3.0.6
• Description: Flowise is a drag & drop user interface to build a customized large language model flow. In version 3.0.5 and earlier, the forgot-password endpoint in Flowise returns sensitive information including a valid password reset tempToken without authentication or verification. This enables any attacker to generate a reset token for arbitrary users and directly reset their password, leading to a complete account takeover (ATO).
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-58434
• PoC:
  • https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-wgpv-6j63-x5ph
  • https://github.com/nltt-br/Flowise-3.0.5/blob/main/flowise-rce-3.0.5.py
  • https://github.com/advisories/GHSA-wgpv-6j63-x5ph

CVE-2025-58360

• Severity: 8.2 HIGH
• Impacted Products: GeoServer 2.26.0 to before 2.26.2, GeoServer before 2.25.6
• Description: GeoServer versions 2.26.0 to before 2.26.2 and before 2.25.6 are affected by an XML External Entity (XXE) vulnerability in the /geoserver/wms endpoint’s GetMap operation, allowing an attacker to define external entities within XML requests. This flaw stems from insufficient sanitization of XML input.
• Remediation:
  • [GEOS-11682] Add tests for WMS SLD XML request reader #8192
• More Info: NVD - CVE-2025-58360
• PoC:
  • https://github.com/rxerium/CVE-2025-58360
  • https://github.com/quyenheu/CVE-2025-58360
  • https://github.com/Ashwesker/Blackash-CVE-2025-58360/blob/main/README.md

CVE-2025-5821

• Severity: 9.8 CRITICAL
• Impacted Products: Case Theme User plugin for WordPress, 1.0.3
• Description: The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site, and access to the administrative user’s email.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5821
• PoC:
  • https://www.wordfence.com/blog/2025/09/attackers-actively-exploiting-critical-vulnerability-in-case-theme-user-plugin

CVE-2025-57631

• Severity: 9.8 CRITICAL
• Impacted Products: TDuckCloud v.5.1
• Description: SQL Injection vulnerability in TDuckCloud v.5.1 allows a remote attacker to execute arbitrary code via the Add a file upload module
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57631
• PoC:
  • https://gist.github.com/Theresasu1/b1b57b3763a286d9491541180c99368b

CVE-2025-57347

• Severity: 9.8 CRITICAL
• Impacted Products: dagre-d3-es 7.0.9, dagre-d3-es < 7.0.11
• Description: A vulnerability exists in the ‘dagre-d3-es’ Node.js package version 7.0.9, specifically within the ‘bk’ module’s addConflict function, which fails to properly sanitize user-supplied input during property assignment operations. This flaw allows attackers to exploit prototype pollution vulnerabilities by injecting malicious input values (e.g., “__proto__"), enabling unauthorized modification of the JavaScript Object prototype chain.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57347
• PoC:
  • https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57347

CVE-2025-57321

• Severity: 9.8 CRITICAL
• Impacted Products: magix-combine-ex versions thru 1.2.10
• Description: A Prototype Pollution vulnerability in the util-deps.addFileDepend function of magix-combine-ex versions thru 1.2.10 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57321
• PoC:
  • https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57321

CVE-2025-57285

• Severity: 9.8 CRITICAL
• Impacted Products: codeceptjs 3.7.3
• Description: codeceptjs 3.7.3 contains a command injection vulnerability in the emptyFolder function (lib/utils.js). The execSync command directly concatenates the user-controlled directoryPath parameter without sanitization or escaping, allowing attackers to execute arbitrary commands.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57285
• PoC:
  • https://gist.github.com/Dremig/1ba111f9b1f7cffe1fcb4838b64e55b9

CVE-2025-57266

• Severity: 7.5 HIGH
• Impacted Products: ThriveX Blogging Framework 2.5.9, ThriveX Blogging Framework 3.1.3
• Description: An issue was discovered in file AssistantController.java in ThriveX Blogging Framework 2.5.9 thru 3.1.3 allowing unauthenticated attackers to gain sensitive information such as API Keys via the /api/assistant/list endpoint.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57266
• PoC:
  • https://github.com/LiuYuYang01/ThriveX-Server/issues/55

CVE-2025-57247

• Severity: 9.1 CRITICAL
• Impacted Products: BATBToken, Compiler Version v0.8.26+commit.8a97fa7a
• Description: The BATBToken smart contract (address 0xfbf1388408670c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a) contains incorrect access control implementation in whitelist management functions. The setColdWhiteList() and setSpecialAddress() functions in the base ERC20 contract are declared as public without proper access control modifiers, allowing any user to bypass transfer restrictions and manipulate special address settings.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57247
• PoC:
  • https://github.com/RikkaLzw/CVE/blob/main/CVE_BATB-TOKEN.md

CVE-2025-57174

• Severity: 9.8 CRITICAL
• Impacted Products: Siklu Communications Etherhaul 8010TX, Siklu Communications Etherhaul 1200FX, Firmware 7.4.0 through 10.7.3
• Description: An issue was discovered in Siklu Communications Etherhaul 8010TX and 1200FX devices, Firmware 7.4.0 through 10.7.3 and possibly other previous versions. The rfpiped service listening on TCP port 555 which uses static AES encryption keys hardcoded in the binary. These keys are identical across all devices, allowing attackers to craft encrypted packets that execute arbitrary commands without authentication.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57174
• PoC:
  • https://github.com/semaja22/CVE-2025-57174/blob/main/CVE-2025-57174.py
  • https://semaja2.net/2025/08/02/siklu-eh-unauthenticated-rce

CVE-2025-57141

• Severity: 9.8 CRITICAL
• Impacted Products: rsbi-os 4.7
• Description: rsbi-os 4.7 is vulnerable to Remote Code Execution (RCE) in sqlite-jdbc.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57141
• PoC:
  • https://github.com/line2222/vuln/issues/2

CVE-2025-57119

• Severity: 9.8 CRITICAL
• Impacted Products: Online Library Management System v.3.0
• Description: An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login function
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57119
• PoC:
  • https://github.com/Jazeye/CVE/blob/main/CVE-2025-57119/README.md

CVE-2025-57108

• Severity: 9.8 CRITICAL
• Impacted Products: Kitware VTK 9.5.0
• Description: Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files with corrupted or invalid mesh reference structures.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57108
• PoC:
  • https://gitlab.kitware.com/vtk/vtk/-/issues/19736

CVE-2025-57105

• Severity: 9.8 CRITICAL
• Impacted Products: D-Link DI-7400G+
• Description: The D-Link DI-7400G+ router is affected by a command injection vulnerability in its jhttpd web server component. This flaw allows an attacker to execute arbitrary commands on the device by manipulating parameters processed by the administrative web interface.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57105
• PoC:
  • https://github.com/yt2w/CVE-2025-57105

CVE-2025-57085

• Severity: 9.8 CRITICAL
• Impacted Products: Tenda W30E V16.01.0.19
• Description: Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-57085
• PoC:
  • https://github.com/vulnDetailRecord/VulforDevice/blob/main/Tenda/W30E/UploadCfg.md

CVE-2025-5701

• Severity: 9.8 CRITICAL
• Impacted Products: HyperComments plugin for WordPress, 1.2.2
• Description: The HyperComments plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the hc_request_handler function in all versions up to, and including, 1.2.2. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5701
• PoC:
  • https://github.com/RandomRobbieBF/CVE-2025-5701/blob/main/README.md
  • https://github.com/Nxploited/CVE-2025-5701

CVE-2025-56819

• Severity: 9.8 CRITICAL
• Impacted Products: Datart v.1.0.0-rc.3
• Description: Datart v.1.0.0-rc.3 is susceptible to a remote code execution vulnerability stemming from improper neutralization of special elements in the INIT connection parameter of H2 JDBC URLs. This flaw allows a remote attacker to execute arbitrary operating system commands on the server.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56819
• PoC:
  • https://github.com/xyyzxc/CVE-2025-56819/blob/main/README.md
  • https://github.com/xyyzxc/CVE-2025-56819

CVE-2025-56749

• Severity: 9.4 CRITICAL
• Impacted Products: Creativeitem Academy LMS 6.14
• Description: Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to forge valid JWT tokens, leading to authentication bypass and unauthorized access to any user account.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56749
• PoC:
  • https://suryadina.com/academy-lms-jwt-secret-7k9m2x4p8q

CVE-2025-56683

• Severity: 9.6 CRITICAL
• Impacted Products: Logseq v0.10.9
• Description: A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary code via injecting arbitrary Javascript into a crafted README.md file.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56683
• PoC:
  • https://martinkubecka.sk/security-advisories/cve-2025-56683

CVE-2025-56513

• Severity: 9.8 CRITICAL
• Impacted Products: NiceHash QuickMiner 6.12.0
• Description: NiceHash QuickMiner 6.12.0 perform software updates over HTTP without validating digital signatures or hash checks. An attacker capable of intercepting or redirecting traffic to the update url and can hijack the update process and deliver arbitrary executables that are automatically executed, resulting in full remote code execution. This constitutes a critical supply chain attack vector.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56513
• PoC:
  • https://medium.com/@princep49036142/hijacking-the-miner-zero-click-rce-in-nicehash-quickminer-cve-2025-56513-4a7190295e6c
  • https://medium.com/@princep49036142/hijacking-the-miner-how-nicehashminers-auto-update-pipeline-enables-zero-click-rce-ed6a36b6769b

CVE-2025-56447

• Severity: 9.8 CRITICAL
• Impacted Products: TM2 Monitoring v3.04
• Description: TM2 Monitoring v3.04 contains an authentication bypass and plaintext credential disclosure.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56447
• PoC:
  • https://github.com/stSLAYER/ZeroDayVulnerabilities-/blob/main/RT-Systems/POC/README.md

CVE-2025-56231

• Severity: 9.1 CRITICAL
• Impacted Products: Tonec Internet Download Manager 6.42.41.1
• Description: Tonec Internet Download Manager 6.42.41.1 and earlier suffers from Missing SSL Certificate Validation, which allows attackers to bypass update protections.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-56231
• PoC:
  • https://www.notion.so/CVE-2025-56231-2a04e9f2a40d80b184f4d02be58d3600

CVE-2025-55835

• Severity: 9.8 CRITICAL
• Impacted Products: SueamCMS v.0.1.2
• Description: File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-55835
• PoC:
  • https://github.com/Utainlab/Vulns/blob/main/CVE-2025-55835.txt

CVE-2025-55575

• Severity: 9.8 CRITICAL
• Impacted Products: SMM Panel 3.1
• Description: SQL Injection vulnerability in SMM Panel 3.1 allowing remote attackers to gain sensitive information via a crafted HTTP request with action=service_detail.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-55575
• PoC:
  • https://github.com/Aether-0/CVE-2025-55575/blob/main/smm_panel-sqli.yaml

CVE-2025-54988

• Severity: 8.4 HIGH
• Impacted Products: Apache Tika 1.13, Apache Tika 1.14, Apache Tika 1.15, Apache Tika 1.16, Apache Tika 1.17
• Description: Apache Tika versions 1.13 through 3.2.1 are vulnerable to an XML External Entity (XXE) injection flaw. This allows an attacker to supply a specially crafted PDF containing an XFA file to read sensitive data, trigger requests to internal or external resources, and potentially achieve arbitrary code execution.
• Remediation:
  • Critical: Red Hat Build of Apache Camel 4.14.2 for Spring Boot release.
  • Product Release Advisory - Tanzu Hub 10.2.1
• More Info: NVD - CVE-2025-54988
• PoC:
  • https://github.com/mgthuramoemyint/POC-CVE-2025-54988

CVE-2025-54875

• Severity: 9.8 CRITICAL
• Impacted Products: FreshRSS 1.16.0, FreshRSS 1.17.0, FreshRSS 1.18.0, FreshRSS 1.19.0, FreshRSS 1.20.0
• Description: FreshRSS is a free, self-hostable RSS aggregator. In versions 1.16.0 and above through 1.26.3, an unprivileged attacker can create a new admin user when registration is enabled through the use of a hidden field used only in the user management admin page, new_user_is_admin. This is fixed in version 1.27.0.
• Remediation:
  • Fix create user bugs by Inverle · Pull Request #7783 · FreshRSS/FreshRSS · GitHub
• More Info: NVD - CVE-2025-54875
• PoC:
  • https://github.com/FreshRSS/FreshRSS/security/advisories/GHSA-h625-ghr3-jppq

CVE-2025-54726

• Severity: 9.3 CRITICAL
• Impacted Products: JS Archive List: from n/a through n/a
• Description: Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in Miguel Useche JS Archive List allows SQL Injection. This issue affects JS Archive List: from n/a through n/a.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-54726
• PoC:
  • https://github.com/RandomRobbieBF/CVE-2025-54726/blob/main/README.md

CVE-2025-54309

• Severity: 9.0 CRITICAL
• Impacted Products: CrushFTP 10 before 10.8.5, CrushFTP 11 before 11.3.4_23
• Description: CrushFTP is affected by an unprotected alternate channel vulnerability that allows remote attackers to obtain administrative access. This flaw stems from mishandled AS2 validation when the DMZ proxy feature is not in use.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-54309
• PoC:
  • https://github.com/issamjr/CVE-2025-54309-EXPLOIT
  • https://github.com/whisperer1290/CVE-2025-54309__Enhanced_exploit
  • https://github.com/blueisbeautiful/CVE-2025-54309

CVE-2025-5419

• Severity: 8.8 HIGH
• Impacted Products: Google Chrome prior to version 137.0.7151.68
• Description: Google Chrome prior to version 137.0.7151.68 is affected by an out-of-bounds read and write vulnerability in its V8 JavaScript engine. This flaw allows a remote attacker to potentially exploit heap corruption via a specially crafted HTML page.
• Remediation:
  • Product Release Advisory - Tanzu Hub 10.2.1
  • Chrome Releases: Long Term Support Channel Update for ChromeOS
  • chromium-137.0.7151.68-1.fc41
• More Info: NVD - CVE-2025-5419
• PoC:
  • https://github.com/mistymntncop/CVE-2025-5419/blob/main/exploit.js
  • https://github.com/itsShotgun/chrome_cve-2025-5419_checker

CVE-2025-54123

• Severity: 9.8 CRITICAL
• Impacted Products: Hoverfly 1.11.3 and prior, Hoverfly 1.12.0
• Description: Hoverfly is an open source API simulation tool. In versions 1.11.3 and prior, the middleware functionality in Hoverfly is vulnerable to command injection vulnerability at /api/v2/hoverfly/middleware endpoint due to insufficient validation and sanitization in user input. The vulnerability exists in the middleware management API endpoint /api/v2/hoverfly/middleware.
• Remediation:
  • https://github.com/SpectoLabs/hoverfly/commit/17e60a9bc78826deb4b782dca1c1abd3dbe60d40
  • https://github.com/SpectoLabs/hoverfly/commit/a9d4da7bd7269651f54542ab790d0c613d568d3e
• More Info: NVD - CVE-2025-54123
• PoC:
  • https://github.com/SpectoLabs/hoverfly/security/advisories/GHSA-r4h8-hfp2-ggmf
  • https://pwn.kr1shna4garwal.com/pwns/hoverfly/hoverfly_poc.py

CVE-2025-54122

• Severity: 10.0 CRITICAL
• Impacted Products: Manager-io/Manager Desktop 25.7.18.2519, Manager-io/Manager Server 25.7.18.2519
• Description: Manager-io/Manager is accounting software. A critical unauthenticated full read Server-Side Request Forgery (SSRF) vulnerability has been identified in the proxy handler component of both manager Desktop and Server edition versions up to and including 25.7.18.2519.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-54122
• PoC:
  • https://github.com/Manager-io/Manager/security/advisories/GHSA-347w-cgwh-m895

CVE-2025-53693

• Severity: 9.8 CRITICAL
• Impacted Products: Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4, Sitecore Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4
• Description: Use of Externally-Controlled Input to Select Classes or Code (‘Unsafe Reflection’) vulnerability in Sitecore Sitecore Experience Manager (XM), Sitecore Experience Platform (XP) allows Cache Poisoning.This issue affects Sitecore Experience Manager (XM): from 9.0 through 9.3, from 10.0 through 10.4; Experience Platform (XP): from 9.0 through 9.3, from 10.0 through 10.4.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-53693
• PoC:
  • https://github.com/blueisbeautiful/CVE-2025-53694-to-CVE-2025-53691/blob/main/chain.py
  • https://github.com/blueisbeautiful/CVE-2025-53693/blob/main/exploit.py

CVE-2025-5305

• Severity: 9.8 CRITICAL
• Impacted Products: Password Reset with Code for WordPress REST API, before 0.0.17
• Description: The Password Reset with Code for WordPress REST API WordPress plugin before 0.0.17 does not use cryptographically sound algorithms to generate OTP codes, potentially leading to account takeovers.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5305
• PoC:
  • https://wpscan.com/vulnerability/dcf5c003-91b0-4e7d-89f3-7459d8f01153

CVE-2025-5288

• Severity: 9.8 CRITICAL
• Impacted Products: The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress, versions 1.0.0 to 2.0.3
• Description: The REST API | Custom API Generator For Cross Platform And Import Export In WP plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the process_handler() function in versions 1.0.0 to 2.0.3. This makes it possible for unauthenticated attackers to POST an arbitrary import_api URL, import specially crafted JSON, and thereby create a new user with full Administrator privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5288
• PoC:
  • https://github.com/Nxploited/CVE-2025-5288

CVE-2025-52688

• Severity: 9.8 CRITICAL
• Impacted Products: No specific product names or versions are mentioned in the CVE description provided.
• Description: Successful exploitation of the vulnerability could allow an attacker to inject commands with root privileges on the access point, potentially leading to the loss of confidentiality, integrity, availability, and full control of the access point.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52688
• PoC:
  • https://jro.sg/CVEs/CVE-2025-52688
  • https://github.com/joelczk/CVE-2025-52688/blob/main/README.md

CVE-2025-52385

• Severity: 9.8 CRITICAL
• Impacted Products: Studio 3T v.2025.1.0 and before
• Description: An issue in Studio 3T v.2025.1.0 and before allows a remote attacker to execute arbitrary code via a crafted payload to the child_process module
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52385
• PoC:
  • https://github.com/Kov404/CVE-2025-52385/blob/main/README.md

CVE-2025-52053

• Severity: 9.8 CRITICAL
• Impacted Products: TOTOLINK X6000R V9.4.0cu.1360_B20241207
• Description: TOTOLINK X6000R V9.4.0cu.1360_B20241207 was found to contain a command injection vulnerability in the sub_417D74 function via the file_name parameter. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52053
• PoC:
  • https://github.com/w0rkd4tt/Totolink/blob/main/CVE-2025-52053/CVE-2025-52053.md

CVE-2025-52046

• Severity: 9.8 CRITICAL
• Impacted Products: Totolink A3300R V17.0.0cu.596_B20250515
• Description: Totolink A3300R V17.0.0cu.596_B20250515 was found to contain a command injection vulnerability in the sub_4197C0 function via the mac and desc parameters. This vulnerability allows unauthenticated attackers to execute arbitrary commands via a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52046
• PoC:
  • https://github.com/w0rkd4tt/Totolink/blob/main/CVE-2025-52046/CVE-2025-52046.md

CVE-2025-52021

• Severity: 9.8 CRITICAL
• Impacted Products: PuneethReddyHC Online Shopping System Advanced 1.0
• Description: A SQL Injection vulnerability exists in the edit_product.php file of PuneethReddyHC Online Shopping System Advanced 1.0. The product_id GET parameter is unsafely passed to a SQL query without proper validation or parameterization.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-52021
• PoC:
  • https://gist.github.com/hafizgemilang/c953d16c1459458667132e93359f3d6c

CVE-2025-51682

• Severity: 9.8 CRITICAL
• Impacted Products: mJobtime 15.7.2
• Description: mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to administrative features. Additionally, they can craft requests based on the client-side code to call these administrative functions directly.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-51682
• PoC:
  • https://labs.infoguard.ch/advisories/cve-2025-51682_cve-2025-51683_time_management_softare_sqli-rce

CVE-2025-51390

• Severity: 9.8 CRITICAL
• Impacted Products: TOTOLINK N600R V4.3.0cu.7647_B20210106
• Description: TOTOLINK N600R V4.3.0cu.7647_B20210106 was discovered to contain a command injection vulnerability via the pin parameter in the setWiFiWpsConfig function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-51390
• PoC:
  • https://github.com/Luanruy/qianxin/blob/main/CVE-2025-51390.md

CVE-2025-5099

• Severity: 8.1 HIGH
• Impacted Products: No specific product names or versions are mentioned in the provided CVE description.
• Description: An Out of Bounds Write occurs when the native library attempts PDF rendering, which can be exploited to achieve memory corruption and potentially arbitrary code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5099
• PoC:
  • https://korelogic.com/Resources/Advisories/KL-001-2025-004.poc.js.txt

CVE-2025-5095

• Severity: 9.8 CRITICAL
• Impacted Products: Burk Technology ARC Solo
• Description: Burk Technology ARC Solo’s password change mechanism can be utilized without proper authentication procedures, allowing an attacker to take over the device. A password change request can be sent directly to the device’s HTTP endpoint without providing valid credentials. The system does not enforce proper authentication or session validation, allowing the password change to proceed without verifying the request’s legitimacy.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-5095
• PoC:
  • https://github.com/TeteuXD2/CVE-2025-5095-POC

CVE-2025-50904

• Severity: 9.8 CRITICAL
• Impacted Products: WinterChenS my-site
• Description: There is an authentication bypass vulnerability in WinterChenS my-site thru commit 6c79286 (2025-06-11). An attacker can exploit this vulnerability to access /admin/ API without any token.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50904
• PoC:
  • https://github.com/WinterChenS/my-site/issues/95

CVE-2025-50756

• Severity: 9.8 CRITICAL
• Impacted Products: Wavlink WN535K3 20191010
• Description: Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50756
• PoC:
  • https://github.com/Summermu/VulnForIoT/blob/main/Wavlink_WN535K3/set_sys_adm_newpass/readme.md

CVE-2025-50754

• Severity: 9.6 CRITICAL
• Impacted Products: Unisite CMS 5.0
• Description: Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the “Report” functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the template editor, upload and execute a PHP web shell on the server, leading to full remote code execution.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50754
• PoC:
  • https://github.com/furk4nyildiz/CVE-2025-50754-PoC/blob/main/README.md

CVE-2025-50722

• Severity: 9.8 CRITICAL
• Impacted Products: sparkshop v.1.1.7
• Description: Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50722
• PoC:
  • https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf

CVE-2025-50692

• Severity: 9.8 CRITICAL
• Impacted Products: FoxCMS <=v1.2.5
• Description: FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50692
• PoC:
  • https://gist.github.com/cyb3res3c/ceacf7d560d2c8cd5ffd158abf0bfba9#file-cve-2025-50692-md

CVE-2025-50578

• Severity: 6.3 MEDIUM
• Impacted Products: LinuxServer.io heimdall 2.6.3-ls307
• Description: LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically X-Forwarded-Host and Referer. An unauthenticated remote attacker can manipulate these headers to perform Host Header Injection and Open Redirect attacks. This allows the loading of external resources from attacker-controlled domains and unintended redirection of users, potentially enabling phishing, UI redress, and session theft.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50578
• PoC:
  • https://medium.com/@juanfelipeoz.rar/cve-2025-50578-exploiting-host-header-injection-open-redirect-in-heimdall-application-733afceff2ea

CVE-2025-50475

• Severity: 9.8 CRITICAL
• Impacted Products: Russound MBX-PRE-D67F firmware version 3.1.6
• Description: An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralization of special elements used in an OS command within the network configuration handler, enabling remote code execution with the highest privileges.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50475
• PoC:
  • https://drive.google.com/file/d/1ZmZHzJKU-nrhFXd9w94aiGXYYYldtmni/view?usp=sharing

CVE-2025-50472

• Severity: 9.8 CRITICAL
• Impacted Products: modelscope/ms-swift thru 2.6.1
• Description: The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the load\_model\_meta() function of the ModelFileSystemCache() class. Attackers can execute arbitrary code and commands by crafting a malicious serialized .mdl payload, exploiting the use of pickle.load() on data from potentially untrusted sources.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50472
• PoC:
  • https://github.com/xhjy2020/CVE-2025-50472

CVE-2025-50460

• Severity: 9.8 CRITICAL
• Impacted Products: ms-swift 3.3.0, PyYAML 5.3.1
• Description: A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of the YAML configuration file passed to the –run_config parameter, arbitrary code can be executed during deserialization. This can lead to full system compromise.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50460
• PoC:
  • https://github.com/Anchor0221/CVE-2025-50460/blob/main/README.md

CVE-2025-50428

• Severity: 7.2 HIGH
• Impacted Products: RaspAP raspap-webgui 3.3.2
• Description: In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter.
• Remediation:
  • Add interface validation and improve shell argument escaping by no-sec-marko · Pull Request #1833 · RaspAP/raspap-webgui · GitHub
• More Info: NVD - CVE-2025-50428
• PoC:
  • https://github.com/security-smarttecs/cve-2025-50428

CVE-2025-50341

• Severity: 9.8 CRITICAL
• Impacted Products: Axelor 5.2.4
• Description: A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-50341
• PoC:
  • https://github.com/millad7/Axelor-vulnerability-CVE-2025-50341

CVE-2025-50201

• Severity: 9.8 CRITICAL
• Impacted Products: WeGIA, prior to version 3.4.2
• Description: WeGIA is a web manager for charitable institutions. Prior to version 3.4.2, an OS Command Injection vulnerability was identified in the /html/configuracao/debug_info.php endpoint. The branch parameter is not properly sanitized before being concatenated and executed in a shell command on the server’s operating system. This flaw allows an unauthenticated attacker to execute arbitrary commands on the server with the privileges of the web server user (www-data).
• Remediation:
  • https://github.com/LabRedesCefetRJ/WeGIA/commit/45f32ad1d52775fc99f3c90075c8136c6d4d1d3d
• More Info: NVD - CVE-2025-50201
• PoC:
  • https://github.com/LabRedesCefetRJ/WeGIA/security/advisories/GHSA-52p5-5fmw-9hrf

CVE-2025-49655

• Severity: 9.8 CRITICAL
• Impacted Products: Keras 3.11.0, Keras 3.11.1, Keras 3.11.2
• Description: Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabling a maliciously uploaded Keras file containing a TorchModuleWrapper class to run arbitrary code on an end user’s system when loaded despite safe mode being enabled. The vulnerability can be triggered through both local and remote files.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49655
• PoC:
  • https://hiddenlayer.com/sai_security_advisor/2025-10-keras

CVE-2025-49388

• Severity: 9.8 CRITICAL
• Impacted Products: Miraculous Core Plugin: from n/a through 2.0.7
• Description: Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin allows Privilege Escalation. This issue affects Miraculous Core Plugin: from n/a through 2.0.7.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49388
• PoC:
  • https://github.com/Nxploited/CVE-2025-49388

CVE-2025-49223

• Severity: 9.8 CRITICAL
• Impacted Products: billboard.js < 3.15.1
• Description: billboard.js before 3.15.1 was discovered to contain a prototype pollution via the function generate, which could allow attackers to execute arbitrary code or cause a Denial of Service (DoS) via injecting arbitrary properties.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49223
• PoC:
  • https://github.com/louay-075/CVE-2025-49223-BillboardJS-PoC

CVE-2025-49136

• Severity: 9.0 CRITICAL
• Impacted Products: listmonk 4.0.0, listmonk < 5.0.2
• Description: listmonk is a standalone, self-hosted, newsletter and mailing list manager. Starting in version 4.0.0 and prior to version 5.0.2, the env and expandenv template functions which is enabled by default in Sprig enables capturing of env variables on host.
• Remediation:
  • https://github.com/knadh/listmonk/commit/d27d2c32cf3af2d0b24e29ea5a686ba149b49b3e
• More Info: NVD - CVE-2025-49136
• PoC:
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/gather/listmonk_env_disclosure.rb

CVE-2025-49132

• Severity: 10.0 CRITICAL
• Impacted Products: Pterodactyl < 1.11.11
• Description: Pterodactyl is a free, open-source game server management panel. Prior to version 1.11.11, using the /locales/locale.json with the locale and namespace query parameters, a malicious actor is able to execute arbitrary code without being authenticated. With the ability to execute arbitrary code it could be used to gain access to the Panel’s server, read credentials from the Panel’s config, extract sensitive information from the database, access files of servers managed by the panel, etc.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49132
• PoC:
  • https://github.com/uxieltc/CVE-2025-49132/blob/main/cve.py
  • https://github.com/WebSafety-2tina/CVE-2025-49132
  • https://github.com/melonlonmeo/CVE-2025-49132

CVE-2025-49029

• Severity: 9.1 CRITICAL
• Impacted Products: Custom Login And Signup Widget: from n/a through 1.0
• Description: Improper Control of Generation of Code (‘Code Injection’) vulnerability in bitto.Kazi Custom Login And Signup Widget allows Code Injection.This issue affects Custom Login And Signup Widget: from n/a through 1.0.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49029
• PoC:
  • https://github.com/Nxploited/CVE-2025-49029/blob/main/README.md

CVE-2025-49002

• Severity: 9.8 CRITICAL
• Impacted Products: DataEase v2.10.10
• Description: DataEase is an open source business intelligence and data visualization tool. Versions prior to version 2.10.10 have a flaw in the patch for CVE-2025-32966 that allow the patch to be bypassed through case insensitivity because INIT and RUNSCRIPT are prohibited. The vulnerability has been fixed in v2.10.10. No known workarounds are available.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-49002
• PoC:
  • https://github.com/Feng-Huang-0520/DataEase_Postgresql_JDBC_Bypass-CVE-2025-49002
  • https://github.com/jiuzui129-arch/CVE-2025-49002/blob/main/poc.py

CVE-2025-48543

• Severity: 8.8 HIGH
• Impacted Products: Google Android ART
• Description: Google Android ART is susceptible to a use-after-free vulnerability that enables a malicious application to escape the Chrome sandbox and attack the Android system\_server. This can lead to local privilege escalation without requiring user interaction.
• Remediation:
  • Android Security Bulletin—September 2025
  • https://android.googlesource.com/platform/art/+/444fc40dfb04d2ec5f74c443ed3a4dd45d3131f2
• More Info: NVD - CVE-2025-48543
• PoC:
  • https://github.com/gamesarchive/CVE-2025-48543

CVE-2025-48129

• Severity: 9.8 CRITICAL
• Impacted Products: Spreadsheet Price Changer for WooCommerce, WP E-commerce – Light: from n/a through 2.4.37
• Description: Incorrect Privilege Assignment vulnerability in Holest Engineering Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light allows Privilege Escalation. This issue affects Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light: from n/a through 2.4.37.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-48129
• PoC:
  • https://github.com/Nxploited/CVE-2025-48129

CVE-2025-47916

• Severity: 10.0 CRITICAL
• Impacted Products: Invision Community 5.0.0, Invision Community 5.0.1, Invision Community 5.0.2, Invision Community 5.0.3, Invision Community 5.0.4
• Description: Invision Community 5.0.0 before 5.0.7 allows remote code execution via crafted template strings to themeeditor.php. The issue lies within the themeeditor controller (file: /applications/core/modules/front/system/themeeditor.php), where a protected method named customCss can be invoked by unauthenticated users. This method passes the value of the content parameter to the Theme::makeProcessFunction() method; hence it is evaluated by the template engine.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-47916
• PoC:
  • https://www.exploit-db.com/exploits/52294
  • https://karmainsecurity.com/pocs/CVE-2025-47916.php
  • https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/invision_customcss_rce.rb

CVE-2025-47776

• Severity: 9.1 CRITICAL
• Impacted Products: Mantis Bug Tracker (MantisBT) 2.27.1 and below, Mantis Bug Tracker (MantisBT) 2.27.2
• Description: Mantis Bug Tracker (MantisBT) is an open source issue tracker. Due to incorrect use of loose (==) instead of strict (===) comparison in the authentication code in versions 2.27.1 and below.PHP type juggling will cause certain MD5 hashes matching scientific notation to be interpreted as numbers.
• Remediation:
  • https://github.com/mantisbt/mantisbt/commit/966554a19cf1bdbcfbfb3004766979faa748f9a2
• More Info: NVD - CVE-2025-47776
• PoC:
  • https://mantisbt.org/bugs/view.php?id=35967

CVE-2025-47646

• Severity: 9.8 CRITICAL
• Impacted Products: Gilblas Ngunte Possi PSW Front-end Login & Registration: n/a, 1.13
• Description: Weak Password Recovery Mechanism for Forgotten Password vulnerability in Gilblas Ngunte Possi PSW Front-end Login & Registration allows Password Recovery Exploitation. This issue affects PSW Front-end Login & Registration: from n/a through 1.13.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-47646
• PoC:
  • https://github.com/RootHarpy/CVE-2025-47646/blob/main/CVE-2025-47646.py
  • https://github.com/Nxploited/CVE-2025-47646

CVE-2025-47577

• Severity: 10.0 CRITICAL
• Impacted Products: TI WooCommerce Wishlist: from n/a before 2.10.0
• Description: Unrestricted Upload of File with Dangerous Type vulnerability in TemplateInvaders TI WooCommerce Wishlist allows Upload a Web Shell to a Web Server.This issue affects TI WooCommerce Wishlist: from n/a before 2.10.0.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-47577
• PoC:
  • https://github.com/sug4r-wr41th/CVE-2025-47577

CVE-2025-47539

• Severity: 9.8 CRITICAL
• Impacted Products: Eventin: from n/a through 4.0.26
• Description: Incorrect Privilege Assignment vulnerability in Themewinter Eventin allows Privilege Escalation. This issue affects Eventin: from n/a through 4.0.26.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-47539
• PoC:
  • https://github.com/Nxploited/CVE-2025-47539

CVE-2025-47151

• Severity: 9.8 CRITICAL
• Impacted Products: Entr’ouvert Lasso 2.5.1, Entr’ouvert Lasso 2.8.2
• Description: Entr’ouvert Lasso versions 2.5.1 and 2.8.2 are affected by a type confusion vulnerability in the lasso\_node\_impl\_init\_from\_xml function. This flaw allows a remote attacker to achieve arbitrary code execution by sending a specially crafted SAML response.
• Remediation:
  • Critical: lasso security update
  • Critical: lasso security update
  • Critical: lasso security update
• More Info: NVD - CVE-2025-47151
• PoC:
  • https://talosintelligence.com/vulnerability_reports/TALOS-2025-2193

CVE-2025-4664

• Severity: 4.3 MEDIUM
• Impacted Products: Google Chrome prior to version 136.0.7103.113
• Description: Google Chrome prior to version 136.0.7103.113 contains an insufficient policy enforcement vulnerability in its Loader component. This flaw allows a remote attacker to leak cross-origin data by crafting a malicious HTML page.
• Remediation:
  • Chromium: CVE-2025-4664 Insufficient policy enforcement in Loader
  • Product Release Advisory - Tanzu Hub 10.2.1
  • Chrome Releases: Long Term Support Channel Update for ChromeOS
• More Info: NVD - CVE-2025-4664
• PoC:
  • https://x.com/slonser_/status/1919439380512469315/photo/1
  • https://github.com/Waseemarif/cve20254664/blob/main/attacker_server.py
  • https://github.com/mingijunggrape/CVE-2025-4664/blob/main/app.py

CVE-2025-4631

• Severity: 9.8 CRITICAL
• Impacted Products: Profitori plugin for WordPress 2.0.6.0 to 2.1.1.3
• Description: The Profitori plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the stocktend_object endpoint in versions 2.0.6.0 to 2.1.1.3. This makes it possible to trigger the save_object_as_user() function for objects whose ‘_datatype’ is set to ‘users’,.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-4631
• PoC:
  • https://github.com/Nxploited/CVE-2025-4631

CVE-2025-46271

• Severity: 9.1 CRITICAL
• Impacted Products: UNI-NMS-Lite
• Description: UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-46271
• PoC:
  • https://github.com/1Altruist/CVE-2025-46271-Reverse-Shell-PoC/blob/main/PoC.py

CVE-2025-46157

• Severity: 9.9 CRITICAL
• Impacted Products: EfroTech Time Trax v.1.0
• Description: An issue in EfroTech Time Trax v.1.0 allows a remote attacker to execute arbitrary code via the file attachment function in the leave request form
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-46157
• PoC:
  • https://github.com/morphine009/CVE-2025-46157/blob/main/README.md

CVE-2025-4606

• Severity: 9.8 CRITICAL
• Impacted Products: Sala - Startup & SaaS WordPress Theme, 1.1.4
• Description: The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user’s identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user’s passwords, including administrators, and leverage that to gain access to their account.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-4606
• PoC:
  • https://github.com/UcenHaxor07/CVE-2025-4606/blob/main/main.py
  • https://github.com/Yucaerin/CVE-2025-4606

CVE-2025-45988

• Severity: 9.8 CRITICAL
• Impacted Products: BL-WR9000 V2.4.9, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5, BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0
• Description: Blink routers BL-WR9000 V2.4.9 , BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 v1.0.5 , BL-LTE300 v1.2.3, BL-F1200_AT1 v1.0.0, BL-X26_AC8 v1.2.8, BLAC450M_AE4 v4.0.0 and BL-X26_DA3 v1.2.7 were discovered to contain multiple command injection vulnerabilities via the cmd parameter in the bs_SetCmd function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45988
• PoC:
  • https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_cmd%20Indicates%20the%20unauthorized%20command%20injection/The%20LB-LINK_cmd%20command%20is%20used%20to%20inject%20information.md

CVE-2025-45984

• Severity: 9.6 CRITICAL
• Impacted Products: BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3
• Description: Blink routers BL-WR9000 V2.4.9, BL-AC1900 V1.0.2, BL-AC2100_AZ3 V1.0.4, BL-X10_AC8 V1.0.5, BL-LTE300 V1.2.3, BL-F1200_AT1 V1.0.0, BL-X26_AC8 V1.2.8, BLAC450M_AE4 V4.0.0 and BL-X26_DA3 V1.2.7 were discovered to contain a command injection vulnerability via the routepwd parameter in the sub_45B238 function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45984
• PoC:
  • https://github.com/glkfc/IoT-Vulnerability/blob/main/LB-LINK/LB-LINK_routepwd%20Indicates%20the%20unauthorized%20command%20injection/LB-LINK_routepwd%20command%20injection.md

CVE-2025-45890

• Severity: 7.2 HIGH
• Impacted Products: novel plus before v.5.1.0
• Description: Directory Traversal vulnerability in novel plus before v.5.1.0 allows a remote attacker to execute arbitrary code via the filePath parameter
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45890
• PoC:
  • https://github.com/SecureCore1/CVE/blob/main/novel-plus/readme.md

CVE-2025-45857

• Severity: 9.8 CRITICAL
• Impacted Products: EDIMAX CV7428NS v1.20
• Description: EDIMAX CV7428NS v1.20 was discovered to contain a remote code execution (RCE) vulnerability via the command parameter in the mp function.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45857
• PoC:
  • https://github.com/Jiangxiazhe/IOT_hack/blob/main/EDIMAX/CV7428NS/1.md

CVE-2025-45814

• Severity: 9.8 CRITICAL
• Impacted Products: NS3000 v8.1.1.125110, NS3000 v7.2.8.124852, NS3000 v7.x, NS2000 v7.02.08
• Description: Missing authentication checks in the query.fcgi endpoint of NS3000 v8.1.1.125110 , v7.2.8.124852 , and v7.x and NS2000 v7.02.08 allows attackers to execute a session hijacking attack.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45814
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45814

CVE-2025-45813

• Severity: 9.8 CRITICAL
• Impacted Products: ENENSYS IPGuard v2 2.10.0
• Description: ENENSYS IPGuard v2 2.10.0 was discovered to contain hardcoded credentials.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45813
• PoC:
  • https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-45813

CVE-2025-4578

• Severity: 9.8 CRITICAL
• Impacted Products: File Provider WordPress plugin, 1.2.3
• Description: The File Provider WordPress plugin through 1.2.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-4578
• PoC:
  • https://github.com/RandomRobbieBF/CVE-2025-4578

CVE-2025-45777

• Severity: 9.8 CRITICAL
• Impacted Products: Chavara Family Welfare Centre Chavara Matrimony Site v2.0
• Description: An issue in the OTP mechanism of Chavara Family Welfare Centre Chavara Matrimony Site v2.0 allows attackers to bypass authentication via supplying a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45777
• PoC:
  • https://github.com/edwin-0990/CVE_ID/tree/main/CVE-2025-45777

CVE-2025-45616

• Severity: 9.8 CRITICAL
• Impacted Products: brcc v1.2.0
• Description: Incorrect access control in the /admin/** API of brcc v1.2.0 allows attackers to gain access to Admin rights via a crafted request.
• Remediation: Follow vendor security advisories and apply the latest patches. Review affected systems and prioritize patching based on exploitability and business impact.
• More Info: NVD - CVE-2025-45616
• PoC:
  • https://github.com/baidu/brcc/issues/194