CVE-2025-36000 to CVE-2025-36999

7 CVEs with public proof-of-concept exploits.

• CVE-2025-360411 PoCIBM MQ improper certificate validation
• CVE-2025-365121 PoCA denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A…
• CVE-2025-365201 PoCA null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A…
• CVE-2025-366041 PoCDell Unity, version(s) 5.5 and prior, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command…
• CVE-2025-368452 PoCsAn issue was discovered in Eveo URVE Web Manager 27.02.2025. The endpoint /_internal/redirect.php allows for Server-Side Request Forgery…
• CVE-2025-368461 PoCAn issue was discovered in Eveo URVE Web Manager 27.02.2025. The application exposes a /_internal/pc/vpro.php localhost endpoint to…
• CVE-2025-3691112 PoCsIn key-based pairing, there is a possible ID due to a logic error in the code. This could lead to remote (proximal/adjacent) information…