CVE-2025-40000 to CVE-2025-40999

17 CVEs with public proof-of-concept exploits.

• CVE-2025-400192 PoCscrypto: essiv - Check ssize for decryption and in-place encryption
• CVE-2025-400401 PoCmm/ksm: fix flag-dropping behavior in ksm_madvise
• CVE-2025-402713 PoCsfs/proc: fix uaf in proc_readdir_de()
• CVE-2025-405363 PoCsKEVSolarWinds Web Help Desk Security Control Bypass Vulnerability
• CVE-2025-405512 PoCsKEVSolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2025-405522 PoCsSolarWinds Web Help Desk Authentication Bypass Vulnerability
• CVE-2025-405531 PoCSolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution Vulnerability
• CVE-2025-405543 PoCsSolarWinds Web Help Desk Authentication Bypass Vulnerability
• CVE-2025-406021 PoCKEVA local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
• CVE-2025-406291 PoCPath Traversal vulnerability in PNETLab
• CVE-2025-406301 PoCOpen redirection vulnerability in IceWarp Mail Server
• CVE-2025-406341 PoCStack-based buffer overflow in TP-Link Archer AX50
• CVE-2025-406772 PoCsSQL injection vulnerability in Summar Software´s Portal del Empleado
• CVE-2025-407782 PoCsCache poisoning attacks with unsolicited RRs
• CVE-2025-408431 PoCBuffer overflow in CodeChecker log command
• CVE-2025-409071 PoCFCGI versions 0.44 through 0.82, for Perl, include a vulnerable version of the FastCGI fcgi2 (aka fcgi) library
• CVE-2025-409091 PoCPerl threads have a working directory race condition where file operations may target unintended paths