CVE-2025-41000 to CVE-2025-41999

14 CVEs with public proof-of-concept exploits.

• CVE-2025-410671 PoCReachable Assertion vulnerability in Open5GS
• CVE-2025-410681 PoCReachable Assertion vulnerability in Open5GS
• CVE-2025-410691 PoCInsecure Direct Object References (IDOR) in DeporSite of T-Innova DeporSite
• CVE-2025-411152 PoCsIncorrect privilege assignment
• CVE-2025-412281 PoCVMware ESXi and vCenter Server Reflected Cross Site Scripting (XSS) Vulnerability
• CVE-2025-412422 PoCsCVE-2025-41242: Path traversal vulnerability on non-compliant Servlet containers
• CVE-2025-412431 PoCSpring Expression Language property modification using Spring Cloud Gateway Server WebFlux
• CVE-2025-412442 PoCsKEVVMSA-2025-0015: VMware Aria Operations and VMware Tools updates address multiple vulnerabilities (CVE-2025-41244,CVE-2025-41245…
• CVE-2025-413732 PoCsSQL injection vulnerability in Gandia Integra Total
• CVE-2025-413931 PoCReflected cross-site scripting vulnerability exists in the laser printers and MFPs (multifunction printers) which implement Ricoh Web…
• CVE-2025-414501 PoCAuthentication bypass with privileged access in Danfoss AK-SM 8xxA Series prior to version 4.2
• CVE-2025-416464 PoCsRevPi Webstatus application is vulnerable to an authentication bypass
• CVE-2025-416561 PoCPilz: Missing Authentication in Node-RED integration
• CVE-2025-417441 PoCSprecher Automation: SPRECON-E series has static default key material for TLS connections