CVE-2025-5000 to CVE-2025-5999

540 CVEs with public proof-of-concept exploits.

• CVE-2025-50001 PoCLinksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control_panel_sw command injection
• CVE-2025-50011 PoCGNU PSPP pspp-convert.c calloc integer overflow
• CVE-2025-50021 PoCSourceCodester Client Database Management System user_proposal_update_order.php sql injection
• CVE-2025-50031 PoCprojectworlds Online Time Table Generator semester_ajax.php sql injection
• CVE-2025-50041 PoCprojectworlds Online Time Table Generator add_course.php sql injection
• CVE-2025-50051 PoCShanghai Lingdang Information Technology Lingdang CRM index_event.php server-side request forgery
• CVE-2025-50061 PoCCampcodes Online Shopping Portal category.php sql injection
• CVE-2025-50071 PoCPart-DB Profile Picture Feature AttachmentSubmitHandler.php handleUpload cross site scripting
• CVE-2025-50081 PoCprojectworlds Online Time Table Generator add_teacher.php sql injection
• CVE-2025-50101 PoCmoonlightL hexo-boot Blog Backend index.html cross site scripting
• CVE-2025-50111 PoCmoonlightL hexo-boot Dynamic List Page index.html cross site scripting
• CVE-2025-50131 PoCHkCms Search index.html cross site scripting
• CVE-2025-50251 PoCNo QUIC certificate pinning with wolfSSL
• CVE-2025-50291 PoCKingdee Cloud Galaxy Private Cloud BBC System File deleteFileAction.jhtml path traversal
• CVE-2025-50301 PoCAckites KillWxapkg wxapkg File Parser unpack.go processFile os command injection
• CVE-2025-50311 PoCAckites KillWxapkg wxapkg File Decompression resource consumption
• CVE-2025-50321 PoCCampcodes Online Shopping Portal edit-category.php sql injection
• CVE-2025-50331 PoCXiaoBingby TeaCMS addUser cross-site request forgery
• CVE-2025-50341 PoCWP File Download < 6.2.6 - Reflected XSS
• CVE-2025-50351 PoCFirelight Lightbox < 2.3.16 - Contributor+ Stored XSS
• CVE-2025-50491 PoCFreeFloat FTP Server APPEND Command buffer overflow
• CVE-2025-50501 PoCFreeFloat FTP Server BELL Command buffer overflow
• CVE-2025-50511 PoCFreeFloat FTP Server BINARY Command buffer overflow
• CVE-2025-50521 PoCFreeFloat FTP Server LS Command buffer overflow
• CVE-2025-50531 PoCFreeFloat FTP Server MDIR Command buffer overflow
• CVE-2025-50542 PoCsRace Condition in Canonical Apport
• CVE-2025-50561 PoCCampcodes Online Shopping Portal edit-products.php sql injection
• CVE-2025-50571 PoCCampcodes Online Shopping Portal insert-product.php sql injection
• CVE-2025-50582 PoCseMagicOne Store Manager for WooCommerce <= 1.2.5 - Unauthenticated Arbitrary File Upload via set_image()
• CVE-2025-50591 PoCCampcodes Online Shopping Portal edit-subcategory.php unrestricted upload
• CVE-2025-50691 PoCIncorrect Ownership Assignment in GitLab
• CVE-2025-50731 PoCFreeFloat FTP Server MKDIR Command buffer overflow
• CVE-2025-50741 PoCFreeFloat FTP Server PROMPT Command buffer overflow
• CVE-2025-50752 PoCsFreeFloat FTP Server DEBUG Command buffer overflow
• CVE-2025-50761 PoCFreeFloat FTP Server SEND Command buffer overflow
• CVE-2025-50771 PoCCampcodes Online Shopping Portal edit-subcategory.php sql injection
• CVE-2025-50781 PoCPHPGurukul/Campcodes Online Shopping Portal subcategory.php sql injection
• CVE-2025-50791 PoCPHPGurukul/Campcodes Online Shopping Portal updateorder.php sql injection
• CVE-2025-50801 PoCTenda FH451 webExcptypemanFilter stack-based overflow
• CVE-2025-50811 PoCCampcodes Cybercafe Management System adminprofile.php sql injection
• CVE-2025-50862 PoCsKEVDeserialization of Untrusted Data vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
• CVE-2025-50931 PoCResponsive Lightbox & Gallery < 2.5.2 - Contributor+ Stored XSS
• CVE-2025-50951 PoCBurk Technology ARC Solo Missing Authentication for Critical Function
• CVE-2025-50981 PoCKL-001-2025-003: Mobile Dynamix PrinterShare Mobile Print Gmail Oauth Token Disclosure
• CVE-2025-50991 PoCKL-001-2025-004: Mobile Dynamix PrinterShare Mobile Print Out-of-bounds Write
• CVE-2025-51001 PoCKL-001-2025-005: Mobile Dynamix PrinterShare Mobile Print Double-Free Memory Write
• CVE-2025-51011 PoCImproper Control of Generation of Code ('Code Injection') in GitLab
• CVE-2025-51051 PoCTOZED ZLT W51 Service Port 7777 heap inspection
• CVE-2025-51061 PoCFujian Kelixun Filename fax_view.php os command injection
• CVE-2025-51071 PoCFujian Kelixun xml_cdr_details.php sql injection
• CVE-2025-51081 PoCzongzhige ShopXO ZIP File Payment.php Upload unrestricted upload
• CVE-2025-51091 PoCFreeFloat FTP Server STATUS Command buffer overflow
• CVE-2025-51101 PoCFreeFloat FTP Server VERBOSE Command buffer overflow
• CVE-2025-51111 PoCFreeFloat FTP Server TYPE Command buffer overflow
• CVE-2025-51121 PoCFreeFloat FTP Server MGET Command buffer overflow
• CVE-2025-51141 PoCeasysoft zentaopms Editor index.php edit deserialization
• CVE-2025-51191 PoCEmlog Pro api_controller.php sql injection
• CVE-2025-51211 PoCMissing Authorization in GitLab
• CVE-2025-51241 PoCSony SNC-M1 Administrative Interface default credentials
• CVE-2025-51251 PoCCustom Post Carousels with Owl < 1.4.12 - Contributor+ Stored XSS
• CVE-2025-51261 PoCTeledyne FLIR AX8 settingsregional.php setDataTime command injection
• CVE-2025-51271 PoCTeledyne FLIR AX8 prod.php cross site scripting
• CVE-2025-51281 PoCScriptAndTools Real-Estate-website-in-PHP Admin Login Panel admin sql injection
• CVE-2025-51291 PoCSangfor 零信任访问控制系统 aTrust MSASN1.dll uncontrolled search path
• CVE-2025-51301 PoCTmall Demo uploadProductImage unrestricted upload
• CVE-2025-51311 PoCTmall Demo uploadCategoryImage unrestricted upload
• CVE-2025-51321 PoCTmall Demo logout cross-site request forgery
• CVE-2025-51331 PoCTmall Demo Search Box cross site scripting
• CVE-2025-51341 PoCTmall Demo Buy Item Page cross site scripting
• CVE-2025-51351 PoCTmall Demo Product Details Page admin cross site scripting
• CVE-2025-51361 PoCTmall Demo Payment Identifier pay random values
• CVE-2025-51371 PoCDedeCMS Incomplete Fix CVE-2018-9175 sys_verifies.php code injection
• CVE-2025-51381 PoCBitwarden PDF File cross site scripting
• CVE-2025-51391 PoCQualitor Office 365-type Connection testaConexaoOffice365.php command injection
• CVE-2025-51401 PoCSeeyon Zhiyuan OA Web Application System ThirdMenuController.class this.oursNetService.getData server-side request forgery
• CVE-2025-51451 PoCNetcore POWER13 Query String cgi-bin command injection
• CVE-2025-51461 PoCNetcore NBR200V2 HTTP Header routerd passwd_set command injection
• CVE-2025-51471 PoCNetcore NBR1005GPEV2/NBR200V2/B6V2 network_tools tools_ping command injection
• CVE-2025-51491 PoCWCMS Login getallcon getMemberByUid improper authentication
• CVE-2025-51501 PoCdocarray Web API torch_dataset.py __getitem__ prototype pollution
• CVE-2025-51511 PoCdefog-ai introspect analysis_tools.py execute_analysis_code_safely code injection
• CVE-2025-51521 PoCChanjet CRM newActivityedit.php sql injection
• CVE-2025-51531 PoCCMS Made Simple Design Manager Module cross site scripting
• CVE-2025-51543 PoCsPhonePe App SQLite Database databases cleartext storage in a file or on disk
• CVE-2025-51551 PoCqianfox FoxCMS Article.php batchCope sql injection
• CVE-2025-51561 PoCH3C GR-5400AX aspForm EditWlanMacList buffer overflow
• CVE-2025-51581 PoCH3C SecCenter SMP-E1114P02 downloadSoftware path traversal
• CVE-2025-51591 PoCH3C SecCenter SMP-E1114P02 download path traversal
• CVE-2025-51601 PoCH3C SecCenter SMP-E1114P02 download path traversal
• CVE-2025-51611 PoCH3C SecCenter SMP-E1114P02 download operationDailyOut path traversal
• CVE-2025-51621 PoCH3C SecCenter SMP-E1114P02 importFile unrestricted upload
• CVE-2025-51631 PoCyangshare 技术杨工 warehouseManager 仓库管理系统 access control
• CVE-2025-51641 PoCPerfreeBlog JWT JwtUtil hard-coded key
• CVE-2025-51652 PoCsOpen Asset Import Library Assimp MDCLoader.cpp ValidateSurfaceHeader out-of-bounds
• CVE-2025-51661 PoCOpen Asset Import Library Assimp MDC File Parser MDCLoader.cpp InternReadFile out-of-bounds
• CVE-2025-51671 PoCOpen Asset Import Library Assimp LWOLoader.h GetS0 out-of-bounds
• CVE-2025-51681 PoCOpen Asset Import Library Assimp MDLLoader.cpp ImportUVCoordinate_3DGS_MDL345 out-of-bounds
• CVE-2025-51691 PoCOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_3DGS_MDL345 out-of-bounds
• CVE-2025-51701 PoCllisoft MTA Maita Training System AdminShitiController.java AdminShitiListRequestVo sql injection
• CVE-2025-51711 PoCllisoft MTA Maita Training System OpenController.java this.fileService.download unrestricted upload
• CVE-2025-51741 PoCerdogant pypickle pypickle.py load deserialization
• CVE-2025-51751 PoCerdogant pypickle pypickle.py save improper authorization
• CVE-2025-51801 PoCWondershare Filmora Installer NFWCHK.exe uncontrolled search path
• CVE-2025-51811 PoCSummer Pearl Group Vacation Rental Management Platform updateListing cross site scripting
• CVE-2025-51861 PoCthinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery
• CVE-2025-51941 PoCWP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker
• CVE-2025-51961 PoCWing FTP Server Lua Admin Console unnecessary privileges
• CVE-2025-52002 PoCsOpen Asset Import Library Assimp MDLLoader.cpp InternReadFile_Quake1 out-of-bounds
• CVE-2025-52012 PoCsOpen Asset Import Library Assimp LWOLoader.cpp CountVertsAndFacesLWO2 out-of-bounds
• CVE-2025-52022 PoCsOpen Asset Import Library Assimp HL1MDLLoader.cpp validate_header out-of-bounds
• CVE-2025-52032 PoCsOpen Asset Import Library Assimp ParsingUtils.h SkipSpaces out-of-bounds
• CVE-2025-52042 PoCsOpen Asset Import Library Assimp MDLMaterialLoader.cpp ParseSkinLump_3DGS_MDL7 out-of-bounds
• CVE-2025-52051 PoC1000 Projects Daily College Class Work Report Book dcwr_entry.php sql injection
• CVE-2025-52061 PoCPixelimity Installation index.php sql injection
• CVE-2025-52071 PoCSourceCodester Client Database Management System superadmin_update_profile.php sql injection
• CVE-2025-52081 PoCSourceCodester Online Hospital Management System check_availability.php sql injection
• CVE-2025-52091 PoCIvory Search < 5.5.10 - Admin+ Stored XSS
• CVE-2025-52101 PoCPHPGurukul Employee Record Management System loginerms.php sql injection
• CVE-2025-52111 PoCPHPGurukul Employee Record Management System myprofile.php sql injection
• CVE-2025-52121 PoCPHPGurukul Employee Record Management System editempexp.php sql injection
• CVE-2025-52131 PoCprojectworlds Responsive E-Learning System delete_file.php sql injection
• CVE-2025-52141 PoCKashipara Responsive Online Learing Platform course_detail_user_new.php sql injection
• CVE-2025-52151 PoCD-Link DCS-5020L ptdc.cgi websReadEvent stack-based overflow
• CVE-2025-52161 PoCPHPGurukul Student Record System login.php sql injection
• CVE-2025-52171 PoCFreeFloat FTP Server RMDIR Command buffer overflow
• CVE-2025-52181 PoCFreeFloat FTP Server LITERAL Command buffer overflow
• CVE-2025-52191 PoCFreeFloat FTP Server ASCII Command buffer overflow
• CVE-2025-52203 PoCsFreeFloat FTP Server GET Command buffer overflow
• CVE-2025-52211 PoCFreeFloat FTP Server QUOTE Command buffer overflow
• CVE-2025-52241 PoCCampcodes Online Hospital Management System add-doctor.php sql injection
• CVE-2025-52251 PoCCampcodes Advanced Online Voting System index.php sql injection
• CVE-2025-52261 PoCPHPGurukul Small CRM change-password.php sql injection
• CVE-2025-52271 PoCPHPGurukul Small CRM manage-tickets.php sql injection
• CVE-2025-52281 PoCD-Link DI-8100 jhttpd login.cgi httpd_get_parm stack-based overflow
• CVE-2025-52291 PoCCampcodes Online Hospital Management System view-patient.php sql injection
• CVE-2025-52301 PoCPHPGurukul Online Nurse Hiring System bwdates-report-details.php sql injection
• CVE-2025-52311 PoCPHPGurukul Company Visitor Management System forgot-password.php sql injection
• CVE-2025-52321 PoCPHPGurukul Student Study Center Management System report.php sql injection
• CVE-2025-52441 PoCGNU Binutils ld elflink.c elf_gc_sweep memory corruption
• CVE-2025-52451 PoCGNU Binutils objdump debug.c debug_type_samep memory corruption
• CVE-2025-52461 PoCCampcodes Online Hospital Management System query-details.php sql injection
• CVE-2025-52471 PoCGowabby HFish url.go LoadUrl improper authentication
• CVE-2025-52481 PoCPHPGurukul Company Visitor Management System bwdates-reports-details.php sql injection
• CVE-2025-52491 PoCPHPGurukul News Portal Project add-category.php sql injection
• CVE-2025-52501 PoCPHPGurukul News Portal Project edit-category.php sql injection
• CVE-2025-52511 PoCPHPGurukul News Portal Project edit-subcategory.php sql injection
• CVE-2025-52522 PoCsPHPGurukul News Portal Project edit-subadmin.php sql injection
• CVE-2025-52781 PoCCoreutils: heap buffer under-read in gnu coreutils sort via key specification
• CVE-2025-52875 PoCsLikes and Dislikes Plugin <= 1.0.0 - Unauthenticated SQL Injection
• CVE-2025-52881 PoCREST API | Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated…
• CVE-2025-52951 PoCFreeFloat FTP Server PORT Command buffer overflow
• CVE-2025-52971 PoCSourceCodester Computer Store System main.c Add stack-based overflow
• CVE-2025-52982 PoCsCampcodes Online Hospital Management System betweendates-detailsreports.php sql injection
• CVE-2025-52991 PoCSourceCodester Client Database Management System user_order_customer_update.php unrestricted upload
• CVE-2025-53011 PoCReflected Cross-Site Scripting in ONLYOFFICE Docs (DocumentServer)
• CVE-2025-53041 PoCPT Project Notebooks 1.0.0 - 1.1.3 - Missing Authorization to Unauthenticated Privilege Escalation via wpnb_pto_new_users_add Function
• CVE-2025-53051 PoCPassword Reset with Code < 0.0.17 - Insecure Password Reset Code Creation
• CVE-2025-53061 PoCCommand Injection in Netflow path
• CVE-2025-53151 PoCMissing Authorization in GitLab
• CVE-2025-53201 PoCgradio-app gradio CORS is_valid_origin privilege escalation
• CVE-2025-53211 PoCaimhubio aim run_view Object query.py RestrictedPythonQuery privilege escalation
• CVE-2025-53231 PoCfossasia open-event-server Mail Verification mail.py send_email_change_user_email reliance on obfuscation or encryption of…
• CVE-2025-53241 PoCTechPowerUp GPU-Z 0x8000645C IOCTL GPU-Z.sys sub_140001880 memory leak
• CVE-2025-53271 PoCchshcms mccms Gf.php index server-side request forgery
• CVE-2025-53281 PoCchshcms mccms Backups.php restore_del path traversal
• CVE-2025-53301 PoCFreeFloat FTP Server RETR Command buffer overflow
• CVE-2025-53311 PoCPCMan FTP Server NLST Command buffer overflow
• CVE-2025-53321 PoC1000 Projects Online Notice Board index.php sql injection
• CVE-2025-53501 PoCSSRF and Reflected XSS Vulnerability in Deprecated Try-It Feature of Multiple WSO2 Products
• CVE-2025-53561 PoCFreeFloat FTP Server BYE Command buffer overflow
• CVE-2025-53571 PoCFreeFloat FTP Server PWD Command buffer overflow
• CVE-2025-53581 PoCPHPGurukul/Campcodes Cyber Cafe Management System bwdates-reports-details.php sql injection
• CVE-2025-53591 PoCCampcodes Online Hospital Management System appointment-history.php sql injection
• CVE-2025-53601 PoCCampcodes Online Hospital Management System book-appointment.php sql injection
• CVE-2025-53611 PoCCampcodes Online Hospital Management System contact.php sql injection
• CVE-2025-53621 PoCCampcodes Online Hospital Management System doctor-specilization.php sql injection
• CVE-2025-53631 PoCCampcodes Online Hospital Management System index.php sql injection
• CVE-2025-53641 PoCCampcodes Online Hospital Management System add-patient.php sql injection
• CVE-2025-53651 PoCCampcodes Online Hospital Management System patient-search.php sql injection
• CVE-2025-53671 PoCPHPGurukul Online Shopping Portal Project category.php sql injection
• CVE-2025-53681 PoCPHPGurukul Daily Expense Tracker System expense-yearwise-reports-detailed.php sql injection
• CVE-2025-53691 PoCSourceCodester PHP Display Username After Login login.php sql injection
• CVE-2025-53701 PoCPHPGurukul News Portal forgot-password.php sql injection
• CVE-2025-53711 PoCSourceCodester Health Center Patient Record Management System admin.php sql injection
• CVE-2025-53731 PoCPHPGurukul Online Birth Certificate System users-applications.php sql injection
• CVE-2025-53741 PoCPHPGurukul Online Birth Certificate System all-applications.php sql injection
• CVE-2025-53751 PoCPHPGurukul HPGurukul Online Birth Certificate System registered-users.php sql injection
• CVE-2025-53761 PoCSourceCodester Health Center Patient Record Management System patient.php sql injection
• CVE-2025-53801 PoCashinigit 天青一白 XueShengZhuSu 学生住宿管理系统 Image File Upload upload path traversal
• CVE-2025-53811 PoCYifang CMS Admin Panel downloadFile path traversal
• CVE-2025-53831 PoCYifang CMS Article Management Module cross site scripting
• CVE-2025-53944 PoCsAlone – Charity Multipurpose Non-profit WordPress Theme <= 7.8.3 - Missing Authorization to Unauthenticated Arbitrary File Upload via…
• CVE-2025-54001 PoCchaitak-gorai Blogbook GET Parameter user.php sql injection
• CVE-2025-54011 PoCchaitak-gorai Blogbook GET Parameter post.php sql injection
• CVE-2025-54021 PoCchaitak-gorai Blogbook GET Parameter edit_post.php sql injection
• CVE-2025-54031 PoCchaitak-gorai Blogbook GET Parameter view_all_posts.php sql injection
• CVE-2025-54041 PoCchaitak-gorai Blogbook GET Parameter search.php denial of service
• CVE-2025-54051 PoCchaitak-gorai Blogbook post.php cross site scripting
• CVE-2025-54061 PoCchaitak-gorai Blogbook posts.php unrestricted upload
• CVE-2025-54071 PoCchaitak-gorai Blogbook register_script.php cross site scripting
• CVE-2025-54081 PoCWAVLINK WL-WN576K1 HTTP POST Request login.cgi sys_login buffer overflow
• CVE-2025-54091 PoCMist Community Edition API Token views.py create_token access control
• CVE-2025-54101 PoCMist Community Edition middleware.py session_start_response cross-site request forgery
• CVE-2025-54111 PoCMist Community Edition views.py tag_resources cross site scripting
• CVE-2025-54121 PoCMist Community Edition Authentication Endpoint views.py login cross site scripting
• CVE-2025-54194 PoCsKEVOut of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap…
• CVE-2025-54201 PoCjuzaweb CMS Profile Page upload cross site scripting
• CVE-2025-54211 PoCjuzaweb CMS Plugin Editor Page editor access control
• CVE-2025-54221 PoCjuzaweb CMS Email Logs Page email access control
• CVE-2025-54231 PoCjuzaweb CMS General Setting Page general access control
• CVE-2025-54241 PoCjuzaweb CMS Media Page media access control
• CVE-2025-54251 PoCjuzaweb CMS Theme Editor Page default access control
• CVE-2025-54261 PoCjuzaweb CMS Menu Page menus access control
• CVE-2025-54271 PoCjuzaweb CMS Permalinks Page permalinks access control
• CVE-2025-54281 PoCjuzaweb CMS Error Logs Page log-viewer access control
• CVE-2025-54291 PoCjuzaweb CMS Plugins Page install access control
• CVE-2025-54301 PoCAssamLook CMS product.php sql injection
• CVE-2025-54311 PoCAssamLook CMS department-profile.php sql injection
• CVE-2025-54321 PoCAssamLook CMS view_tender.php sql injection
• CVE-2025-54331 PoCFengoffice Feng Office index.php sql injection
• CVE-2025-54341 PoCAem Solutions CMS page.php sql injection
• CVE-2025-54351 PoCMarwal Infotech CMS page.php sql injection
• CVE-2025-54361 PoCMultilaser Sirius RE016 cstecgi.cgi information disclosure
• CVE-2025-54371 PoCMultilaser Sirius RE016 Password Change cstecgi.cgi improper authentication
• CVE-2025-54381 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection
• CVE-2025-54391 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection
• CVE-2025-54401 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection
• CVE-2025-54411 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection
• CVE-2025-54421 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injection
• CVE-2025-54431 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection
• CVE-2025-54441 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injection
• CVE-2025-54451 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkFWByBBS os command injection
• CVE-2025-54461 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection
• CVE-2025-54471 PoCLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection
• CVE-2025-54931 PoCBaison Channel Middleware Product ToJsonByControlName sql injection
• CVE-2025-54951 PoCNetgear WNR614 URL improper authentication
• CVE-2025-54971 PoCslackero phpwcms Feedimport processing.inc.php deserialization
• CVE-2025-54981 PoCslackero phpwcms Custom Source Tab cnt21.readform.inc.php is_file deserialization
• CVE-2025-54991 PoCslackero phpwcms image_resized.php getimagesize deserialization
• CVE-2025-55001 PoCZhenShi Mibro Fit App com.xiaoxun.xunoversea.mibrofit AndroidManifest.xml improper export of android application components
• CVE-2025-55011 PoCOpen5GS NGAP PathSwitchRequest Message ngap-handler.c ngap_handle_path_switch_request_transfer assertion
• CVE-2025-55021 PoCTOTOLINK X15 formMapReboot command injection
• CVE-2025-55031 PoCTOTOLINK X15 formMapReboot stack-based overflow
• CVE-2025-55041 PoCTOTOLINK X2000R formWsc command injection
• CVE-2025-55051 PoCTOTOLINK A3002RU Virtual Server Page formPortFw cross site scripting
• CVE-2025-55061 PoCTOTOLINK A3002RU NAT Mapping Page cross site scripting
• CVE-2025-55071 PoCTOTOLINK A3002RU MAC Filtering Page cross site scripting
• CVE-2025-55081 PoCTOTOLINK A3002RU IP Port Filtering Page cross site scripting
• CVE-2025-55091 PoCquequnlong shiyi-blog upload path traversal
• CVE-2025-55101 PoCquequnlong shiyi-blog optimize server-side request forgery
• CVE-2025-55111 PoCquequnlong shiyi-blog photos improper authorization
• CVE-2025-55121 PoCquequnlong shiyi-blog Administrator Backend verifyPassword improper authentication
• CVE-2025-55131 PoCquequnlong shiyi-blog add cross site scripting
• CVE-2025-55151 PoCTOTOLINK X2000R formMapDel command injection
• CVE-2025-55161 PoCTOTOLINK X2000R URL Filtering Page formFilter cross site scripting
• CVE-2025-55201 PoCOpen5GS AMF/MME emm_state_authentication assertion
• CVE-2025-55211 PoCWuKongOpenSource WukongCRM updataPassword cross-site request forgery
• CVE-2025-55221 PoCjack0240 魏 bskms 蓝天幼儿园管理系统 User Creation addUser improper authorization
• CVE-2025-55231 PoCenilu web-flash File Upload upload fileService.upload cross site scripting
• CVE-2025-55252 PoCsJrohy trojan linux.go LogChan os command injection
• CVE-2025-55261 PoCBuddyPress Docs < 2.2.5 - Subscriber+ Arbitrary Document Read/Update
• CVE-2025-55271 PoCTenda RX3 SetStaticRouteCfg save_staticroute_data stack-based overflow
• CVE-2025-55421 PoCTOTOLINK X2000R Virtual Server Page formPortFw cross site scripting
• CVE-2025-55431 PoCTOTOLINK X2000R Parent Controls Page cross site scripting
• CVE-2025-55441 PoCaaluoxiang oa_system UserpanelController.java image path traversal
• CVE-2025-55451 PoCaaluoxiang oa_system ProcedureController.java image path traversal
• CVE-2025-55461 PoCPHPGurukul Daily Expense Tracker System expense-reports-detailed.php sql injection
• CVE-2025-55471 PoCFreeFloat FTP Server CDUP Command buffer overflow
• CVE-2025-554826 PoCsFreeFloat FTP Server NOOP Command buffer overflow
• CVE-2025-55491 PoCFreeFloat FTP Server PASV Command buffer overflow
• CVE-2025-55501 PoCFreeFloat FTP Server PBSZ Command buffer overflow
• CVE-2025-55511 PoCFreeFloat FTP Server SYSTEM Command buffer overflow
• CVE-2025-55521 PoCChestnutCMS API Endpoint exec deserialization
• CVE-2025-55532 PoCsPHPGurukul Rail Pass Management System download-pass.php sql injection
• CVE-2025-55541 PoCPHPGurukul Rail Pass Management System pass-bwdates-reports-details.php sql injection
• CVE-2025-55551 PoCNixdorf Wincor PORT IO Driver IOCTL wnport.sys sub_11100 stack-based overflow
• CVE-2025-55561 PoCPHPGurukul Teacher Subject Allocation Management System edit-teacher-info.php sql injection
• CVE-2025-55571 PoCPHPGurukul Teacher Subject Allocation Management System edit-course.php sql injection
• CVE-2025-55581 PoCPHPGurukul Teacher Subject Allocation Management System changeimage.php sql injection
• CVE-2025-55601 PoCPHPGurukul Curfew e-Pass Management System index.php sql injection
• CVE-2025-55611 PoCPHPGurukul Curfew e-Pass Management System view-pass-detail.php sql injection
• CVE-2025-55621 PoCPHPGurukul Curfew e-Pass Management System edit-category-detail.php sql injection
• CVE-2025-55661 PoCPHPGurukul Notice Board System search-notice.php sql injection
• CVE-2025-55691 PoCIdeaCMS getList.html Goods sql injection
• CVE-2025-55711 PoCD-Link DCS-932L setSystemAdmin os command injection
• CVE-2025-55721 PoCD-Link DCS-932L setSystemEmail stack-based overflow
• CVE-2025-55731 PoCD-Link DCS-932L setSystemWizard setSystemControl os command injection
• CVE-2025-55741 PoCPHPGurukul Dairy Farm Shop Management System add-company.php sql injection
• CVE-2025-55751 PoCPHPGurukul Dairy Farm Shop Management System add-product.php sql injection
• CVE-2025-55761 PoCPHPGurukul Dairy Farm Shop Management System bwdate-report-details.php sql injection
• CVE-2025-55771 PoCPHPGurukul Dairy Farm Shop Management System profile.php sql injection
• CVE-2025-55781 PoCPHPGurukul Dairy Farm Shop Management System sales-report-details.php sql injection
• CVE-2025-55791 PoCPHPGurukul Dairy Farm Shop Management System search-product.php sql injection
• CVE-2025-55801 PoCCodeAstro Real Estate Management System login.php sql injection
• CVE-2025-55811 PoCCodeAstro Real Estate Management System index.php sql injection
• CVE-2025-55821 PoCCodeAstro Real Estate Management System profile.php sql injection
• CVE-2025-55831 PoCCodeAstro Real Estate Management System register.php sql injection
• CVE-2025-55841 PoCPHPGurukul Hospital Management System POST Parameter edit-patient.php cross site scripting
• CVE-2025-55921 PoCFreeFloat FTP Server PASSIVE Command buffer overflow
• CVE-2025-55931 PoCFreeFloat FTP Server HOST Command buffer overflow
• CVE-2025-55941 PoCFreeFloat FTP Server SET Command buffer overflow
• CVE-2025-55951 PoCFreeFloat FTP Server PROGRESS Command buffer overflow
• CVE-2025-55961 PoCFreeFloat FTP Server REGET Command buffer overflow
• CVE-2025-55991 PoCPHPGurukul Student Result Management System editmyexp.php sql injection
• CVE-2025-56001 PoCTOTOLINK EX1200T cstecgi.cgi setLanguageCfg stack-based overflow
• CVE-2025-56021 PoCCampcodes Hospital Management System registration.php sql injection
• CVE-2025-56031 PoCCampcodes Hospital Management System registration.php sql injection
• CVE-2025-56041 PoCCampcodes Hospital Management System user-login.php sql injection
• CVE-2025-56051 PoCAuthentication Bypass via URI Manipulation in Multiple WSO2 Products' Management Console Leading to Partial Information Disclosure
• CVE-2025-56061 PoCTenda AC18 SetIPTVCfg formSetIptv command injection
• CVE-2025-56071 PoCTenda AC18 setPptpUserList formSetPPTPUserList buffer overflow
• CVE-2025-56081 PoCTenda AC18 SetSysAutoRebbotCfg formsetreboottimer buffer overflow
• CVE-2025-56091 PoCTenda AC18 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-56101 PoCCodeAstro Real Estate Management System submitpropertydelete.php sql injection
• CVE-2025-56111 PoCCodeAstro Real Estate Management System submitpropertyupdate.php sql injection
• CVE-2025-56121 PoCPHPGurukul Online Fire Reporting System reporting.php sql injection
• CVE-2025-56131 PoCPHPGurukul Online Fire Reporting System request-details.php sql injection
• CVE-2025-56141 PoCPHPGurukul Online Fire Reporting System search-report-result.php sql injection
• CVE-2025-56151 PoCPHPGurukul Online Fire Reporting System details.php sql injection
• CVE-2025-56161 PoCPHPGurukul Online Fire Reporting System profile.php sql injection
• CVE-2025-56171 PoCPHPGurukul Online Fire Reporting System manage-teams.php sql injection
• CVE-2025-56181 PoCPHPGurukul Online Fire Reporting System edit-team.php sql injection
• CVE-2025-56191 PoCTenda CH22 addUserName formaddUserName stack-based overflow
• CVE-2025-56201 PoCD-Link DIR-816 setipsec_config os command injection
• CVE-2025-56211 PoCD-Link DIR-816 qosClassifier os command injection
• CVE-2025-56221 PoCD-Link DIR-816 wirelessApcli_5g stack-based overflow
• CVE-2025-56231 PoCD-Link DIR-816 qosClassifier stack-based overflow
• CVE-2025-56241 PoCD-Link DIR-816 QoSPortSetup stack-based overflow
• CVE-2025-56251 PoCCampcodes Online Teacher Record Management System search-teacher.php sql injection
• CVE-2025-56261 PoCCampcodes Online Teacher Record Management System edit-subjects-detail.php sql injection
• CVE-2025-56271 PoCcode-projects Patient Record Management System sputum_form.php sql injection
• CVE-2025-56281 PoCSourceCodester Food Menu Manager Add Menu index.php cross site scripting
• CVE-2025-56291 PoCTenda AC10 HTTP SetPptpServerCfg formSetPPTPServer buffer overflow
• CVE-2025-56301 PoCD-Link DIR-816 form2lansetup.cgi stack-based overflow
• CVE-2025-56311 PoCcode-projects/anirbandutta9 Content Management System/News-Buzz publicposts.php sql injection
• CVE-2025-56321 PoCcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection
• CVE-2025-56331 PoCcode-projects/anirbandutta9 Content Management System/News-Buzz users.php sql injection
• CVE-2025-56341 PoCPCMan FTP Server NOOP Command buffer overflow
• CVE-2025-56351 PoCPCMan FTP Server PLS Command buffer overflow
• CVE-2025-56361 PoCPCMan FTP Server SET Command buffer overflow
• CVE-2025-56371 PoCPCMan FTP Server SYSTEM Command buffer overflow
• CVE-2025-56381 PoCPHPGurukul Notice Board System admin-profile.php sql injection
• CVE-2025-56391 PoCPHPGurukul Notice Board System forgot-password.php sql injection
• CVE-2025-56403 PoCsPX4-Autopilot TRAJECTORY_REPRESENTATION_WAYPOINTS Message mavlink_receiver.cpp stack-based overflow
• CVE-2025-56412 PoCsRadare2 radiff2 cons.c r_cons_is_breaked memory corruption
• CVE-2025-56422 PoCsRadare2 radiff2 pal.c r_cons_pal_init memory corruption
• CVE-2025-56432 PoCsRadare2 radiff2 cons.c cons_stack_load memory corruption
• CVE-2025-56442 PoCsRadare2 radiff2 cons.c r_cons_flush use after free
• CVE-2025-56452 PoCsRadare2 radiff2 pal.c r_cons_pal_init memory corruption
• CVE-2025-56462 PoCsRadare2 radiff2 pal.c r_cons_rainbow_free memory corruption
• CVE-2025-56472 PoCsRadare2 radiff2 cons.c r_cons_context_break_pop memory corruption
• CVE-2025-56482 PoCsRadare2 radiff2 pal.c r_cons_pal_init memory corruption
• CVE-2025-56491 PoCSourceCodester Student Result Management System Register Interface new_user access control
• CVE-2025-56501 PoC1000projects Online Notice Board register.php sql injection
• CVE-2025-56511 PoCcode-projects Traffic Offense Reporting System saveuser.php cross site scripting
• CVE-2025-56521 PoCPHPGurukul Complaint Management System between-date-complaintreport.php sql injection
• CVE-2025-56531 PoCPHPGurukul Complaint Management System between-date-userreport.php sql injection
• CVE-2025-56541 PoCPHPGurukul Complaint Management System edit-state.php sql injection
• CVE-2025-56551 PoCPHPGurukul Complaint Management System edit-subcategory.php sql injection
• CVE-2025-56561 PoCPHPGurukul Complaint Management System edit-category.php sql injection
• CVE-2025-56571 PoCPHPGurukul Complaint Management System manage-users.php sql injection
• CVE-2025-56581 PoCPHPGurukul Complaint Management System updatecomplaint.php sql injection
• CVE-2025-56591 PoCPHPGurukul Complaint Management System profile.php sql injection
• CVE-2025-56601 PoCPHPGurukul Complaint Management System register-complaint.php sql injection
• CVE-2025-56611 PoCcode-projects Traffic Offense Reporting System Setting save-settings.php cross site scripting
• CVE-2025-56631 PoCPHPGurukul Auto Taxi Stand Management System search-autoortaxi.php sql injection
• CVE-2025-56641 PoCFreeFloat FTP Server RESTART Command buffer overflow
• CVE-2025-56651 PoCFreeFloat FTP Server XCWD Command buffer overflow
• CVE-2025-56661 PoCFreeFloat FTP Server XMKD Command buffer overflow
• CVE-2025-56672 PoCsFreeFloat FTP Server REIN Command buffer overflow
• CVE-2025-56681 PoCPHPGurukul Medical Card Generation System readenq.php sql injection
• CVE-2025-56691 PoCPHPGurukul Medical Card Generation System unreadenq.php sql injection
• CVE-2025-56701 PoCPHPGurukul Medical Card Generation System manage-card.php sql injection
• CVE-2025-56711 PoCTOTOLINK N302R Plus HTTP POST Request formPortFw buffer overflow
• CVE-2025-56721 PoCTOTOLINK N302R Plus HTTP POST Request formFilter buffer overflow
• CVE-2025-56741 PoCcode-projects Patient Record Management System urinalysis_form.php sql injection
• CVE-2025-56751 PoCCampcodes Online Teacher Record Management System bwdates-reports-details.php sql injection
• CVE-2025-56761 PoCCampcodes Online Recruitment Management System ajax.php sql injection
• CVE-2025-56771 PoCCampcodes Online Recruitment Management System ajax.php sql injection
• CVE-2025-56791 PoCShenzhen Dashi Tongzhou Information Technology AgileBPM SysToolsController.java parseStrByFreeMarker deserialization
• CVE-2025-56801 PoCShenzhen Dashi Tongzhou Information Technology AgileBPM Groovy Script SysScriptController.java executeScript deserialization
• CVE-2025-56851 PoCTenda CH22 Natlimit formNatlimit stack-based overflow
• CVE-2025-56881 PoCOut of Bounds Write in FreeRTOS-Plus-TCP
• CVE-2025-56931 PoCPHPGurukul Human Metapneumovirus Testing Management System bwdates-report-result.php sql injection
• CVE-2025-56941 PoCPHPGurukul Human Metapneumovirus Testing Management System search-report-result.php sql injection
• CVE-2025-56951 PoCTeledyne FLIR AX8 Backend subscriptions.php subscribe_to_alarm command injection
• CVE-2025-56961 PoCBrilliance Golden Link Secondary System rentChangeCheckInfoPage.htm sql injection
• CVE-2025-56971 PoCBrilliance Golden Link Secondary System tcCustDeferPosiQuery.htm sql injection
• CVE-2025-56981 PoCBrilliance Golden Link Secondary System logSelect.htm sql injection
• CVE-2025-57013 PoCsHyperComments <= 1.2.2 - Unauthenticated (Subscriber+) Arbitrary Options Update
• CVE-2025-57041 PoCcode-projects Real Estate Property Management System User.php sql injection
• CVE-2025-57051 PoCcode-projects Real Estate Property Management System Property.php sql injection
• CVE-2025-57061 PoCPHPGurukul Human Metapneumovirus Testing Management System new-user-testing.php sql injection
• CVE-2025-57071 PoCPHPGurukul Human Metapneumovirus Testing Management System registered-user-testing.php sql injection
• CVE-2025-57081 PoCcode-projects Real Estate Property Management System NewsReport.php sql injection
• CVE-2025-57091 PoCcode-projects Real Estate Property Management System InsertCategory.php sql injection
• CVE-2025-57101 PoCcode-projects Real Estate Property Management System InsertState.php sql injection
• CVE-2025-57111 PoCcode-projects Real Estate Property Management System InsertCity.php sql injection
• CVE-2025-57121 PoCSourceCodester Open Source Clinic Management System appointment.php sql injection
• CVE-2025-57131 PoCSoluçõesCoop iSoluçõesWEB Flow fluxos-dashboard cross site scripting
• CVE-2025-57141 PoCSoluçõesCoop iSoluçõesWEB Profile Information Update up.upload.php path traversal
• CVE-2025-57151 PoCSignal App Biometric Authentication missing critical step in authentication
• CVE-2025-57161 PoCSourceCodester Open Source Clinic Management System login.php sql injection
• CVE-2025-57211 PoCSourceCodester Student Result Management System Profile Setting Page update_profile cross site scripting
• CVE-2025-57221 PoCSourceCodester Student Result Management System Add Academic Term terms cross site scripting
• CVE-2025-57231 PoCSourceCodester Student Result Management System Classes Page classes cross site scripting
• CVE-2025-57241 PoCSourceCodester Student Result Management System Subjects Page subjects cross site scripting
• CVE-2025-57251 PoCSourceCodester Student Result Management System Grading System Page grading-system cross site scripting
• CVE-2025-57261 PoCSourceCodester Student Result Management System Division System Page division-system cross site scripting
• CVE-2025-57271 PoCSourceCodester Student Result Management System Announcement Page announcement cross site scripting
• CVE-2025-57281 PoCSourceCodester Open Source Clinic Management System manage_website.php unrestricted upload
• CVE-2025-57291 PoCcode-projects Health Center Patient Record Management System birthing_record.php sql injection
• CVE-2025-57301 PoCEasy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS
• CVE-2025-57321 PoCcode-projects Traffic Offense Reporting System cross-site request forgery
• CVE-2025-57341 PoCTOTOLINK X15 HTTP POST Request formWlanRedirect buffer overflow
• CVE-2025-57351 PoCTOTOLINK X15 HTTP POST Request formSetLg buffer overflow
• CVE-2025-57361 PoCTOTOLINK X15 HTTP POST Request formNtp buffer overflow
• CVE-2025-57371 PoCTOTOLINK X15 HTTP POST Request formDosCfg buffer overflow
• CVE-2025-57381 PoCTOTOLINK X15 HTTP POST Request formStats buffer overflow
• CVE-2025-57391 PoCTOTOLINK X15 HTTP POST Request formSaveConfig buffer overflow
• CVE-2025-57552 PoCsSourceCodester Open Source Clinic Management System email_config.php sql injection
• CVE-2025-57561 PoCcode-projects Real Estate Property Management System EditCity.php sql injection
• CVE-2025-57571 PoCcode-projects Traffic Offense Reporting System save-reported.php cross site scripting
• CVE-2025-57581 PoCSourceCodester Open Source Clinic Management System doctor.php sql injection
• CVE-2025-57591 PoCPHPGurukul Local Services Search Engine Management System edit-person-detail.php sql injection
• CVE-2025-57611 PoCPHPGurukul BP Monitoring Management System edit-family-member.php sql injection
• CVE-2025-57621 PoCcode-projects Patient Record Management System view_hematology.php sql injection
• CVE-2025-57632 PoCsTenda CP3 apollo sub_F3C8C command injection
• CVE-2025-57641 PoCcode-projects Laundry System insert_laundry.php cross site scripting
• CVE-2025-57651 PoCcode-projects Laundry System edit_laundry.php cross site scripting
• CVE-2025-57661 PoCcode-projects Laundry System cross-site request forgery
• CVE-2025-577728 PoCsKEVNetScaler ADC and NetScaler Gateway - Insufficient input validation leading to memory overread
• CVE-2025-57781 PoC1000 Projects ABC Courier Management System admin sql injection
• CVE-2025-57791 PoCcode-projects Patient Record Management System birthing.php sql injection
• CVE-2025-57801 PoCcode-projects Patient Record Management System view_dental.php sql injection
• CVE-2025-57812 PoCsInformation Exposure Vulnerability in Hitachi Configuration Manager, Hitachi Ops Center API Configuration Manager
• CVE-2025-57821 PoCPHPGurukul Employee Record Management System resetpassword.php sql injection
• CVE-2025-57831 PoCPHPGurukul Employee Record Management System editmyexp.php sql injection
• CVE-2025-57841 PoCPHPGurukul Employee Record Management System myexp.php sql injection
• CVE-2025-57851 PoCTOTOLINK X15 HTTP POST Request formWirelessTbl buffer overflow
• CVE-2025-57861 PoCTOTOLINK X15 HTTP POST Request formDMZ buffer overflow
• CVE-2025-57871 PoCTOTOLINK X15 HTTP POST Request formWsc buffer overflow
• CVE-2025-57881 PoCTOTOLINK X15 HTTP POST Request formReflashClientTbl buffer overflow
• CVE-2025-57891 PoCTOTOLINK X15 HTTP POST Request formPortFw buffer overflow
• CVE-2025-57901 PoCTOTOLINK X15 HTTP POST Request formIpQoS buffer overflow
• CVE-2025-57921 PoCTOTOLINK EX1200T HTTP POST Request formWlanRedirect buffer overflow
• CVE-2025-57931 PoCTOTOLINK EX1200T HTTP POST Request formPortFw buffer overflow
• CVE-2025-57941 PoCTenda AC5 setPptpUserList formSetPPTPUserList buffer overflow
• CVE-2025-57951 PoCTenda AC5 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-57961 PoCcode-projects Laundry System edit_type.php cross site scripting
• CVE-2025-57971 PoCcode-projects Laundry System insert_type.php cross site scripting
• CVE-2025-57981 PoCTenda AC8 SetSysTimeCfg fromSetSysTime stack-based overflow
• CVE-2025-57991 PoCTenda AC8 WifiExtraSet fromSetWirelessRepeat stack-based overflow
• CVE-2025-58191 PoCIncorrect Permission Assignment for Critical Resource in GitLab
• CVE-2025-58361 PoCTenda AC9 POST Request SetIPTVCfg formSetIptv command injection
• CVE-2025-58371 PoCPHPGurukul Employee Record Management System allemployees.php sql injection
• CVE-2025-58381 PoCPHPGurukul Employee Record Management System adminprofile.php sql injection
• CVE-2025-58391 PoCTenda AC9 POST Request AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-58402 PoCsSourceCodester Client Database Management System user_update_customer_order.php unrestricted upload
• CVE-2025-58471 PoCTenda AC9 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
• CVE-2025-58481 PoCTenda AC15 HTTP POST Request setPptpUserList formSetPPTPUserList buffer overflow
• CVE-2025-58491 PoCTenda AC15 HTTP POST Request SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
• CVE-2025-58501 PoCTenda AC15 HTTP POST Request SetLEDCf formsetschedled buffer overflow
• CVE-2025-58511 PoCTenda AC15 HTTP POST Request AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-58521 PoCTenda AC6 setPptpUserList formSetPPTPUserList buffer overflow
• CVE-2025-58531 PoCTenda AC6 SetRemoteWebCfg formSetSafeWanWebMan stack-based overflow
• CVE-2025-58541 PoCTenda AC6 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-58551 PoCTenda AC6 SetRebootTimer formSetRebootTimer stack-based overflow
• CVE-2025-58561 PoCPHPGurukul BP Monitoring Management System registration.php sql injection
• CVE-2025-58571 PoCcode-projects Patient Record Management System urinalysis_record.php sql injection
• CVE-2025-58581 PoCPHPGurukul Nipah Virus Testing Management System patient-report.php sql injection
• CVE-2025-58591 PoCPHPGurukul Nipah Virus Testing Management System test-details.php sql injection
• CVE-2025-58601 PoCPHPGurukul Maid Hiring Management System search-booking-request.php sql injection
• CVE-2025-58611 PoCTenda AC7 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-58621 PoCTenda AC7 setPptpUserList formSetPPTPUserList buffer overflow
• CVE-2025-58631 PoCTenda AC5 SetRebootTimer formSetRebootTimer stack-based overflow
• CVE-2025-58641 PoCTenda TDSEE App Password Reset Confirmation Code ConfirmSmsCode excessive authentication
• CVE-2025-58701 PoCTRENDnet TV-IP121W Web Interface setup.cgi improper authentication
• CVE-2025-58711 PoCPapendorf SOL Connect Center Web Interface missing authentication
• CVE-2025-58721 PoCeGauge EG3000 Energy Monitor Setting missing authentication
• CVE-2025-58731 PoCeCharge Hardy Barth Salia PLCC Web UI firmware.php unrestricted upload
• CVE-2025-58741 PoCRedash getattr python.py run_query sandbox
• CVE-2025-58751 PoCTP-LINK Technologies TL-IPC544EP-W4 main sub_69064 buffer overflow
• CVE-2025-58761 PoCLucky LM-520-SC/LM-520-FSC/LM-520-FSC-SAM missing authentication
• CVE-2025-58771 PoCFengoffice Feng Office Document Upload ApplicationDataObject.class.php xml external entity reference
• CVE-2025-58781 PoCESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element
• CVE-2025-58791 PoCWuKongOpenSource WukongCRM File Upload AdminSysConfigController.java cross site scripting
• CVE-2025-58802 PoCsWhistle get-temp-file path traversal
• CVE-2025-58811 PoCcode-projects Chat System confirm_password.php sql injection
• CVE-2025-58841 PoCKonica Minolta bizhub Display MFP Information List cross site scripting
• CVE-2025-58851 PoCKonica Minolta bizhub cross-site request forgery
• CVE-2025-58861 PoCEmlog article.php cross site scripting
• CVE-2025-58871 PoCjsnjfz WebStack-Guns File Upload UserMgrController.java cross site scripting
• CVE-2025-58882 PoCsjsnjfz WebStack-Guns cross-site request forgery
• CVE-2025-58891 PoCjuliangruber brace-expansion index.js expand redos
• CVE-2025-58912 PoCsUnitech pm2 Config.js redos
• CVE-2025-58922 PoCsRocketChat parseMessage.js parseMessage redos
• CVE-2025-58951 PoCMetabase dom.js parseDataUri redos
• CVE-2025-58981 PoCGNU PSPP pspp-convert.c parse_variables_option out-of-bounds write
• CVE-2025-58991 PoCGNU PSPP pspp-convert.c parse_variables_option free of memory not on the heap
• CVE-2025-59002 PoCsTenda AC9 cross-site request forgery
• CVE-2025-59011 PoCTOTOLINK T10 POST Request cstecgi.cgi UploadCustomModule buffer overflow
• CVE-2025-59021 PoCTOTOLINK T10 POST Request cstecgi.cgi setUpgradeFW buffer overflow
• CVE-2025-59031 PoCTOTOLINK T10 POST Request cstecgi.cgi setWiFiAclRules buffer overflow
• CVE-2025-59041 PoCTOTOLINK T10 POST Request cstecgi.cgi setWiFiMeshName buffer overflow
• CVE-2025-59051 PoCTOTOLINK T10 POST Request cstecgi.cgi setWiFiRepeaterCfg buffer overflow
• CVE-2025-59061 PoCcode-projects Laundry System data missing authentication
• CVE-2025-59071 PoCTOTOLINK EX1200T HTTP POST Request formFilter buffer overflow
• CVE-2025-59081 PoCTOTOLINK EX1200T HTTP POST Request formIpQoS buffer overflow
• CVE-2025-59091 PoCTOTOLINK EX1200T HTTP POST Request formReflashClientTbl buffer overflow
• CVE-2025-59101 PoCTOTOLINK EX1200T HTTP POST Request formWsc buffer overflow
• CVE-2025-59111 PoCTOTOLINK EX1200T HTTP POST Request formDMZ buffer overflow
• CVE-2025-59121 PoCD-Link DIR-632 HTTP POST Request do_file stack-based overflow
• CVE-2025-59131 PoCPHPGurukul Vehicle Record Management System search-vehicle.php sql injection
• CVE-2025-59141 PoCLibarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
• CVE-2025-59151 PoCLibarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
• CVE-2025-59201 PoCSharable Password Protected Posts < 1.1.1 - Unauthenticated Password Protect Post Access
• CVE-2025-59211 PoCSureForms < 1.7.2 - Reflected XSS
• CVE-2025-59341 PoCNetgear EX3700 mtd sub_41619C stack-based overflow
• CVE-2025-59351 PoCOpen5GS AMF/MME emm-sm.c common_register_state denial of service
• CVE-2025-59461 PoCRCE via the poller reload feature available only to user with high privilege
• CVE-2025-59472 PoCsService Finder Bookings <= 6.0 - Authentication Bypass via User Switch Cookie
• CVE-2025-59521 PoCZend.To NSSDropoff.php exec os command injection
• CVE-2025-59614 PoCsMigration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload
• CVE-2025-59641 PoCPath traversal in M-Files API
• CVE-2025-59691 PoCD-Link DIR-632 HTTP POST Request biurl_grou FUN_00425fd8 stack-based overflow
• CVE-2025-59701 PoCPHPGurukul Restaurant Table Booking System add-subadmin.php cross site scripting
• CVE-2025-59711 PoCcode-projects School Fees Payment System ajx.php sql injection
• CVE-2025-59721 PoCPHPGurukul Restaurant Table Booking System manage-subadmins.php cross site scripting
• CVE-2025-59731 PoCPHPGurukul Restaurant Table Booking System add-table.php cross site scripting
• CVE-2025-59741 PoCPHPGurukul Restaurant Table Booking System check-status.php cross site scripting
• CVE-2025-59751 PoCPHPGurukul Rail Pass Management System download-pass.php cross site scripting
• CVE-2025-59761 PoCPHPGurukul Rail Pass Management System add-pass.php cross site scripting
• CVE-2025-59771 PoCcode-projects School Fees Payment System datatable.php sql injection
• CVE-2025-59781 PoCTenda FH1202 VirtualSer fromVirtualSer stack-based overflow
• CVE-2025-59791 PoCcode-projects School Fees Payment System branch.php sql injection
• CVE-2025-59801 PoCcode-projects Restaurant Order System order.php sql injection
• CVE-2025-59831 PoCMeta Tag Manager < 3.3 - Contributor+ Open Redirect
• CVE-2025-59851 PoCcode-projects School Fees Payment System improper authentication
• CVE-2025-59981 PoCPPWP < 1.9.11 - Subscriber+ Access Bypass via REST API