CVE-2025-6000 to CVE-2025-6999

501 CVEs with public proof-of-concept exploits.

• CVE-2025-60021 PoCVirtueMart - Unrestricted File Upload
• CVE-2025-60051 PoCkiCode111 like-girl aboutPost.php sql injection
• CVE-2025-60061 PoCkiCode111 like-girl ImgUpdaPost.php sql injection
• CVE-2025-60071 PoCkiCode111 like-girl CopyadminPost.php sql injection
• CVE-2025-60081 PoCkiCode111 like-girl ImgAddPost.php sql injection
• CVE-2025-60091 PoCkiCode111 like-girl ipAddPost.php sql injection
• CVE-2025-60161 PoCAllocation of Resources Without Limits or Throttling in GitLab
• CVE-2025-601820 PoCsPam-config: lpe from unprivileged to allow_active in pam
• CVE-2025-601924 PoCsLibblockdev: lpe from allow_active to root in libblockdev via udisks
• CVE-2025-60271 PoCAce User Management <= 2.0.3 - Subscriber+ Authentication Bypass via Password Rest
• CVE-2025-60291 PoCKIA-branded Aftermarket Generic Smart Keyless Entry System Replay Attack
• CVE-2025-60301 PoCAutoeastern Smart Keyless Entry System Replay Attack
• CVE-2025-60583 PoCsWPBookit <= 1.0.4 - Unauthenticated Arbitrary File Upload
• CVE-2025-60822 PoCsBirth Chart Compatibility <= 2.0 - Unauthenticated Full Path Exposure
• CVE-2025-60851 PoCMake Connector <= 1.5.10 - Authenticated (Administrator+) Arbitrary File Upload
• CVE-2025-60901 PoCH3C GR-5400AX aspForm UpdateIpv6params buffer overflow
• CVE-2025-60911 PoCH3C GR-3000AX aspForm UpdateIpv6Params buffer overflow
• CVE-2025-60921 PoCcomfyanonymous comfyui Incomplete Fix CVE-2024-10099 image cross site scripting
• CVE-2025-60941 PoCqianfox FoxCMS Download.php batchCope sql injection
• CVE-2025-60951 PoCcodesiddhant Jasmin Ransomware checklogin.php sql injection
• CVE-2025-60961 PoCcodesiddhant Jasmin Ransomware dashboard.php sql injection
• CVE-2025-60971 PoCUTT 进取 750W Administrator Password setSysAdm formDefineManagement unverified password change
• CVE-2025-60981 PoCUTT 进取 750W API setSysAdm strcpy buffer overflow
• CVE-2025-60991 PoCszluyu99 gin-vue-blog PATCH Request manager.go improper authorization
• CVE-2025-61001 PoCrealguoshuai open-video-cms list sql injection
• CVE-2025-61011 PoCletta-ai letta interface.py function_message eval injection
• CVE-2025-61021 PoCWifi-soft UniBox Controller logout.php os command injection
• CVE-2025-61031 PoCWifi-soft UniBox Controller test_accesscodelogin.php os command injection
• CVE-2025-61041 PoCWifi-soft UniBox Controller pms_check.php os command injection
• CVE-2025-61051 PoCjflyfox jfinal_cms HOME.java cross-site request forgery
• CVE-2025-61061 PoCWuKongOpenSource WukongCRM AdminRoleController.java cross-site request forgery
• CVE-2025-61071 PoCcomfyanonymous comfyui utils.py set_attr dynamically-determined object attributes
• CVE-2025-61081 PoChansonwang99 Spring-Boot-In-Action File Upload ImageUploadService.java watermarkTest path traversal
• CVE-2025-61091 PoCjavahongxi whatsmars InitializrController.java initialize path traversal
• CVE-2025-61101 PoCTenda FH1201 SafeMacFilter stack-based overflow
• CVE-2025-61111 PoCTenda FH1205 VirtualSer fromVirtualSer stack-based overflow
• CVE-2025-61121 PoCTenda FH1205 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-61131 PoCTenda FH1203 AdvSetLanip fromadvsetlanip buffer overflow
• CVE-2025-61141 PoCD-Link DIR-619L form_portforwarding stack-based overflow
• CVE-2025-61151 PoCD-Link DIR-619L form_macfilter stack-based overflow
• CVE-2025-61161 PoCDas Parking Management System 停车场管理系统 API Search sql injection
• CVE-2025-61171 PoCDas Parking Management System 停车场管理系统 API Search sql injection
• CVE-2025-61181 PoCDas Parking Management System 停车场管理系统 API search sql injection
• CVE-2025-61192 PoCsOpen Asset Import Library Assimp BVHLoader.cpp ReadNodeChannels use after free
• CVE-2025-61202 PoCsOpen Asset Import Library Assimp HL1MDLLoader.cpp read_meshes heap-based overflow
• CVE-2025-61211 PoCD-Link DIR-632 HTTP POST Request get_pure_content stack-based overflow
• CVE-2025-61221 PoCcode-projects Restaurant Order System table.php sql injection
• CVE-2025-61231 PoCcode-projects Restaurant Order System payment.php sql injection
• CVE-2025-61241 PoCcode-projects Restaurant Order System tablelow.php sql injection
• CVE-2025-61251 PoCPHPGurukul Rail Pass Management System aboutus.php cross site scripting
• CVE-2025-61261 PoCPHPGurukul Rail Pass Management System contact.php cross site scripting
• CVE-2025-61271 PoCPHPGurukul Nipah Virus Testing Management System search-report.php cross site scripting
• CVE-2025-61281 PoCTOTOLINK EX1200T HTTP POST Request formWirelessTbl buffer overflow
• CVE-2025-61291 PoCTOTOLINK EX1200T HTTP POST Request formSaveConfig buffer overflow
• CVE-2025-61301 PoCTOTOLINK EX1200T HTTP POST Request formStats buffer overflow
• CVE-2025-61311 PoCCodeAstro Food Ordering System POST Request Parameter edit cross site scripting
• CVE-2025-61321 PoCChanjet CRM departmentsetting.php sql injection
• CVE-2025-61331 PoCProjectworlds Life Insurance Management System insertagent.php sql injection
• CVE-2025-61341 PoCProjectworlds Life Insurance Management System insertClient.php sql injection
• CVE-2025-61351 PoCProjectworlds Life Insurance Management System insertNominee.php sql injection
• CVE-2025-61361 PoCProjectworlds Life Insurance Management System insertPayment.php sql injection
• CVE-2025-61371 PoCTOTOLINK T10 HTTP POST Request cstecgi.cgi setWiFiScheduleCfg buffer overflow
• CVE-2025-61382 PoCsTOTOLINK T10 HTTP POST Request cstecgi.cgi setWizardCfg buffer overflow
• CVE-2025-61391 PoCTOTOLINK T10 shadow.sample hard-coded password
• CVE-2025-61401 PoCspdlog pattern_formatter-inl.h scoped_padder resource consumption
• CVE-2025-61421 PoCIntera InHire server-side request forgery
• CVE-2025-61431 PoCTOTOLINK EX1200T HTTP POST Request formNtp buffer overflow
• CVE-2025-61441 PoCTOTOLINK EX1200T HTTP POST Request formSysCmd buffer overflow
• CVE-2025-61451 PoCTOTOLINK EX1200T HTTP POST Request formSysLog buffer overflow
• CVE-2025-61461 PoCTOTOLINK X15 HTTP POST Request formSysLog buffer overflow
• CVE-2025-61471 PoCTOTOLINK A702R HTTP POST Request formSysLog buffer overflow
• CVE-2025-61481 PoCTOTOLINK A3002RU HTTP POST Request formSysLog buffer overflow
• CVE-2025-61491 PoCTOTOLINK A3002R HTTP POST Request formSysLog buffer overflow
• CVE-2025-61501 PoCTOTOLINK X15 HTTP POST Request formMultiAP buffer overflow
• CVE-2025-61511 PoCTP-Link TL-WR940N, TL-WR841N WanSlaacCfgRpm.htm buffer overflow
• CVE-2025-61531 PoCPHPGurukul Hostel Management System students.php sql injection
• CVE-2025-61541 PoCPHPGurukul Hostel Management System login.inc.php sql injection
• CVE-2025-61551 PoCPHPGurukul Hostel Management System login-hm.inc.php sql injection
• CVE-2025-61561 PoCPHPGurukul Nipah Virus Testing Management System bwdates-report-ds.php sql injection
• CVE-2025-61571 PoCPHPGurukul Nipah Virus Testing Management System registered-user-testing.php sql injection
• CVE-2025-61581 PoCD-Link DIR-665 HTTP POST Request sub_AC78 stack-based overflow
• CVE-2025-61591 PoCcode-projects Hostel Management System allocate_room.php sql injection
• CVE-2025-61601 PoCSourceCodester Client Database Management System user_customer_create_order.php sql injection
• CVE-2025-61611 PoCSourceCodester Simple Food Ordering System editproduct.php unrestricted upload
• CVE-2025-61621 PoCTOTOLINK EX1200T HTTP POST Request formMultiAP buffer overflow
• CVE-2025-61631 PoCTOTOLINK A3002RU HTTP POST Request formMultiAP buffer overflow
• CVE-2025-61641 PoCTOTOLINK A3002R HTTP POST Request formMultiAP buffer overflow
• CVE-2025-61651 PoCTOTOLINK X15 HTTP POST Request formTmultiAP buffer overflow
• CVE-2025-61661 PoCfrdel Agent-Zero image_get.py image_get path traversal
• CVE-2025-61671 PoCthemanojdesai python-a2a api.py create_workflow path traversal
• CVE-2025-61681 PoCIncorrect Authorization in GitLab
• CVE-2025-61711 PoCMissing Authorization in GitLab
• CVE-2025-61731 PoCWebkul QloApps ajax_products_list.php sql injection
• CVE-2025-61742 PoCsWordPress Qwizcards <= 3.9.4 - Reflected XSS
• CVE-2025-61861 PoCImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
• CVE-2025-61951 PoCDirect Request ('Forced Browsing') in GitLab
• CVE-2025-61971 PoCAn open redirect vulnerability has been identified in Grafana OSS organization switching functionality.Prerequisites for exploitation:-…
• CVE-2025-62001 PoCGeoDirectory < 2.8.120 - Contributor+ Stored XSS
• CVE-2025-62022 PoCsPhoenix: Rowhammer attack on Hynix DDR5 devices
• CVE-2025-62041 PoCKEVImproper Control of Generation of Code (Code Injection) vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
• CVE-2025-62051 PoCKEVMissing authorization vulnerability affecting DELMIA Apriso from Release 2020 through Release 2025
• CVE-2025-62161 PoCAllegra calculateTokenExpDate Password Recovery Authentication Bypass Vulnerability
• CVE-2025-621810 PoCsKEVRARLAB WinRAR Directory Traversal Remote Code Execution Vulnerability
• CVE-2025-62202 PoCsUltimate Addons for Contact Form 7 <= 3.5.12 - Authenticated (Administrator+) Arbitrary File Upload via 'save_options'
• CVE-2025-62241 PoCKey leakage in juju/utils certificates
• CVE-2025-62341 PoCHostel < 1.1.5.8 - Reflected XSS
• CVE-2025-62361 PoCHostel < 1.1.5.9 - Admin+ Stored XSS
• CVE-2025-62542 PoCsDoctreat Core <= 1.6.8 - Unauthenticated Privilege Escalation
• CVE-2025-62641 PoCVelociraptor priviledge escalation via UpdateConfig artifact
• CVE-2025-62661 PoCTeledyne FLIR AX8 upload.php unrestricted upload
• CVE-2025-62692 PoCsHDF5 H5Cimage.c H5C__reconstruct_cache_entry heap-based overflow
• CVE-2025-62702 PoCsHDF5 H5FSsection.c H5FS__sect_find_node heap-based overflow
• CVE-2025-62712 PoCsswftools wav2swf wav.c wav_convert2mono out-of-bounds
• CVE-2025-62722 PoCswasm3 m3_compile.c MarkSlotAllocated out-of-bounds write
• CVE-2025-62732 PoCsWebAssembly wabt binary-reader-objdump.cc LogOpcode assertion
• CVE-2025-62742 PoCsWebAssembly wabt binary-reader-interp.cc OnDataCount resource consumption
• CVE-2025-62752 PoCsWebAssembly wabt binary-reader-interp.cc GetFuncOffset use after free
• CVE-2025-62761 PoCBrilliance Golden Link Secondary System rentTakeInfoPage.htm sql injection
• CVE-2025-62771 PoCBrilliance Golden Link Secondary System custTakeInfoPage.htm sql injection
• CVE-2025-62781 PoCUpsonic server.py os.path.join path traversal
• CVE-2025-62791 PoCUpsonic Pickle add_tool cloudpickle.loads deserialization
• CVE-2025-62801 PoCTransformerOptimus SuperAGI EmailToolKit read_email.py download_attachment path traversal
• CVE-2025-62811 PoCOpenBMB XAgent community path traversal
• CVE-2025-62821 PoCxlang-ai OpenAgents file.py create_upload_file path traversal
• CVE-2025-62831 PoCxataio Xata Agent route.ts GET path traversal
• CVE-2025-62841 PoCPHPGurukul Car Rental Portal cross-site request forgery
• CVE-2025-62911 PoCD-Link DIR-825 HTTP POST Request do_file stack-based overflow
• CVE-2025-62921 PoCD-Link DIR-825 HTTP POST Request sub_4091AC stack-based overflow
• CVE-2025-62931 PoCcode-projects Hostel Management System contact_manager.php sql injection
• CVE-2025-62941 PoCcode-projects Hostel Management System contact.php sql injection
• CVE-2025-62951 PoCcode-projects Hostel Management System allocated_rooms.php sql injection
• CVE-2025-62961 PoCcode-projects Hostel Management System empty_rooms.php sql injection
• CVE-2025-62991 PoCTOTOLINK N150RT formWSC os command injection
• CVE-2025-63001 PoCPHPGurukul Employee Record Management System editempeducation.php sql injection
• CVE-2025-63021 PoCTOTOLINK EX1200T cstecgi.cgi setStaticDhcpConfig stack-based overflow
• CVE-2025-63031 PoCcode-projects Online Shoe Store contactus1.php sql injection
• CVE-2025-63041 PoCcode-projects Online Shoe Store cart.php sql injection
• CVE-2025-63051 PoCcode-projects Online Shoe Store admin_feature.php sql injection
• CVE-2025-63061 PoCcode-projects Online Shoe Store admin_index.php sql injection
• CVE-2025-63071 PoCcode-projects Online Shoe Store edit_customer.php sql injection
• CVE-2025-63081 PoCPHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php sql injection
• CVE-2025-63091 PoCPHPGurukul Emergency Ambulance Hiring Portal add-ambulance.php sql injection
• CVE-2025-63101 PoCPHPGurukul Emergency Ambulance Hiring Portal index.php sql injection
• CVE-2025-63111 PoCCampcodes Sales and Inventory System account_add.php sql injection
• CVE-2025-63121 PoCCampcodes Sales and Inventory System cash_transaction.php sql injection
• CVE-2025-63131 PoCCampcodes Sales and Inventory System cat_add.php sql injection
• CVE-2025-63141 PoCCampcodes Sales and Inventory System cat_update.php sql injection
• CVE-2025-63151 PoCcode-projects Online Shoe Store cart2.php sql injection
• CVE-2025-63161 PoCcode-projects Online Shoe Store admin_running.php sql injection
• CVE-2025-63171 PoCcode-projects Online Shoe Store confirm.php sql injection
• CVE-2025-63181 PoCPHPGurukul Pre-School Enrollment System check_availability.php sql injection
• CVE-2025-63191 PoCPHPGurukul Pre-School Enrollment System add-teacher.php sql injection
• CVE-2025-63201 PoCPHPGurukul Pre-School Enrollment System add-class.php sql injection
• CVE-2025-63211 PoCPHPGurukul Pre-School Enrollment System add-subadmin.php sql injection
• CVE-2025-63221 PoCPHPGurukul Pre-School Enrollment System visit.php sql injection
• CVE-2025-63231 PoCPHPGurukul Pre-School Enrollment System enrollment.php sql injection
• CVE-2025-63251 PoCWordPress King Addons for Elementor plugin <= 51.1.36 - Privilege Escalation vulnerability
• CVE-2025-63271 PoCWordPress King Addons for Elementor plugin <= 51.1.36 - Arbitrary File Upload vulnerability
• CVE-2025-63281 PoCD-Link DIR-815 hedwig.cgi sub_403794 stack-based overflow
• CVE-2025-63291 PoCScriptAndTools Real Estate Management System User Delete userdelete.php authorization
• CVE-2025-63301 PoCPHPGurukul Directory Management System searchdata.php sql injection
• CVE-2025-63311 PoCPHPGurukul Directory Management System search-directory.php sql injection
• CVE-2025-63321 PoCPHPGurukul Directory Management System manage-directory.php sql injection
• CVE-2025-63331 PoCPHPGurukul Directory Management System admin-profile.php sql injection
• CVE-2025-63341 PoCD-Link DIR-867 Query String strncpy stack-based overflow
• CVE-2025-63352 PoCsDedeCMS Template dedetag.class.php command injection
• CVE-2025-63361 PoCTOTOLINK EX1200T HTTP POST Request formTmultiAP buffer overflow
• CVE-2025-63371 PoCTOTOLINK A3002R/A3002RU HTTP POST Request formTmultiAP buffer overflow
• CVE-2025-63391 PoCponaravindb Hospital Management System func3.php sql injection
• CVE-2025-63401 PoCcode-projects School Fees Payment System branch.php cross site scripting
• CVE-2025-63411 PoCcode-projects School Fees Payment System cross-site request forgery
• CVE-2025-63421 PoCcode-projects Online Shoe Store admin_football.php sql injection
• CVE-2025-63431 PoCcode-projects Online Shoe Store admin_product.php sql injection
• CVE-2025-63441 PoCcode-projects Online Shoe Store contactus.php sql injection
• CVE-2025-63451 PoCSourceCodester My Food Recipe Add Recipe Page add-recipe.php addRecipeModal cross site scripting
• CVE-2025-63461 PoCSourceCodester Advance Charity Management System fundDetails.php sql injection
• CVE-2025-63471 PoCcode-projects Responsive Blog pageViewMembers.php cross site scripting
• CVE-2025-63491 PoCMali GPU Kernel Driver allows improper GPU memory processing operations
• CVE-2025-63511 PoCitsourcecode Employee Record Management System editprofile.php sql injection
• CVE-2025-63521 PoCcode-projects Automated Voting System Backend vote.php direct request
• CVE-2025-63531 PoCcode-projects Responsive Blog search.php cross site scripting
• CVE-2025-63541 PoCcode-projects Online Shoe Store customer_signup.php sql injection
• CVE-2025-63551 PoCSourceCodester Online Hotel Reservation System execeditroom.php sql injection
• CVE-2025-63561 PoCcode-projects Simple Pizza Ordering System addmem.php sql injection
• CVE-2025-63571 PoCcode-projects Simple Pizza Ordering System paymentportal.php sql injection
• CVE-2025-63581 PoCcode-projects Simple Pizza Ordering System saveorder.php sql injection
• CVE-2025-63591 PoCcode-projects Simple Pizza Ordering System cashconfirm.php sql injection
• CVE-2025-63601 PoCcode-projects Simple Pizza Ordering System portal.php sql injection
• CVE-2025-63611 PoCcode-projects Simple Pizza Ordering System adds.php sql injection
• CVE-2025-63621 PoCcode-projects Simple Pizza Ordering System editpro.php sql injection
• CVE-2025-63631 PoCcode-projects Simple Pizza Ordering System adding-exec.php sql injection
• CVE-2025-63641 PoCcode-projects Simple Pizza Ordering System adduser-exec.php sql injection
• CVE-2025-63671 PoCD-Link DIR-619L formSetDomainFilter stack-based overflow
• CVE-2025-63681 PoCD-Link DIR-619L formSetEmail stack-based overflow
• CVE-2025-63691 PoCD-Link DIR-619L formdumpeasysetup stack-based overflow
• CVE-2025-63701 PoCD-Link DIR-619L formWlanGuestSetup stack-based overflow
• CVE-2025-63711 PoCD-Link DIR-619L formSetEnableWizard stack-based overflow
• CVE-2025-63721 PoCD-Link DIR-619L formSetWizard1 stack-based overflow
• CVE-2025-63731 PoCD-Link DIR-619L formWlSiteSurvey formSetWizard1 stack-based overflow
• CVE-2025-63741 PoCD-Link DIR-619L formSetACLFilter stack-based overflow
• CVE-2025-63752 PoCspoco MultipartReader.cpp MultipartInputStream null pointer dereference
• CVE-2025-63842 PoCsImproper Control of Dynamically-Managed Code Resources in Crafter Studio
• CVE-2025-63893 PoCsSneeit Framework <= 8.3 - Unauthenticated Remote Code Execution in sneeit_articles_pagination_callback
• CVE-2025-63931 PoCTOTOLINK A702R/A3002R/A3002RU/EX1200T HTTP POST Request formIPv6Addr buffer overflow
• CVE-2025-63941 PoCcode-projects Simple Online Hotel Reservation System add_reserve.php sql injection
• CVE-2025-63991 PoCTOTOLINK X15 HTTP POST Request formIPv6Addr buffer overflow
• CVE-2025-64001 PoCTOTOLINK N300RH HTTP POST Message formPortFw buffer overflow
• CVE-2025-64011 PoCTOTOLINK N300RH HTTP POST Message formFilter denial of service
• CVE-2025-64021 PoCTOTOLINK X15 HTTP POST Request formIpv6Setup buffer overflow
• CVE-2025-64032 PoCscode-projects School Fees Payment System student.php sql injection
• CVE-2025-64041 PoCCampcodes Online Teacher Record Management System search.php sql injection
• CVE-2025-64051 PoCCampcodes Online Teacher Record Management System edit-teacher-detail.php sql injection
• CVE-2025-64061 PoCCampcodes Online Hospital Management System forgot-password.php sql injection
• CVE-2025-64071 PoCCampcodes Online Hospital Management System user-login.php sql injection
• CVE-2025-64081 PoCCampcodes Online Hospital Management System search.php sql injection
• CVE-2025-64091 PoCPHPGurukul Art Gallery Management System forgot-password.php sql injection
• CVE-2025-64101 PoCPHPGurukul Art Gallery Management System edit-art-medium-detail.php sql injection
• CVE-2025-64111 PoCPHPGurukul Art Gallery Management System changepropic.php sql injection
• CVE-2025-64121 PoCPHPGurukul Art Gallery Management System changeimage.php sql injection
• CVE-2025-64131 PoCPHPGurukul Art Gallery Management System changeimage1.php sql injection
• CVE-2025-64141 PoCPHPGurukul Art Gallery Management System changeimage2.php sql injection
• CVE-2025-64151 PoCPHPGurukul Art Gallery Management System changeimage3.php sql injection
• CVE-2025-64161 PoCPHPGurukul Art Gallery Management System changeimage4.php sql injection
• CVE-2025-64171 PoCPHPGurukul Art Gallery Management System add-artist.php sql injection
• CVE-2025-64181 PoCcode-projects Simple Online Hotel Reservation System edit_query_account.php sql injection
• CVE-2025-64191 PoCcode-projects Simple Online Hotel Reservation System edit_room.php sql injection
• CVE-2025-64201 PoCcode-projects Simple Online Hotel Reservation System add_room.php sql injection
• CVE-2025-64211 PoCcode-projects Simple Online Hotel Reservation System add_account.php sql injection
• CVE-2025-64221 PoCCampcodes Online Recruitment Management System About Content Page ajax.php unrestricted upload
• CVE-2025-64408 PoCsWooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload
• CVE-2025-64461 PoCcode-projects Client Details System index.php sql injection
• CVE-2025-64471 PoCcode-projects Simple Online Hotel Reservation System index.php sql injection
• CVE-2025-64481 PoCcode-projects Simple Online Hotel Reservation System delete_room.php sql injection
• CVE-2025-64491 PoCcode-projects Simple Online Hotel Reservation System checkout_query.php sql injection
• CVE-2025-64501 PoCcode-projects Simple Online Hotel Reservation System confirm_reserve.php sql injection
• CVE-2025-64511 PoCcode-projects Simple Online Hotel Reservation System delete_pending.php sql injection
• CVE-2025-64521 PoCCodeAstro Patient Record Management System Generate New Report Page cross site scripting
• CVE-2025-64531 PoCdiyhi bbs API ForumManageAction.java add path traversal
• CVE-2025-64541 PoCServer-Side Request Forgery (SSRF) in GitLab
• CVE-2025-64551 PoCcode-projects Online Hotel Reservation System messageexec.php sql injection
• CVE-2025-64561 PoCcode-projects Online Hotel Reservation System order.php sql injection
• CVE-2025-64571 PoCcode-projects Online Hotel Reservation System demo.php sql injection
• CVE-2025-64581 PoCcode-projects Online Hotel Reservation System execedituser.php sql injection
• CVE-2025-64661 PoCageerle ruoyi-ai SseServiceImpl.java upload unrestricted upload
• CVE-2025-64671 PoCcode-projects Online Bidding System login.php sql injection
• CVE-2025-64681 PoCcode-projects Online Bidding System bidnow.php sql injection
• CVE-2025-64691 PoCcode-projects Online Bidding System details.php sql injection
• CVE-2025-64701 PoCcode-projects Online Bidding System bidlog.php sql injection
• CVE-2025-64711 PoCcode-projects Online Bidding System administrator sql injection
• CVE-2025-64721 PoCcode-projects Online Bidding System showprod.php sql injection
• CVE-2025-64731 PoCcode-projects School Fees Payment System fees.php cross site scripting
• CVE-2025-64741 PoCcode-projects Inventory Management System changeUsername.php sql injection
• CVE-2025-64751 PoCSourceCodester Student Result Management System Manage Students Module manage_students cross site scripting
• CVE-2025-64761 PoCSourceCodester Gym Management System cross-site request forgery
• CVE-2025-64771 PoCSourceCodester Student Result Management System System Settings Page system cross site scripting
• CVE-2025-64791 PoCcode-projects Simple Pizza Ordering System salesreport.php sql injection
• CVE-2025-64801 PoCcode-projects Simple Pizza Ordering System addcatexec.php sql injection
• CVE-2025-64811 PoCcode-projects Simple Pizza Ordering System update.php sql injection
• CVE-2025-64821 PoCcode-projects Simple Pizza Ordering System edituser-exec.php sql injection
• CVE-2025-64831 PoCcode-projects Simple Pizza Ordering System edituser.php sql injection
• CVE-2025-64841 PoCcode-projects Online Shopping Store action.php sql injection
• CVE-2025-64851 PoCTOTOLINK A3002R formWlSiteSurvey os command injection
• CVE-2025-64861 PoCTOTOLINK A3002R formWlanMultipleAP stack-based overflow
• CVE-2025-64871 PoCTOTOLINK A3002R formRoute stack-based overflow
• CVE-2025-64891 PoCitsourcecode Agri-Trading Online Shopping System transactionsave.php sql injection
• CVE-2025-64901 PoCsparklemotion nokogiri hashmap.c hashmap_set_with_hash heap-based overflow
• CVE-2025-64911 PoCNULL Pointer Dereference in PHP SOAP Extension via Large XML Namespace Prefix
• CVE-2025-64921 PoCMarkText index.js getRecommendTitleFromMarkdownString redos
• CVE-2025-64931 PoCCodeMirror Markdown Mode markdown.js redos
• CVE-2025-64941 PoCsparklemotion nokogiri hashmap.c hashmap_get_with_hash heap-based overflow
• CVE-2025-64961 PoCHTACG tidy-html5 parser.c InsertNodeAsParent null pointer dereference
• CVE-2025-64971 PoCHTACG tidy-html5 parser.c prvTidyParseNamespace assertion
• CVE-2025-64982 PoCsHTACG tidy-html5 alloc.c defaultAlloc memory leak
• CVE-2025-64992 PoCsvstakhov libucl ucl_parser.c ucl_parse_multiline_string heap-based overflow
• CVE-2025-65001 PoCcode-projects Inventory Management System editCategories.php sql injection
• CVE-2025-65011 PoCcode-projects Inventory Management System createCategories.php sql injection
• CVE-2025-65021 PoCcode-projects Inventory Management System changePassword.php sql injection
• CVE-2025-65031 PoCcode-projects Inventory Management System fetchSelectedCategories.php sql injection
• CVE-2025-65091 PoCseaswalker spring-analysis SimpleController.java echo cross site scripting
• CVE-2025-65101 PoCNetgear EX6100 sub_415EF8 stack-based overflow
• CVE-2025-65111 PoCNetgear EX6150 sub_410090 stack-based overflow
• CVE-2025-65141 PoCOS command injection in mcp-remote when connecting to untrusted MCP servers
• CVE-2025-65162 PoCsHDF5 H5Fint.c H5F_addr_decode_len heap-based overflow
• CVE-2025-65171 PoCDromara MaxKey Meta URL SAML20DetailsController.java add server-side request forgery
• CVE-2025-65181 PoCPySpur-Dev pyspur Jinja2 Template single_llm_call.py SingleLLMCallNode special elements used in a template engine
• CVE-2025-65241 PoC70mai 1S Video Services improper authentication
• CVE-2025-65251 PoC70mai 1S Configuration Config.cgi improper authorization
• CVE-2025-65261 PoC70mai M300 HTTP Server insufficiently protected credentials
• CVE-2025-65271 PoC70mai M300 Web Server access control
• CVE-2025-65281 PoC70mai M300 RTSP Live Video Stream Endpoint 12 improper authentication
• CVE-2025-65291 PoC70mai M300 Telnet Service default credentials
• CVE-2025-65301 PoC70mai M300 Telnet Service demo.sh denial of service
• CVE-2025-65311 PoCSIFUSM/MZZYG BD S1 RTSP Live Video Stream Endpoint access control
• CVE-2025-65321 PoCNOYAFA/Xiami LF9 Pro RTSP Live Video Stream Endpoint access control
• CVE-2025-65332 PoCsxxyopen/201206030 novel-plus CATCHA LoginController.java ajaxLogin authentication replay
• CVE-2025-65342 PoCsxxyopen/201206030 novel-plus File FileController.java remove resource injection
• CVE-2025-65352 PoCsxxyopen/201206030 novel-plus User Management Module UserMapper.xml list sql injection
• CVE-2025-65361 PoCTarantool datetime.c tm_to_datetime assertion
• CVE-2025-65434 PoCsKEVMemory overflow vulnerability leading to unintended control flow and Denial of Service
• CVE-2025-65451 PoCpbkdf2 silently returns predictable uninitialized/zero-filled memory for non-normalized or unimplemented algos supported by Node.js
• CVE-2025-65471 PoCOn Node.js < 3, pbkdf2 silently disregards Uint8Array input, returning static keys
• CVE-2025-65511 PoCjava-aodeng Hope-Boot WebController.java login cross site scripting
• CVE-2025-65521 PoCjava-aodeng Hope-Boot Login WebController.java doLogin redirect
• CVE-2025-65549 PoCsKEVType confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to perform arbitrary read/write via a crafted HTML…
• CVE-2025-65584 PoCsKEVInsufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to…
• CVE-2025-65632 PoCsCross-site scripting via dst parameter in RouterOS WiFi hotspot
• CVE-2025-65651 PoCNetgear WNCE3001 HTTP POST Request http_d stack-based overflow
• CVE-2025-65662 PoCsoatpp Oat++ Deserializer.cpp deserializeArray stack-based overflow
• CVE-2025-65671 PoCCampcodes Online Recruitment Management System view_application.php sql injection
• CVE-2025-65681 PoCTOTOLINK EX1200T HTTP POST Request formIpv6Setup buffer overflow
• CVE-2025-65691 PoCcode-projects School Fees Payment System student.php cross site scripting
• CVE-2025-65701 PoCPHPGurukul Hospital Management System search.php sql injection
• CVE-2025-65721 PoCOpenStreetMap for Gutenberg and WPBakery Page Builder <= 1.2.0 - Contributor+ Stored XSS
• CVE-2025-65781 PoCcode-projects Simple Online Hotel Reservation System delete_account.php sql injection
• CVE-2025-65791 PoCcode-projects Car Rental System message_admin.php sql injection
• CVE-2025-65801 PoCSourceCodester Best Salon Management System Login sql injection
• CVE-2025-65811 PoCSourceCodester Best Salon Management System add-customer.php sql injection
• CVE-2025-65821 PoCSourceCodester Best Salon Management System edit-customer-detailed.php sql injection
• CVE-2025-65831 PoCSourceCodester Best Salon Management System view-appointment.php sql injection
• CVE-2025-65861 PoCDownload Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload
• CVE-2025-66011 PoCBusiness Logic Errors in GitLab
• CVE-2025-66041 PoCSourceCodester Best Salon Management System add-staff.php sql injection
• CVE-2025-66051 PoCSourceCodester Best Salon Management System edit-staff.php sql injection
• CVE-2025-66061 PoCSourceCodester Best Salon Management System add-services.php sql injection
• CVE-2025-66071 PoCSourceCodester Best Salon Management System stock.php sql injection
• CVE-2025-66081 PoCSourceCodester Best Salon Management System edit-services.php sql injection
• CVE-2025-66091 PoCSourceCodester Best Salon Management System bwdates-reports-details.php sql injection
• CVE-2025-66101 PoCitsourcecode Employee Management System editempprofile.php sql injection
• CVE-2025-66111 PoCcode-projects Inventory Management System createBrand.php sql injection
• CVE-2025-66121 PoCcode-projects Inventory Management System removeCategories.php sql injection
• CVE-2025-66131 PoCPHPGurukul Hospital Management System manage-patient.php cross site scripting
• CVE-2025-66141 PoCD-Link DIR-619L formSetWANType_Wizard5 stack-based overflow
• CVE-2025-66151 PoCD-Link DIR-619L formAutoDetecWAN_wizard4 stack-based overflow
• CVE-2025-66161 PoCD-Link DIR-619L formSetWAN_Wizard51 stack-based overflow
• CVE-2025-66171 PoCD-Link DIR-619L formAdvanceSetup stack-based overflow
• CVE-2025-66181 PoCTOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection
• CVE-2025-66191 PoCTOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection
• CVE-2025-66201 PoCTOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection
• CVE-2025-66211 PoCTOTOLINK CA300-PoE ap.so QuickSetting os command injection
• CVE-2025-66271 PoCTOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflow
• CVE-2025-66641 PoCCodeAstro Patient Record Management System cross-site request forgery
• CVE-2025-66651 PoCcode-projects Inventory Management System editBrand.php sql injection
• CVE-2025-66671 PoCcode-projects Car Rental System add_cars.php unrestricted upload
• CVE-2025-66681 PoCcode-projects Inventory Management System fetchSelectedBrand.php sql injection
• CVE-2025-66691 PoCgooaclok819 sublinkX jwt.go hard-coded key
• CVE-2025-66941 PoCLabRedesCefetRJ WeGIA Adicionar Unidade adicionar_unidade.php cross site scripting
• CVE-2025-66952 PoCsLabRedesCefetRJ WeGIA Additional Categoria adicionar_categoria.php cross site scripting
• CVE-2025-66961 PoCLabRedesCefetRJ WeGIA Cadastro de Atendio Cadastro_Atendido.php cross site scripting
• CVE-2025-66971 PoCLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoEntrada.php cross site scripting
• CVE-2025-66981 PoCLabRedesCefetRJ WeGIA Adicionar tipo adicionar_tipoSaida.php cross site scripting
• CVE-2025-66991 PoCLabRedesCefetRJ WeGIA Cadastro de Funcionário cadastro_funcionario.php cross site scripting
• CVE-2025-67001 PoCXuxueli xxl-sso login cross site scripting
• CVE-2025-67011 PoCXuxueli xxl-sso doLogin redirect
• CVE-2025-67021 PoClinlinjava litemall post improper authorization
• CVE-2025-67131 PoCMongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage
• CVE-2025-67151 PoCLatepoint < 5.1.94 - Unauthenticated LFI
• CVE-2025-67311 PoCyzcheng90 X-SpringBoot APK File apk uploadApk path traversal
• CVE-2025-67321 PoCUTT HiPER 840G API setSysAdm strcpy buffer overflow
• CVE-2025-67331 PoCUTT HiPER 840G API formConfigDnsFilterGlobal sub_416928 buffer overflow
• CVE-2025-67341 PoCUTT HiPER 840G API formP2PLimitConfig sub_484E40 buffer overflow
• CVE-2025-67351 PoCjuzaweb CMS Import Page imports improper authorization
• CVE-2025-67361 PoCjuzaweb CMS Add New Themes Page install improper authorization
• CVE-2025-67381 PoChuija bicycleSharingServer UserServiceImpl.java userDao.selectUserByUserNameLike sql injection
• CVE-2025-67471 PoCAvada (Fusion) Builder <= 3.12.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
• CVE-2025-67482 PoCsBharti Airtel Thanks App files cleartext storage in a file or on disk
• CVE-2025-67491 PoChuija bicycleSharingServer AdminController.java searchAdminMessageShow sql injection
• CVE-2025-67502 PoCsHDF5 H5Omtime.c H5O__mtime_new_encode heap-based overflow
• CVE-2025-67511 PoCLinksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflow
• CVE-2025-67521 PoCLinksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflow
• CVE-2025-67531 PoChuija bicycleSharingServer AdminController.java selectAdminByNameLike sql injection
• CVE-2025-67581 PoCReal Spaces - WordPress Properties Directory Theme <= 3.6 - Unauthenticated Privilege Escalation to Administrator via 'imic_agent_register'
• CVE-2025-67621 PoCdiyhi bbs HTTP Header login getUrl server-side request forgery
• CVE-2025-67631 PoCComet System H3531 Web-based Management setupA.cfg missing authentication
• CVE-2025-67661 PoCsfturing hosp_order OfficeServiceImpl.java getOfficeName sql injection
• CVE-2025-67671 PoCsfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection
• CVE-2025-67681 PoCsfturing hosp_order HospitalServiceImpl.java findAllHosByCondition sql injection
• CVE-2025-67691 PoCExposure of Sensitive System Information to an Unauthorized Control Sphere in GitLab
• CVE-2025-67721 PoCeosphoros-ai db-gpt import import_flow path traversal
• CVE-2025-67741 PoCgooaclok819 sublinkX template.go AddTemp path traversal
• CVE-2025-67751 PoCxiaoyunjie openvpn-cms-flask User Creation Endpoint openvpn.py create_user command injection
• CVE-2025-67761 PoCxiaoyunjie openvpn-cms-flask File Upload controller.py upload path traversal
• CVE-2025-67771 PoCcode-projects Food Distributor Site process_login.php sql injection
• CVE-2025-67781 PoCcode-projects Food Distributor Site save_settings.php cross site scripting
• CVE-2025-67901 PoCQSM < 10.2.3 - Template Creation via CSRF
• CVE-2025-67931 PoCMarvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability
• CVE-2025-68162 PoCsHDF5 H5Ofsinfo.c H5O__fsinfo_encode heap-based overflow
• CVE-2025-68172 PoCsHDF5 H5Centry.c H5C__load_entry resource consumption
• CVE-2025-68182 PoCsHDF5 H5Ochunk.c H5O__chunk_protect heap-based overflow
• CVE-2025-68191 PoCcode-projects Inventory Management System removeBrand.php sql injection
• CVE-2025-68201 PoCcode-projects Inventory Management System createProduct.php sql injection
• CVE-2025-68211 PoCcode-projects Inventory Management System createOrder.php sql injection
• CVE-2025-68221 PoCcode-projects Inventory Management System removeProduct.php sql injection
• CVE-2025-68231 PoCcode-projects Inventory Management System editProduct.php sql injection
• CVE-2025-68241 PoCTOTOLINK X15 HTTP POST Request formParentControl buffer overflow
• CVE-2025-68251 PoCTOTOLINK A702R HTTP POST Request formWlSiteSurvey buffer overflow
• CVE-2025-68261 PoCcode-projects Payroll Management System ajax.php sql injection
• CVE-2025-68271 PoCcode-projects Inventory Management System editOrder.php sql injection
• CVE-2025-68281 PoCcode-projects Inventory Management System orders.php sql injection
• CVE-2025-68341 PoCcode-projects Inventory Management System editPayment.php sql injection
• CVE-2025-68351 PoCcode-projects Library System student-issue-book.php sql injection
• CVE-2025-68361 PoCcode-projects Library System profile.php sql injection
• CVE-2025-68371 PoCcode-projects Library System profile.php unrestricted upload
• CVE-2025-68401 PoCcode-projects Product Inventory System Login index.php sql injection
• CVE-2025-68411 PoCcode-projects Product Inventory System edit_product.php sql injection
• CVE-2025-68421 PoCcode-projects Product Inventory System edit_user.php sql injection
• CVE-2025-68431 PoCcode-projects Simple Photo Gallery upload-photo.php unrestricted upload
• CVE-2025-68441 PoCcode-projects Simple Forum signin.php sql injection
• CVE-2025-68451 PoCcode-projects Simple Forum register1.php sql injection
• CVE-2025-68461 PoCcode-projects Simple Forum forum_viewfile.php sql injection
• CVE-2025-68471 PoCcode-projects Simple Forum forum_edit.php sql injection
• CVE-2025-68481 PoCcode-projects Simple Forum forum1.php unrestricted upload
• CVE-2025-68491 PoCcode-projects Simple Forum forum_edit1.php cross site scripting
• CVE-2025-68501 PoCcode-projects Simple Forum forum1.php sql injection
• CVE-2025-68511 PoCBroken Link Notifier <= 1.3.0 - Unauthenticated Server-Side Request Forgery
• CVE-2025-68531 PoCchatchat-space Langchain-Chatchat Backend upload_temp_docs path traversal
• CVE-2025-68541 PoCchatchat-space Langchain-Chatchat files path traversal
• CVE-2025-68551 PoCchatchat-space Langchain-Chatchat file path traversal
• CVE-2025-68562 PoCsHDF5 H5FL.c H5FL__reg_gc_list use after free
• CVE-2025-68572 PoCsHDF5 H5Gnode.c H5G__node_cmp3 stack-based overflow
• CVE-2025-68582 PoCsHDF5 H5Centry.c H5C__flush_single_entry null pointer dereference
• CVE-2025-68591 PoCSourceCodester Best Salon Management System pro_sale.php sql injection
• CVE-2025-68602 PoCsSourceCodester Best Salon Management System staff_commision.php sql injection
• CVE-2025-68611 PoCSourceCodester Best Salon Management System add_plan.php sql injection
• CVE-2025-68621 PoCSourceCodester Best Salon Management System edit_plan.php sql injection
• CVE-2025-68631 PoCPHPGurukul Local Services Search Engine Management System edit-category-detail.php sql injection
• CVE-2025-68641 PoCSeaCMS admin_type.php cross-site request forgery
• CVE-2025-68651 PoCDaiCuo index cross-site request forgery
• CVE-2025-68661 PoCcode-projects Simple Forum forum_downloadfile.php path traversal
• CVE-2025-68671 PoCSourceCodester Simple Company Website manage.php sql injection
• CVE-2025-68681 PoCSourceCodester Simple Company Website manage.php sql injection
• CVE-2025-68691 PoCSourceCodester Simple Company Website manage.php sql injection
• CVE-2025-68701 PoCSourceCodester Simple Company Website Content.php unrestricted upload
• CVE-2025-68711 PoCSourceCodester Simple Company Website Login.php sql injection
• CVE-2025-68721 PoCSourceCodester Simple Company Website SystemSettings.php unrestricted upload
• CVE-2025-68731 PoCSourceCodester Simple Company Website Users.php unrestricted upload
• CVE-2025-68741 PoCSourceCodester Best Salon Management System add_subscribe.php sql injection
• CVE-2025-68751 PoCSourceCodester Best Salon Management System edit-subscription.php sql injection
• CVE-2025-68761 PoCSourceCodester Best Salon Management System add-category.php sql injection
• CVE-2025-68771 PoCSourceCodester Best Salon Management System edit-category.php sql injection
• CVE-2025-68781 PoCSourceCodester Best Salon Management System search-appointment.php sql injection
• CVE-2025-68791 PoCSourceCodester Best Salon Management System add-tax.php sql injection
• CVE-2025-68801 PoCSourceCodester Best Salon Management System edit-tax.php sql injection
• CVE-2025-68831 PoCcode-projects Staff Audit System update_index.php sql injection
• CVE-2025-68841 PoCcode-projects Staff Audit System search_index.php sql injection
• CVE-2025-68851 PoCPHPGurukul Teachers Record Management System edit-teacher-detail.php sql injection
• CVE-2025-68861 PoCTenda AC5 openSchedWifi stack-based overflow
• CVE-2025-68871 PoCTenda AC5 SetSysTimeCfg stack-based overflow
• CVE-2025-68881 PoCPHPGurukul Teachers Record Management System changeimage.php sql injection
• CVE-2025-68891 PoCcode-projects Movie Ticketing System logIn.php sql injection
• CVE-2025-68901 PoCcode-projects Movie Ticketing System ticketConfirmation.php sql injection
• CVE-2025-68911 PoCcode-projects Inventory Management System createUser.php sql injection
• CVE-2025-68961 PoCD-Link DI-7300G+ wget_test.asp os command injection
• CVE-2025-68971 PoCD-Link DI-7300G+ httpd_debug.asp os command injection
• CVE-2025-68981 PoCD-Link DI-7300G+ in proxy_client.asp os command injection
• CVE-2025-68991 PoCD-Link DI-7300G+/DI-8200G msp_info.htm os command injection
• CVE-2025-69001 PoCcode-projects Library System add-book.php unrestricted upload
• CVE-2025-69011 PoCcode-projects Inventory Management System removeUser.php sql injection
• CVE-2025-69021 PoCcode-projects Inventory Management System editUser.php sql injection
• CVE-2025-69031 PoCcode-projects Car Rental System approve.php sql injection
• CVE-2025-69041 PoCcode-projects Car Rental System add_cars.php sql injection
• CVE-2025-69051 PoCcode-projects Car Rental System signup.php sql injection
• CVE-2025-69061 PoCcode-projects Car Rental System login.php sql injection
• CVE-2025-69072 PoCscode-projects Car Rental System book_car.php sql injection
• CVE-2025-69081 PoCPHPGurukul Old Age Home Management System edit-services.php sql injection
• CVE-2025-69091 PoCPHPGurukul Old Age Home Management System add-scdetails.php sql injection
• CVE-2025-69101 PoCPHPGurukul Student Record System session.php sql injection
• CVE-2025-69111 PoCPHPGurukul Student Record System manage-subjects.php sql injection
• CVE-2025-69121 PoCPHPGurukul Student Record System manage-students.php sql injection
• CVE-2025-69131 PoCPHPGurukul Student Record System admin-profile.php sql injection
• CVE-2025-69141 PoCPHPGurukul Student Record System edit-student.php sql injection
• CVE-2025-69151 PoCPHPGurukul Student Record System register.php sql injection
• CVE-2025-69161 PoCTOTOLINK T6 formLoginAuth.htm Form_Login missing authentication
• CVE-2025-69171 PoCcode-projects Online Hotel Booking registration.php sql injection
• CVE-2025-69251 PoCDromara RuoYi-Vue-Plus Mail MailController.java path traversal
• CVE-2025-69291 PoCPHPGurukul Zoo Management System view-normal-ticket.php sql injection
• CVE-2025-69301 PoCPHPGurukul Zoo Management System manage-foreigners-ticket.php sql injection
• CVE-2025-693412 PoCsOpal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'
• CVE-2025-69351 PoCCampcodes Sales and Inventory System payment_add.php sql injection
• CVE-2025-69361 PoCcode-projects Simple Pizza Ordering System addpro.php sql injection
• CVE-2025-69371 PoCcode-projects Simple Pizza Ordering System large.php sql injection
• CVE-2025-69381 PoCcode-projects Simple Pizza Ordering System editcus.php sql injection
• CVE-2025-69391 PoCTOTOLINK A3002RU HTTP POST Request formWlSiteSurvey buffer overflow
• CVE-2025-69401 PoCTOTOLINK A702R HTTP POST Request formParentControl buffer overflow
• CVE-2025-69451 PoCImproper Neutralization of Special Elements used in a Command ('Command Injection') in GitLab
• CVE-2025-69481 PoCImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in GitLab
• CVE-2025-69511 PoCSAFECAM X300 FTP Service default credentials
• CVE-2025-69531 PoCTOTOLINK A3002RU HTTP POST Request formParentControl buffer overflow
• CVE-2025-69541 PoCCampcodes Employee Management System applyleave.php sql injection
• CVE-2025-69551 PoCCampcodes Employee Management System aprocess.php sql injection
• CVE-2025-69561 PoCCampcodes Employee Management System changepassemp.php sql injection
• CVE-2025-69571 PoCCampcodes Employee Management System eprocess.php sql injection
• CVE-2025-69581 PoCCampcodes Employee Management System edit.php sql injection
• CVE-2025-69591 PoCCampcodes Employee Management System eloginwel.php sql injection
• CVE-2025-69601 PoCCampcodes Employee Management System empproject.php sql injection
• CVE-2025-69611 PoCCampcodes Employee Management System mark.php sql injection
• CVE-2025-69621 PoCCampcodes Employee Management System myprofileup.php sql injection
• CVE-2025-69631 PoCCampcodes Employee Management System myprofile.php sql injection
• CVE-2025-69651 PoCInteger Truncation on SQLite
• CVE-2025-69702 PoCsEvents Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter
• CVE-2025-69841 PoCSensitive Information Disclosure Due to Insecure XML Parsing in langchain-ai/langchain
• CVE-2025-69981 PoCCalibre Web 0.6.24 & Autocaliweb 0.7.0 - ReDoS