CVE-2025-71000 to CVE-2025-71999
29 CVEs with public proof-of-concept exploits.
- CVE-2025-710581 PoCDual DHCP DNS Server 8.01 improperly accepts and caches UDP DNS responses without validating that the response originates from a…
- CVE-2025-711791 PoCCreativeitem Academy LMS 7.0 contains reflected Cross-Site Scripting (XSS) vulnerabilities via the search parameter to the /academy/blogs…
- CVE-2025-712433 PoCsSPIP Saisies Plugin < 5.11.1 Remote Code Execution
- CVE-2025-712573 PoCsBMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Authentication Bypass
- CVE-2025-712582 PoCsBMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in searchWeb
- CVE-2025-712592 PoCsBMC FootPrints ITSM 20.20.02 <= 20.24.01.001 Blind SSRF in externalfeed/RSS
- CVE-2025-712603 PoCsBMC FootPrints ITSM 20.20.02 <= 20.24.01.001 VIEWSTATE Deserialization RCE
- CVE-2025-712842 PoCsSynway SMG Gateway Management Software OS Command Injection via radius_address
- CVE-2025-713161 PoCSQLite sqldiff remote code execution via argument injection
- CVE-2025-713171 PoCNetMan 204 Hard-coded Backdoor Credentials
- CVE-2025-713181 PoCNetMan 204 Missing Authentication for Administrative Functions
- CVE-2025-713192 PoCsimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
- CVE-2025-713201 PoCpicklescan - Remote Code Execution via Incomplete Disallowed Inputs
- CVE-2025-713221 PoCPickleScan - Unsafe Globals Check Bypass via pty.spawn Function
- CVE-2025-713231 PoCpicklescan - Remote Code Execution via Unblocked ctypes Module
- CVE-2025-713241 PoCFlowise - Arbitrary File Read via chatId Parameter
- CVE-2025-713261 PoCAVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation
- CVE-2025-713291 PoCimage-size 2.0.2 Denial of Service via Infinite Loop in JXL/HEIF Parser
- CVE-2025-713301 PoCimage-size 2.0.2 Denial of Service via Malformed ICNS Image Parsing
- CVE-2025-713321 PoCFlowise - SQL Injection in importChatflows API via chatflow.id Parameter
- CVE-2025-713341 PoCFlowise - Arbitrary File Access via Missing Chat Flow ID Validation
- CVE-2025-713391 PoCPicklescan - Arbitrary Code Execution via numpy.f2py.crackfortran._eval_length Gadget
- CVE-2025-713511 PoCpicklescan - Remote Code Execution via timeit.timeit() Detection Bypass
- CVE-2025-713821 PoCMuPDF < 1.27.0-rc1 Stack Exhaustion DoS via EPUB CSS Rendering
- CVE-2025-713831 PoCDbit WIFI4 N300 1.0.0 devices allow the management interface to be crashed via a request (from the local Wi-Fi network) that lacks a…
- CVE-2025-713842 PoCsDbit WIFI4 N300 1.0.0 devices allows administrators (from the local Wi-Fi network) to execute OS commands by leveraging a stack-based…
- CVE-2025-713891 PoCCal.com before 5.9.9 Remote Code Execution via RSC
- CVE-2025-714051 PoCgo-chi chi before v5.2.2 Open Redirect via RedirectSlashes
- CVE-2025-714081 PoCNLTK < 3.9.3 Eval Injection via collocations.py Command-Line Arguments