CVE-2025-8000 to CVE-2025-8999

448 CVEs with public proof-of-concept exploits.

• CVE-2025-80141 PoCAllocation of Resources Without Limits or Throttling in GitLab
• CVE-2025-80171 PoCTenda AC7 httpd setMacFilterCfg formSetMacFilterCfg stack-based overflow
• CVE-2025-80182 PoCscode-projects Food Ordering Review System reservation_page.php sql injection
• CVE-2025-80191 PoCShenzhen Libituo Technology LBT-T300-T310 appy.cgi sub_40B6F0 buffer overflow
• CVE-2025-80431 PoCIncorrect URL truncation
• CVE-2025-80452 PoCsMali GPU Kernel Driver allows improper GPU processing operations
• CVE-2025-80461 PoCInjection Guard < 1.2.8 - Reflected XSS via $_SERVER['REQUEST_URI']
• CVE-2025-80471 PoCMultiple Plugins from itayamar - Supply Chain Compromise
• CVE-2025-80601 PoCTenda AC23 httpd setMacFilterCfg sub_46C940 stack-based overflow
• CVE-2025-80613 PoCsA potential insufficient access control vulnerability was reported in the Lenovo Dispatcher 3.0 and Dispatcher 3.1 drivers used by some…
• CVE-2025-80671 PoCUdisks: out-of-bounds read in udisks daemon
• CVE-2025-80811 PoCElementor <= 3.30.2 - Authenticated (Administrator+) Arbitrary File Read via Image Import
• CVE-2025-80821 PoCVuetify XSS via unsanitized 'titleDateFormat' in 'VDatePicker'
• CVE-2025-80831 PoCVuetify Prototype Pollution via Preset options
• CVE-2025-80852 PoCsDitty < 3.1.58 - Unauthenticated SSRF
• CVE-2025-808835 PoCsKEVPath traversal vulnerability in WinRAR
• CVE-2025-80991 PoCAllocation of Resources Without Limits or Throttling in GitLab
• CVE-2025-811019 PoCsKEVFile overwrite in file update API in Gogs
• CVE-2025-81131 PoCEbook Store < 5.8015 - Reflected XSS via $_SERVER['REQUEST_URI']
• CVE-2025-81151 PoCPHPGurukul Taxi Stand Management System new-autoortaxi-entry-form.php cross site scripting
• CVE-2025-81231 PoCdeerwms deer-wms-2 edit sql injection
• CVE-2025-81241 PoCdeerwms deer-wms-2 unallocatedList sql injection
• CVE-2025-81251 PoCdeerwms deer-wms-2 allocatedList sql injection
• CVE-2025-81261 PoCdeerwms deer-wms-2 export sql injection
• CVE-2025-81271 PoCdeerwms deer-wms-2 list sql injection
• CVE-2025-81281 PoCzhousg letao product.js unrestricted upload
• CVE-2025-81292 PoCsKoaJS Koa HTTP Header response.js back redirect
• CVE-2025-81311 PoCTenda AC20 SetStaticRouteCfg stack-based overflow
• CVE-2025-81321 PoCyanyutao0402 ChanCMS utils.js delfile path traversal
• CVE-2025-81331 PoCyanyutao0402 ChanCMS gather.js getArticle server-side request forgery
• CVE-2025-81341 PoCPHPGurukul BP Monitoring Management System bwdates-report-result.php sql injection
• CVE-2025-81351 PoCitsourcecode Insurance Management System updateAgent.php sql injection
• CVE-2025-81361 PoCTOTOLINK A702R HTTP POST Request formFilter buffer overflow
• CVE-2025-81371 PoCTOTOLINK A702R HTTP POST Request formIpQoS buffer overflow
• CVE-2025-81381 PoCTOTOLINK A702R HTTP POST Request formOneKeyAccessButton buffer overflow
• CVE-2025-81391 PoCTOTOLINK A702R HTTP POST Request formPortFw buffer overflow
• CVE-2025-81401 PoCTOTOLINK A702R HTTP POST Request formWlanMultipleAP buffer overflow
• CVE-2025-81561 PoCPHPGurukul User Registration & Login and User Management lastsevendays-reg-users.php sql injection
• CVE-2025-81571 PoCPHPGurukul User Registration & Login and User Management lastthirtyays-reg-users.php sql injection
• CVE-2025-81581 PoCPHPGurukul Login and User Management System yesterday-reg-users.php sql injection
• CVE-2025-81591 PoCD-Link DIR-513 HTTP POST Request formLanguageChange stack-based overflow
• CVE-2025-81601 PoCTenda AC20 httpd SetSysTimeCfg buffer overflow
• CVE-2025-81611 PoCdeerwms deer-wms-2 export sql injection
• CVE-2025-81621 PoCdeerwms deer-wms-2 list sql injection
• CVE-2025-81631 PoCdeerwms deer-wms-2 list sql injection
• CVE-2025-81641 PoCcode-projects Public Chat Room send_message.php sql injection
• CVE-2025-81651 PoCcode-projects Food Review System approve_reservation.php sql injection
• CVE-2025-81661 PoCcode-projects Church Donation System HTTP POST Request index.php sql injection
• CVE-2025-81671 PoCcode-projects Church Donation System edit_members.php cross site scripting
• CVE-2025-81681 PoCD-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow
• CVE-2025-81691 PoCD-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow
• CVE-2025-81701 PoCTOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow
• CVE-2025-81711 PoCcode-projects Document Management System insert.php unrestricted upload
• CVE-2025-81721 PoCitsourcecode Employee Management System index.php sql injection
• CVE-2025-81731 PoC1000 Projects ABC Courier Management System Add_reciver.php sql injection
• CVE-2025-81741 PoCcode-projects Voting System candidates_add.php unrestricted upload
• CVE-2025-81751 PoCD-Link DI-8400 jhttpd usb_paswd.asp null pointer dereference
• CVE-2025-81761 PoCLibTIFF tiffmedian.c get_histogram use after free
• CVE-2025-81781 PoCTenda AC10 RequestsProcessLaid heap-based overflow
• CVE-2025-81791 PoCPHPGurukul Local Services Search Engine Management System changeimage.php sql injection
• CVE-2025-81801 PoCTenda CH22 deleteUserName formdeleteUserName buffer overflow
• CVE-2025-81821 PoCTenda AC18 Samba smb.conf weak password
• CVE-2025-81841 PoCD-Link DIR-513 HTTP POST Request formSetWanL2TPtriggers formSetWanL2TPcallback stack-based overflow
• CVE-2025-81851 PoC1000 Projects ABC Courier Management System getbyid.php sql injection
• CVE-2025-81861 PoCCampcodes Courier Management System edit_branch.php sql injection
• CVE-2025-81871 PoCCampcodes Courier Management System edit_parcel.php sql injection
• CVE-2025-81881 PoCCampcodes Courier Management System edit_staff.php sql injection
• CVE-2025-81891 PoCCampcodes Courier Management System edit_user.php sql injection
• CVE-2025-81901 PoCCampcodes Courier Management System print_pdets.php sql injection
• CVE-2025-81914 PoCsmacrozheng mall Swagger UI index.html cross site scripting
• CVE-2025-82031 PoCJingmen Zeyou Large File Upload Control index.jsp sql injection
• CVE-2025-82041 PoCComodo Dragon HSTS security check
• CVE-2025-82051 PoCComodo Dragon IP DNS Leakage Detector cleartext transmission
• CVE-2025-82061 PoCComodo Dragon IP DNS Leakage Detector cross site scripting
• CVE-2025-82071 PoCCanara ai1 Mobile Banking App com.canarabank.mobility AndroidManifest.xml improper export of android application components
• CVE-2025-82101 PoCYeelink Yeelight App com.yeelight.cherry AndroidManifest.xml improper export of android application components
• CVE-2025-82111 PoCRoothub SystemConfigAdminController.java edit cross site scripting
• CVE-2025-82201 PoCEngeman Web Password Recovery RecoveryPass sql injection
• CVE-2025-82211 PoCjerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsCustController.java goodsSearch cross site scripting
• CVE-2025-82221 PoCjerryshensjf JPACookieShop 蛋糕商城JPA版 GoodsController.java cross site scripting
• CVE-2025-82231 PoCjerryshensjf JPACookieShop 蛋糕商城JPA版 AdminTypeCustController.java cross-site request forgery
• CVE-2025-82241 PoCGNU Binutils BFD Library elf.c bfd_elf_get_str_section null pointer dereference
• CVE-2025-82261 PoCyanyutao0402 ChanCMS find information disclosure
• CVE-2025-82271 PoCyanyutao0402 ChanCMS getArticle deserialization
• CVE-2025-82281 PoCyanyutao0402 ChanCMS getPages server-side request forgery
• CVE-2025-82291 PoCCampcodes Courier Management System parcel_list.php sql injection
• CVE-2025-82301 PoCCampcodes Courier Management System manage_user.php sql injection
• CVE-2025-82311 PoCD-Link DIR-890L UART Port rgbin hard-coded credentials
• CVE-2025-82321 PoCcode-projects Online Ordering System delete_user.php sql injection
• CVE-2025-82331 PoCcode-projects Online Ordering System user.php sql injection
• CVE-2025-82341 PoCcode-projects Online Ordering System delete_member.php sql injection
• CVE-2025-82351 PoCcode-projects Online Ordering System product.php sql injection
• CVE-2025-82361 PoCcode-projects Online Ordering System edit_product.php sql injection
• CVE-2025-82371 PoCcode-projects Exam Form Submission update_s1.php sql injection
• CVE-2025-82381 PoCcode-projects Exam Form Submission update_s2.php sql injection
• CVE-2025-82391 PoCcode-projects Exam Form Submission admin sql injection
• CVE-2025-82401 PoCcode-projects Exam Form Submission dashboard.php sql injection
• CVE-2025-82411 PoC1000 Projects ABC Courier Management System report.php sql injection
• CVE-2025-82421 PoCTOTOLINK X15 HTTP POST Request formFilter buffer overflow
• CVE-2025-82431 PoCTOTOLINK X15 HTTP POST Request formMapDel buffer overflow
• CVE-2025-82441 PoCTOTOLINK X15 HTTP POST Request formMapDelDevice buffer overflow
• CVE-2025-82451 PoCTOTOLINK X15 HTTP POST Request formMultiAPVLAN buffer overflow
• CVE-2025-82461 PoCTOTOLINK X15 HTTP POST Request formRoute buffer overflow
• CVE-2025-82471 PoCProjectworlds Online Admission System admin.php sql injection
• CVE-2025-82481 PoCcode-projects Online Ordering System signup.php sql injection
• CVE-2025-82491 PoCcode-projects Exam Form Submission update_s3.php sql injection
• CVE-2025-82501 PoCcode-projects Exam Form Submission update_s4.php sql injection
• CVE-2025-82511 PoCcode-projects Exam Form Submission delete_s4.php sql injection
• CVE-2025-82521 PoCcode-projects Exam Form Submission delete_s5.php sql injection
• CVE-2025-82531 PoCcode-projects Exam Form Submission delete_s6.php sql injection
• CVE-2025-82541 PoCCampcodes Courier Management System view_parcel.php sql injection
• CVE-2025-82551 PoCcode-projects Exam Form Submission register.php unrestricted upload
• CVE-2025-82561 PoCcode-projects Online Ordering System product.php unrestricted upload
• CVE-2025-82571 PoCLobby Universe Lobby App com.maverick.lobby AndroidManifest.xml improper export of android application components
• CVE-2025-82581 PoCCool Mo Maigcal Number App com.sdmagic.number AndroidManifest.xml improper export of android application components
• CVE-2025-82591 PoCVaelsys VaelsysV4 Web interface vgrid_server.php execute_DataObjectProc os command injection
• CVE-2025-82601 PoCVaelsys VaelsysV4 Web interface vgrid_server.php weak hash
• CVE-2025-82611 PoCVaelsys VaelsysV4 User Creation vgrid_server.php improper authorization
• CVE-2025-82651 PoC299Ko CMS File Management view unrestricted upload
• CVE-2025-82663 PoCsyanyutao0402 ChanCMS collect.js getArticle deserialization
• CVE-2025-82673 PoCsVersions of the package ssrfcheck before 1.2.0 are vulnerable to Server-Side Request Forgery (SSRF) due to an incomplete denylist of IP…
• CVE-2025-82691 PoCcode-projects Exam Form Submission delete_s1.php sql injection
• CVE-2025-82701 PoCcode-projects Exam Form Submission delete_s2.php sql injection
• CVE-2025-82711 PoCcode-projects Exam Form Submission delete_s3.php sql injection
• CVE-2025-82721 PoCcode-projects Exam Form Submission update_fst.php sql injection
• CVE-2025-82731 PoCcode-projects Exam Form Submission update_s8.php sql injection
• CVE-2025-82741 PoCCampcodes Online Recruitment Management System ajax.php sql injection
• CVE-2025-82751 PoCbsc Peru Cocktails App bsc.devy.peru_cocktails AndroidManifest.xml improper export of android application components
• CVE-2025-82801 PoCContact Form 7 reCAPTCHA <= 1.2.0 - Reflected XSS via $_SERVER['REQUEST_URI']
• CVE-2025-82811 PoCWP Talroo <= 2.4 - Reflected XSS
• CVE-2025-82821 PoCSureForms < 1.9.1 - Admin+ Stored XSS
• CVE-2025-82861 PoCGüralp Systems FMUS Series and MIN Series Devices
• CVE-2025-83111 PoCdotCMS versions 24.03.22 and after, identified a Boolean-based blind SQLi vulnerability in the /api/v1/contenttype endpoint. This endpoint…
• CVE-2025-83261 PoCcode-projects Exam Form Submission delete_s7.php sql injection
• CVE-2025-83271 PoCcode-projects Exam Form Submission delete_s8.php sql injection
• CVE-2025-83281 PoCcode-projects Exam Form Submission register.php sql injection
• CVE-2025-83291 PoCcode-projects Vehicle Management filter3.php sql injection
• CVE-2025-83301 PoCcode-projects Vehicle Management edit1.php sql injection
• CVE-2025-83311 PoCcode-projects Online Farm System forgot_pass.php sql injection
• CVE-2025-83321 PoCcode-projects Online Farm System register.php sql injection
• CVE-2025-83331 PoCcode-projects Online Farm System categoryvalue.php sql injection
• CVE-2025-83341 PoCCampcodes Online Recruitment Management System ajax.php sql injection
• CVE-2025-83351 PoCcode-projects Simple Car Rental System cross-site request forgery
• CVE-2025-83361 PoCCampcodes Online Recruitment Management System ajax.php sql injection
• CVE-2025-83371 PoCcode-projects Simple Car Rental System add_vehicles.php cross site scripting
• CVE-2025-83381 PoCprojectworlds Online Admission System adminac.php sql injection
• CVE-2025-83391 PoCcode-projects Intern Membership Management System student_login.php sql injection
• CVE-2025-83401 PoCcode-projects Intern Membership Management System Error Message fill_details.php cross site scripting
• CVE-2025-83431 PoCopenviglet shio ShStaticFileAPI.java shStaticFilePreUpload path traversal
• CVE-2025-83441 PoCopenviglet shio ShStaticFileAPI.java shStaticFileUpload unrestricted upload
• CVE-2025-83451 PoCShanghai Lingdang Information Technology Lingdang CRM yunzhijiaApi.php delete_user sql injection
• CVE-2025-83461 PoCPortabilis i-Educar educar_aluno_lst.php cross site scripting
• CVE-2025-83471 PoCKehua Charging Pile Cloud Platform findAllTask sql injection
• CVE-2025-83481 PoCKehua Charging Pile Cloud Platform home improper authentication
• CVE-2025-83591 PoCAdForest <= 6.0.9 - Authentication Bypass to Admin
• CVE-2025-83651 PoCPortabilis i-Educar atendidos_cad.php cross site scripting
• CVE-2025-83661 PoCPortabilis i-Educar educar_servidor_lst.php cross site scripting
• CVE-2025-83671 PoCPortabilis i-Educar funcionario_vinculo_lst.php cross site scripting
• CVE-2025-83681 PoCPortabilis i-Educar pesquisa_pessoa_lst.php cross site scripting
• CVE-2025-83691 PoCPortabilis i-Educar educar_avaliacao_desempenho_lst.php cross site scripting
• CVE-2025-83701 PoCPortabilis i-Educar educar_escolaridade_lst.php cross site scripting
• CVE-2025-83711 PoCcode-projects Exam Form Submission update_s5.php sql injection
• CVE-2025-83721 PoCcode-projects Exam Form Submission update_s7.php sql injection
• CVE-2025-83731 PoCcode-projects Vehicle Management print.php sql injection
• CVE-2025-83741 PoCcode-projects Vehicle Management addcompany.php sql injection
• CVE-2025-83751 PoCcode-projects Vehicle Management addvehicle.php sql injection
• CVE-2025-83761 PoCcode-projects Vehicle Management updatebal.php sql injection
• CVE-2025-83781 PoCCampcodes Online Hotel Reservation System Login index.php sql injection
• CVE-2025-83791 PoCCampcodes Online Hotel Reservation System edit_room.php unrestricted upload
• CVE-2025-83801 PoCCampcodes Online Hotel Reservation System add_query_account.php cross site scripting
• CVE-2025-83811 PoCCampcodes Online Hotel Reservation System add_reserve.php sql injection
• CVE-2025-83821 PoCCampcodes Online Hotel Reservation System edit_room.php sql injection
• CVE-2025-84051 PoCImproper Encoding or Escaping of Output in GitLab
• CVE-2025-84071 PoCcode-projects Vehicle Management filter2.php sql injection
• CVE-2025-84081 PoCcode-projects Vehicle Management filter1.php sql injection
• CVE-2025-84091 PoCcode-projects Vehicle Management filter.php sql injection
• CVE-2025-84221 PoCPropovoice <= 1.7.6.7 - Unauthenticated Arbitrary File Read
• CVE-2025-84311 PoCPHPGurukul Boat Booking System add-boat.php sql injection
• CVE-2025-84331 PoCcode-projects Document Management System dell.php unlink path traversal
• CVE-2025-84341 PoCcode-projects Online Movie Streaming admin.php authorization
• CVE-2025-84351 PoCcode-projects Online Movie Streaming admin-control.php authorization
• CVE-2025-84361 PoCprojectworlds Online Admission System viewdoc.php sql injection
• CVE-2025-84371 PoCcode-projects Kitchen Treasure userregistration.php sql injection
• CVE-2025-84381 PoCcode-projects Wazifa System postpublish.php sql injection
• CVE-2025-84391 PoCcode-projects Wazifa System updatesettings.php sql injection
• CVE-2025-84411 PoCcode-projects Online Medicine Guide pharsignup.php sql injection
• CVE-2025-84421 PoCcode-projects Online Medicine Guide cussignup.php sql injection
• CVE-2025-84431 PoCcode-projects Online Medicine Guide login.php sql injection
• CVE-2025-84521 PoCUnauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., Toshiba Tec, and Konica Minolta, Inc.
• CVE-2025-84661 PoCcode-projects Online Farm System forgot_passfarmer.php sql injection
• CVE-2025-84671 PoCcode-projects Wazifa System regcontrol.php sql injection
• CVE-2025-84681 PoCcode-projects Wazifa System reset.php sql injection
• CVE-2025-84691 PoCSourceCodester Online Hotel Reservation System deletegallery.php sql injection
• CVE-2025-84701 PoCSourceCodester Online Hotel Reservation System deleteroom.php sql injection
• CVE-2025-84713 PoCsprojectworlds Online Admission System adminlogin.php sql injection
• CVE-2025-84891 PoCKing Addons for Elementor – Free Elements, Widgets, Templates, and Features for Elementor 24.12.92 - 51.1.14 - Unauthenticated Privilege…
• CVE-2025-84931 PoCcode-projects Intern Membership Management System edit_student_query.php sql injection
• CVE-2025-84941 PoCcode-projects Intern Membership Management System delete_student.php sql injection
• CVE-2025-84951 PoCcode-projects Intern Membership Management System edit_admin_query.php sql injection
• CVE-2025-84961 PoCprojectworlds Online Admission System viewform.php sql injection
• CVE-2025-84971 PoCcode-projects Online Medicine Guide cusfindphar2.php sql injection
• CVE-2025-84981 PoCcode-projects Online Medicine Guide index.php sql injection
• CVE-2025-84991 PoCcode-projects Online Medicine Guide cusfindambulence2.php sql injection
• CVE-2025-85001 PoCcode-projects Human Resource Integrated System action.php sql injection
• CVE-2025-85011 PoCcode-projects Human Resource Integrated System action.php cross site scripting
• CVE-2025-85021 PoCcode-projects Online Medicine Guide changepass.php sql injection
• CVE-2025-85031 PoCcode-projects Online Medicine Guide adaddmed.php sql injection
• CVE-2025-85041 PoCcode-projects Kitchen Treasure userregistration.php unrestricted upload
• CVE-2025-85051 PoC495300897 wx-shop cross-site request forgery
• CVE-2025-85061 PoC495300897 wx-shop editUI cross site scripting
• CVE-2025-85071 PoCPortabilis i-Educar educar_funcao_lst.php cross site scripting
• CVE-2025-85081 PoCPortabilis i-Educar educar_avaliacao_desempenho_cad.php cross site scripting
• CVE-2025-85091 PoCPortabilis i-Educar educar_servidor_cad.php cross site scripting
• CVE-2025-85101 PoCPortabilis i-Educar educar_matricula_lst.php Gerar cross site scripting
• CVE-2025-85111 PoCPortabilis i-Diario Observações diario-de-observacoes cross site scripting
• CVE-2025-85121 PoCTVB Big Big Shop App hk.com.tvb.bigbigshop AndroidManifest.xml improper export of android application components
• CVE-2025-85131 PoCCaixin News App com.caixin.news AndroidManifest.xml improper export of android application components
• CVE-2025-85161 PoCKingdee Cloud-Starry-Sky Enterprise Edition IIS-K3CloudMiniApp FileUploadAction.class path traversal
• CVE-2025-85172 PoCsgivanz Vvveb session fixiation
• CVE-2025-85183 PoCsgivanz Vvveb Code Editor code.php save code injection
• CVE-2025-85191 PoCgivanz Vvveb Drag-and-Drop Editor editor information disclosure
• CVE-2025-85201 PoCgivanz Vvveb Drag-and-Drop Editor editor server-side request forgery
• CVE-2025-85211 PoCgivanz Vvveb Add Type post-types cross site scripting
• CVE-2025-85221 PoCgivanz Vvvebjs node.js save.php path traversal
• CVE-2025-85231 PoCRiderLike Fruit Crush-Brain App com.fruitcrush.fun AndroidManifest.xml improper export of android application components
• CVE-2025-85241 PoCBoquan DotWallet App com.boquanhash.dotwallet AndroidManifest.xml improper export of android application components
• CVE-2025-85251 PoCExrick xboot Spring Boot Admin/Spring Actuator information disclosure
• CVE-2025-85261 PoCExrick xboot UploadController.java upload unrestricted upload
• CVE-2025-85271 PoCExrick xboot Swagger SecurityController.java server-side request forgery
• CVE-2025-85281 PoCExrick xboot getMenuList sensitive information in a cookie
• CVE-2025-85291 PoCcloudfavorites favorites-web CollectController.java getCollectLogoUrl server-side request forgery
• CVE-2025-85301 PoCelunez eladmin Druid application-prod.yml default credentials
• CVE-2025-85341 PoClibtiff tiff2ps tiff2ps.c PS_Lvl2page null pointer dereference
• CVE-2025-85352 PoCscronoh NanoVault xrb URL main.js executeJavaScript cross site scripting
• CVE-2025-85372 PoCsAxiomatic Bento4 mp4decrypt Mp4Decrypt.cpp SetDataSize allocation of resources
• CVE-2025-85381 PoCPortabilis i-Educar novo cross site scripting
• CVE-2025-85391 PoCPortabilis i-Educar public_distrito_cad.php cross site scripting
• CVE-2025-85401 PoCPortabilis i-Educar public_municipio_cad.php cross site scripting
• CVE-2025-85411 PoCPortabilis i-Educar public_uf_cad.php cross site scripting
• CVE-2025-85421 PoCPortabilis i-Educar empresas_cad.php cross site scripting
• CVE-2025-85431 PoCPortabilis i-Educar educar_raca_cad.php cross site scripting
• CVE-2025-85441 PoCPortabilis i-Educar edit cross site scripting
• CVE-2025-85451 PoCPortabilis i-Educar educar_motivo_afastamento_cad.php cross site scripting
• CVE-2025-85461 PoCatjiu pybbs Verification Code login Captcha
• CVE-2025-85471 PoCatjiu pybbs Email Verification improper authorization
• CVE-2025-85481 PoCatjiu pybbs Registered Email SettingsApiController.java sendEmailCode information exposure
• CVE-2025-85491 PoCatjiu pybbs UserAdminController.java update weak password
• CVE-2025-85503 PoCsatjiu pybbs list cross site scripting
• CVE-2025-85511 PoCatjiu pybbs list cross site scripting
• CVE-2025-85521 PoCatjiu pybbs list cross site scripting
• CVE-2025-85531 PoCatjiu pybbs list cross site scripting
• CVE-2025-85541 PoCatjiu pybbs list cross site scripting
• CVE-2025-85551 PoCatjiu pybbs search cross site scripting
• CVE-2025-85701 PoCBeyondCart Connector <= 3.0.1 - Missing Configuration of JWT Secret to Unauthenticated Privilege Escalation via determine_current_user…
• CVE-2025-85711 PoCConcrete CMS 9 through 9.4.2 and below 8.5.21 is vulnerable to Reflected Cross-Site Scripting (XSS) in Conversation Messages Dashboard Page
• CVE-2025-85731 PoCConcrete CMS 9 through 9.4.2 is vulnerable to Stored XSS from Home Folder on Members Dashboard page
• CVE-2025-85841 PoClibav AVI File Parser buffer.c av_buffer_unref null pointer dereference
• CVE-2025-85851 PoClibav DSS File Demuxer avconv.c main double free
• CVE-2025-85861 PoClibav MPEG File Parser utils.c ff_seek_frame_binary null pointer dereference
• CVE-2025-85941 PoCPz-LinkCard < 2.5.7 - Contributor+ SSRF
• CVE-2025-86251 PoCCopypress Rest API 1.1 - 1.2 - Missing Configurable JWT Secret and File-Type Validation to Unauthenticated Remote Code Execution
• CVE-2025-86651 PoCagno-agi agno Model Context Protocol mcp.py MultiMCPTools os command injection
• CVE-2025-86671 PoCSkyworkAI DeepResearchAgent tools.py from_mcp os command injection
• CVE-2025-86714 PoCsCVE-2025-8671
• CVE-2025-86971 PoCagentUniverse MCPSessionManager/MCPTool/MCPToolkit StdioServerParameters os command injection
• CVE-2025-86981 PoCOpen5GS AMF Service nsmf-handler.c amf_nsmf_pdusession_handle_release_sm_context assertion
• CVE-2025-87011 PoCWanzhou WOES Intelligent Optimization Energy Saving System GetPageList sql injection
• CVE-2025-87021 PoCWanzhou WOES Intelligent Optimization Energy Saving System Historical Data Query Module GetVariableByOneIDNew sql injection
• CVE-2025-87031 PoCWanzhou WOES Intelligent Optimization Energy Saving System Environmental Real-Time Data Module GetAreaTrendChartData sql injection
• CVE-2025-87041 PoCWanzhou WOES Intelligent Optimization Energy Saving System Analysis Conclusion Query Module GetAlarmResultProcessList sql injection
• CVE-2025-87051 PoCWanzhou WOES Intelligent Optimization Energy Saving System Energy Overview Module GetTargetConfig sql injection
• CVE-2025-87061 PoCWanzhou WOES Intelligent Optimization Energy Saving System Energy Overview Module CreateFunctionLog sql injection
• CVE-2025-87071 PoCHuuge Box App com.huuge.game.zjbox AndroidManifest.xml improper export of android application components
• CVE-2025-87081 PoCAntabot White-Jotter com.gm.wj.config.ShiroConfiguration ShiroConfiguration.java CookieRememberMeManager deserialization
• CVE-2025-87141 PoCPostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client
• CVE-2025-87231 PoCCloudflare Image Resizing <= 1.5.6 - Missing Authentication to Unauthenticated Remote Code Execution via rest_pre_dispatch Hook
• CVE-2025-87291 PoCMigoXLab LMeterX upload_service.py process_cert_files path traversal
• CVE-2025-87303 PoCsBelkin F9K1009/F9K1010 Web Interface hard-coded credentials
• CVE-2025-87311 PoCTRENDnet TI-G160i/TI-PG102i/TPL-430AP SSH Service default credentials
• CVE-2025-87321 PoClibxml2 xmlcatalog xmlParseSGMLCatalog recursion
• CVE-2025-87351 PoCGNU cflow Lexer c.c yylex null pointer dereference
• CVE-2025-87361 PoCGNU cflow Lexer c.c yylex buffer overflow
• CVE-2025-87371 PoCzlt2000 microservices-platform OauthLogoutSuccessHandler.java onLogoutSuccess redirect
• CVE-2025-87381 PoCzlt2000 microservices-platform Spring Actuator Interface actuator information disclosure
• CVE-2025-87391 PoCzhenfeng13 My-Blog save cross-site request forgery
• CVE-2025-87401 PoCzhenfeng13 My-Blog Category save cross site scripting
• CVE-2025-87411 PoCmacrozheng mall login cleartext transmission
• CVE-2025-87431 PoCScada-LTS Virtual Data Source Property data_source_edit.shtm cross site scripting
• CVE-2025-87451 PoCWeee RICEPO App com.ricepo.app AndroidManifest.xml improper export of android application components
• CVE-2025-87462 PoCsGNU libopts __strstr_sse2 memory corruption
• CVE-2025-87471 PoCKeras safe_mode bypass allows arbitrary code execution when loading a malicious model.
• CVE-2025-87501 PoCmacrozheng mall Add Product Page upload cross site scripting
• CVE-2025-87511 PoCProtected Total WebShield Extension Block Page cross site scripting
• CVE-2025-87521 PoCwangzhixuan spring-shiro-training add command injection
• CVE-2025-87531 PoClinlinjava litemall File delete path traversal
• CVE-2025-87551 PoCmacrozheng mall com.macro.mall.portal.controller UmsMemberController.java detail authorization
• CVE-2025-87561 PoCTDuckCloud tduck-platform manage preHandle improper authorization
• CVE-2025-87571 PoCTRENDnet TV-IP110WN Embedded Boa Web Server boa.conf least privilege violation
• CVE-2025-87581 PoCTRENDnet TEW-822DRE vsftpd least privilege violation
• CVE-2025-87591 PoCTRENDnet TN-200 Lighttpd hard-coded key
• CVE-2025-87601 PoCINSTAR 2K+/4K fcgi_server base64_decode buffer overflow
• CVE-2025-87611 PoCINSTAR 2K+/4K Backend IPC Server denial of service
• CVE-2025-87621 PoCINSTAR 2K+/4K UART improper physical access control
• CVE-2025-87641 PoClinlinjava litemall upload unrestricted upload
• CVE-2025-87721 PoCVinades NukeViet Module index.php server-side request forgery
• CVE-2025-87731 PoCDinstar Monitoring Platform 甘肃省危险品库监控平台 login_getPasswordErrorNum.action sql injection
• CVE-2025-87751 PoCQiyuesuo Eelectronic Signature Platform Scheduled Task upload execute unrestricted upload
• CVE-2025-87841 PoCPortabilis i-Educar Cadastrar Vínculo funcionario_vinculo_cad.php cross site scripting
• CVE-2025-87851 PoCPortabilis i-Educar educar_usuario_lst.php cross site scripting
• CVE-2025-87861 PoCPortabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting
• CVE-2025-87871 PoCPortabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting
• CVE-2025-87881 PoCPortabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting
• CVE-2025-87891 PoCPortabilis i-Educar API Endpoint Diario authorization
• CVE-2025-87901 PoCPortabilis i-Educar API Endpoint pessoa improper authorization
• CVE-2025-87911 PoCLitmusChaos Litmus list_projects improper authorization
• CVE-2025-87921 PoCLitmusChaos Litmus client-side enforcement of server-side security
• CVE-2025-87931 PoCLitmusChaos Litmus resource injection
• CVE-2025-87941 PoCLitmusChaos Litmus LocalStorage authorization
• CVE-2025-87951 PoCLitmusChaos Litmus login access control
• CVE-2025-87961 PoCLitmusChaos Litmus Delete Request delete_project authorization
• CVE-2025-87971 PoCLitmusChaos Litmus LocalStorage permission
• CVE-2025-87981 PoCoitcode samarium Create Product product unrestricted upload
• CVE-2025-87991 PoCOpen5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of service
• CVE-2025-88011 PoCOpen5GS AMF gmm-sm.c gmm_state_exception denial of service
• CVE-2025-88021 PoCOpen5GS SMF smf-sm.c smf_state_operational denial of service
• CVE-2025-88041 PoCOpen5GS AMF ngap_build_downlink_nas_transport assertion
• CVE-2025-88051 PoCOpen5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service
• CVE-2025-88071 PoCxujeff tianti 天梯 save authorization
• CVE-2025-88081 PoCxujeff tianti 天梯 com.jeff.tianti.controller save exportOrder csv injection
• CVE-2025-88091 PoCcode-projects Online Medicine Guide addelidetails.php sql injection
• CVE-2025-88101 PoCTenda AC20 SetFirewallCfg strcpy stack-based overflow
• CVE-2025-88111 PoCcode-projects Simple Art Gallery registration.php sql injection
• CVE-2025-88121 PoCatjiu pybbs Admin Panel settings cross site scripting
• CVE-2025-88131 PoCatjiu pybbs IndexController.java changeLanguage redirect
• CVE-2025-88141 PoCatjiu pybbs CookieUtil.java setCookie cross-site request forgery
• CVE-2025-88151 PoC猫宁i Morning Shiro Configuration index path traversal
• CVE-2025-88161 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow
• CVE-2025-88171 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflow
• CVE-2025-88181 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injection
• CVE-2025-88191 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflow
• CVE-2025-88201 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow
• CVE-2025-88211 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasic os command injection
• CVE-2025-88221 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflow
• CVE-2025-88231 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDeviceName os command injection
• CVE-2025-88241 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setRIP stack-based overflow
• CVE-2025-88251 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto os command injection
• CVE-2025-88261 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_rp_autochannel stack-based overflow
• CVE-2025-88271 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_inspect_cross_band os command injection
• CVE-2025-88281 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setIpv6 ipv6cmd os command injection
• CVE-2025-88291 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasicAuto um_red os command injection
• CVE-2025-88301 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan sub_3517C os command injection
• CVE-2025-88311 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 remoteManagement stack-based overflow
• CVE-2025-88321 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setDMZ stack-based overflow
• CVE-2025-88331 PoCLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 langSwitchBack stack-based overflow
• CVE-2025-88352 PoCsJasPer Image Color Space Conversion jas_image.c jas_image_chclrspc null pointer dereference
• CVE-2025-88362 PoCsJasPer JPEG2000 Encoder jpc_enc.c jpc_floorlog2 assertion
• CVE-2025-88372 PoCsJasPer JPEG2000 File jpc_dec.c jpc_dec_dump use after free
• CVE-2025-88381 PoCWinterChenS my-site Backend admin preHandle improper authentication
• CVE-2025-88391 PoCjshERP Endpoint addUser improper authorization
• CVE-2025-88401 PoCjshERP Endpoint deleteBatch improper authorization
• CVE-2025-88411 PoCzlt2000 microservices-platform FileController.java upload unrestricted upload
• CVE-2025-88421 PoCNASM Netwide Assember preproc.c do_directive use after free
• CVE-2025-88431 PoCNASM Netwide Assember outmacho.c macho_no_dead_strip heap-based overflow
• CVE-2025-88441 PoCNASM Netwide Assember preproc.c parse_smacro_template null pointer dereference
• CVE-2025-88451 PoCNASM Netwide Assember nasm.c assemble_file stack-based overflow
• CVE-2025-88461 PoCNASM Netwide Assember parser.c parse_line stack-based overflow
• CVE-2025-88471 PoCyangzongzhuan RuoYi edit cross site scripting
• CVE-2025-88481 PoCHTML Injection in Accept-Language Header in danny-avila/librechat
• CVE-2025-88521 PoCWuKongOpenSource WukongCRM API Response upload information exposure
• CVE-2025-88591 PoCcode-projects eBlog Site File Upload save-slider.php unrestricted upload
• CVE-2025-88681 PoCChef Automate compliance service SQL Injection Vulnerability
• CVE-2025-88751 PoCKEVInsecure Deserialization Vulnerability
• CVE-2025-88761 PoCKEVCommand Injection Vulnerability
• CVE-2025-88892 PoCsCompress Then Upload < 1.0.5 - Admin+ Arbitrary File Upload
• CVE-2025-89071 PoCH3C M2 NAS Webserver Configuration unnecessary privileges
• CVE-2025-89081 PoCShanghai Lingdang Information Technology Lingdang CRM event.php sql injection
• CVE-2025-89181 PoCPortabilis i-Educar Editar educar_instituicao_cad.php cross site scripting
• CVE-2025-89191 PoCPortabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting
• CVE-2025-89202 PoCsPortabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting
• CVE-2025-89211 PoCcode-projects Job Diary user-apply.php sql injection
• CVE-2025-89221 PoCcode-projects Job Diary admin-inbox.php sql injection
• CVE-2025-89231 PoCcode-projects Job Diary edit-details.php sql injection
• CVE-2025-89241 PoCCampcodes Online Water Billing System viewbill.php sql injection
• CVE-2025-89251 PoCitsourcecode Sports Management System match.php sql injection
• CVE-2025-89261 PoCSourceCodester COVID 19 Testing Management System login.php sql injection
• CVE-2025-89271 PoCmtons mblog Verification Code send_code excessive authentication
• CVE-2025-89281 PoCcode-projects Medical Store Management System Update Medicines UpdateMedicines.java sql injection
• CVE-2025-89291 PoCcode-projects Medical Store Management System MainPanel.java sql injection
• CVE-2025-89301 PoCcode-projects Medical Store Management System Update Company UpdateCompany.java sql injection
• CVE-2025-89311 PoCcode-projects Medical Store Management System ChangePassword.java sql injection
• CVE-2025-89322 PoCs1000 Projects Sales Management System sales.php sql injection
• CVE-2025-89331 PoC1000 Projects Sales Management System sales.php cross site scripting
• CVE-2025-89341 PoC1000 Projects Sales Management System sales.php cross site scripting
• CVE-2025-89351 PoC1000 Projects Sales Management System custcmp.php sql injection
• CVE-2025-89361 PoC1000 Projects Sales Management System dordupdate.php sql injection
• CVE-2025-89371 PoCTOTOLINK N350R formSysCmd command injection
• CVE-2025-89381 PoCTOTOLINK N350R Telnet Service formSysTel backdoor
• CVE-2025-89391 PoCTenda AC20 WifiGuestSet buffer overflow
• CVE-2025-89401 PoCTenda AC20 saveParentControlInfo strcpy buffer overflow
• CVE-2025-89421 PoCWP Hotel Booking < 2.2.3 - Subscriber+ Rating Manipulation
• CVE-2025-89433 PoCsUnsupervised OS command execution leads to remote code execution by unauthenticated network attackers
• CVE-2025-89441 PoCOceanWP < 4.1.2 - Subscriber+ Limited Option Update
• CVE-2025-89451 PoCWp Edit Password Protected < 1.3.5 - Protection Bypass via REST API
• CVE-2025-89461 PoCprojectworlds Online Notes Sharing Platform login.php sql injection
• CVE-2025-89471 PoCprojectworlds Visitor Management System query_data.php sql injection
• CVE-2025-89481 PoCprojectworlds Visitor Management System front.php sql injection
• CVE-2025-89491 PoCD-Link DIR-825 httpd ping_response.cgi get_ping_app_stat stack-based overflow
• CVE-2025-89501 PoCCampcodes Online Recruitment Management System index.php sql injection
• CVE-2025-89511 PoCPHPGurukul Teachers Record Management System search.php sql injection
• CVE-2025-89521 PoCCampcodes Online Flight Booking Management System Login ajax.php sql injection
• CVE-2025-89531 PoCSourceCodester COVID 19 Testing Management System check_availability.php sql injection
• CVE-2025-89541 PoCPHPGurukul Hospital Management System doctor-specilization.php sql injection
• CVE-2025-89551 PoCPHPGurukul Hospital Management System edit-doctor.php sql injection
• CVE-2025-89561 PoCD-Link DIR‑818L ssdpcgi cgibin getenv command injection
• CVE-2025-89571 PoCCampcodes Online Flight Booking Management System flights.php sql injection
• CVE-2025-89581 PoCTenda TX3 fast_setting_wifi_set stack-based overflow
• CVE-2025-89601 PoCCampcodes Online Flight Booking Management System save_airlines.php sql injection
• CVE-2025-89611 PoCLibTIFF tiffcrop tiffcrop.c main memory corruption
• CVE-2025-89621 PoCcode-projects Hostel Management System Login Form hostel_manage.exe stack-based overflow
• CVE-2025-89641 PoCcode-projects Hostel Management System Login hostel_manage.exe improper authentication
• CVE-2025-89651 PoClinlinjava litemall Endpoint AdminStorageController.java create unrestricted upload
• CVE-2025-89661 PoCitsourcecode Online Tour and Travel Management System tax.php sql injection
• CVE-2025-89671 PoCitsourcecode Online Tour and Travel Management System packages.php sql injection
• CVE-2025-89681 PoCitsourcecode Online Tour and Travel Management System disapprove_user.php sql injection
• CVE-2025-89691 PoCitsourcecode Online Tour and Travel Management System approve_user.php sql injection
• CVE-2025-89701 PoCitsourcecode Online Tour and Travel Management System booking.php sql injection
• CVE-2025-89712 PoCsitsourcecode Online Tour and Travel Management System travellers.php sql injection
• CVE-2025-89721 PoCitsourcecode Online Tour and Travel Management System page-login.php sql injection
• CVE-2025-89731 PoCSourceCodester Cashier Queuing System Actions.php sql injection
• CVE-2025-89741 PoClinlinjava litemall JSON Web Token JwtHelper.java hard-coded credentials
• CVE-2025-89752 PoCsgivanz Vvveb edit.tpl cross site scripting
• CVE-2025-89761 PoCgivanz Vvveb Endpoint post cross site scripting
• CVE-2025-89781 PoCD-Link DIR-619L boa FirmwareUpgrade data authenticity
• CVE-2025-89791 PoCTenda AC15 Firmware Update check_fw data authenticity
• CVE-2025-89801 PoCTenda G1 Firmware Update check_upload_file data authenticity
• CVE-2025-89811 PoCitsourcecode Online Tour and Travel Management System payment.php sql injection
• CVE-2025-89821 PoCitsourcecode Online Tour and Travel Management System currency.php sql injection
• CVE-2025-89831 PoCitsourcecode Online Tour and Travel Management System expense.php sql injection
• CVE-2025-89841 PoCitsourcecode Online Tour and Travel Management System expense_category.php sql injection
• CVE-2025-89851 PoCSourceCodester COVID 19 Testing Management System profile.php sql injection
• CVE-2025-89861 PoCSourceCodester COVID 19 Testing Management System search-report-result.php sql injection
• CVE-2025-89871 PoCSourceCodester COVID 19 Testing Management System test-details.php sql injection
• CVE-2025-89881 PoCSourceCodester COVID 19 Testing Management System bwdates-report-result.php sql injection
• CVE-2025-89891 PoCSourceCodester COVID 19 Testing Management System edit-phlebotomist.php sql injection
• CVE-2025-89901 PoCcode-projects Online Medicine Guide browsemdcn.php sql injection
• CVE-2025-89911 PoClinlinjava litemall Business Logic express logic error
• CVE-2025-89921 PoCmtons mblog cross-site request forgery
• CVE-2025-89931 PoCitsourcecode Online Tour and Travel Management System expense_report.php sql injection