Skip to main content
CVE-2025-4867 May 18, 09:15 HIGH POC This Week

A vulnerability was found in Tenda A15 15.13.07.13. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service Tenda A15 Firmware
NVD GitHub VulDB
CVSS 4.0
7.1
EPSS
0.3%
CVE-2025-4848 May 18, 03:15 MEDIUM POC This Month

A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Freefloat
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4847 May 18, 02:15 MEDIUM POC This Month

A vulnerability has been found in FreeFloat FTP Server 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Freefloat
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4846 May 18, 01:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Freefloat Ftp Server Freefloat
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4880 May 18, 13:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi News Portal Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4874 May 18, 12:15 MEDIUM POC This Month

A vulnerability was found in PHPGurukul News Portal Project 4.1 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi News Portal Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4873 May 18, 12:15 MEDIUM POC This Month

A vulnerability has been found in PHPGurukul News Portal 4.1 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi News Portal Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-4875 May 18, 13:15 MEDIUM POC This Month

A vulnerability was found in Campcodes Online Shopping Portal 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Online Shopping Portal Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4900 May 18, 23:15 MEDIUM POC This Week

A vulnerability classified as critical has been found in Campcodes Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4899 May 18, 23:15 MEDIUM POC This Week

A vulnerability was found in Campcodes Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4898 May 18, 22:15 MEDIUM This Month

A vulnerability was found in SourceCodester Student Result Management System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP Path Traversal Student Result Management System Munyweki
NVD VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2025-4897 May 18, 22:15 HIGH This Month

A vulnerability was found in Tenda A15 15.13.07.09/15.13.07.13. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Tenda A15 Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
1.0%
CVE-2025-4896 May 18, 21:15 HIGH This Month

A vulnerability was found in Tenda AC10 16.03.10.13 and classified as critical. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Buffer Overflow Tenda Ac10 Firmware
NVD GitHub VulDB
CVSS 4.0
8.7
EPSS
0.8%
CVE-2025-4895 May 18, 21:15 MEDIUM POC This Week

A vulnerability, which was classified as critical, has been found in SourceCodester Doctors Appointment System 1.0.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Doctors Appointment System Hshnudr
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4894 May 18, 20:15 MEDIUM POC This Month

A vulnerability classified as problematic was found in calmkart Django-sso-server up to 057247929a94ffc358788a37ab99e391379a4d15. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available and no vendor patch available.

Python Information Disclosure Django Sso Server
NVD VulDB
CVSS 4.0
6.3
EPSS
0.1%
CVE-2025-4893 May 18, 20:15 MEDIUM POC This Month

A vulnerability classified as critical has been found in jammy928 CoinExchange_CryptoExchange_Java up to 8adf508b996020d3efbeeb2473d7235bd01436fa. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Path Traversal File Upload
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-4892 May 18, 19:15 MEDIUM POC Monitor

A vulnerability was found in code-projects Police Station Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Police Station Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4891 May 18, 19:15 MEDIUM POC Monitor

A vulnerability was found in code-projects Police Station Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Police Station Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4890 May 18, 18:15 MEDIUM POC Monitor

A vulnerability was found in code-projects Tourism Management System 1.0 and classified as critical. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tourism Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4889 May 18, 18:15 MEDIUM POC Monitor

A vulnerability has been found in code-projects Tourism Management System 1.0 and classified as critical. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Tourism Management System Fabian
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4888 May 18, 17:15 MEDIUM POC Monitor

A vulnerability, which was classified as critical, was found in code-projects Pharmacy Management System 1.0. Rated medium severity (CVSS 4.8), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Pharmacy Management System Code Projects
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.1%
CVE-2025-4887 May 18, 17:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in SourceCodester Online Student Clearance System 1.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CSRF Online Student Clearance System Senior Walter
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4886 May 18, 16:15 MEDIUM POC This Week

A vulnerability classified as critical was found in itsourcecode Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4885 May 18, 16:15 MEDIUM POC This Week

A vulnerability classified as critical has been found in itsourcecode Sales and Inventory System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Sales And Inventory System Campcodes
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4884 May 18, 15:15 MEDIUM POC This Week

A vulnerability was found in itsourcecode Restaurant Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4883 May 18, 15:15 HIGH POC This Week

A vulnerability was found in D-Link DI-8100 16.07.26A1. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow D-Link Di 8100G Firmware
NVD GitHub VulDB
CVSS 4.0
8.6
EPSS
1.2%
CVE-2025-48219 May 18, 15:15 LOW Monitor

O2 UK before 2025-05-19 allows subscribers to determine the Cell ID of other subscribers by initiating an IMS (IP Multimedia Subsystem) call and then reading the utran-cell-id-3gpp field of a. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. No vendor patch available.

Information Disclosure
NVD
CVSS 3.1
3.5
EPSS
0.2%
CVE-2025-4882 May 18, 14:15 MEDIUM POC This Week

A vulnerability was found in itsourcecode Restaurant Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4881 May 18, 14:15 MEDIUM POC This Week

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4872 May 18, 11:15 MEDIUM POC This Week

A vulnerability, which was classified as critical, was found in FreeFloat FTP Server 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Freefloat
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4871 May 18, 11:15 MEDIUM POC This Week

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Pcman
NVD GitHub VulDB Exploit-DB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4870 May 18, 10:15 MEDIUM POC This Week

A vulnerability classified as critical was found in itsourcecode Restaurant Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4869 May 18, 10:15 MEDIUM POC This Week

A vulnerability classified as critical has been found in itsourcecode Restaurant Management System 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4868 May 18, 09:15 MEDIUM POC This Month

A vulnerability was found in merikbest ecommerce-spring-reactjs up to 464e610bb11cc2619cf6ce8212ccc2d1fd4277fd. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Java Path Traversal File Upload
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.1%
CVE-2025-4866 May 18, 08:15 MEDIUM POC This Month

A vulnerability was found in weibocom rill-flow 0.1.18. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Information Disclosure Rill Flow Weibo
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2025-4865 May 18, 08:15 MEDIUM POC This Week

A vulnerability was found in itsourcecode Restaurant Management System 1.0 and classified as critical.php. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4864 May 18, 07:15 MEDIUM POC This Week

A vulnerability has been found in itsourcecode Restaurant Management System 1.0 and classified as critical. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Restaurant Management System Adonesevangelista
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.2%
CVE-2025-4863 May 18, 07:15 MEDIUM POC This Month

A vulnerability, which was classified as critical, was found in Advaya Softech GEMS ERP Portal 2.1. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

SQLi Gems Erp Portal
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.2%
CVE-2025-4862 May 18, 06:15 MEDIUM POC This Month

A vulnerability, which was classified as problematic, has been found in PHPGurukul Directory Management System 2.0. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS Directory Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
0.3%
CVE-2025-4861 May 18, 06:15 MEDIUM POC This Week

A vulnerability classified as critical was found in PHPGurukul Beauty Parlour Management System 1.1. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP SQLi Beauty Parlour Management System Phpgurukul
NVD GitHub VulDB
CVSS 4.0
6.9
EPSS
0.3%
CVE-2025-3715 May 18, 06:15 MEDIUM This Month

The Bold Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the data-text parameter in all versions up to, and including, 5.3.5 due to insufficient input sanitization. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress XSS
NVD
CVSS 3.1
6.4
EPSS
0.2%
CVE-2025-4860 May 18, 05:15 MEDIUM POC Monitor

A vulnerability classified as problematic has been found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS D-Link Dap 2695 Firmware
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4859 May 18, 05:15 MEDIUM POC Monitor

A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS D-Link Dap 2695 Firmware
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4858 May 18, 04:15 MEDIUM POC Monitor

A vulnerability was found in D-Link DAP-2695 120b36r137_ALL_en_20210528. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP XSS D-Link Dap 2695 Firmware
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.2%
CVE-2025-4852 May 18, 04:15 MEDIUM POC Monitor

A vulnerability, which was classified as problematic, has been found in TOTOLINK A3002R 2.1.1-B20230720.1011. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS A3002r Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
4.8
EPSS
0.3%
CVE-2025-4851 May 18, 04:15 MEDIUM This Month

A vulnerability classified as critical was found in TOTOLINK N300RH 6.1c.1390_B20191101. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection N300rh Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
2.4%
CVE-2025-4850 May 18, 03:15 MEDIUM This Month

A vulnerability classified as critical has been found in TOTOLINK N300RH 6.1c.1390_B20191101. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection N300rh Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
1.4%
CVE-2025-4849 May 18, 03:15 MEDIUM This Month

A vulnerability was found in TOTOLINK N300RH 6.1c.1390_B20191101. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection N300rh Firmware TOTOLINK
NVD GitHub VulDB
CVSS 4.0
5.3
EPSS
2.4%
CVE-2025-4845 May 18, 01:15 MEDIUM POC This Week

A vulnerability, which was classified as critical, has been found in FreeFloat FTP Server 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Freefloat
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
CVE-2025-4844 May 18, 00:15 MEDIUM POC This Week

A vulnerability classified as critical was found in FreeFloat FTP Server 1.0. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Buffer Overflow Ftp Server Freefloat
NVD VulDB
CVSS 4.0
6.9
EPSS
0.5%
Page 1 of 2 Next

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy