CVE-2025-49125 is an authentication bypass vulnerability in Apache Tomcat affecting versions 8.5.0-8.5.100, 9.0.0-9.0.105, 10.1.0-10.1.41, and 11.0.0-11.0.7. The vulnerability allows unauthenticated remote attackers to access PreResources or PostResources mounted outside the web application root via alternate path traversal, bypassing security constraints configured for the intended resource path. With a CVSS score of 7.5 and high confidentiality impact, this represents a critical authentication mechanism failure that requires immediate patching.
A security vulnerability in Liferay Portal 7.0.0 (CVSS 7.5) that allows remote attackers. High severity vulnerability requiring prompt remediation.
Local privilege escalation vulnerability in Google ChromeOS MiniOS that allows unauthenticated attackers to achieve root code execution by exploiting an accessible debug shell (VT3 console) through specific key combinations during developer mode entry, circumventing device policy restrictions and Firmware Write Protect mechanisms. This vulnerability affects ChromeOS version 16063.45.2 and potentially other versions on enrolled devices, with a CVSS score of 7.4 indicating high severity. The attack requires local access and specific technical knowledge of key sequences, but no user interaction is needed once device access is obtained.
A security vulnerability in Conda-build (CVSS 7.0). High severity vulnerability requiring prompt remediation. Vendor patch is available.
Stack-based buffer overflow in GNU ncurses up to 6.5-20250322 allows local attackers to cause a denial of service via crafted termcap data. The vulnerability is in the postprocess_termcap function and requires local access with low privileges. No public exploit or active exploitation identified; EPSS score is low (0.03%).
CVE-2025-25264 is a security vulnerability (CVSS 6.5) that allows the attacker. Remediation should follow standard vulnerability management procedures.
Path traversal vulnerability in whatsmars 2021.4.0 allows remote authenticated attackers to read arbitrary files via the artifactId parameter in the InitializrController. Public exploit code exists, but EPSS score is low (0.12%), indicating limited exploitation likelihood. No active exploitation reported in CISA KEV.
SQL injection in code-projects Restaurant Order System 1.0 allows remote authenticated attackers to manipulate database queries via the ID parameter in /table.php. A public exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.09%), indicating limited exploitation likelihood.
Reflected Cross-Site Scripting (XSS) in /customer_support/index.php in Customer Support System v1.0, which allows remote attackers to execute arbitrary code via the page parameter.
Cross-site request forgery in WuKongOpenSource WukongCRM 9.0 allows an attacker to perform unauthorized actions on behalf of an authenticated user. The vulnerability exists in the AdminRoleController.java file and can be triggered remotely with user interaction. A public exploit is available, but no active exploitation has been reported.
Path traversal vulnerability in Spring-Boot-In-Action up to commit 807fd37643aa774b94fd004cc3adbd29ca17e9aa allows remote authenticated attackers to read or write arbitrary files via the filename parameter in the watermarkTest function. Public exploit code exists, but EPSS score is low (0.07%) and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to execute arbitrary SQL commands via the client_id or nominee_id parameters in /insertNominee.php. Public exploit code is available, but no active exploitation has been confirmed. EPSS score is low (0.07%), indicating limited exploitation likelihood.
SQL injection in Jasmin Ransomware 1.0.0 and 1.0.1 allows remote authenticated attackers to extract sensitive data from the database via the Search parameter in /dashboard.php. A public exploit exists, but EPSS score is low (0.07%) and no active exploitation has been reported.
Cross-site request forgery in jfinal_cms 5.0.1 allows an attacker to trigger a logout action without user consent. The vulnerability is publicly exploited but has low real-world risk due to limited impact and low EPSS score.
SQL injection in Projectworlds Life Insurance Management System 1.0 allows remote authenticated attackers to manipulate the `recipt_no` parameter in `/insertPayment.php`, potentially leading to data breach or system compromise. A public exploit is available, but no active exploitation has been reported (not in CISA KEV). EPSS score is low (0.06%), suggesting limited exploitation likelihood.
SQL injection in Projectworlds Life Insurance Management System 1.0 enables remote attackers with low privileges to manipulate the client_id parameter in /insertClient.php, leading to unauthorized database access and potential data modification. Public exploit code is available, but EPSS indicates a low probability of widespread exploitation, and no active exploitation has been reported.
SQL injection in Projectworlds Life Insurance Management System 1.0 via the agent_id parameter in /insertagent.php allows authenticated remote attackers to manipulate database queries. Public exploit code is available, but no active exploitation has been confirmed. The vulnerability has low impact (C:L/I:L/A:L) and a very low EPSS score (0.06%), suggesting limited real-world risk.
Cross-site scripting (XSS) in PHPGurukul Rail Pass Management System 1.0 allows remote attackers to inject arbitrary web scripts via the Name parameter in /contact.php. A public exploit exists, but no active exploitation has been confirmed. The EPSS score is low (0.05%), indicating low exploitation likelihood.
SQL injection in open-video-cms 1.0 allows remote authenticated attackers to manipulate database queries via the 'sort' parameter in /v1/video/list. A public exploit exists, but exploitation requires authentication and the product has limited deployment, reducing real-world risk.
Stored cross-site scripting in PHPGurukul Nipah Virus Testing Management System 1.0 allows authenticated attackers to inject arbitrary web scripts via the 'serachdata' parameter in /search-report.php. Public exploit code exists, but no active exploitation has been reported and EPSS risk is low (0.05%).
Stored cross-site scripting in CodeAstro Food Ordering System 1.0 allows authenticated admin users to inject arbitrary JavaScript via the Restaurant Name and Address fields in the store edit page. When viewed, the injected script executes in the victim's browser, enabling session hijacking or defacement. A public exploit exists, but no active exploitation has been confirmed.
Stored cross-site scripting (XSS) in PHPGurukul Rail Pass Management System 1.0 allows an authenticated admin to inject arbitrary JavaScript via the 'pagedes' parameter in /admin/aboutus.php. Public exploit code exists, but no active exploitation has been reported and EPSS risk is low (0.05%).
Denial of service in spdlog up to 1.15.1 via the scoped_padder function in pattern_formatter-inl.h allows local attackers to cause resource consumption. Public exploit code exists, but EPSS score is low (0.05%) and no active exploitation in CISA KEV.
Heap-based buffer overflow in Assimp up to 5.4.3 allows local attackers with low privileges to execute arbitrary code or cause denial of service by enticing a user to load a crafted Half-Life MDL file. A public proof-of-concept exploit exists, but no official patch has been released despite the vendor acknowledging the issue. The EPSS score is low (0.05%), indicating limited exploitation activity currently, but the availability of public exploit code raises the risk for environments where untrusted MDL files are processed.
Use-after-free in Assimp BVHLoader allows local attackers with low privileges to trigger memory corruption when processing crafted BVH files. A public proof-of-concept is available, but EPSS score is very low (0.05%) and there is no evidence of active exploitation in the wild.
Possible kernel exceptions caused by reading and writing kernel heap data after free.
Das Parking Management System versions up to 6.2.0 contain a critical SQL injection vulnerability in the /vehicle/search API endpoint, specifically in the vehicleTypeCode parameter, allowing unauthenticated remote attackers to execute arbitrary SQL queries and potentially extract, modify, or delete database contents. The vulnerability has been publicly disclosed with proof-of-concept code available, and active exploitation is possible given the CVSS 7.3 score and low attack complexity.
SQL injection vulnerability in Das Parking Management System (停车场管理系统) version 6.2.0 affecting the /Reservations/Search API endpoint. An unauthenticated remote attacker can manipulate the 'Value' parameter to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or denial of service. Public exploit code is available and the vulnerability may be actively exploited in the wild.
Critical SQL injection vulnerability in Das Parking Management System (停车场管理系统) version 6.2.0 affecting the /IntraFieldVehicle/Search API endpoint. An unauthenticated remote attacker can manipulate the 'Value' parameter to execute arbitrary SQL queries, potentially leading to unauthorized data access, modification, or deletion. The vulnerability has public exploit disclosure available and carries a CVSS score of 7.3 with demonstrated feasibility of remote exploitation.
An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs.
A Reflected Cross Site Scripting (XSS) vulnerability was found in '/search' in Phoenix Site CMS from Phoenix, which allows remote attackers to execute arbitrary code via 's' GET parameter.
A security vulnerability in Weblate (CVSS 5.3). Remediation should follow standard vulnerability management procedures. Vendor patch is available.
A security vulnerability in OpenSSL 3.0.0 through 3.3.2 on the PowerPC architecture (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
A security vulnerability in A vulnerability (CVSS 3.1). Risk factors: public PoC available.
A security vulnerability in szluyu99 gin-vue-blog (CVSS 5.3). Remediation should follow standard vulnerability management procedures.
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashing the application with a RecursionError. We recommend upgrading to version =>6.31.1 or beyond commit 17838beda2943d08b8a9d4df5b68f5f04f26d901
Reflected Cross-Site Scripting (XSS) vulnerability in /pages/search-results-page in Nosto, which allows remote attackers to execute arbitrary code via the q GET request parameter.
A flaw exists in FlashArray whereby the Key Encryption Key (KEK) is logged during key rotation when RDL is configured.
Hard-coded password in TOTOLINK T10 firmware 4.1.8cu.5207 allows local network attackers with high privileges to access the /etc/shadow.sample file. The vulnerability is publicly exploited but has a low EPSS score (0.05%) and high attack complexity, limiting real-world risk.
A web application for configuring the controller is accessible at a specific path. It contains an endpoint that allows a high privileged remote attacker to read files from the system’s file structure.
Weblate is a web based localization tool. Prior to version 5.12, the verification of the second factor was not subject to rate limiting. The absence of rate limiting on the second factor endpoint allows an attacker with valid credentials to automate OTP guessing. This issue has been patched in version 5.12.
Path traversal in Erlang/OTP's stdlib zip functions allows an attacker to write files to arbitrary locations on the filesystem when extracting a crafted archive. Affected are all OTP versions from 17.0 to 28.0.1 (and specific patch releases) when using zip:unzip/1,2 or zip:extract/1,2 without the memory option. The vulnerability requires user interaction and local file access, with no public exploits identified and a low EPSS score of 0.08%.
CVE-2025-24388 is a security vulnerability (CVSS 3.8) that allows parameter injection due. Remediation should follow standard vulnerability management procedures.
Server-side request forgery (SSRF) in Intera InHire up to 20250530 allows remote authenticated attackers to make internal network requests. A public exploit exists, but no active exploitation has been confirmed. EPSS score is low (0.06%), indicating limited exploitation likelihood.
Code injection vulnerability in letta-ai letta up to version 0.4.1 allows authenticated adjacent network attackers to execute arbitrary Python code by manipulating the function_name or function_args arguments in the function_message method. Public exploit code exists, but no active exploitation has been confirmed by CISA.