2025-10-02 - CVE Archive

CVE-2025-59403 Oct 02, 17:16 CRITICAL POC Act Now

Missing authentication in Flock Safety Collins Android app for ANPR cameras. EPSS 2.7%. PoC available.

RCE Denial Of Service Information Disclosure Android Flock Safety +1

NVD

CVSS 3.1

9.8

EPSS

2.7%

CVE-2025-59740 Oct 02, 14:15 CRITICAL POC Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD GitHub

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59739 Oct 02, 14:15 CRITICAL POC Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD GitHub

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59738 Oct 02, 14:15 CRITICAL POC Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD GitHub

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59737 Oct 02, 14:15 CRITICAL POC Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD GitHub

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59736 Oct 02, 14:15 CRITICAL POC Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD GitHub

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59407 Oct 02, 17:16 CRITICAL POC Act Now

Hardcoded cryptographic key in Flock Safety DetectionProcessing app for ANPR. PoC available.

Java Information Disclosure Android Flock Safety Flocksafety

NVD

CVSS 3.1

9.8

EPSS

0.1%

CVE-2025-61605 Oct 02, 21:16 CRITICAL POC PATCH Act Now

Second SQL injection in WeGIA 3.4.12. PoC and patch available.

PHP SQLi Wegia

NVD GitHub

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-61603 Oct 02, 20:15 CRITICAL POC PATCH Act Now

SQL injection in WeGIA 3.4.12 and below. PoC and patch available.

PHP SQLi Wegia

NVD GitHub

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-59741 Oct 02, 15:15 CRITICAL Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-59735 Oct 02, 14:15 CRITICAL Act Now

OS command injection in AndSoft e-TMS v25.03 transportation management system. One of 8+ critical command injection CVEs in the same product.

Command Injection E Tms Andsoft

NVD

CVSS 3.1

9.8

EPSS

0.2%

CVE-2025-9697 Oct 02, 06:15 CRITICAL Act Now

SQLi in Ajax WooSearch WordPress plugin through 1.0.0.

PHP WordPress SQLi

NVD WPScan

CVSS 3.1

9.8

EPSS

0.1%

CVE-2025-59743 Oct 02, 15:15 CRITICAL Act Now

SQL injection in AndSoft e-TMS v25.03 allows database compromise.

SQLi E Tms Andsoft

NVD

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-59742 Oct 02, 15:15 CRITICAL Act Now

SQL injection in AndSoft e-TMS v25.03 allows database compromise.

SQLi E Tms Andsoft

NVD

CVSS 3.1

9.8

EPSS

0.0%

CVE-2025-41064 Oct 02, 12:15 CRITICAL Act Now

Auth impersonation via Cl@ve in OpenSIAC.

Authentication Bypass

NVD

CVSS 4.0

9.3

EPSS

0.1%