17 July 2025

7 results · Clear filters · Feed

• High 7.3
  CVE-2025-7753 Public exploit

  code-projects Online Appointment Booking System adddoctor.php sql injection

  A vulnerability was found in code-projects Online Appointment Booking System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/adddoctor.php. The manipulation of the argument Username leads to sql injection. It is possib…

  code-projects Online Appointment Booking System
  Jul 17, 2025
• High 7.8
  CVE-2025-0886 Public exploit

  An incorrect permissions vulnerability was reported in Elliptic Labs Virtual Lock Sensor that could allow a local, auth…

  Lenovo Elliptic Human Presence Detection Device Driver for ThinkPad P14s Gen 4 (Type 21K5, 21K6) Elliptic Human Presence Detection Device Driver for T14s Gen 5 (Type 21LS, 21LT) Elliptic Human Presence Detection Driver for ThinkPad X13 Gen 4 (Type 21J3, 21J4)
  Jul 17, 2025
• Critical 9.0
  CVE-2025-23266 Public exploit

  NVIDIA Container Toolkit for all platforms contains an Untrusted Search Path

  NVIDIA Container Toolkit for all platforms contains a vulnerability in some hooks used to initialize the container, where an attacker could execute arbitrary code with elevated permissions. A successful exploit of this vulnerability might lead to escalation o…

  NVIDIA Container Toolkit nvidia-container-toolkit nvidia-container-toolkit Azure Linux Wolfi Go
  Jul 17, 2025
• Critical 9.2
  CVE-2025-54068 Exploited Public exploit Scanner template EPSS 96%

  Livewire vulnerable to remote command execution during property update hydration

  Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates …

  livewire livewire livewire/livewire Packagist
  Jul 17, 2025

  KEV Mar 20, 2026
• High 7.5
  CVE-2025-7338 Public exploit

  Multer vulnerable to Denial of Service via unhandled exception from malformed request

  Multer is a node.js middleware for handling `multipart/form-data`. A vulnerability that is present starting in version 1.4.4-lts.1 and prior to version 2.0.2 allows an attacker to trigger a Denial of Service (DoS) by sending a malformed multi-part upload requ…

  expressjs multer multer npm
  Jul 17, 2025
• Critical 9.6
  CVE-2025-25257 Exploited Public exploit Scanner template EPSS 100%

  An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89] vulnerab…

  Fortinet FortiWeb Network devices
  Jul 17, 2025

  KEV Jul 18, 2025
• Critical 9.6
  CVE-2025-53964 Public exploit

  GoldenDict 1.5.0 and 1.5.1 has an exposed dangerous method that allows reading and modifying files when a user adds a c…

  goldendict Ubuntu
  Jul 17, 2025