10 November 2025

51 results · Clear filters · Feed

• Medium 6.5
  CVE-2025-63147

  Tenda AX3 V16.03.12.10_CN was discovered to contain a stack overflow in the deviceId parameter of the saveParentControl…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63617

  ktg-mes before commit a484f96 (2025-07-03) has a fastjson deserialization vulnerability. This is because it uses a vuln…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63710

  The send_message.php endpoint in SourceCodester Simple Public Chat Room 1.0 is vulnerable to Cross-Site Request Forgery…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63296 Public exploit

  KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boo…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63456

  Tenda AX-1803 v1.0.0.1 was discovered to contain a stack overflow via the time parameter in the SetSysTimeCfg function.…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63835

  A stack-based buffer overflow vulnerability was discovered in Tenda AC18 v15.03.05.05_multi. The vulnerability exists i…

  Nov 10, 2025
• Medium 4.5
  CVE-2025-63712

  Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delet…

  Nov 10, 2025
• Medium 5.4
  CVE-2025-63709

  A Cross-Site Scripting (XSS) vulnerability exists in SourceCodester Simple To-Do List System 1.0 in the "Add Tasks" tex…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-63384

  A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET (Supervisor-mode Exc…

  Nov 10, 2025
• Medium 6.5
  CVE-2025-60876 Public exploit

  BusyBox wget thru 1.3.7 accepted raw CR (0x0D)/LF (0x0A) and other C0 control bytes in the HTTP request-target (path/qu…

  busybox busybox busybox busybox Debian Ubuntu Azure Linux Wolfi
  Nov 10, 2025
• Medium 6.5
  CVE-2025-56503 Public exploit

  An issue in Sublime HQ Pty Ltd Sublime Text 4 4200 allows authenticated attackers with low-level privileges to escalate…

  Nov 10, 2025