13 November 2025

154 results · Feed

• Medium 5.3
  CVE-2025-64710

  Bitplatform Boilerplate has cross-site scripting vulnerability

  Bitplatform Boilerplate is a Visual studio and .NET project template. Versions prior to 9.11.3 are affected by a cross-site scripting (XSS) vulnerability in the WebInteropApp/WebAppInterop, potentially allowing attackers to inject malicious scripts that compr…

  bitfoundation bitplatform
  Nov 13, 2025
• Medium 6.8
  CVE-2025-55810

  A vulnerability was found in Alaga Home Security WiFi Camera 3K (model S-CW2503C-H) with hardware version V03 and firmw…

  Nov 13, 2025
• High 8.8
  CVE-2025-63406 Public exploit

  An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitr…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60673

  An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vul…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60688

  A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.668…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60702

  A command injection vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `sy…

  Nov 13, 2025
• Medium 6.8
  CVE-2025-60674

  A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's US…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60683

  A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the syscon…

  Nov 13, 2025
• Medium 5.4
  CVE-2025-60675

  A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the t…

  Nov 13, 2025
• Medium 5.4
  CVE-2025-60671

  A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the t…

  Nov 13, 2025
• High 7.3
  CVE-2025-60698

  A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` …

  Nov 13, 2025
• High 8.8
  CVE-2025-60691

  A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60687

  An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B202301…

  Nov 13, 2025
• High 8.4
  CVE-2025-60692

  A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmw…

  Nov 13, 2025
• High 8.8
  CVE-2025-60679

  A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D8821…

  Nov 13, 2025
• High 7.3
  CVE-2025-60697

  A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` …

  Nov 13, 2025
• Medium 5.4
  CVE-2025-60689 Public exploit EPSS 18%

  An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E120…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60684

  A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.668…

  Nov 13, 2025
• High 8.8
  CVE-2025-60690 Public exploit

  A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60682

  A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudu…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60701

  A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` …

  Nov 13, 2025
• Medium 5.1
  CVE-2025-60686

  A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink route…

  Nov 13, 2025
• Medium 5.1
  CVE-2025-60685

  A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (…

  Nov 13, 2025
• High 8.4
  CVE-2025-60696

  A stack-based buffer overflow vulnerability exists in the makeRequest.cgi binary of Linksys RE7000 routers (Firmware FW…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60693

  A stack-based buffer overflow exists in the get_merge_mac function of the httpd binary on Linksys E1200 v2 routers (Fir…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60672

  An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vul…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60700

  A command injection vulnerability exists in the D-Link DIR-882 Router firmware DIR882A1_FW102B02 within the `prog.cgi` …

  Nov 13, 2025
• High 7.5
  CVE-2025-60694

  A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 rout…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-60699

  A buffer overflow vulnerability exists in the TOTOLINK A950RG Router firmware V5.9c.4592_B20191022_ALL within the `glob…

  Nov 13, 2025
• Medium 5.9
  CVE-2025-60695

  A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032)…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-52186

  Lichess lila before commit 11b4c0fb00f0ffd823246f839627005459c8f05c (2025-06-02) contains a Server-Side Request Forgery…

  Nov 13, 2025
• Medium 5.3
  CVE-2025-47220

  A local file enumeration was found in Keyfactor SignServer versions prior to 7.3.2 .The property VISIBLE_SIGNATURE_CUST…

  Nov 13, 2025
• Medium 6.5
  CVE-2025-47222

  A class name enumeration was found in Keyfactor SignServer versions prior to 7.3.2. Setting any chosen class name to an…

  Nov 13, 2025
• Medium 5.3
  CVE-2025-47221

  An arbitrary file write was found in Keyfactor SignServer versions prior to 7.3.2. The properties ARCHIVETODISK_FILENAM…

  Nov 13, 2025