Latest vulnerabilities
Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.
- Tracked
- 409,099
- Last 24h
- 621
- Critical, 7 days
- 349
- Known exploited
- 1,779
35,501 results · Clear filters · Feed
-
High 8.8CVE-2025-12028 Public exploit
IndieAuth <= 4.5.4 - Cross-Site Request Forgery to Account Takeover via Stolen OAuth Tokens
The IndieAuth plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.5.4. This is due to missing nonce verification on the `login_form_indieauth()` function and the authorization endpoint at wp-login.php?actio…
-
Critical 9.8
WooCommerce Designer Pro <= 1.9.26 - Unauthenticated Arbitrary File Upload
The WooCommerce Designer Pro plugin for WordPress, used by the Pricom - Printing Company & Design Services WordPress theme, is vulnerable to arbitrary file uploads due to missing file type validation in the 'wcdp_save_canvas_design_ajax' function in all versi…
-
Medium 5.5CVE-2025-10874 Public exploit
Orbit Fox < 3.0.2 - Author+ Server-Side Request Forgery
The Orbit Fox: Duplicate Page, Menu Icons, SVG Support, Cookie Notice, Custom Fonts & More WordPress plugin before 3.0.2 does not limit URLs which may be used for the stock photo import feature, allowing the user to specify arbitrary URLs. This leads to a ser…
-
High 7.5CVE-2025-6980 Public exploit
Captive Portal can expose sensitive information
Captive Portal can expose sensitive information
-
Medium 6.5CVE-2025-60852 Public exploit
A CSV Injection vulnerability existed in Instant Developer Foundation versions prior to 25.0.9600. Applications built w…
-
High 8.6CVE-2025-40778 Public exploit
Cache poisoning attacks with unsolicited RRs
Under certain circumstances, BIND is too lenient when accepting records from answers, allowing an attacker to inject forged data into the cache. This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.39, 9.20.0 through 9.20.13, 9.21.0 …
-
Critical 9.0CVE-2025-62023 Public exploit
WordPress s2Member plugin <= 250905 - Remote Code Execution (RCE) vulnerability
Improper Control of Generation of Code ('Code Injection') vulnerability in Cristián Lávaque s2Member s2member.This issue affects s2Member: from n/a through 250905.
-
Critical 9.8CVE-2025-49901 Public exploit
WordPress Simple Link Directory plugin < 14.8.1 - Broken Authentication vulnerability
Authentication Bypass Using an Alternate Path or Channel vulnerability in quantumcloud Simple Link Directory qc-simple-link-directory allows Authentication Abuse.This issue affects Simple Link Directory: from n/a through < 14.8.1.
-
Medium 5.4CVE-2025-11844 Public exploit
XPath Injection in Hugging Face Smolagents search_item_ctrl_f Function
Hugging Face Smolagents version 1.20.0 contains an XPath injection vulnerability in the search_item_ctrl_f function located in src/smolagents/vision_web_browser.py. The function constructs an XPath query by directly concatenating user-supplied input into the …
-
High 8.2CVE-2025-62641 Public exploit
Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that a…
-
Critical 9.8
Vulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST WebServices). Supported vers…
KEV Nov 21, 2025 -
Critical 9.8CVE-2025-53072 Public exploit
Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Support…
-
Low 2.7CVE-2025-53051 Public exploit
Vulnerability in the RDBMS Functional Index component of Oracle Database Server. Supported versions that are affected a…
-
High 8.1CVE-2025-62518 Public exploit
astral-tokio-tar Vulnerable to PAX Header Desynchronization
astral-tokio-tar is a tar archive reading/writing library for async Rust. Versions of astral-tokio-tar prior to 0.5.6 contain a boundary parsing vulnerability that allows attackers to smuggle additional archive entries by exploiting inconsistent PAX/ustar hea…
-
High 7.2CVE-2025-60500 Public exploit
QDocs Smart School Management System 7.1 allows authenticated users with roles such as "accountant" or "admin" to bypas…
-
High 7.5CVE-2025-60751 Public exploit
GeographicLib 2.5 is vulnerable to Buffer Overflow in GeoConvert DMS::InternalDecode.
-
Medium 5.1CVE-2025-56801 Public exploit
The Reolink Desktop Application 8.18.12 contains hardcoded credentials as the Initialization Vector (IV) in its AES-CFB…
-
Medium 6.5CVE-2025-56799 Public exploit
Reolink desktop application 8.18.12 contains a command injection vulnerability in its scheduled cache-clearing mechanis…
-
Medium 5.1CVE-2025-56800 Public exploit
Reolink desktop application 8.18.12 contains a vulnerability in its local authentication mechanism. The application imp…
-
Medium 5.1CVE-2025-56802 Public exploit
The Reolink desktop application uses a hard-coded and predictable AES encryption key to encrypt user configuration file…
-
High 7.2CVE-2025-62429 Public exploit
ClipBucket v5 executes arbitrary PHP code
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST request is embedded into PHP ta…
-
Critical 9.8CVE-2025-61455 Public exploit
SQL Injection vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the signup.inc.php endpoint. Th…
-
High 7.5CVE-2025-61301 Public exploit
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows a…
-
Medium 6.1CVE-2025-61456 Public exploit
A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the index endpoi…
-
Critical 9.8CVE-2025-61303 Public exploit
Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerabilit…
-
Medium 6.1CVE-2025-61454 Public exploit
A Cross-Site Scripting (XSS) vulnerability exists in Bhabishya-123 E-commerce 1.0, specifically within the search endpo…
-
Critical 9.8CVE-2025-54957 Public exploit
An issue was discovered in Dolby UDC 4.5 through 4.13. A crash of the DD+ decoder process can occur when a malformed DD…
-
High 8.1CVE-2025-56224 Public exploit
A lack of rate limiting in the One-Time Password (OTP) verification endpoint of SigningHub v8.6.8 allows attackers to b…
-
High 7.1CVE-2025-56219 Public exploit
Incorrect access control in SigningHub v8.6.8 allows attackers to arbitrarily add user accounts without any rate limiti…
-
High 7.5CVE-2025-56223 Public exploit
A lack of rate limiting in the component /Home/UploadStreamDocument of SigningHub v8.6.8 allows attackers to cause a De…
-
Medium 4.4CVE-2025-11926 Public exploit
Related Posts Lite <= 1.12 - Authenticated (Admin+) Stored Cross-Site Scripting
The Related Posts Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attacke…
-
Critical 9.8CVE-2025-11391 Public exploit
PPOM – Product Addons & Custom Fields for WooCommerce <= 33.0.15 - Unauthenticated Arbitrary File Upload
The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the image cropper functionality in all versions up to, and including, 33.0.15. This makes it possible…
-
Medium 6.9CVE-2025-34282 Public exploit
ThingsBoard < v4.2.1 SVG Image SSRF
ThingsBoard versions < 4.2.1 contain a server-side request forgery (SSRF) vulnerability in the dashboard's Image Upload Gallery feature. An attacker can upload a malicious SVG file that references a remote URL. If the server processes the SVG file in a way th…
-
Critical 10.0
Squid vulnerable to information disclosure via authentication credential leakage in error handling
Squid is a caching proxy for the Web. In Squid versions prior to 7.2, a failure to redact HTTP authentication credentials in error handling allows information disclosure. The vulnerability allows a script to bypass browser security protections and learn the c…
-
Critical 9.8CVE-2025-56221 Public exploit
A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a bru…
-
Critical 9.8CVE-2025-56218 Public exploit
An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a …
-
High 8.1CVE-2025-62506 Public exploit
MinIO vulnerable to privilege escalation via session policy bypass in service accounts and STS
MinIO is a high-performance object storage system. In all versions prior to RELEASE.2025-10-15T17-29-55Z, a privilege escalation vulnerability allows service accounts and STS (Security Token Service) accounts with restricted session policies to bypass their i…
-
Critical 9.6CVE-2025-11492 Public exploit
HTTP Configuration and Encryption in Transit
In the ConnectWise Automate Agent, communications could be configured to use HTTP instead of HTTPS. In such cases, an on-path threat actor with a man-in-the-middle network position could intercept, modify, or replay agent-server traffic. Additionally, the enc…
-
Critical 9.1CVE-2025-61922 Public exploit
PrestaShop Checkout allows customer account takeover via email
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via em…
-
High 8.2CVE-2025-22381 Public exploit
Aggie 2.6.1 has a Host Header injection vulnerability in the forgot password functionality, allowing an attacker to res…