Sort by: Updated/Published

Filtred: Bugs
Risk Topic & Details
2025-11-19
Med.
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 Remote nu11secur1ty
2025-11-17
High
Fortinet FortiWeb Auth. Bypass
 CVE Remote nu11secur1ty
2025-11-13
Med.
Logitech Streamlabs Desktop 1.19.6 (overlay) CPU Exhaustion
 Remote Local LiquidWorm
Med.
is-localhost-ip 2.0.0 - SSRF via Restrictions bypass
 Remote nu11secur1ty
Low
moew.government.bg Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-11-07
Low
hop.bg | web app | Cross-site scripting (reflected)
 Remote nu11secur1ty
Med.
3kits template via imgGallery.php SQL Injection id parameter
 Remote Hossein_0xB
2025-11-04
Low
ModernShop - RXSS
 CVE CWE Remote CraCkEr
Med.
3kits template SQL Injection via imgGallery.php id parameter
 Remote Hossein_0xB
High
Desktop Window Manager (DWM) Core Library — Heap-based Buffer Overflow (sanitized evidence)
 CVE Local nu11secur1ty
2025-11-01
High
Exim tls-openssl.c — Use-After-Free: unauthenticated Remote Code Execution
 CVE CWE Remote CyberSploit
Low
Wisenshop - Stored XSS
 CVE CWE Remote CraCkEr
2025-10-29
Low
RiteCMS 3.1.0 Cross Site Scripting
 Remote Chokri Hammedi
Med.
GeoVision ASManager Windows Application 6.1.2.0 Credentials Disclosure
 CVE Remote Giorgi Dograshvili
2025-10-27
High
WordPress Backup Migration 1.3.7: Remote Command Execution
 CVE Remote DANG
2025-10-23
Med.
Cleartext Storage of Sensitive Information in Memory in Easywork Enterprise
 Remote Ivan
2025-10-21
Med.
Fedora Gnome Privilege Escalation
 Local Tavis Ormandy
Med.
greenlife-Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
Med.
Student Record System 3.20 - 'id' Parameter Time-based Blind SQL Injection
 CWE Remote Şeyma Yaldız
2025-10-12
Low
Perfex CRM Chatbot Cross Site Scripting
 CVE Remote Ajansha
2025-10-09
Low
DirectAdmin v1.680 DOM Injection via return-to Parameter
 CVE Remote Scott Sturrock
2025-10-07
Med.
GaatiTrack-1.0 Copyright©2025-Multiple-SQLi - Metasploit module
 Remote nu11secur1ty
2025-10-05
Med.
CPAS Audit Management Information System 4.9 SQL Injection
 Remote songqb-xx
Low
ERPNext 15.67.0 / Frappe 15.72.4 Cross Site Scripting
 CVE Remote Mohammed Aloli
2025-10-01
Low
nopCommerce 4.40.3 - Stored Cross-Site Scripting (XSS)
 CVE Remote Scott Sturrock
Med.
DirectAdmin v1.680 DOM Injection via return-to Parameter (UI Misrepresentation)
 CVE Remote Scott Sturrock
2025-09-30
Med.
WordPress Quentn WP 1.2.8 Privilege Escalation
 Local Nxploited
High
StoryChief Wordpress Plugin 1.0.42 Arbitrary File Upload
 CVE CWE Remote xpl0dec
2025-09-27
Low
FVGFL - Cross Site Scripting Vulnerability (XSS)
 Remote Mahdi Karimi
Low
MatterMost information disclosure
 Local parsa rezaie khiabanlo...
2025-09-21
High
aaPanel 7.x.x Remote Command Execution
 CVE Remote Alasdair Gorniak
Med.
sacco-1.0-Multiple-SQLi
 Remote nu11secur1ty
2025-09-14
Low
database.refugee-integration.bg - CORS-AOT vulnerability
 Remote nu11secur1ty
Med.
BarbarBaba-1.0 Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
2025-09-10
Low
INITCMS v6.2.17 - Stored Cross-Site Scripting
 CWE Remote Osman Aydoğan
Low
Sales Syntax CMS - Stored Cross-Site Scripting
 CWE Remote Erdinç ODABAŞ
2025-09-04
High
GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution
 CVE Remote Giorgi Dograshvili
Low
WordPress Plugin WP Publications <= 1.2 - Admin+ Stored XSS
 CVE Remote Zeynalxan Quliyev, Rav...
Med.
BarbarBaba 1.0 time-based blind sql injection
 Remote Furkan Sezgin
2025-08-28
Med.
DITRP INDIA - Sql Injection
 Remote behrouz mansoori
Med.
WordPress WP Reactions Box Plugin 1.0 - SQL Injection
 Remote bRpsd
Low
WIX.com / market app Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-08-23
Med.
EasyApp Limited - Multiple Vulnerabilities
 Remote bRpsd
2025-08-20
High
MSSQL Database Privilege Elevation From ALTER ANY LOGIN To SYSADMIN
 Local Emad Al-Mousa
Low
RiteCMS 3.0.0 Reflected Cross Site Scripting
 CVE CWE Remote GURJOT SINGH
2025-08-16
Med.
Microsoft Edge Renderer Process (Mojo IPC) Sandbox Escape
 Remote nu11secur1ty
Med.
Upload.am 1.0.0 WordPress Plugin - Multiple Vulnerabilities
 Remote bRpsd
2025-08-13
High
WordPress Upload.am 1.0.0 Setting Modification / Information Disclosure
 Remote bRpsd
High
Wazuh Server Remote Code Execution
 CVE Remote h00die-gr3y
High
PivotX 3.0.0 RC 3 Remote Code Execution
 CVE Remote msutovsky-r7
2025-08-11
Med.
SugarCRM 14.0.0 SSRF/Code Injection
 CVE CWE Remote Egidio Romano
2025-08-05
Med.
VX Guestbook 1.07 SQL Injection
 Remote Trmswrr
High
Ultimate Control Receiver 1.2 Remote Code Execution
 Remote Chokri
2025-08-03
High
Microsoft Virtual Hard Disk (VHDX) 11 Remote Code Execution
 CVE Remote nu11secur1ty
2025-07-31
High
White Star Software Protop 4.4.2-2024-11-27 Local File Inclusion
 CVE CWE Remote Imraan Khan
Med.
freeSSHd 1.0.9 Denial of Service (DoS)
 CVE Remote Fernando
2025-07-28
Med.
Sudo chroot 1.9.17 Local Privilege Escalation
 CVE CWE Local Stratascale
Med.
Xlight FTP 1.1 Denial Of Service
 CVE Remote Fernando Mengali
Low
Stacks Mobile App Builder 5.2.3 Authentication Bypass via Account Takeover
 CVE Remote stealthcopter
2025-07-24
Med.
VHDX Corruption Proof-of-Concept (PoC)
 CVE Local nu11secur1ty
Copyright 2025, cxsecurity.com

 

Back to Top