Sort by: Updated/Published

Filtred: Bugs
Risk Topic & Details
2025-07-17
High
NodeJS 24.x Path Traversal
 CVE CWE Remote Abdualhadi khalifa
High
Sudo 1.9.17 Host Option Elevation of Privilege
 CVE Local Rich Mirch
Med.
PX4 Military UAV Autopilot 1.12.3 Denial of Service (DoS)
 CVE Remote Mohammed Idrees
High
Roundcube 1.6.10 Remote Code Execution (RCE)
 Remote Maksim
2025-07-15
High
Remote Mouse 4.601 Unauthenticated Remote System Control
 Remote Chokri Hammedi
Low
jsbin-web app - XSS Reflected
 Remote nu11secur1ty
2025-07-12
High
ISPConfig language_edit.php PHP Code Injection
 Remote EgiX
Med.
Events Manager <= 7.0.3 - Unauthenticated SQL Injection via orderby Parameter
 Remote RandomRobbieBF
Med.
File Provider <= 1.2.3 - Unauthenticated SQL Injection
 CVE Remote RandomRobbieBF
High
SAP NetWeaver S/4HANA ABAP Code Execution
 CWE Remote Local Raschin Tavakoli
2025-07-07
High
Microsoft Outlook Remote Code Execution Vulnerability - ACE
 CVE Remote nu11secur1ty
Med.
Oracle 23ai Privilege Escalation From GRANT ANY ROLE To DBA Role
 Local Emad Al-Mousa
Med.
MikroTik RouterOS < v7.0 - Reflected XSS in UserManager
 Remote ahmed Mutaher
2025-07-03
High
gogs 0.13.0 - Remote Code Execution
 CVE Remote Ardayfio
2025-07-02
Med.
Vite fs LFI (Local File Inclusion) Vulnerability
 CVE Remote nu11secur1ty
High
Moodle 4.4.0 Authenticated Remote Code Execution
 CVE Remote Likhith Appalaneni
High
WebDAV Windows 10 Remote Code Execution (RCE)
 CVE Remote Dev Bui Hieu
High
Java-springboot-codebase 1.1 Arbitrary File Read
 CVE CWE Remote d3sca
2025-06-29
High
Sitecore 10.4 Remote Code Execution (RCE)
 CVE Remote Yesith Alvarez
Low
Pitamaas - Sql Injection
 Remote behrouz mansoori
High
Microsoft Edge (Chromium-based) Update Elevation of Privilege Vulnerability PoC (Conceptual Model)
 Remote nu11secur1ty
2025-06-26
Med.
Litespeed Cache WordPress Plugin 6.3.0.1 Privilege Escalation
 CVE CWE Remote Milad Karimi
2025-06-25
Med.
Microsoft Excel LTSC Professional Pilus 2021 - Microsoft® Word LTSC MSO (16.0.14334.20090) 64-bit - Remote Code Execution Bypass - ZIP (RCE)
 Remote nu11secur1ty
2025-06-20
Med.
MOBOTIX IP cameras Unauthenticated access
 CWE Remote hasanwlip
High
Ingress-NGINX 4.11.0 Remote Code Execution (RCE)
 CVE Remote Likhith Appalaneni
2025-06-17
High
Microsoft Excel Remote Code Execution Vulnerability
 Local nu11secur1ty
2025-06-15
High
Freefloat FTP Server 1.0 Remote Buffer Overflow
 CVE CWE Remote Fernando
Low
Kentico Xperience 13.0.178 Cross Site Scripting
 CVE CWE Remote Alex Messham
High
AirKeyboard iOS App 1.0.5 Remote Input Injection
 Remote Chokri Hammedi
High
Skyvern 0.1.85 Remote Code Execution (RCE) via SSTI
 CVE Remote Cristian Branet
2025-06-12
High
Apache Tomcat/10.1.39 DoS-BOF
 CVE Remote nu11secur1ty
2025-06-10
Med.
TightVNC 2.8.83 Control Pipe Manipulation
 CVE Remote Ionut Zevedei
Med.
WordPress Digits Plugin 8.4.6.1 Authentication Bypass via OTP Bruteforcing
 CVE CWE Remote Saleh Tarawneh
High
Microsoft Excel Local Code Execution Vulnerability
 CVE Remote nu11secur1ty
2025-06-08
Med.
Apache Tomcat 10.1.39 Denial of Service (DoS)
 CVE Remote Abdualhadi khalifa
Med.
Microsoft Windows 11 23h2 CLFS.sys Elevation of Privilege
 CVE Local Milad Karimi
Low
HRM-1.0 2025 Cross-site scripting (reflected)
 Remote nu11secur1ty
Med.
HRM-1.0-2025 Multiple-SQLi
 Remote nu11secur1ty
2025-06-04
Med.
CloudClassroom PHP Project 1.0 SQL Injection
 CVE Remote Sanjay Singh
Low
ERPNext 15.53.1 Cross Site Scripting
 Remote Ron E
Med.
Windows Explorer - NTLM Hash Disclosure via .library-ms in ZIP Archive
 CVE Local Mohammed Idrees Banyam...
2025-05-29
Med.
Campcodes Online Hospital Management System 1.0 SQL Injection
 CVE CWE Remote Carine Constantino
Low
UJCMS 9.6.3 User Enumeration via IDOR
 CVE Remote Cyd Tseng
2025-05-27
Med.
compop.ca 3.5.3 Arbitrary code Execution
 CVE Remote dmlino
Med.
ABB Cylon Aspect Studio 3.08.03 Binary Planting
 CVE Local Gjoko 'LiquidWorm...
Med.
EMBRYO CMS by Pyxis Studio - Authenticated SQL Injection on www.embryohotel.com
 CWE Remote 0x6ick
Med.
KRUKSTON-BISTRO-1.0 Multiple-SQLi
 Remote Local nu11secur1ty
2025-05-24
Low
TechKnock Digital Services - Xpath Injection Vulnerability
 Remote behrouz mansoori
Low
Casdoor 1.901.0 Cross-Site Request Forgery (CSRF)
 CWE Remote Van Lam Nguyen
Low
SIAKAD STEKOM - Stored XSS Vulnerability(Login Page)
 CWE Remote 0x6ick
2025-05-22
Med.
Techknock Digital Services - Sql Injection
 Remote behrouz mansoori
Med.
Microsoft SQL Server Privilege Escalation from Control Server To Sysadmin role
 Remote Emad Al-Mousa
2025-05-19
Med.
Magnolia DX Core 6.3.8 - Command Injection
 Remote tmrswrr
Low
Tiiwee X1 Alarm System Replay Attack
 CWE Remote Sebastian
Low
Oracle database password hash exposure in sharding component
 CVE Local Emad Al-Mousa
2025-05-16
High
DiskBoss Enterprise 7.4.28 Remote Buffer Overflow
 CWE Remote Fernando Mengali
2025-05-13
Med.
Design By : RVTECH - Blind Sql Injection Vulnerability
 Remote behrouz mansoori
Med.
fengoffice_3.5.1.5 - SQLi
 Remote nu11secur1ty
High
Dell EMC iDRAC7/iDRAC8 2.52.52.52 Remote Code Execution
 CVE Remote Photubias
2025-05-10
Med.
ezportal Advisory ( Portal Mod for SMF ) Local SQL injection
 Remote Emiliano Febbi
Copyright 2025, cxsecurity.com

 

Back to Top