Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2025-11-19
Med.
Fortinet FortiWeb Auth-8.0.0 Bypass CVE-2025-64446
 Remote nu11secur1ty
2025-11-17
High
Fortinet FortiWeb Auth. Bypass
 CVE Remote nu11secur1ty
2025-11-13
Med.
Logitech Streamlabs Desktop 1.19.6 (overlay) CPU Exhaustion
 Remote Local LiquidWorm
Med.
is-localhost-ip 2.0.0 - SSRF via Restrictions bypass
 Remote nu11secur1ty
Low
moew.government.bg Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-11-07
Low
hop.bg | web app | Cross-site scripting (reflected)
 Remote nu11secur1ty
Med.
3kits template via imgGallery.php SQL Injection id parameter
 Remote Hossein_0xB
2025-11-04
Low
ModernShop - RXSS
 CVE CWE Remote CraCkEr
Med.
3kits template SQL Injection via imgGallery.php id parameter
 Remote Hossein_0xB
High
Desktop Window Manager (DWM) Core Library — Heap-based Buffer Overflow (sanitized evidence)
 CVE Local nu11secur1ty
2025-11-01
High
Exim tls-openssl.c — Use-After-Free: unauthenticated Remote Code Execution
 CVE CWE Remote CyberSploit
Low
Wisenshop - Stored XSS
 CVE CWE Remote CraCkEr
High
Flowise 3.0.4 Remote Code Execution
 CVE Remote nltt0
2025-10-29
Low
RiteCMS 3.1.0 Cross Site Scripting
 Remote Chokri Hammedi
Med.
GeoVision ASManager Windows Application 6.1.2.0 Credentials Disclosure
 CVE Remote Giorgi Dograshvili
Low
Swagger UI 1.0.3 Cross-Site Scripting (XSS)
 CVE CWE Remote ByteReaper0
2025-10-27
High
WordPress Backup Migration 1.3.7: Remote Command Execution
 CVE Remote DANG
2025-10-24
High
Vvveb CMS 1.0.5 Remote Code Execution
 Remote Maksim
2025-10-23
Med.
Cleartext Storage of Sensitive Information in Memory in Easywork Enterprise
 Remote Ivan
2025-10-21
Med.
Fedora Gnome Privilege Escalation
 Local Tavis Ormandy
Med.
greenlife-Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
Med.
Student Record System 3.20 - 'id' Parameter Time-based Blind SQL Injection
 CWE Remote Şeyma Yaldız
2025-10-12
Low
Perfex CRM Chatbot Cross Site Scripting
 CVE Remote Ajansha
2025-10-09
Low
DirectAdmin v1.680 DOM Injection via return-to Parameter
 CVE Remote Scott Sturrock
2025-10-07
High
SugarCRM unauthenticated Remote Code Execution (RCE)
 CVE Remote DANG
Med.
GaatiTrack-1.0 Copyright©2025-Multiple-SQLi - Metasploit module
 Remote nu11secur1ty
2025-10-05
Med.
CPAS Audit Management Information System 4.9 SQL Injection
 Remote songqb-xx
Low
ERPNext 15.67.0 / Frappe 15.72.4 Cross Site Scripting
 CVE Remote Mohammed Aloli
2025-10-01
Low
nopCommerce 4.40.3 - Stored Cross-Site Scripting (XSS)
 CVE Remote Scott Sturrock
Med.
DirectAdmin v1.680 DOM Injection via return-to Parameter (UI Misrepresentation)
 CVE Remote Scott Sturrock
2025-09-30
Med.
WordPress Quentn WP 1.2.8 Privilege Escalation
 Local Nxploited
High
StoryChief Wordpress Plugin 1.0.42 Arbitrary File Upload
 CVE CWE Remote xpl0dec
High
Belkin F9K1009 F9K1010 2.00.04/2.00.09 Hard Coded Credentials
 CVE Remote Byte
2025-09-27
Low
FVGFL - Cross Site Scripting Vulnerability (XSS)
 Remote Mahdi Karimi
Low
MatterMost information disclosure
 Local parsa rezaie khiabanlo...
2025-09-21
High
Commvault CLI Argument Injection / Traversal / Remote Code Execution
 Remote Piotr Bazydlo
High
aaPanel 7.x.x Remote Command Execution
 CVE Remote Alasdair Gorniak
Med.
sacco-1.0-Multiple-SQLi
 Remote nu11secur1ty
2025-09-14
High
Sitecore XP Post-Authentication File Upload
 CVE Remote Piotr Bazydlo
Low
database.refugee-integration.bg - CORS-AOT vulnerability
 Remote nu11secur1ty
Med.
BarbarBaba-1.0 Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
2025-09-10
Low
INITCMS v6.2.17 - Stored Cross-Site Scripting
 CWE Remote Osman Aydoğan
Low
Sales Syntax CMS - Stored Cross-Site Scripting
 CWE Remote Erdinç ODABAŞ
2025-09-04
High
GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution
 CVE Remote Giorgi Dograshvili
Low
WordPress Plugin WP Publications <= 1.2 - Admin+ Stored XSS
 CVE Remote Zeynalxan Quliyev, Rav...
Med.
BarbarBaba 1.0 time-based blind sql injection
 Remote Furkan Sezgin
2025-08-28
Med.
DITRP INDIA - Sql Injection
 Remote behrouz mansoori
Med.
Ultimate Member WordPress Plugin 2.6.6 Privilege Escalation
 CVE CWE Local Gurjot Singh
Med.
Ghost CMS 5.59.1 Arbitrary File Read
 CVE CWE Remote ibrahimsql
Med.
WordPress WP Reactions Box Plugin 1.0 - SQL Injection
 Remote bRpsd
Med.
DOS Baby POP3 Server 1.04
 Remote Érick Sousa
Low
WIX.com / market app Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-08-23
Med.
EasyApp Limited - Multiple Vulnerabilities
 Remote bRpsd
2025-08-20
High
MSSQL Database Privilege Elevation From ALTER ANY LOGIN To SYSADMIN
 Local Emad Al-Mousa
Low
RiteCMS 3.0.0 Reflected Cross Site Scripting
 CVE CWE Remote GURJOT SINGH
Med.
Tenda AC20 16.03.08.12 Command Injection
 CVE CWE Remote Anonymous
2025-08-16
Med.
Microsoft Edge Renderer Process (Mojo IPC) Sandbox Escape
 Remote nu11secur1ty
Med.
Upload.am 1.0.0 WordPress Plugin - Multiple Vulnerabilities
 Remote bRpsd
2025-08-13
High
WordPress Upload.am 1.0.0 Setting Modification / Information Disclosure
 Remote bRpsd
High
Wazuh Server Remote Code Execution
 CVE Remote h00die-gr3y
Copyright 2025, cxsecurity.com

 

Back to Top