Sort by: Updated/Published

Full List of Bugtraq
Risk Topic & Details
2025-10-05
Med.
CPAS Audit Management Information System 4.9 SQL Injection
 Remote songqb-xx
Low
ERPNext 15.67.0 / Frappe 15.72.4 Cross Site Scripting
 CVE Remote Mohammed Aloli
2025-10-01
Low
nopCommerce 4.40.3 - Stored Cross-Site Scripting (XSS)
 CVE Remote Scott Sturrock
Med.
DirectAdmin v1.680 DOM Injection via return-to Parameter (UI Misrepresentation)
 CVE Remote Scott Sturrock
2025-09-30
Med.
WordPress Quentn WP 1.2.8 Privilege Escalation
 Local Nxploited
High
StoryChief Wordpress Plugin 1.0.42 Arbitrary File Upload
 CVE CWE Remote xpl0dec
High
Belkin F9K1009 F9K1010 2.00.04/2.00.09 Hard Coded Credentials
 CVE Remote Byte
2025-09-27
Low
FVGFL - Cross Site Scripting Vulnerability (XSS)
 Remote Mahdi Karimi
Low
MatterMost information disclosure
 Local parsa rezaie khiabanlo...
2025-09-21
High
Commvault CLI Argument Injection / Traversal / Remote Code Execution
 Remote Piotr Bazydlo
High
aaPanel 7.x.x Remote Command Execution
 CVE Remote Alasdair Gorniak
Med.
sacco-1.0-Multiple-SQLi
 Remote nu11secur1ty
2025-09-14
High
Sitecore XP Post-Authentication File Upload
 CVE Remote Piotr Bazydlo
Low
database.refugee-integration.bg - CORS-AOT vulnerability
 Remote nu11secur1ty
Med.
BarbarBaba-1.0 Copyright©2025-Multiple-SQLi
 Remote nu11secur1ty
2025-09-10
Low
INITCMS v6.2.17 - Stored Cross-Site Scripting
 CWE Remote Osman Aydoğan
Low
Sales Syntax CMS - Stored Cross-Site Scripting
 CWE Remote Erdinç ODABAŞ
2025-09-04
High
GeoVision ASManager Windows Application 6.1.2.0 Remote Code Execution
 CVE Remote Giorgi Dograshvili
Low
WordPress Plugin WP Publications <= 1.2 - Admin+ Stored XSS
 CVE Remote Zeynalxan Quliyev, Rav...
Med.
BarbarBaba 1.0 time-based blind sql injection
 Remote Furkan Sezgin
2025-08-28
Med.
DITRP INDIA - Sql Injection
 Remote behrouz mansoori
Med.
Ultimate Member WordPress Plugin 2.6.6 Privilege Escalation
 CVE CWE Local Gurjot Singh
Med.
Ghost CMS 5.59.1 Arbitrary File Read
 CVE CWE Remote ibrahimsql
Med.
WordPress WP Reactions Box Plugin 1.0 - SQL Injection
 Remote bRpsd
Med.
DOS Baby POP3 Server 1.04
 Remote Érick Sousa
Low
WIX.com / market app Cross-site scripting (reflected)
 Remote nu11secur1ty
2025-08-23
Med.
EasyApp Limited - Multiple Vulnerabilities
 Remote bRpsd
2025-08-20
High
MSSQL Database Privilege Elevation From ALTER ANY LOGIN To SYSADMIN
 Local Emad Al-Mousa
Low
RiteCMS 3.0.0 Reflected Cross Site Scripting
 CVE CWE Remote GURJOT SINGH
Med.
Tenda AC20 16.03.08.12 Command Injection
 CVE CWE Remote Anonymous
2025-08-16
Med.
Microsoft Edge Renderer Process (Mojo IPC) Sandbox Escape
 Remote nu11secur1ty
Med.
Upload.am 1.0.0 WordPress Plugin - Multiple Vulnerabilities
 Remote bRpsd
2025-08-13
High
WordPress Upload.am 1.0.0 Setting Modification / Information Disclosure
 Remote bRpsd
High
Wazuh Server Remote Code Execution
 CVE Remote h00die-gr3y
High
PivotX 3.0.0 RC 3 Remote Code Execution
 CVE Remote msutovsky-r7
2025-08-11
Med.
Projectworlds Online Admission System 1.0 SQL Injection
 Remote Byte Reaper
High
JetBrains TeamCity 2023.11.4 Authentication Bypass
 CVE Remote ibrahimsql (https://gi...
High
Cisco ISE 3.0 Remote Code Execution
 CVE Remote ibrahimsql
Med.
SugarCRM 14.0.0 SSRF/Code Injection
 CVE CWE Remote Egidio Romano
2025-08-10
High
Pandora ITSM Authenticated Command Injection
 Remote h00die-gr3y
2025-08-08
High
Shenzhen Aitemi M300 Wi-Fi Repeater Unauthenticated RCE
 Remote Local Anonymous
2025-08-05
Med.
Malicious XDG Desktop File
 Remote Brendan coles
Med.
VX Guestbook 1.07 SQL Injection
 Remote Trmswrr
High
Ultimate Control Receiver 1.2 Remote Code Execution
 Remote Chokri
2025-08-03
High
Microsoft Virtual Hard Disk (VHDX) 11 Remote Code Execution
 CVE Remote nu11secur1ty
High
Langflow 1.2.x Remote Code Execution (RCE)
 CVE Remote Raghad Abdallah Al-syo...
2025-07-31
High
Microsoft Excel LTSC 2024 Remote Code Execution
 CVE Remote nu11secur1ty
High
White Star Software Protop 4.4.2-2024-11-27 Local File Inclusion
 CVE CWE Remote Imraan Khan
Med.
freeSSHd 1.0.9 Denial of Service (DoS)
 CVE Remote Fernando
2025-07-28
Med.
Sudo chroot 1.9.17 Local Privilege Escalation
 CVE CWE Local Stratascale
High
Adobe ColdFusion 2023.6 Remote File Read
 CVE Remote @İbrahimsql
Med.
Xlight FTP 1.1 Denial Of Service
 CVE Remote Fernando Mengali
Low
Stacks Mobile App Builder 5.2.3 Authentication Bypass via Account Takeover
 CVE Remote stealthcopter
2025-07-24
Med.
Malicious Windows Registration Entries (.reg) File
 Local bcoles
High
Microsoft PowerPoint 2019 Remote Code Execution (RCE)
 CVE Remote Mohammed Idrees Banyam...
Med.
VHDX Corruption Proof-of-Concept (PoC)
 CVE Local nu11secur1ty
Med.
Office Macro Callback PoC (For Authorized Security Testing Only)
 CVE Remote nu11secur1ty
2025-07-21
High
Remote Mouse 3.303 Remote Code Execution
 Remote Chokri Hammedi
Low
Intelbras RX 1500 2.2.9 / RX 3000 1.0.11 IDOR / XSS
 Remote Gabriel
Low
LiveHelperChat <=4.61 - Stored Cross Site Scripting (XSS)
 CVE Remote Manojkumar J
Copyright 2025, cxsecurity.com

 

Back to Top