CVE-2025-15254

creationtimestamp| type| source ---|---|--- 2026-01-03 01:31:54+00:00| published-proof-of-concept| Telegram/ZEJnYsZHqX5Eut9g5J7wPdkoLK-csUqu0--sJzTbCnqPfg 2026-01-03 01:32:48+00:00| published-proof-of-concept| Telegram/eiRLPBKEhNaAGhdRD-ExRPInzL64wPUwrvEV9K02huUSpQ 2026-01-03 01:40:29+00:00|...

GHSA-5J4H-4F72-QPM6 Bagisto has Normal & Blind SSTI from low-privilege user when ordering product

Summary SSTI when normal customer orders any product in add address step can inject value run in admin view. Details As normal user 1. Go to http://127.0.0.1:8000/ 2. Add order to cart and continue to checkout 3. In step of add address inject this value 77 in any input As admin 1. Go to...

Bagisto has Normal & Blind SSTI from low-privilege user when ordering product

Summary SSTI when normal customer orders any product in add address step can inject value run in admin view. Details As normal user 1. Go to http://127.0.0.1:8000/ 2. Add order to cart and continue to checkout 3. In step of add address inject this value 77 in any input As admin 1. Go to...

CVE-2025-64699

creationtimestamp| type| source ---|---|--- 2026-01-02 21:53:57+00:00| published-proof-of-concept| Telegram/hcDjc3NhGUoeZSSWMq1-Ad9hJdURxw9h6RqjETU5SUNNrCg...

GHSA-F7PH-RC3W-QP28

creationtimestamp| type| source ---|---|--- 2026-01-02 21:53:02+00:00| published-proof-of-concept| Telegram/79M2PUWRnDZFfaBX3deh-SQz72WULa4jlHjBh-ox2wjl5as...

CVE-2025-61557

creationtimestamp| type| source ---|---|--- 2026-01-02 21:53:02+00:00| published-proof-of-concept| Telegram/79M2PUWRnDZFfaBX3deh-SQz72WULa4jlHjBh-ox2wjl5as...

GHSA-XV8M-365J-X6H2

creationtimestamp| type| source ---|---|--- 2026-01-02 21:52:17+00:00| published-proof-of-concept| Telegram/mK8o9C1rhrHkVcM37GZHvLPW6XA5mG-AmvsJea-RQorcPsU...

CVE-2025-66909

creationtimestamp| type| source ---|---|--- 2026-01-02 21:52:07+00:00| published-proof-of-concept| Telegram/RP142WcXZVZZM4yb6Vg5Bi-obLVsVHz267yRzNk0mXmOvUc 2026-01-02 21:52:17+00:00| published-proof-of-concept| Telegram/mK8o9C1rhrHkVcM37GZHvLPW6XA5mG-AmvsJea-RQorcPsU...

CVE-2025-66953

creationtimestamp| type| source ---|---|--- 2026-01-02 21:51:48+00:00| published-proof-of-concept| Telegram/OqvPk0TC77Z9DcsSU3c5lTkKTjblqJB8uZv-6Qb5bDB6CAw...

GHSA-W8W8-82PV-5RG9

creationtimestamp| type| source ---|---|--- 2026-01-02 21:51:37+00:00| published-proof-of-concept| Telegram/76XS8g8vzfJZzLhIc6cIEumxaOFppJoCx-jsKbwFQGseRQ...

GHSA-XR72-2G43-586W

creationtimestamp| type| source ---|---|--- 2026-01-02 21:50:38+00:00| published-proof-of-concept| Telegram/rY7awwgYiyf4MoJmU46p1ZfRs7aDMuxx9VM2nTHHFeQecLc...

CVE-2025-61922

creationtimestamp| type| source ---|---|--- 2026-01-02 21:00:05+00:00| published-proof-of-concept| Telegram/Ph5XVLoVKPKzeNd3zHbruXHl3wn31oqUjoUVrNk6if5Q2TM 2026-01-02 22:53:23+00:00| published-proof-of-concept| https://github.com/g0vguy/CVE-2025-61922-PoC 2026-01-02 22:54:29+00:00| seen|...

CVE-2025-69414

creationtimestamp| type| source ---|---|--- 2026-01-02 18:55:13+00:00| published-proof-of-concept| Telegram/0JnnPb1FXPACs6svVySu41rA7pedi-lhGwy4Q4xBeRTLA 2026-05-21 14:09:20+00:00| seen| https://bsky.app/profile/hugovalters.bsky.social/post/3mmeluowero2f...

CVE-2025-15421

creationtimestamp| type| source ---|---|--- 2026-01-02 18:53:43+00:00| published-proof-of-concept| Telegram/BdLqdiEzj97fYrKkipbjvYeWh-fsmElnstXUPYuo06Bp1ck 2026-01-02 21:55:41+00:00| published-proof-of-concept| Telegram/9USlVQ0BLzfsbHDwkQXXxk4njQVtv7341UBiTeExSOFj8...

GHSA-8XW3-V6C2-J84J

creationtimestamp| type| source ---|---|--- 2026-01-02 18:50:43+00:00| published-proof-of-concept| Telegram/yvEUayxcitdp3BxnZyJKKsx9SQ4slGt9KJm017IeBxHD9Y 2026-01-02 21:53:57+00:00| published-proof-of-concept| Telegram/hcDjc3NhGUoeZSSWMq1-Ad9hJdURxw9h6RqjETU5SUNNrCg...

GHSA-PQGX-6WG3-GMVR

creationtimestamp| type| source ---|---|--- 2026-01-02 18:50:43+00:00| published-proof-of-concept| Telegram/yvEUayxcitdp3BxnZyJKKsx9SQ4slGt9KJm017IeBxHD9Y 2026-01-02 21:54:03+00:00| published-proof-of-concept| Telegram/qOZ2r4xRzPVMqHinUj39Gu9PbW29JKKteUw1FNMXLxRZs4...

GHSA-9J5G-G4XM-57W7

creationtimestamp| type| source ---|---|--- 2026-01-02 18:50:43+00:00| published-proof-of-concept| Telegram/yvEUayxcitdp3BxnZyJKKsx9SQ4slGt9KJm017IeBxHD9Y 2026-01-02 21:53:57+00:00| published-proof-of-concept| Telegram/hcDjc3NhGUoeZSSWMq1-Ad9hJdURxw9h6RqjETU5SUNNrCg...

CVE-2025-15373

creationtimestamp| type| source ---|---|--- 2026-01-02 18:50:07+00:00| published-proof-of-concept| Telegram/y7Lvi2tF85NLRLdqVIoPmFTdEgasWBAb1B7Rq-PCy88P3M...

CVE-2025-67013

creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:53+00:00| published-proof-of-concept| Telegram/YF7SiVU4fRdeEbPrgEybP1PhAHJtxgx2UciXBwDQ1HiRhM...

CVE-2025-66824

creationtimestamp| type| source ---|---|--- 2026-01-02 18:48:53+00:00| published-proof-of-concept| Telegram/YF7SiVU4fRdeEbPrgEybP1PhAHJtxgx2UciXBwDQ1HiRhM 2026-01-02 18:49:29+00:00| published-proof-of-concept| Telegram/LmKxq2RvWRLfq2FoWo96QeUFW2uHrNfPh4yVCTeOgIileT4...