CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

930 matches found

CVE•added 2025/10/05 8:32 p.m.•30 views

CVE-2025-11303

Belkin F9K1015 (version 1.00.10) contains a command injection flaw in the /goform/mp handler via manipulation of the command argument. The vulnerability allows remote execution and is supported by multiple sources (NVD, Red Hat, Vulners enrichments, PT Security) with exploitation details publicly...

8.8CVSS6.3AI score0.06796EPSS

SaveExploits1References5Affected Software1

EUVD•added 2025/10/05 8:32 p.m.•9 views

EUVD-2025-32468

A vulnerability was detected in Belkin F9K1015 1.00.10. Affected is an unknown function of the file /goform/mp. Performing manipulation of the argument command results in command injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted...

6.5CVSS6.3AI score0.06796EPSS

SaveExploits1References6

ATTACKERKB•added 2025/10/05 7:2 p.m.•6 views

CVE-2025-11300

A security flaw has been discovered in Belkin F9K1015 1.00.10. The impacted element is an unknown function of the file /goform/formWlanMP. The manipulation of the argument ateFunc results in buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public...

9CVSS5.9AI score0.00773EPSS

SaveExploits1References5Affected Software1

EUVD•added 2025/10/05 6:30 a.m.•6 views

EUVD-2025-32449

A vulnerability was found in samanhappy MCPHub up to 0.9.10. Affected by this issue is some unknown functionality of the file src/controllers/serverController.ts. The manipulation of the argument command/args results in os command injection. The attack can be launched remotely. The exploit has be...

6.5CVSS6.3AI score0.07794EPSS

SaveExploits1References5

ATTACKERKB•added 2025/10/05 1:32 a.m.•3 views

CVE-2025-11277

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit...

7.8CVSS5.6AI score0.00224EPSS

SaveExploits1References5Affected Software1

EUVD•added 2025/10/05 12:34 a.m.•8 views

EUVD-2025-32436

A vulnerability was found in LaChatterie Verger up to 1.2.10. This impacts the function redirectToAuthorization of the file /src/main/services/mcp/oauth/provider.ts. The manipulation of the argument URL results in deserialization. The attack can be executed remotely. The exploit has been made...

6.5CVSS6.2AI score0.00304EPSS

SaveExploits0References5

EUVD•added 2025/10/03 8:7 p.m.•12 views

EUVD-2025-24994