CVE-2025-61557: Improper Limitation of a Pathname to a Restricted Directory

nixseparatedebuginfod before v0.4.1 is vulnerable to Directory Traversal...

CVE-2025-66103: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in revmakx WPCal.io wpcal allows DOM-Based XSS.This issue affects WPCal.io: from n/a through = 0.9.5.9...

CVE-2025-15102: Authentication Bypass Using an Alternate Path or Channel

DVP-12SE11T - Password Protection Bypass...

CVE-2025-23554: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Jakub Glos Off Page SEO off-page-seo allows Reflected XSS.This issue affects Off Page SEO: from n/a through = 3.0.3...

Apache Tika JAR Detection

Binary data apachetikajardetect.nbin...

CVE-2025-68980: Missing Authorization

Missing Authorization vulnerability in designthemes WeDesignTech Portfolio wedesigntech-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WeDesignTech Portfolio: from n/a through = 1.0.2...

Deserialization of Untrusted Data

Overview picklescan is a Security scanner detecting Python Pickle files performing suspicious actions Affected versions of this package are vulnerable to Deserialization of Untrusted Data via using the numpy.f2py.crackfortran.parameval function. An attacker can execute arbitrary code by crafting ...

Exploit for CVE-2025-14847

🌊 MongoDeepDive Context-Aware MongoDB Wire Protocol Explo...

CVE-2025-52691: Unrestricted Upload of File with Dangerous Type

Successful exploitation of the vulnerability could allow an unauthenticated attacker to upload arbitrary files to any location on the mail server, potentially enabling remote code execution...

CVE-2025-55061: Unrestricted Upload of File with Dangerous Type

CWE-434 Unrestricted Upload of File with Dangerous Type...

CVE-2025-55062: Improper Neutralization of Input During Web Page Generation

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55064: Improper Neutralization of Input During Web Page Generation

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2025-55063: Improper Neutralization of Input During Web Page Generation

CWE-79 Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting'...

CVE-2024-25183: Improper Limitation of a Pathname to a Restricted Directory

givanz VvvebJs 1.7.2 is vulnerable to Directory Traversal via scan.php...

CVE-2025-56333: Improper Authentication

An issue in Fossorial fosrl/pangolin v.1.6.2 and before allows a remote attacker to escalate privileges via the 2FA component...

CVE-2025-68877: Improper Control of Filename for Include/Require Statement in PHP Program

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in cedcommerce CedCommerce Integration for Good Market ced-good-market-integration allows PHP Local File Inclusion.This issue affects CedCommerce Integration for Good Market: from n...

CVE-2025-68893: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery SSRF vulnerability in HETWORKS WordPress Image shrinker wp-image-shrinker allows Server Side Request Forgery.This issue affects WordPress Image shrinker: from n/a through = 1.1.0...

CVE-2025-55060: URL Redirection to Untrusted Site

CWE-601 URL Redirection to Untrusted Site 'Open Redirect'...

CVE-2025-57460: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in machsol machpanel 8.0.32 allows attacker to gain a webshell...

CVE-2025-67254: Improper Limitation of a Pathname to a Restricted Directory

NagiosXI 2026R1.0.1 build 1762361101 is vulnerable to Directory Traversal in /admin/coreconfigsnapshots.php...