İçeriğe atla
Noroxi

Yayın tarihine göre

Temmuz 2025: sömürülen ve yeni ciddi CVE kayıtları

335 kayıt · 14 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 4

  • CVE-2025-6934
    47Planlayın

    Opal Estate Pro <= 1.7.5 - Unauthenticated Privilege Escalation via 'on_regiser_user'

    KritikCVSS 9,8Kavram kanıtıEPSS %25

    wpopal · opal estate pro – property management and submission1 Tem 2025

  • CVE-2025-41656
    44Planlayın

    Pilz: Missing Authentication in Node-RED integration

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    pilz · industrialpi 4 with firmware bullseye1 Tem 2025

  • CVE-2025-49029
    37İzleyin

    WordPress Custom Login And Signup Widget plugin <= 1.0 - Arbitrary Code Execution vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %2

    bitto.kazi · custom login and signup widget1 Tem 2025

  • CVE-2025-34065
    27İzleyin

    AVTECH IP camera, DVR, and NVR Devices Authentication Bypass via /nobody URL Path

    OrtaCVSS 6,9Kavram kanıtıEPSS %0

    avtech · ip camera, dvr, and nvr devices1 Tem 2025

  • CVE-2025-37098
    44Planlayın

    A path traversal vulnerability exists in HPE Insight Remote Support (IRS) prior to v7.15.0.646.

    YüksekCVSS 7,5İstismar yokEPSS %46

    hpe · insight remote support1 Tem 2025

  • CVE-2025-53107
    37İzleyin

    @cyanheads/git-mcp-server vulnerable to command injection in several tools

    YüksekCVSS 7,5İstismar yokEPSS %24

    cyanheads · git-mcp-server1 Tem 2025

  • CVE-2025-53104
    36İzleyin

    gluestack-ui Command Injection Vulnerability via discussion-to-slack GitHub Action Workflow

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    gluestack · gluestack-ui1 Tem 2025

  • CVE-2025-49741
    31İzleyin

    Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    microsoft · edge chromium1 Tem 2025

  • CVE-2025-4380
    52Planlayın

    Ads Pro Plugin - Multi-Purpose WordPress Advertising Manager <= 4.89 - Unauthenticated Local File Inclusion

    KritikCVSS 9,8Kavram kanıtıEPSS %42

    scripteo · ads pro2 Tem 2025

  • CVE-2025-6463
    40Planlayın

    Forminator Forms – Contact Form, Payment Form & Custom Form Builder <= 1.44.2 - Unauthenticated Arbitrary File Deletion Triggered via Administrator Form Submiss

    YüksekCVSS 8,8İstismar yokEPSS %15

    incsub · forminator2 Tem 2025

  • CVE-2025-34057
    37İzleyin

    Ruijie NBR Router Administrative Credential Disclosure

    YüksekCVSS 8,7İstismar yokEPSS %10

    ruijie · nbr router2 Tem 2025

  • CVE-2025-34067
    47Planlayın

    Hikvision Integrated Security Management Platform Remote Command Execution via applyCT Fastjson

    KritikCVSS 10,0İstismar yokEPSS %21

    hikvision · integrated security management platform2 Tem 2025

  • CVE-2025-34069
    38İzleyin

    GFI Kerio Control GFIAgent Authentication Bypass via Proxy Forwarding

    KritikCVSS 9,5Kavram kanıtıEPSS %0

    gfi · kerio control2 Tem 2025

  • CVE-2025-34071
    37İzleyin

    GFI Kerio Control Unsigned System Image Upload Root Code Execution

    KritikCVSS 9,4Kavram kanıtıEPSS %0

    gfi · kerio control2 Tem 2025

  • CVE-2025-34073
    60Bu hafta

    stamparm/maltrail <=0.54 Remote Command Execution

    KritikCVSS 10,0SilahlaştırılmışEPSS %5

    stamparm · maltrail2 Tem 2025

  • CVE-2025-20309
    40Planlayın

    Cisco Unified Communications Manager Static SSH Credentials Vulnerability

    KritikCVSS 10,0İstismar yokEPSS %1

    cisco · unified communications manager2 Tem 2025

  • CVE-2025-34074
    40Planlayın

    Lucee Admin Interface Authenticated Remote Code Execution via Scheduled Job File Write

    KritikCVSS 9,4SilahlaştırılmışEPSS %2

    lucee association switzerland · lucee2 Tem 2025

  • CVE-2025-34078
    40Planlayın

    NSClient++ 0.5.2.35 Local Privilege Escalation via ExternalScripts and Web Interface

    YüksekCVSS 7,3SilahlaştırılmışEPSS %0

    nsclient · nsclient\+\+2 Tem 2025

  • CVE-2025-34079
    40Planlayın

    NSClient++ Authenticated Remote Code Execution via ExternalScripts API

    YüksekCVSS 7,5SilahlaştırılmışEPSS %1

    nsclient · nsclient\+\+2 Tem 2025

  • CVE-2025-34076
    40Planlayın

    Microweber CMS Authenticated Local File Inclusion via Backup API

    OrtaCVSS 6,1SilahlaştırılmışEPSS %2

    microweber · microweber2 Tem 2025

  • CVE-2025-6563
    19İzleyin

    Cross-site scripting via dst parameter in RouterOS WiFi hotspot

    OrtaCVSS 4,8Kavram kanıtıEPSS %0

    mikrotik · routeros3 Tem 2025

  • CVE-2025-49618
    23İzleyin

    In Plesk Obsidian 18.0.69, unauthenticated requests to /login_up.php can reveal an AWS accessKeyId, secretAccessKey, region, and endpoint.

    OrtaCVSS 5,8İstismar yokEPSS %0

    plesk · obsidian3 Tem 2025

  • CVE-2025-5961
    45Planlayın

    Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.116 - Authenticated (Administrator+) Arbitrary File Upload

    YüksekCVSS 7,2Kavram kanıtıEPSS %55

    wpvivid · migration\, backup\, staging3 Tem 2025

  • CVE-2025-48939
    16İzleyin

    tarteaucitron.js vulnerable to DOM Clobbering via document.currentScript

    OrtaCVSS 4,2İstismar yokEPSS %0

    amauri · tarteaucitronjs3 Tem 2025

  • CVE-2025-23968
    36İzleyin

    WordPress AiBud WP plugin <= 1.9 - Arbitrary File Upload vulnerability

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    webfactory · aibud wp3 Tem 2025

  • CVE-2025-45809
    21İzleyin

    SQL Injection vulnerability in BerriAI LiteLLM before 1.81.0 allows attackers to execute arbitrary commands via the key parameter to the "/k

    OrtaCVSS 5,4Kavram kanıtıEPSS %0

    litellm · litellm3 Tem 2025

  • CVE-2025-34061
    60Bu hafta

    PHPStudy 2016-2018 Backdoor Remote Code Execution Vulnerability

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    henan xiaopi security technology co., ltd. · phpstudy3 Tem 2025

  • CVE-2025-34082
    60Bu hafta

    IGEL OS Secure Terminal and Secure Shadow Remote Code Execution

    KritikCVSS 9,3SilahlaştırılmışEPSS %6

    igel technology gmbh · os3 Tem 2025

  • CVE-2025-34087
    40Planlayın

    Pi-Hole AdminLTE Whitelist (now 'Web Allowlist') Remote Command Execution

    KritikCVSS 9,0SilahlaştırılmışEPSS %6

    pi-hole · pi-hole3 Tem 2025

  • CVE-2025-34088
    40Planlayın

    Pandora FMS Authenticated Remote Code Execution via Ping Module

    YüksekCVSS 8,6SilahlaştırılmışEPSS %7

    pandorafms · pandora fms3 Tem 2025

  • CVE-2025-34089
    60Bu hafta

    Remote for Mac Unauthenticated Remote Code Execution via AppleScript Injection

    KritikCVSS 9,3SilahlaştırılmışEPSS %2

    aexol studio · remote for mac3 Tem 2025

  • CVE-2025-49005
    14İzleyin

    Next.js cache poisoning due to omission of Vary header

    DüşükCVSS 3,7İstismar yokEPSS %0

    vercel · next.js3 Tem 2025

  • CVE-2025-53367
    33İzleyin

    DjVuLibre OOB-Write Vulnerability in MMRDecoder

    YüksekCVSS 8,4Kavram kanıtıEPSS %0

    djvunet · djvulibre3 Tem 2025

  • CVE-2025-34086
    40Planlayın

    Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename

    YüksekCVSS 7,5SilahlaştırılmışEPSS %4

    boltcms · bolt3 Tem 2025

  • CVE-2025-6586
    28İzleyin

    Download Plugin <= 2.2.8 - Authenticated (Administrator+) Arbitrary File Upload

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    metagauss · download plugin3 Tem 2025

  • CVE-2025-6782
    30İzleyin

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via dirGZActiveForm()

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    optinlyhq · gozen forms3 Tem 2025

  • CVE-2025-6783
    30İzleyin

    GoZen Forms <= 1.1.5 - Unauthenticated SQL Injection via emdedSc()

    YüksekCVSS 7,5Kavram kanıtıEPSS %0

    optinlyhq · gozen forms3 Tem 2025

  • CVE-2025-47227
    31İzleyin

    In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), the Administrator password reset mechanism is mishandle

    YüksekCVSS 7,5Kavram kanıtıEPSS %1

    scriptcase · scriptcase4 Tem 2025

  • CVE-2025-47228
    33İzleyin

    In the Production Environment extension in Netmake ScriptCase through 9.12.006 (23), shell injection in the SSH connection settings allows a

    OrtaCVSS 6,7Kavram kanıtıEPSS %23

    scriptcase · scriptcase4 Tem 2025

  • CVE-2025-7081
    14İzleyin

    Belkin F9K1122 webs formSetWanStatic os command injection

    DüşükCVSS 2,1İstismar yokEPSS %19

    belkin · f9k1122 firmware6 Tem 2025

  • CVE-2025-7082
    13İzleyin

    Belkin F9K1122 webs formBSSetSitesurvey os command injection

    DüşükCVSS 2,1İstismar yokEPSS %17

    belkin · f9k1122 firmware6 Tem 2025

  • CVE-2025-7083
    22İzleyin

    Belkin F9K1122 webs mp os command injection

    DüşükCVSS 2,1İstismar yokEPSS %46

    belkin · f9k1122 firmware6 Tem 2025

  • CVE-2025-7087
    33İzleyin

    Belkin F9K1122 webs formL2TPSetup stack-based overflow

    YüksekCVSS 7,4İstismar yokEPSS %13

    belkin · f9k1122 firmware6 Tem 2025

  • CVE-2025-7088
    33İzleyin

    Belkin F9K1122 webs formPPPoESetup stack-based overflow

    YüksekCVSS 7,4İstismar yokEPSS %13

    belkin · f9k1122 firmware6 Tem 2025

  • CVE-2025-6713
    26İzleyin

    MongoDB Server may be susceptible to privilege escalation due to $mergeCursors stage

    OrtaCVSS 6,5Kavram kanıtıEPSS %0

    mongodb · mongodb7 Tem 2025

  • CVE-2025-6793
    60Bu hafta

    Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulnerability

    KritikCVSS 9,4SilahlaştırılmışEPSS %17

    marvell · qconvergeconsole7 Tem 2025

  • CVE-2025-32023
    33İzleyin

    Redis allows out of bounds writes in hyperloglog commands leading to RCE

    YüksekCVSS 7,8Kavram kanıtıEPSS %6

    redis · redis7 Tem 2025

  • CVE-2024-37656
    24İzleyin

    An open redirect vulnerability in gnuboard5 v.5.5.16 allows a remote attacker to obtain sensitive information via the insufficient URL param

    OrtaCVSS 6,1Kavram kanıtıEPSS %0

    sir · gnuboard7 Tem 2025

  • CVE-2025-7160
    23İzleyin

    PHPGurukul Zoo Management System index.php sql injection

    OrtaCVSS 5,5Kavram kanıtıEPSS %2

    phpgurukul · zoo management system8 Tem 2025

  • CVE-2025-40737
    38İzleyin

    A vulnerability has been identified in SINEC NMS (All versions < V4.0).

    YüksekCVSS 8,7İstismar yokEPSS %13

    siemens · sinec nms8 Tem 2025

  • CVE-2025-40738
    38İzleyin

    A vulnerability has been identified in SINEC NMS (All versions < V4.0).

    YüksekCVSS 8,7İstismar yokEPSS %13

    siemens · sinec nms8 Tem 2025

  • CVE-2025-6770
    34İzleyin

    OS command injection in Ivanti Endpoint Manager

    YüksekCVSS 7,2İstismar yokEPSS %19

    ivanti · endpoint manager mobile8 Tem 2025

  • CVE-2025-6771
    35İzleyin

    OS command injection in Ivanti Endpoint Manager

    YüksekCVSS 7,2İstismar yokEPSS %23

    ivanti · endpoint manager mobile8 Tem 2025

  • CVE-2025-47178
    33İzleyin

    Microsoft Configuration Manager Remote Code Execution Vulnerability

    YüksekCVSS 8,0Kavram kanıtıEPSS %3

    microsoft · configuration manager 25038 Tem 2025

  • CVE-2025-47981
    51Planlayın

    SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability

    KritikCVSS 9,8Kavram kanıtıEPSS %41

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-47984
    37İzleyin

    Windows GDI Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %23

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-47987
    32İzleyin

    Credential Security Support Provider Protocol (CredSSP) Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-48799
    31İzleyin

    Windows Update Service Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %1

    microsoft · windows 10 16078 Tem 2025

  • CVE-2025-48804
    27İzleyin

    Windows BitLocker Security Feature Bypass Vulnerability

    OrtaCVSS 6,8Kavram kanıtıEPSS %0

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-49666
    28İzleyin

    Windows Server Setup and Boot Event Collection Remote Code Execution Vulnerability

    YüksekCVSS 7,2Kavram kanıtıEPSS %1

    microsoft · windows server 20168 Tem 2025

  • CVE-2025-49677
    28İzleyin

    Microsoft Brokering File System Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %1

    microsoft · windows 11 22h28 Tem 2025

  • CVE-2025-49683
    32İzleyin

    Microsoft Virtual Hard Disk Remote Code Execution Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %2

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-49704
    95Hemen

    Microsoft SharePoint Remote Code Execution Vulnerability

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %99

    microsoft · sharepoint server8 Tem 2025

  • CVE-2025-49706
    86Hemen

    Microsoft SharePoint Server Spoofing Vulnerability

    OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %99

    microsoft · sharepoint enterprise server8 Tem 2025

  • CVE-2025-49719
    35İzleyin

    Microsoft SQL Server Information Disclosure Vulnerability

    YüksekCVSS 7,5İstismar yokEPSS %15

    microsoft · sql server 20168 Tem 2025

  • CVE-2025-49730
    31İzleyin

    Microsoft Windows QoS Scheduler Driver Elevation of Privilege Vulnerability

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-49744
    28İzleyin

    Windows Graphics Component Elevation of Privilege Vulnerability

    YüksekCVSS 7,0Kavram kanıtıEPSS %0

    microsoft · windows 10 15078 Tem 2025

  • CVE-2025-48384
    63Bu hafta

    Git allows arbitrary code execution through broken config quoting

    YüksekCVSS 8,0KEVSilahlaştırılmışEPSS %4

    git-scm · git8 Tem 2025

  • CVE-2025-49533
    55Planlayın

    Adobe Experience Manager (MS) | Deserialization of Untrusted Data (CWE-502)

    KritikCVSS 9,8Kavram kanıtıEPSS %51

    adobe · experience manager8 Tem 2025

  • CVE-2025-53547
    34İzleyin

    Helm Chart Dependency Updating With Malicious Chart.yaml Content And Symlink Can Lead To Code Execution

    YüksekCVSS 8,6Kavram kanıtıEPSS %0

    helm · helm8 Tem 2025

  • CVE-2025-6759
    29İzleyin

    Local Privilege escalation allows a low-privileged user to gain SYSTEM privileges

    YüksekCVSS 7,3Kavram kanıtıEPSS %0

    citrix · virtual apps and desktops8 Tem 2025

  • CVE-2025-7206
    42Planlayın

    D-Link DIR-825 httpd switch_language.cgi sub_410DDC stack-based overflow

    YüksekCVSS 8,9İstismar yokEPSS %21

    dlink · dir-825 firmware8 Tem 2025

  • CVE-2025-34077
    60Bu hafta

    WordPress Pie Register Plugin ≤ 3.7.1.4 Authentication Bypass RCE

    KritikCVSS 10,0SilahlaştırılmışEPSS %16

    genetech solutions · wordpress pie register plugin8 Tem 2025

  • CVE-2025-4606
    39İzleyin

    Sala - Startup & SaaS WordPress Theme <= 1.1.4 - Unauthenticated Privilege Escalation via Password Reset/Account Takeover

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    uxper · sala - startup & saas wordpress theme9 Tem 2025

  • CVE-2025-38248
    31İzleyin

    bridge: mcast: Fix use-after-free during router port configuration

    YüksekCVSS 7,8Kavram kanıtıEPSS %0

    linux · linux kernel9 Tem 2025

  • CVE-2025-6514
    61Bu hafta

    OS command injection in mcp-remote when connecting to untrusted MCP servers

    KritikCVSS 9,6Kavram kanıtıEPSS %77

    9 Tem 2025

  • CVE-2025-53546
    36İzleyin

    Folo allows secrets exfiltration via `pull_request_target`

    KritikCVSS 9,1Kavram kanıtıEPSS %0

    rssnext · folo9 Tem 2025

  • CVE-2025-44177
    33İzleyin

    A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically in the /pt3upd/ endp

    YüksekCVSS 8,2Kavram kanıtıEPSS %4

    wss · protop9 Tem 2025

  • CVE-2025-53652
    32İzleyin

    Jenkins Git Parameter Plugin 439.vb_0e46ca_14534 and earlier does not validate that the Git parameter value submitted to the build matches o

    YüksekCVSS 8,2Kavram kanıtıEPSS %0

    jenkins · git parameter9 Tem 2025

  • CVE-2025-52357
    16İzleyin

    Cross-Site Scripting (XSS) vulnerability exists in the ping diagnostic feature of FiberHome FD602GW-DX-R410 router (firmware V2.2.14), allow

    OrtaCVSS 4,1Kavram kanıtıEPSS %0

    9 Tem 2025

  • CVE-2025-53624
    41Planlayın

    docusaurus-plugin-content-gists Exposes GitHub Personal Access Token

    KritikCVSS 10,0Kavram kanıtıEPSS %2

    webbertakken · docusaurus-plugin-content-gists9 Tem 2025

  • CVE-2025-6970
    47Planlayın

    Events Manager <= 7.0.3 - Unauthenticated SQL Injection via `orderby` Parameter

    YüksekCVSS 7,5Kavram kanıtıEPSS %56

    pixelite · events manager9 Tem 2025

  • CVE-2025-7407
    12İzleyin

    Netgear D6400 diag.cgi os command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    netgear · d6400 firmware10 Tem 2025

  • CVE-2025-53364
    21İzleyin

    Parse Server exposes the data schema via GraphQL API

    OrtaCVSS 5,3Kavram kanıtıEPSS %0

    parse-community · parse-server10 Tem 2025

  • CVE-2025-23048
    36İzleyin

    Apache HTTP Server: mod_ssl access control bypass with session resumption

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    apache · http server10 Tem 2025

  • CVE-2025-47812
    98Hemen

    In Wing FTP Server before 7.4.4.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %93

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2025-47813
    66Bu hafta

    loginok.html in Wing FTP Server before 7.4.4 discloses the full local installation path of the application when using a long value in the UI

    OrtaCVSS 4,3KEVSilahlaştırılmışEPSS %62

    wftpserver · wing ftp server10 Tem 2025

  • CVE-2025-49812
    29İzleyin

    Apache HTTP Server: mod_ssl TLS upgrade attack

    YüksekCVSS 7,4Kavram kanıtıEPSS %0

    apache · http server10 Tem 2025

  • CVE-2025-53020
    31İzleyin

    Apache HTTP Server: HTTP/2 DoS by Memory Increase

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    apache · http server10 Tem 2025

  • CVE-2025-34093
    40Planlayın

    Polycom HDX Series Telnet Command Injection via lan traceroute

    YüksekCVSS 7,5SilahlaştırılmışEPSS %2

    polycom · hdx series10 Tem 2025

  • CVE-2025-34095
    60Bu hafta

    Mako Server v2.5 and v2.6 OS Command Injection via examples/save.lsp

    KritikCVSS 9,3SilahlaştırılmışEPSS %6

    real time logic · mako server10 Tem 2025

  • CVE-2025-34096
    60Bu hafta

    Easy File Sharing HTTP Server 7.2 Buffer Overflow via POST to /sendemail.ghp

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    efs software inc. · easy file sharing http server10 Tem 2025

  • CVE-2025-34097
    40Planlayın

    ProcessMaker < 3.5.4 Authenticated Plugin Upload RCE

    YüksekCVSS 8,6SilahlaştırılmışEPSS %1

    processmaker inc. · processmaker10 Tem 2025

  • CVE-2025-34098
    40Planlayın

    Riverbed SteelHead VCX Authenticated Arbitrary File Read via Log Filter Injection

    YüksekCVSS 7,1SilahlaştırılmışEPSS %1

    riverbed technology · steelhead vcx10 Tem 2025

  • CVE-2025-34099
    60Bu hafta

    VICIdial vicidial_sales_viewer.php Unauthenticated Command Injection via Basic Auth Password

    KritikCVSS 9,3SilahlaştırılmışEPSS %1

    vicidial group · vicidial10 Tem 2025

  • CVE-2025-34100
    60Bu hafta

    BuilderEngine 3.5.0 RCE via Unauthenticated Arbitrary File Upload

    KritikCVSS 9,3SilahlaştırılmışEPSS %3

    builderengine · cms10 Tem 2025

  • CVE-2025-34101
    60Bu hafta

    Serviio Media Server Unauthenticated Command Injection via checkStreamUrl VIDEO Parameter

    KritikCVSS 9,3SilahlaştırılmışEPSS %4

    serviio · media server10 Tem 2025

  • CVE-2025-34102
    60Bu hafta

    CryptoLog Unauthenticated RCE via SQL Injection and Command Injection

    KritikCVSS 9,3SilahlaştırılmışEPSS %9

    crypttech · cryptolog10 Tem 2025

  • CVE-2025-53632
    35İzleyin

    Chall-Manager's scenario decoding process does not check for zip slips

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    ctfer-io · chall-manager10 Tem 2025

  • CVE-2025-7414
    12İzleyin

    Tenda O3V2 httpd setPingInfo fromNetToolGet os command injection

    DüşükCVSS 2,1İstismar yokEPSS %12

    tenda · o3 firmware10 Tem 2025