Explore CVE records

UnscoredPublished 30 Jun 2025, 13:00 WIB

CVE-2025-5730

Easy Contact Form Lite < 1.1.29 - Contributor+ Stored XSS

The Contact Form Plugin WordPress plugin before 1.1.29 does not sanitise and escape some of its settings, which could allow high privilege users such as contributor to perform Stored Cross-Site Scripting attacks.

Excerpt language: en.

CVSS—KEVNot listedEPSSPresentUpdated01 Jul 2025, 01:50 WIB

Official record

UnscoredPublished 30 Jun 2025, 13:00 WIB

CVE-2025-3745

WP Lightbox 2 < 3.0.6.8 - Unauthenticated Stored XSS

The WP Lightbox 2 WordPress plugin before 3.0.6.8 does not correctly sanitize the value of the title attribute of links before using them, which may allow malicious users to conduct XSS attacks.

Excerpt language: en.

CVSS—

MedPublished 30 Jun 2025, 12:32 WIB

CVE-2025-6889

code-projects Movie Ticketing System logIn.php sql injection

A vulnerability was found in code-projects Movie Ticketing System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /logIn.php. The manipulation of the argument postName leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public an…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:02 WIB

Official record

MedPublished 30 Jun 2025, 12:02 WIB

CVE-2025-6888

PHPGurukul Teachers Record Management System changeimage.php sql injection

A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument tid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:09 WIB

Official record

HighPublished 30 Jun 2025, 11:32 WIB

CVE-2025-6887

Tenda AC5 SetSysTimeCfg stack-based overflow

A vulnerability was found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this issue is some unknown functionality of the file /goform/SetSysTimeCfg. The manipulation of the argument time/timeZone leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed …

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:20 WIB

Official record

HighPublished 30 Jun 2025, 11:02 WIB

CVE-2025-6886

Tenda AC5 openSchedWifi stack-based overflow

A vulnerability has been found in Tenda AC5 15.03.06.47 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /goform/openSchedWifi. The manipulation of the argument schedStartTime/schedEndTime leads to stack-based buffer overflow. The attack can be launched remotely. The ex…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:27 WIB

Official record

MedPublished 30 Jun 2025, 10:32 WIB

CVE-2025-6885

PHPGurukul Teachers Record Management System edit-teacher-detail.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Teachers Record Management System 2.1. Affected is an unknown function of the file /admin/edit-teacher-detail.php. The manipulation of the argument tid leads to sql injection. It is possible to launch the attack remotely. The exploit has been di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS6.9v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:33 WIB

Official record

MedPublished 30 Jun 2025, 10:02 WIB

CVE-2025-6884

code-projects Staff Audit System search_index.php sql injection

A vulnerability, which was classified as critical, has been found in code-projects Staff Audit System 1.0. This issue affects some unknown processing of the file /search_index.php. The manipulation of the argument Search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:26 WIB

Official record

MedPublished 30 Jun 2025, 09:32 WIB

CVE-2025-6883

code-projects Staff Audit System update_index.php sql injection

A vulnerability classified as critical was found in code-projects Staff Audit System 1.0. This vulnerability affects unknown code of the file /update_index.php. The manipulation of the argument updateid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:27 WIB

Official record

HighPublished 30 Jun 2025, 09:02 WIB

CVE-2025-6882

D-Link DIR-513 formSetWanPPTP buffer overflow

A vulnerability classified as critical has been found in D-Link DIR-513 1.0. This affects an unknown part of the file /goform/formSetWanPPTP. The manipulation of the argument curTime leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. T…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 22:28 WIB

Official record

MedPublished 30 Jun 2025, 08:48 WIB

CVE-2025-53074

Out-of-bounds Read vulnerability in Samsung Open Source rLottie allows Overflow Buffers.This issue affects rLottie: V0.2.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 20:31 WIB

Official record

MedPublished 30 Jun 2025, 08:48 WIB

CVE-2025-53076

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Overread Buffers.This issue affects rLottie: V0.2.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 20:32 WIB

Official record

MedPublished 30 Jun 2025, 08:47 WIB

CVE-2025-53075

Improper Input Validation vulnerability in Samsung Open Source rLottie allows Path Traversal.This issue affects rLottie: V0.2.

Excerpt language: en.

CVSS4.6v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 20:53 WIB

Official record

MedPublished 30 Jun 2025, 08:44 WIB

CVE-2025-0634

Use After Free vulnerability in Samsung Open Source rLottie allows Remote Code Inclusion.This issue affects rLottie: V0.2.

Excerpt language: en.

CVSS5.1v4.0KEVNot listedEPSSPresentUpdated23 Jan 2026, 01:06 WIB

Official record

HighPublished 30 Jun 2025, 08:32 WIB

CVE-2025-6881

D-Link DI-8100 jhttpd pppoe_base.asp buffer overflow

A vulnerability was found in D-Link DI-8100 16.07.21. It has been rated as critical. Affected by this issue is some unknown functionality of the file /pppoe_base.asp of the component jhttpd. The manipulation of the argument mschap_en leads to buffer overflow. The attack may be launched remotely. The exploit has been di…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS8.7v4.0KEVNot listedEPSSPresentUpdated30 Jun 2025, 23:59 WIB

Official record

MedPublished 30 Jun 2025, 08:02 WIB

CVE-2025-6880

SourceCodester Best Salon Management System edit-tax.php sql injection

A vulnerability classified as critical has been found in SourceCodester Best Salon Management System 1.0. Affected is an unknown function of the file /panel/edit-tax.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the p…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 00:19 WIB

Official record

MedPublished 30 Jun 2025, 07:32 WIB

CVE-2025-6879

SourceCodester Best Salon Management System add-tax.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /panel/add-tax.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to th…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 01:27 WIB

Official record

MedPublished 30 Jun 2025, 07:02 WIB

CVE-2025-6878

SourceCodester Best Salon Management System search-appointment.php sql injection

A vulnerability was found in SourceCodester Best Salon Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /panel/search-appointment.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has bee…

Excerpt language: en. Shortened to 320 code points; full text retained locally.

CVSS5.3v4.0KEVNot listedEPSSPresentUpdated01 Jul 2025, 01:27 WIB

Official record

UnscoredPublished 30 Jun 2025, 07:00 WIB

CVE-2023-47310

A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.

Excerpt language: en.

CVSS—KEVNot listedEPSSPresentUpdated05 Jul 2026, 23:05 WIB

Official record

UnscoredPublished 30 Jun 2025, 07:00 WIB

CVE-2024-53621

A buffer overflow in the formSetCfm() function of Tenda AC1206 1200M 11ac US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.

Excerpt language: en.

CVSS—KEVNot listedEPSSPresentUpdated01 Jul 2025, 02:40 WIB

Official record

Find the CVE cohort

Severity

Matching records by UTC month

Signal coverage

Find the CVE cohort

Matching cohort composition

Severity

Matching records by UTC month

Signal coverage