Protect Web Society

CVE-2025-29270 - Deep Sea Electronics DSE855 Unauthenticated Remote Command Execution

Maloy Roy Orko October 31, 2025

CVE ID : CVE-2025-29270 Published : Oct. 31, 2025, 4:15 p.m. | 1 hour, 45 minutes ago Descripti…

CVE-2025-12516 - Lack of Graceful Error Handling - HTTP 5xx Error

Maloy Roy Orko October 30, 2025

CVE ID : CVE-2025-12516 Published : Oct. 30, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descripti…

CVE-2025-60542 - TypeORM SQL Injection

Maloy Roy Orko October 29, 2025

CVE ID : CVE-2025-60542 Published : Oct. 29, 2025, 4:15 p.m. | 1 hour, 40 minutes ago Descripti…

CVE-2025-12380 - Firefox WebGPU IPC Use-After-Free Escape

Maloy Roy Orko October 28, 2025

CVE ID : CVE-2025-12380 Published : Oct. 28, 2025, 2:15 p.m. | 1 hour, 8 minutes ago Descriptio…

CVE-2025-10023 - A user with elevated privileges can inject XSS in the Services Meta-services configuration page

Maloy Roy Orko October 27, 2025

CVE ID : CVE-2025-10023 Published : Oct. 27, 2025, 3:07 p.m. | 1 hour, 8 minutes ago Descriptio…

CVE-2025-12275 - Mail Configuration File Manipulation + Command Execution

Maloy Roy Orko October 26, 2025

CVE ID : CVE-2025-12275 Published : Oct. 26, 2025, 5:15 p.m. | 29 minutes ago Description : Ma…

CVE-2025-12219 - Vulnerable Components in Azure Access OS

Maloy Roy Orko October 25, 2025

CVE ID : CVE-2025-12219 Published : Oct. 25, 2025, 4:15 p.m. | 1 hour, 26 minutes ago Descripti…

CVE-2025-12218 - Weak Default Credentials

Maloy Roy Orko October 25, 2025

CVE ID : CVE-2025-12218 Published : Oct. 25, 2025, 4:15 p.m. | 1 hour, 26 minutes ago Descripti…

CVE-2025-12217 - SNMP Default Community String (public)

Maloy Roy Orko October 25, 2025

CVE ID : CVE-2025-12217 Published : Oct. 25, 2025, 4:15 p.m. | 1 hour, 26 minutes ago Descripti…

CVE-2025-12216 - Malicious / Malformed App can be Installed but not Uninstalled

Maloy Roy Orko October 25, 2025

CVE ID : CVE-2025-12216 Published : Oct. 25, 2025, 4:15 p.m. | 1 hour, 26 minutes ago Descripti…

CVE-2025-12176 - Undocumented Administrative Accounts

Maloy Roy Orko October 24, 2025

CVE ID : CVE-2025-12176 Published : Oct. 24, 2025, 4:15 p.m. | 1 hour, 24 minutes ago Descripti…

CVE-2025-56007 - KeeneticOS CRLF Injection Vulnerability

Maloy Roy Orko October 23, 2025

CVE ID : CVE-2025-56007 Published : Oct. 23, 2025, 3:15 p.m. | 1 hour, 33 minutes ago Descripti…

CVE-2025-62525 - OpenWrt vulnerable to local privilage escalation

Maloy Roy Orko October 22, 2025

CVE ID : CVE-2025-62525 Published : Oct. 22, 2025, 3:16 p.m. | 1 hour, 31 minutes ago Descripti…

CVE-2020-36855 - DCMTK dcmqrscp parseQuota stack-based overflow

Maloy Roy Orko October 21, 2025

CVE ID : CVE-2020-36855 Published : Oct. 21, 2025, 3:15 p.m. | 1 hour, 29 minutes ago Descripti…

CVE-2025-9574 - Missing Authentication Vulnerability

Maloy Roy Orko October 20, 2025

CVE ID : CVE-2025-9574 Published : Oct. 20, 2025, 5:15 p.m. | 1 hour, 27 minutes ago Descriptio…

CVE-2025-11938 - ChurchCRM setup.php deserialization

Maloy Roy Orko October 19, 2025

CVE ID : CVE-2025-11938 Published : Oct. 19, 2025, 8:15 a.m. | 23 minutes ago Description : A …

CVE-2025-62672 - Rplay Denial of Service and Code Execution Vulnerability

Maloy Roy Orko October 18, 2025

CVE ID : CVE-2025-62672 Published : Oct. 19, 2025, 1:15 a.m. | 1 hour, 22 minutes ago Descripti…

CVE-2025-47410 - Apache Geode: CSRF attacks through GET requests to the Management and Monitoring REST API that can execute gfsh commands on the target system

Maloy Roy Orko October 18, 2025

CVE ID : CVE-2025-47410 Published : Oct. 18, 2025, 4:15 p.m. | 21 minutes ago Description : Ap…

CVE-2025-11904 - yanyutao0402 ChanCMS hasUse sql injection

Maloy Roy Orko October 17, 2025

CVE ID : CVE-2025-11904 Published : Oct. 17, 2025, 3:15 p.m. | 1 hour, 19 minutes ago Descripti…

CVE-2025-58051 - Nextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table

Maloy Roy Orko October 16, 2025

CVE ID : CVE-2025-58051 Published : Oct. 16, 2025, 5:15 p.m. | 1 hour, 17 minutes ago Descripti…

CVE-2025-10576 - Sound Research SECOMNService Escalation of Privilege

Maloy Roy Orko October 15, 2025

CVE ID : CVE-2025-10576 Published : Oct. 15, 2025, 5:15 p.m. | 1 hour, 14 minutes ago Descripti…

CVE-2025-59261 - Windows Graphics Component Elevation of Privilege Vulnerability

Maloy Roy Orko October 14, 2025

CVE ID : CVE-2025-59261 Published : Oct. 14, 2025, 5:16 p.m. | 1 hour, 12 minutes ago Descripti…

CVE-2025-59260 - Microsoft Failover Cluster Virtual Driver Information Disclosure Vulnerability

Maloy Roy Orko October 14, 2025

CVE ID : CVE-2025-59260 Published : Oct. 14, 2025, 5:16 p.m. | 1 hour, 12 minutes ago Descripti…

CVE-2025-62243 - Liferay Portal and DXP Insecure Direct Object Reference (IDOR) and Permission Bypass Vulnerability

Maloy Roy Orko October 13, 2025

CVE ID : CVE-2025-62243 Published : Oct. 13, 2025, 5:14 p.m. | 1 hour, 9 minutes ago Descriptio…

CVE-2025-11637 - Tomofun Furbo 360 Audio race condition

Maloy Roy Orko October 12, 2025

CVE ID : CVE-2025-11637 Published : Oct. 12, 2025, 5:15 p.m. | 1 hour, 5 minutes ago Descriptio…

CVE-2025-11608 - code-projects E-Banking System POST Parameter register.php sql injection

Maloy Roy Orko October 11, 2025

CVE ID : CVE-2025-11608 Published : Oct. 11, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2025-11607 - harry0703 MoneyPrinterTurbo API Endpoint music.py upload_music path traversal

Maloy Roy Orko October 11, 2025

CVE ID : CVE-2025-11607 Published : Oct. 11, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2025-60305 - SourceCodester Online Student Clearance System Privilege Escalation Vulnerability

Maloy Roy Orko October 10, 2025

CVE ID : CVE-2025-60305 Published : Oct. 10, 2025, 4:15 p.m. | 2 hours, 1 minute ago Descriptio…

CVE-2025-59976 - Junos Space: Arbitrary file download vulnerability in web interface

Maloy Roy Orko October 09, 2025

CVE ID : CVE-2025-59976 Published : Oct. 9, 2025, 4:15 p.m. | 41 minutes ago Description : An arb…

CVE-2025-59975 - Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS

Maloy Roy Orko October 09, 2025

CVE ID : CVE-2025-59975 Published : Oct. 9, 2025, 4:15 p.m. | 41 minutes ago Description : An …

CVE-2025-59974 - Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability

Maloy Roy Orko October 09, 2025

CVE ID : CVE-2025-59974 Published : Oct. 9, 2025, 4:15 p.m. | 41 minutes ago Description : An …

CVE-2025-56426 - WebKul Bagisto Remote Code Execution Vulnerability

Maloy Roy Orko October 09, 2025

CVE ID : CVE-2025-56426 Published : Oct. 9, 2025, 4:15 p.m. | 41 minutes ago Description : An …

CVE-2025-60318 - SourceCodester Pet Grooming Management Software XSS

Maloy Roy Orko October 08, 2025

CVE ID : CVE-2025-60318 Published : Oct. 8, 2025, 4:15 p.m. | 1 hour, 54 minutes ago Descriptio…

CVE-2025-59303 - HAProxy Kubernetes Ingress Controller Config Snippet Token Secret Exposure

Maloy Roy Orko October 08, 2025

CVE ID : CVE-2025-59303 Published : Oct. 8, 2025, 4:15 p.m. | 1 hour, 54 minutes ago Descriptio…

CVE-2025-11401 - SourceCodester Hotel and Lodge Management System save_curr.php sql injection

Maloy Roy Orko October 07, 2025

CVE ID : CVE-2025-11401 Published : Oct. 7, 2025, 5:15 p.m. | 52 minutes ago Description : A f…

CVE-2025-11400 - SourceCodester Hotel and Lodge Management System del_room.php sql injection

Maloy Roy Orko October 07, 2025

CVE ID : CVE-2025-11400 Published : Oct. 7, 2025, 4:15 p.m. | 34 minutes ago Description : A v…

CVE-2025-36356 - IBM Security Verify Access privilege escalation

Maloy Roy Orko October 06, 2025

CVE ID : CVE-2025-36356 Published : Oct. 6, 2025, 5:16 p.m. | 1 hour, 19 minutes ago Descriptio…

CVE-2025-36355 - IBM Security Verify Access code execution

Maloy Roy Orko October 06, 2025

CVE ID : CVE-2025-36355 Published : Oct. 6, 2025, 5:16 p.m. | 1 hour, 19 minutes ago Descriptio…

CVE-2025-11295 - Belkin F9K1015 formPPPoESetup buffer overflow

Maloy Roy Orko October 05, 2025

CVE ID : CVE-2025-11295 Published : Oct. 5, 2025, 5:15 p.m. | 1 hour, 17 minutes ago Descriptio…

CVE-2025-8406 - Path Traversal in zenml-io/zenml

Maloy Roy Orko October 05, 2025

CVE ID : CVE-2025-8406 Published : Oct. 5, 2025, 9:15 a.m. | 1 hour, 15 minutes ago Description…

CVE-2025-11286 - samanhappy MCPHub MCPRouter Service serverController.ts server-side request forgery

Maloy Roy Orko October 05, 2025

CVE ID : CVE-2025-11286 Published : Oct. 5, 2025, 7:15 a.m. | 1 hour, 15 minutes ago Description …