Protect Web Society

CVE-2025-35028 - HexStrike AI MCP Server Command Injection

Maloy Roy Orko November 30, 2025

CVE ID : CVE-2025-35028 Published : Nov. 30, 2025, 10:15 p.m. | 1 hour, 18 minutes ago Descript…

CVE-2025-13791 - Scada-LTS Project Import ZIPProjectManager.java Common.getHomeDir path traversal

Maloy Roy Orko November 30, 2025

CVE ID : CVE-2025-13791 Published : Nov. 30, 2025, 4:15 p.m. | 1 hour, 17 minutes ago Descripti…

CVE-2025-13782 - taosir WTCMS SlideController SlideController.class.php delete sql injection

Maloy Roy Orko November 29, 2025

CVE ID : CVE-2025-13782 Published : Nov. 30, 2025, 3:02 a.m. | 29 minutes ago Description : A …

CVE-2025-66036 - Retro is vulnerable to XSS vulnerability in input handling component

Maloy Roy Orko November 28, 2025

CVE ID : CVE-2025-66036 Published : Nov. 29, 2025, 1:14 a.m. | 1 hour, 5 minutes ago Descriptio…

CVE-2025-13683 - Devolutions Server and Remote Desktop Manager Credential Exposure

Maloy Roy Orko November 28, 2025

CVE ID : CVE-2025-13683 Published : Nov. 28, 2025, 5:16 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2025-13338 - Apache HTTP Server Cross-Site Scripting

Maloy Roy Orko November 27, 2025

CVE ID : CVE-2025-13338 Published : Nov. 27, 2025, 11:15 p.m. | 1 hour, 3 minutes ago Descripti…

CVE-2025-12559 - Information Disclosure in Common Teams API

Maloy Roy Orko November 27, 2025

CVE ID : CVE-2025-12559 Published : Nov. 27, 2025, 5:15 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2025-3747 - Apache Struts Remote Code Execution

Maloy Roy Orko November 26, 2025

CVE ID : CVE-2025-3747 Published : Nov. 26, 2025, 4:15 p.m. | 2 hours, 3 minutes ago Descriptio…

CVE-2025-13601 - Glib: integer overflow in in g_escape_uri_string()

Maloy Roy Orko November 26, 2025

CVE ID : CVE-2025-13601 Published : Nov. 26, 2025, 3:15 p.m. | 1 hour, 3 minutes ago Descriptio…

CVE-2025-13467 - Org.keycloak.storage.ldap: keycloak: deserialization of untrusted data in ldap user federation

Maloy Roy Orko November 25, 2025

CVE ID : CVE-2025-13467 Published : Nov. 25, 2025, 4:02 p.m. | 16 minutes ago Description : A …

CVE-2025-40890 - Stored Cross-Site Scripting (XSS) in Dashboards in Guardian/CMC before 25.4.0

Maloy Roy Orko November 25, 2025

CVE ID : CVE-2025-40890 Published : Nov. 25, 2025, 3:30 p.m. | 48 minutes ago Description : A …

CVE-2025-0248 - HCL iNotes is susceptible to a Reflected Cross-site Scripting (XSS) vulnerability

Maloy Roy Orko November 25, 2025

CVE ID : CVE-2025-0248 Published : Nov. 25, 2025, 3:25 p.m. | 53 minutes ago Description : HCL…

CVE-2025-36134 - IBM Sterling B2B Integrator and IBM Sterling File Gateway information disclosure

Maloy Roy Orko November 25, 2025

CVE ID : CVE-2025-36134 Published : Nov. 25, 2025, 3:15 p.m. | 1 hour, 2 minutes ago Descriptio…

CVE-2025-56401 - ZIRA Group WBRM SQL Injection

Maloy Roy Orko November 24, 2025

CVE ID : CVE-2025-56401 Published : Nov. 24, 2025, 4:15 p.m. | 2 hours, 2 minutes ago Descripti…

CVE-2025-54515 - Arm Versal Adaptive SoC PSCI Secure State Spoofing

Maloy Roy Orko November 23, 2025

CVE ID : CVE-2025-54515 Published : Nov. 23, 2025, 5:15 p.m. | 1 hour, 2 minutes ago Descriptio…

CVE-2025-13544 - ashraf-kabir travel-agency customer_register.php unrestricted upload

Maloy Roy Orko November 23, 2025

CVE ID : CVE-2025-13544 Published : Nov. 23, 2025, 9:15 a.m. | 1 hour, 2 minutes ago Descriptio…

CVE-2025-12541 - "Apache Struts Remote Code Execution Vulnerability"

Maloy Roy Orko November 22, 2025

CVE ID : CVE-2025-12541 Published : Nov. 22, 2025, 11:15 p.m. | 1 hour, 2 minutes ago Descripti…

CVE-2025-13470 - RNP 0.18.0 Vulnerable PKESK session keys

Maloy Roy Orko November 21, 2025

CVE ID : CVE-2025-13470 Published : Nov. 21, 2025, 5:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2024-31405 - Apache HTTP Server Unauthenticated Remote Code Execution

Maloy Roy Orko November 20, 2025

CVE ID : CVE-2024-31405 Published : Nov. 20, 2025, 4:15 p.m. | 1 hour, 58 minutes ago Descripti…

CVE-2025-64521 - authentik deactivated service accounts can authenticate to OAuth

Maloy Roy Orko November 19, 2025

CVE ID : CVE-2025-64521 Published : Nov. 19, 2025, 5:15 p.m. | 57 minutes ago Description : au…

CVE-2025-34324 - GoSign Desktop < 2.4.1 Insecure Update Mechanism RCE

Maloy Roy Orko November 18, 2025

CVE ID : CVE-2025-34324 Published : Nov. 18, 2025, 5:16 p.m. | 51 minutes ago Description : Go…

CVE-2025-65083 - GoSign Desktop Proxy Server TLS Certificate Validation Bypass

Maloy Roy Orko November 17, 2025

CVE ID : CVE-2025-65083 Published : Nov. 17, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descripti…

CVE-2025-13254 - projectworlds Advanced Library Management System add_member.php sql injection

Maloy Roy Orko November 16, 2025

CVE ID : CVE-2025-13254 Published : Nov. 17, 2025, 1:15 a.m. | 43 minutes ago Description : A …

CVE-2025-13252 - shsuishang ShopSuite ModulithShop RSA/OAuth2/Database hard-coded credentials

Maloy Roy Orko November 16, 2025

CVE ID : CVE-2025-13252 Published : Nov. 16, 2025, 11:15 p.m. | 43 minutes ago Description : A…

CVE-2025-13208 - FantasticLBP Hotels Server hotelList.php sql injection

Maloy Roy Orko November 15, 2025

CVE ID : CVE-2025-13208 Published : Nov. 15, 2025, 6:15 p.m. | 1 hour, 43 minutes ago Descripti…

CVE-2025-13201 - code-projects Simple Cafe Ordering System login.php sql injection

Maloy Roy Orko November 15, 2025

CVE ID : CVE-2025-13201 Published : Nov. 15, 2025, 4:15 p.m. | 1 hour, 43 minutes ago Descripti…

CVE-2024-44633 - PHPGurukul Student Record System SQL Injection Vulnerability

Maloy Roy Orko November 14, 2025

CVE ID : CVE-2024-44633 Published : Nov. 14, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2024-44632 - PHPGurukul Student Record System SQL Injection

Maloy Roy Orko November 14, 2025

CVE ID : CVE-2024-44632 Published : Nov. 14, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2024-44630 - PHPGurukul Student Record System SQL Injection Vulnerability

Maloy Roy Orko November 14, 2025

CVE ID : CVE-2024-44630 Published : Nov. 14, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2024-42749 - Alto CMS Cross Site Scripting Vulnerability

Maloy Roy Orko November 14, 2025

CVE ID : CVE-2024-42749 Published : Nov. 14, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2025-64703 - MaxKB has Information Leak in sandbox

Maloy Roy Orko November 13, 2025

CVE ID : CVE-2025-64703 Published : Nov. 13, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2025-64525 - Astro: URL manipulation via unsanitized headers leads to path-based middleware protections bypass, potential SSRF/cache-poisoning, CVE-2025-61925 bypass

Maloy Roy Orko November 13, 2025

CVE ID : CVE-2025-64525 Published : Nov. 13, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2025-64511 - MaxKB has SSRF in sandbox

Maloy Roy Orko November 13, 2025

CVE ID : CVE-2025-64511 Published : Nov. 13, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2025-60689 - Linksys E1200 HTTPd Command Injection Vulnerability

Maloy Roy Orko November 13, 2025

CVE ID : CVE-2025-60689 Published : Nov. 13, 2025, 4:15 p.m. | 1 hour, 42 minutes ago Descripti…

CVE-2025-11366 - N-central Authentication bypass via path traversal

Maloy Roy Orko November 12, 2025

CVE ID : CVE-2025-11366 Published : Nov. 12, 2025, 4:15 p.m. | 1 hour, 38 minutes ago Descripti…

CVE-2025-30506 - Intel Driver and Support Assistant Uncontrolled Search Path Privilege Escalation Vulnerability

Maloy Roy Orko November 11, 2025

CVE ID : CVE-2025-30506 Published : Nov. 11, 2025, 4:50 p.m. | 20 minutes ago Description : Un…

CVE-2025-63154 - TOTOLink A7000R Stack Overflow Denial of Service

Maloy Roy Orko November 10, 2025

CVE ID : CVE-2025-63154 Published : Nov. 10, 2025, 4:15 p.m. | 1 hour, 31 minutes ago Descripti…

CVE-2025-63153 - TOTOLink A7000R V9.1.0u.6115_B20201022 was discove

Maloy Roy Orko November 10, 2025

CVE ID : CVE-2025-63153 Published : Nov. 10, 2025, 4:15 p.m. | 1 hour, 31 minutes ago Descripti…

CVE-2025-63152 - Tenda AX3 V16.03.12.10_CN was discovered to contai

Maloy Roy Orko November 10, 2025

CVE ID : CVE-2025-63152 Published : Nov. 10, 2025, 4:15 p.m. | 1 hour, 31 minutes ago Descripti…

CVE-2025-46430 - Dell Display and Peripheral Manager Execution with Unnecessary Privileges Vulnerability

Maloy Roy Orko November 10, 2025

CVE ID : CVE-2025-46430 Published : Nov. 10, 2025, 4:15 p.m. | 1 hour, 32 minutes ago Descripti…

CVE-2025-12924 - rymcu forest BankController.java GlobalResult authorization

Maloy Roy Orko November 09, 2025

CVE ID : CVE-2025-12924 Published : Nov. 10, 2025, 1:02 a.m. | 44 minutes ago Description : A …

CVE-2025-12920 - qianfox FoxCMS Product.php edit cross site scripting

Maloy Roy Orko November 09, 2025

CVE ID : CVE-2025-12920 Published : Nov. 9, 2025, 11:15 p.m. | 30 minutes ago Description : A …

CVE-2025-12919 - EverShop Order Order.resolvers.js resource injection

Maloy Roy Orko November 09, 2025

CVE ID : CVE-2025-12919 Published : Nov. 9, 2025, 8:15 p.m. | 1 hour, 30 minutes ago Descriptio…

CVE-2025-12916 - Sangfor Operation and Maintenance Security Management System Frontend portal_login command injection

Maloy Roy Orko November 08, 2025

CVE ID : CVE-2025-12916 Published : Nov. 9, 2025, 12:15 a.m. | 1 hour, 29 minutes ago Descripti…

CVE-2025-12914 - aaPanel BaoTa Backend database sql injection

Maloy Roy Orko November 08, 2025

CVE ID : CVE-2025-12914 Published : Nov. 8, 2025, 10:15 p.m. | 1 hour, 29 minutes ago Descripti…

CVE-2025-12913 - code-projects Responsive Hotel Site roomdel.php sql injection

Maloy Roy Orko November 08, 2025

CVE ID : CVE-2025-12913 Published : Nov. 8, 2025, 8:15 p.m. | 1 hour, 28 minutes ago Descriptio…

CVE-2025-63686 - GuoMinJim PersonManage Arbitrary File Download Vulnerability

Maloy Roy Orko November 07, 2025

CVE ID : CVE-2025-63686 Published : Nov. 7, 2025, 4:15 p.m. | 1 hour, 25 minutes ago Descriptio…

CVE-2025-62066 - WordPress Revolution theme < 2.5.8 - Local File Inclusion vulnerability

Maloy Roy Orko November 06, 2025

CVE ID : CVE-2025-62066 Published : Nov. 6, 2025, 4:16 p.m. | 1 hour, 21 minutes ago Descriptio…

CVE-2025-20303 - Cisco ISE/Cisco ISE-PIC Reflected Cross-Site Scripting

Maloy Roy Orko November 05, 2025

CVE ID : CVE-2025-20303 Published : Nov. 5, 2025, 5:15 p.m. | 18 minutes ago Description : Mul…

CVE-2025-20289 - Cisco ISE Cross-Site Scripting Vulnerability

Maloy Roy Orko November 05, 2025

CVE ID : CVE-2025-20289 Published : Nov. 5, 2025, 5:15 p.m. | 18 minutes ago Description : Mul…

CVE-2025-63601 - Snipe-IT Remote Code Execution Vulnerability

Maloy Roy Orko November 05, 2025

CVE ID : CVE-2025-63601 Published : Nov. 5, 2025, 4:15 p.m. | 1 hour, 18 minutes ago Descriptio…

CVE-2025-61304 - "Dynatrace ActiveGate Ping Extension OS Command Injection"

Maloy Roy Orko November 05, 2025

CVE ID : CVE-2025-61304 Published : Nov. 5, 2025, 4:15 p.m. | 1 hour, 18 minutes ago Descriptio…

CVE-2025-63294 - WorkDo HRM SaaS HR and Payroll Tool Permission Bypass Vulnerability

Maloy Roy Orko November 04, 2025

CVE ID : CVE-2025-63294 Published : Nov. 4, 2025, 4:16 p.m. | 20 minutes ago Description : Wor…

CVE-2025-61956 - Missing Authentication for Critical Function in Radiometrics VizAir

Maloy Roy Orko November 04, 2025

CVE ID : CVE-2025-61956 Published : Nov. 4, 2025, 4:15 p.m. | 21 minutes ago Description : Rad…

CVE-2025-54863 - Insufficiently Protected Credentials in Radiometrics VizAir

Maloy Roy Orko November 04, 2025

CVE ID : CVE-2025-54863 Published : Nov. 4, 2025, 4:13 p.m. | 23 minutes ago Description : Rad…

CVE-2025-61945 - Missing Authentication for Critical Function in Radiometrics VizAir

Maloy Roy Orko November 04, 2025

CVE ID : CVE-2025-61945 Published : Nov. 4, 2025, 4:10 p.m. | 25 minutes ago Description : Rad…

CVE-2025-12607 - itsourcecode Online Loan Management System manage_payment.php sql injection

Maloy Roy Orko November 02, 2025

CVE ID : CVE-2025-12607 Published : Nov. 3, 2025, 12:02 a.m. | 1 hour, 26 minutes ago Descripti…

CVE-2025-12604 - itsourcecode Online Loan Management System load_fields.php sql injection

Maloy Roy Orko November 02, 2025

CVE ID : CVE-2025-12604 Published : Nov. 2, 2025, 10:15 p.m. | 1 hour, 12 minutes ago Descripti…

CVE-2025-12599 - Multiple Devices are Sharing the Same Secrets for SDKSocket (TCP/5000)

Maloy Roy Orko November 01, 2025

CVE ID : CVE-2025-12599 Published : Nov. 1, 2025, 6:39 p.m. | 44 minutes ago Description : Mul…