CVE-2024-11145

Easy Folder Listing Pro deserialization vulnerability

Valor Apps Easy Folder Listing Pro has a deserialization vulnerability that allows an unauthenticated, remote attacker to execute arbitrary code with the privileges of the Joomla! application. Fixed in versions 3.8 and 4.5.

CVSS 4.0 · 9.3 Critical EPSS 1.0% KEV · Not listed

Vendors

Valor Apps Valorapps

Products

Easy Folder Listing Pro Easy Folder Listing Pro

CVE-2024-38643

Notes Station 3

A missing authentication for critical function vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote attackers to gain access to and execute certain functions. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

Notes Station 3

CVE-2024-38645

Notes Station 3

A server-side request forgery (SSRF) vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow remote authenticated attackers to read application data. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.7 and later

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Qnap

Products

Notes Station 3

CVE-2025-9523

Tenda AC1206 GetParentControlInfo stack-based overflow

A vulnerability was detected in Tenda AC1206 15.03.06.23. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. The manipulation of the argument mac results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.

CVSS 4.0 · 9.3 Critical EPSS 1.2% KEV · Not listed

Vendors

Tenda

Products

Ac1206 Ac1206 Firmware

CVE-2025-10432

Tenda AC1206 HTTP Request AdvSetMacMtuWa check_param_changed stack-based overflow

A vulnerability was found in Tenda AC1206 15.03.06.23. This vulnerability affects the function check_param_changed of the file /goform/AdvSetMacMtuWa of the component HTTP Request Handler. Performing manipulation of the argument wanMTU results in stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

CVSS 4.0 · 9.3 Critical EPSS 1.6% KEV · Not listed

Vendors

Tenda

Products

Ac1206 Ac1206 Firmware

CVE-2025-47949

samlify SAML Signature Wrapping attack

samlify is a Node.js library for SAML single sign-on. A Signature Wrapping attack has been found in samlify prior to version 2.10.0, allowing an attacker to forge a SAML Response to authenticate as any user. An attacker would need a signed XML document by the identity provider. Version 2.10.0 fixes the issue.

CVSS 4.0 · 9.9 Critical EPSS < 1% KEV · Not listed

Vendors

Samlify Project

Products

Samlify

CVE-2024-35307

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension

Argument Injection Leading to Remote Code Execution in Realtime Graph Extension, allowing unauthenticated attackers to execute arbitrary code on the server. This issue affects Pandora FMS: from 700 through <777.

CVSS 4.0 · 9.4 Critical EPSS < 1% KEV · Not listed

Vendors

Artica Pandorafms

Products

Pandora Fms Pandora Fms

CVE-2024-35304

System command injection through Netflow function

System command injection through Netflow function due to improper input validation, allowing attackers to execute arbitrary system commands. This issue affects Pandora FMS: from 700 through <777.

CVSS 4.0 · 9.3 Critical EPSS 1.1% KEV · Not listed

Vendors

Artica Pandorafms

Products

Pandora Fms Pandora Fms

CVE-2025-58371

Roo Code is vulnerable to command injection via GitHub actions workflow

Roo Code is an AI-powered autonomous coding agent that lives in users' editors. In versions 3.26.6 and below, a Github workflow used unsanitized pull request metadata in a privileged context, allowing an attacker to craft malicious input and achieve Remote Code Execution (RCE) on the Actions runner. The workflow runs with broad permissions and access to repository secrets. It is possible for an attacker to execute arbitrary commands on the runner, push or modify code in the repository, access secrets, and create malicious releases or packages, resulting in a complete compromise of the repository and its associated services. This is fixed in version 3.26.7.

CVSS 4.0 · 9.9 Critical EPSS 1.5% KEV · Not listed

Vendors

Roocode

Products

Roo Code

CVE-2025-40687

SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'mobilenumber', 'teamleadname' and 'teammember' parameters in the endpoint '/ofrs/admin/add-team.php'.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phpgurukul

Products

Online Fire Reporting System

CVE-2025-40689

SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'remark', 'status' and 'requestid' parameters in the endpoint '/ofrs/admin/request-details.php'.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phpgurukul

Products

Online Fire Reporting System

CVE-2025-40690

SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via 'teamid' parameter in the endpoint '/ofrs/admin/edit-team.php'.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phpgurukul

Products

Online Fire Reporting System

CVE-2025-40691

SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'todate' parameter in the endpoint '/ofrs/admin/bwdates-report-result.php'.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phpgurukul

Products

Online Fire Reporting System

CVE-2025-40692

SQL injection in PHPGurukul Online Fire Reporting System

SQL Injection in Online Fire Reporting System v1.2 by PHPGurukul. This vulnerability allows an attacker to retrieve, create, update and delete database via  'requestid' parameter in the endpoint '/ofrs/details.php'.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Phpgurukul

Products

Online Fire Reporting System

CVE-2025-55747

XWiki Platform's configuration files can be accessed through the webjars API

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 6.1-milestone-2 through 16.10.6, configuration files are accessible through the webjars API. This is fixed in version 16.10.7.

CVSS 4.0 · 9.3 Critical EPSS 1.8% KEV · Not listed

Vendors

Xwiki

Products

Xwiki Xwiki-platform

CVE-2025-55748

XWiki Platform's configuration files can be accessed through jsx and sx endpoints

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-2 through 16.10.6, configuration files are accessible through jsx and sx endpoints. It's possible to access and read configuration files by using URLs such as `http://localhost:8080/bin/ssx/Main/WebHome?resource=../../WEB-INF/xwiki.cfg&minify=false`. This is fixed in version 16.10.7.

CVSS 4.0 · 9.3 Critical EPSS 1.8% KEV · Not listed

Vendors

Xwiki

Products

Xwiki Xwiki-platform

CVE-2025-32429

XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 9.4-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, it's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. This is fixed in versions 16.10.6 and 17.3.0-rc-1.

CVSS 4.0 · 9.3 Critical EPSS 85.5% KEV · Not listed

Vendors

Xwiki

Products

Xwiki Xwiki-platform

CVE-2025-9605

Tenda AC21/AC23 GetParentControlInfo stack-based overflow

A security vulnerability has been detected in Tenda AC21 and AC23 16.03.08.16. Affected is the function GetParentControlInfo of the file /goform/GetParentControlInfo. Such manipulation of the argument mac leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

CVSS 4.0 · 9.3 Critical EPSS 6.0% KEV · Not listed

Vendors

Tenda

Products

Ac21 Ac21 Firmware Ac23 and 1 more

CVE-2025-54792

LocalSend is Vulnerable to Man-in-the-Middle Attacks, Leading to File Interception

LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle (MitM) vulnerability in the software's discovery protocol allows an unauthenticated attacker on the same local network to impersonate legitimate devices, silently intercepting, reading, and modifying any file transfer. This can be used to steal sensitive data or inject malware, like ransomware, into files shared between trusted users. The attack is hardly detectable and easy to implement, posing a severe and immediate security risk. This issue was fixed in version 1.17.0.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed

Vendors

Localsend

Products

Localsend

CVE-2025-35115

Agiloft insecure download of system packages

Agiloft Release 28 downloads critical system packages over an insecure HTTP connection. An attacker in a Man-In-the-Middle position could replace or modify the contents of the download URL. Users should upgrade to Agiloft Release 30.

CVSS 4.0 · 9.2 Critical EPSS < 1% KEV · Not listed

Vendors

Agiloft Atlassian

Products

Agiloft Agiloft