# CVEs published 2025-06-25

120 CVEs were published on June 25, 2025: 8 critical, 44 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2025-6669](https://cve.now/CVE-2025-6669.md): gooaclok819 sublinkX jwt.go hard-coded key (CVSS 6.3, gooaclok819 sublinkX)
- [CVE-2025-6668](https://cve.now/CVE-2025-6668.md): code-projects Inventory Management System fetchSelectedBrand.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6667](https://cve.now/CVE-2025-6667.md): code-projects Car Rental System add\_cars.php unrestricted upload (CVSS 5.3, code-projects Car Rental System)
- [CVE-2025-6640](https://cve.now/CVE-2025-6640.md): PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6641](https://cve.now/CVE-2025-6641.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6642](https://cve.now/CVE-2025-6642.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6643](https://cve.now/CVE-2025-6643.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6644](https://cve.now/CVE-2025-6644.md): PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6645](https://cve.now/CVE-2025-6645.md): PDF-XChange Editor U3D File Parsing Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6646](https://cve.now/CVE-2025-6646.md): PDF-XChange Editor U3D File Parsing Use-After-Free Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6647](https://cve.now/CVE-2025-6647.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6648](https://cve.now/CVE-2025-6648.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6649](https://cve.now/CVE-2025-6649.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6650](https://cve.now/CVE-2025-6650.md): PDF-XChange Editor U3D File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6651](https://cve.now/CVE-2025-6651.md): PDF-XChange Editor JP2 File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6652](https://cve.now/CVE-2025-6652.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6653](https://cve.now/CVE-2025-6653.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6654](https://cve.now/CVE-2025-6654.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6655](https://cve.now/CVE-2025-6655.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6656](https://cve.now/CVE-2025-6656.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6657](https://cve.now/CVE-2025-6657.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6658](https://cve.now/CVE-2025-6658.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6659](https://cve.now/CVE-2025-6659.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6660](https://cve.now/CVE-2025-6660.md): PDF-XChange Editor GIF File Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6661](https://cve.now/CVE-2025-6661.md): PDF-XChange Editor App Object Use-After-Free Remote Code Execution Vulnerability (CVSS 7.8, PDF-XChange Editor)
- [CVE-2025-6662](https://cve.now/CVE-2025-6662.md): PDF-XChange Editor PRC File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability (CVSS 3.3, PDF-XChange Editor)
- [CVE-2025-6443](https://cve.now/CVE-2025-6443.md): Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability (CVSS 7.2, Mikrotik RouterOS)
- [CVE-2025-36038](https://cve.now/CVE-2025-36038.md): IBM WebSphere Application Server code execution (CVSS 9.0, IBM WebSphere Application Server)
- [CVE-2025-6665](https://cve.now/CVE-2025-6665.md): code-projects Inventory Management System editBrand.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6664](https://cve.now/CVE-2025-6664.md): CodeAstro Patient Record Management System cross-site request forgery (CVSS 5.3, CodeAstro Patient Record Management System)
- [CVE-2025-6627](https://cve.now/CVE-2025-6627.md): TOTOLINK A702R HTTP POST Request formIpv6Setup buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2025-5825](https://cve.now/CVE-2025-5825.md): Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability (CVSS 7.5, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-6678](https://cve.now/CVE-2025-6678.md): Autel MaxiCharger AC Wallbox Commercial PIN Missing Authentication Information Disclosure Vulnerability (CVSS 7.5, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5830](https://cve.now/CVE-2025-5830.md): Autel MaxiCharger AC Wallbox Commercial DLB\_SlaveRegister Heap-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5829](https://cve.now/CVE-2025-5829.md): Autel MaxiCharger AC Wallbox Commercial autocharge Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5823](https://cve.now/CVE-2025-5823.md): Autel MaxiCharger AC Wallbox Commercial Serial Number Exposed Dangerous Method Information Disclosure Vulnerability (CVSS 4.9, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5827](https://cve.now/CVE-2025-5827.md): Autel MaxiCharger AC Wallbox Commercial ble\_process\_esp32\_msg Stack-based Buffer Overflow Remote Code Execution Vulnerability (CVSS 8.8, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5822](https://cve.now/CVE-2025-5822.md): Autel MaxiCharger AC Wallbox Commercial Technician API Incorrect Authorization Privilege Escalation Vulnerability (CVSS 7.1, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5828](https://cve.now/CVE-2025-5828.md): Autel MaxiCharger AC Wallbox Commercial wLength Buffer Overflow Remote Code Execution Vulnerability (CVSS 6.8, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5826](https://cve.now/CVE-2025-5826.md): Autel MaxiCharger AC Wallbox Commercial ble\_process\_esp32\_msg Misinterpretation of Input Vulnerability (CVSS 6.3, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-6621](https://cve.now/CVE-2025-6621.md): TOTOLINK CA300-PoE ap.so QuickSetting os command injection (CVSS 5.3, TOTOLINK CA300-PoE)
- [CVE-2025-6620](https://cve.now/CVE-2025-6620.md): TOTOLINK CA300-PoE upgrade.so setUpgradeUboot os command injection (CVSS 5.3, TOTOLINK CA300-PoE)
- [CVE-2025-5824](https://cve.now/CVE-2025-5824.md): Autel MaxiCharger AC Wallbox Commercial Origin Validation Error Authentication Bypass Vulnerability (CVSS 5.0, Autel MaxiCharger AC Wallbox Commercial)
- [CVE-2025-5833](https://cve.now/CVE-2025-5833.md): Pioneer DMH-WT7600NEX Root Filesystem Insufficient Verification of Data Authenticity Vulnerability (CVSS 4.6, Pioneer DMH-WT7600NEX)
- [CVE-2025-5834](https://cve.now/CVE-2025-5834.md): Pioneer DMH-WT7600NEX Missing Immutable Root of Trust in Hardware Local Privilege Escalation Vulnerability (CVSS 4.4, Pioneer DMH-WT7600NEX)
- [CVE-2025-5832](https://cve.now/CVE-2025-5832.md): Pioneer DMH-WT7600NEX Software Update Signing Insufficient Verification of Data Authenticity Vulnerability (CVSS 6.8, Pioneer DMH-WT7600NEX)
- [CVE-2025-6445](https://cve.now/CVE-2025-6445.md): ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability (CVSS 8.1, ServiceStack)
- [CVE-2025-49550](https://cve.now/CVE-2025-49550.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 4.3, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-6444](https://cve.now/CVE-2025-6444.md): ServiceStack GetErrorResponse Improper Input Validation NTLM Relay Vulnerability (CVSS 5.9, ServiceStack)
- [CVE-2025-49549](https://cve.now/CVE-2025-49549.md): Adobe Commerce | Incorrect Authorization (CWE-863) (CVSS 2.7, Adobe Commerce · magento/project-community-edition +1)
- [CVE-2025-6619](https://cve.now/CVE-2025-6619.md): TOTOLINK CA300-PoE upgrade.so setUpgradeFW os command injection (CVSS 5.3, TOTOLINK CA300-PoE)
- [CVE-2025-6618](https://cve.now/CVE-2025-6618.md): TOTOLINK CA300-PoE wps.so SetWLanApcliSettings os command injection (CVSS 5.3, TOTOLINK CA300-PoE)
- [CVE-2025-52999](https://cve.now/CVE-2025-52999.md): jackson-core Has Potential for StackoverflowError if user parses an input file that contains very deeply nested data (CVSS 8.7, FasterXML jackson-core · com.fasterxml.jackson.core:jackson…)
- [CVE-2025-6617](https://cve.now/CVE-2025-6617.md): D-Link DIR-619L formAdvanceSetup stack-based overflow (CVSS 8.7, D-Link DIR-619L)
- [CVE-2025-52894](https://cve.now/CVE-2025-52894.md): OpenBao Vulnerable to Unauthenticated Rekey Operation Cancellation (CVSS 6.9, openbao · github.com/openbao/openbao)
- [CVE-2025-52893](https://cve.now/CVE-2025-52893.md): OpenBao May Leak Sensitive Information in Logs When Processing Malformed Data (CVSS 4.5, openbao · github.com/openbao/openbao/sdk +1)
- [CVE-2025-6442](https://cve.now/CVE-2025-6442.md): Ruby WEBrick read\_header HTTP Request Smuggling Vulnerability (CVSS 6.5, Ruby WEBrick · webrick)
- [CVE-2025-52890](https://cve.now/CVE-2025-52890.md): Incus vulnerable to antispoofing nftables firewall rule bypass on bridge networks with ACLs (CVSS 8.1, lxc incus · github.com/lxc/incus/v6 +1)
- [CVE-2025-52889](https://cve.now/CVE-2025-52889.md): Incus vulnerable to DoS through antispoofing nftables firewall rule bypass on bridge networks with ACLs (CVSS 3.4, lxc incus · github.com/lxc/incus/v6 +1)
- [CVE-2025-52576](https://cve.now/CVE-2025-52576.md): Kanboard vulnerable to Username Enumeration via Login Behavior and Bruteforce Protection Bypass (CVSS 5.3, kanboard)
- [CVE-2025-52569](https://cve.now/CVE-2025-52569.md): GitHub.jl lacks validation for user-provided fields (CVSS 6.6, JuliaWeb GitHub.jl)
- [CVE-2025-52483](https://cve.now/CVE-2025-52483.md): Registrator.jl Vulnerable to Argument Injection and Command Injection (CVSS 8.1, JuliaRegistries Registrator.jl)
- [CVE-2025-52480](https://cve.now/CVE-2025-52480.md): Registrator.jl Argument Injection Vulnerability (CVSS 8.1, JuliaRegistries Registrator.jl)
- [CVE-2025-49153](https://cve.now/CVE-2025-49153.md): Path Traversal in MICROSENS NMP Web+ (CVSS 9.3, Microsens NMP Web+)
- [CVE-2025-49152](https://cve.now/CVE-2025-49152.md): Insufficient Session Expiration in MICROSENS NMP Web+ (CVSS 8.7, Microsens NMP Web+)
- [CVE-2025-49151](https://cve.now/CVE-2025-49151.md): Use of Hard-coded, Security-relevant Constants in MICROSENS NMP Web+ (CVSS 9.3, Microsens NMP Web+)
- [CVE-2025-6616](https://cve.now/CVE-2025-6616.md): D-Link DIR-619L formSetWAN\_Wizard51 stack-based overflow (CVSS 8.7, D-Link DIR-619L)
- [CVE-2025-20282](https://cve.now/CVE-2025-20282.md): Cisco ISE API Unauthenticated Remote Code Execution Vulnerability (CVSS 10.0, Cisco Identity Services Engine Software)
- [CVE-2025-5015](https://cve.now/CVE-2025-5015.md): Parsons AccuWeather Widget Cross-site Scripting (CVSS 8.8, Parsons Utility Enterprise Data Management · Parsons Aclara…)
- [CVE-2025-4656](https://cve.now/CVE-2025-4656.md): Vault Vulnerable to Recovery Key Cancellation Denial of Service (CVSS 3.1, HashiCorp Vault · github.com/hashicorp/vault)
- [CVE-2025-20281](https://cve.now/CVE-2025-20281.md): Cisco ISE API Unauthenticated Remote Code Execution Vulnerability (CVSS 10.0, KEV, Cisco Identity Services Engine Software)
- [CVE-2025-20264](https://cve.now/CVE-2025-20264.md): Cisco Identity Services Engine Authorization Bypass Vulnerability (CVSS 6.4, Cisco Identity Services Engine Software)
- [CVE-2025-52479](https://cve.now/CVE-2025-52479.md): HTTP.jl vulnerable to CR/LF Injection in URIs (CVSS 7.7, JuliaWeb HTTP.jl)
- [CVE-2025-6615](https://cve.now/CVE-2025-6615.md): D-Link DIR-619L formAutoDetecWAN\_wizard4 stack-based overflow (CVSS 8.7, D-Link DIR-619L)
- [CVE-2025-6614](https://cve.now/CVE-2025-6614.md): D-Link DIR-619L formSetWANType\_Wizard5 stack-based overflow (CVSS 8.7, D-Link DIR-619L)
- [CVE-2025-50179](https://cve.now/CVE-2025-50179.md): Tuleap missing CSRF protection on tracker reports manipulation (CVSS 4.6, Enalean tuleap)
- [CVE-2025-49845](https://cve.now/CVE-2025-49845.md): Discourse users are able to see their own whispers even after being removed from a group that has been configured to see whispers (CVSS 6.3, discourse)
- [CVE-2025-6612](https://cve.now/CVE-2025-6612.md): code-projects Inventory Management System removeCategories.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-6611](https://cve.now/CVE-2025-6611.md): code-projects Inventory Management System createBrand.php sql injection (CVSS 6.9, code-projects Inventory Management System)
- [CVE-2025-50178](https://cve.now/CVE-2025-50178.md): GitForge.jl lacks validation for user provided fields (CVSS 6.6, JuliaWeb GitForge.jl)
- [CVE-2025-49135](https://cve.now/CVE-2025-49135.md): CVAT missing validation for in-progress backup upload names (CVSS 5.3, cvat-ai cvat)
- [CVE-2025-6610](https://cve.now/CVE-2025-6610.md): itsourcecode Employee Management System editempprofile.php sql injection (CVSS 5.1, itsourcecode Employee Management System)
- [CVE-2021-4457](https://cve.now/CVE-2021-4457.md): ZoomSounds \< 6.05 - Unauthenticated Arbitrary File Upload (CVSS 9.1, ZoomSounds)
- [CVE-2025-6609](https://cve.now/CVE-2025-6609.md): SourceCodester Best Salon Management System bwdates-reports-details.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-6608](https://cve.now/CVE-2025-6608.md): SourceCodester Best Salon Management System edit-services.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-48991](https://cve.now/CVE-2025-48991.md): Tuleap missing CSRF protection on tracker canned responses administration (CVSS 4.6, Enalean tuleap)
- [CVE-2025-48954](https://cve.now/CVE-2025-48954.md): Discourse vulnerable to XSS via user-provided query parameter in oauth failure flow (CVSS 8.1, discourse)
- [CVE-2025-6607](https://cve.now/CVE-2025-6607.md): SourceCodester Best Salon Management System stock.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-6606](https://cve.now/CVE-2025-6606.md): SourceCodester Best Salon Management System add-services.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-6605](https://cve.now/CVE-2025-6605.md): SourceCodester Best Salon Management System edit-staff.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-6604](https://cve.now/CVE-2025-6604.md): SourceCodester Best Salon Management System add-staff.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2025-6543](https://cve.now/CVE-2025-6543.md): Memory overflow vulnerability leading to unintended control flow and Denial of Service (CVSS 9.2, KEV, NetScaler ADC · NetScaler Gateway)
- [CVE-2025-25012](https://cve.now/CVE-2025-25012.md): Kibana Open Redirect (CVSS 4.3, Elastic Kibana)
- [CVE-2025-6603](https://cve.now/CVE-2025-6603.md): coldfunction qCUDA qcow.c qcow\_make\_empty integer overflow (CVSS 4.8, coldfunction qCUDA)
- [CVE-2025-41647](https://cve.now/CVE-2025-41647.md): Lenze: Plaintext Password Disclosure in PLC Designer V4 Interface (CVSS 5.5, Lenze PLC Designer)
- [CVE-2025-49797](https://cve.now/CVE-2025-49797.md): Multiple Brother driver installers for Windows contain a privilege escalation vulnerability. (CVSS 7.8, BROTHER INDUSTRIES Multiple driver installers for Window… +1)
- [CVE-2025-6613](https://cve.now/CVE-2025-6613.md): PHPGurukul Hospital Management System manage-patient.php cross site scripting (CVSS 5.1, PHPGurukul Hospital Management System)
- [CVE-2025-5927](https://cve.now/CVE-2025-5927.md): Everest Forms (Pro) \<= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion (CVSS 7.5, WPEverest Everest Forms Pro)
- [CVE-2025-41255](https://cve.now/CVE-2025-41255.md): Cyberduck and Mountain Duck - Improper Certificate Store Handling (CVSS 8.0, iterate Cyberduck · iterate Mountain Duck)
- [CVE-2025-41256](https://cve.now/CVE-2025-41256.md): Cyberduck and Mountain Duck - Weak Hash Algorithm for Certificate Fingerprint (CVSS 7.4, iterate Cyberduck · iterate Mountain Duck)
- [CVE-2024-51984](https://cve.now/CVE-2024-51984.md): Authenticated disclosure of external service passwords via pass-back attack affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 6.8, Brother Industries HL-L8260CDN · Brother Industries HL… +704)
- [CVE-2024-51983](https://cve.now/CVE-2024-51983.md): Unauthenticated Denial of Service (DoS) via malformed WS-Scan request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 7.5, Brother Industries HL-L8260CDN · Brother Industries HL… +673)
- [CVE-2024-51982](https://cve.now/CVE-2024-51982.md): Unauthenticated Denial of Service (DoS) via malformed PJL request affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, and Ricoh. (CVSS 7.5, Brother Industries HL-L8260CDN · Brother Industries HL… +205)
- [CVE-2024-51981](https://cve.now/CVE-2024-51981.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Eventing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3, Brother Industries HL-L8260CDN · Brother Industries HL… +662)
- [CVE-2024-51980](https://cve.now/CVE-2024-51980.md): Unauthenticated Server Side Request Forgery (SSRF) via WS-Addressing affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3, Brother Industries HL-L8260CDN · Brother Industries HL… +667)
- [CVE-2024-51979](https://cve.now/CVE-2024-51979.md): Authenticated stack based buffer overflow affecting multiple models from Brother Industries, Ltd, FUJIFILM Business Innovation, Ricoh, and Konica Minolta, Inc. (CVSS 7.2, Brother Industries HL-L8260CDN · Brother Industries HL… +602)
- [CVE-2024-51978](https://cve.now/CVE-2024-51978.md): Authentication bypass via default password generation affecting multiple models from Brother Industries, Ltd, Toshiba Tec, and Konica Minolta, Inc. (CVSS 9.8, Brother Industries DCP-J928N-W/B · Brother Industries… +572)
- [CVE-2024-51977](https://cve.now/CVE-2024-51977.md): Unauthenticated leak of sensitive information affecting multiple models from Brother Industries, Ltd., FUJIFILM Business Innovation, Ricoh, Toshiba Tec, and Konica Minolta, Inc. (CVSS 5.3, Brother Industries HL-L8260CDN · Brother Industries DC… +422)
- [CVE-2025-43880](https://cve.now/CVE-2025-43880.md): Inefficient regular expression complexity issue exists in GROWI prior to v7.1.6. (CVSS 4.3, GROWI)
- [CVE-2025-0966](https://cve.now/CVE-2025-0966.md): IBM InfoSphere Information Server SQL injection (CVSS 7.6, IBM InfoSphere Information Server)
- [CVE-2025-36004](https://cve.now/CVE-2025-36004.md): IBM i privilege escalation (CVSS 8.8, IBM i)
- [CVE-2025-5585](https://cve.now/CVE-2025-5585.md): SiteOrigin Widgets Bundle \<= 1.68.5 - Authenticated (Contributor+) Stored Cross-Site Scripting via \`data-url\` DOM Element Attribute (CVSS 6.4, gpriday SiteOrigin Widgets Bundle)
- [CVE-2025-6583](https://cve.now/CVE-2025-6583.md): SourceCodester Best Salon Management System view-appointment.php sql injection (CVSS 5.3, SourceCodester Best Salon Management System)
- [CVE-2023-44915](https://cve.now/CVE-2023-44915.md): A cross-site scripting (XSS) vulnerability in the component /Login.php of c3crm up to v3.0.4 allows attackers to execute arbitrary web scrip (CVSS 7.1)
- [CVE-2024-27685](https://cve.now/CVE-2024-27685.md): SQL Injection vulnerability in Student Record system Using PHP and MySQL v.3.20 allows a remote attacker to obtain sensitive information via (CVSS 7.1)
- [CVE-2024-57708](https://cve.now/CVE-2024-57708.md): An issue in OneTrust SDK v.6.33.0 allows a local attacker to cause a denial of service via the Object.setPrototypeOf, \_\_proto\_\_, and Object. (CVSS 5.7)
- [CVE-2025-25905](https://cve.now/CVE-2025-25905.md): Cross-Site Scripting (XSS) vulnerability in CADClick v1.13.0 and before allows remote attackers to inject arbitrary web script or HTML via t (CVSS 7.1)
- [CVE-2025-44206](https://cve.now/CVE-2025-44206.md): Hexagon HxGN OnCall Dispatch Advantage (Web) v10.2309.03.00264 and Hexagon HxGN OnCall Dispatch Advantage (Mobile) v10.2402 are vulnerable t (CVSS 4.6)
- [CVE-2025-45332](https://cve.now/CVE-2025-45332.md): vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse\_mtllib function of its data processing module, leadin (CVSS 7.5)
- [CVE-2025-45333](https://cve.now/CVE-2025-45333.md): berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc\_NtkCecFraigPart function of its data processing modu (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-06-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.