# CVEs published 2025-07-11

94 CVEs were published on July 11, 2025: 6 critical, 27 high. Days are UTC.

- [CVE-2025-5199](https://cve.now/CVE-2025-5199.md): LPE on Multipass for macOS (CVSS 7.3, Canonical Multipass)
- [CVE-2025-7460](https://cve.now/CVE-2025-7460.md): TOTOLINK T6 HTTP POST Request cstecgi.cgi setWiFiAclRules buffer overflow (CVSS 8.7, TOTOLINK T6)
- [CVE-2025-53636](https://cve.now/CVE-2025-53636.md): Open OnDemand Shell App closed websocket DoS (CVSS 5.4, OSC ondemand)
- [CVE-2025-7459](https://cve.now/CVE-2025-7459.md): code-projects Mobile Shop EditMobile.php sql injection (CVSS 6.9, code-projects Mobile Shop)
- [CVE-2025-7457](https://cve.now/CVE-2025-7457.md): Campcodes Online Movie Theater Seat Reservation System manage\_movie.php sql injection (CVSS 6.9, Campcodes Online Movie Theater Seat Reservation System)
- [CVE-2025-7456](https://cve.now/CVE-2025-7456.md): Campcodes Online Movie Theater Seat Reservation System reserve.php sql injection (CVSS 6.9, Campcodes Online Movie Theater Seat Reservation System)
- [CVE-2025-7455](https://cve.now/CVE-2025-7455.md): Campcodes Online Movie Theater Seat Reservation System manage\_reserve.php sql injection (CVSS 6.9, Campcodes Online Movie Theater Seat Reservation System)
- [CVE-2025-7454](https://cve.now/CVE-2025-7454.md): Campcodes Online Movie Theater Seat Reservation System manage\_theater.php sql injection (CVSS 6.9, Campcodes Online Movie Theater Seat Reservation System)
- [CVE-2025-7503](https://cve.now/CVE-2025-7503.md): An OEM IP camera manufactured by Shenzhen Liandian Communication Technology LTD exposes a Telnet service (port 23) with undocumented, defaul (CVSS 10.0, Shenzhen Liandian Communication Technology V380 IP Camera /…)
- [CVE-2025-3631](https://cve.now/CVE-2025-3631.md): IBM MQ denial of service (CVSS 6.5, IBM MQ)
- [CVE-2025-7453](https://cve.now/CVE-2025-7453.md): saltbo zpan JSON Web Token token.go NewToken hard-coded password (CVSS 6.3, saltbo zpan · github.com/saltbo/zpan)
- [CVE-2025-30403](https://cve.now/CVE-2025-30403.md): A heap-buffer-overflow vulnerability is possible in mvfst via a specially crafted message during a QUIC session. (CVSS 8.1, Facebook mvfst)
- [CVE-2025-30402](https://cve.now/CVE-2025-30402.md): A heap-buffer-overflow vulnerability in the loading of ExecuTorch methods can cause the runtime to crash and potentially result in code exec (CVSS 8.1, Meta Platforms ExecuTorch · executorch +2)
- [CVE-2025-53642](https://cve.now/CVE-2025-53642.md): haxcms-nodejs and haxcms-php Improperly Terminate Sessions (CVSS 4.8, haxtheweb issues)
- [CVE-2025-7452](https://cve.now/CVE-2025-7452.md): kone-net go-chat Endpoint file\_controller.go GetFile path traversal (CVSS 5.3, kone-net go-chat)
- [CVE-2025-53641](https://cve.now/CVE-2025-53641.md): Postiz allows header mutation in middleware facilitates resulting in SSRF (CVSS 8.2, gitroomhq postiz-app)
- [CVE-2025-43856](https://cve.now/CVE-2025-43856.md): immich allows account hijacking through oauth2 (CVSS 7.3, immich-app immich)
- [CVE-2025-7450](https://cve.now/CVE-2025-7450.md): letseeqiji gorobbs API user.go ResetUserAvatar path traversal (CVSS 5.3, letseeqiji gorobbs)
- [CVE-2024-47065](https://cve.now/CVE-2024-47065.md): Traceroute\_APP responses are not rate-limited. (CVSS 2.7, meshtastic firmware)
- [CVE-2025-47963](https://cve.now/CVE-2025-47963.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 6.3, Microsoft Edge)
- [CVE-2025-47964](https://cve.now/CVE-2025-47964.md): Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVSS 5.4, Microsoft Edge)
- [CVE-2025-47182](https://cve.now/CVE-2025-47182.md): Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability (CVSS 5.6, Microsoft Edge)
- [CVE-2025-7026](https://cve.now/CVE-2025-7026.md): SMM Arbitrary Write via Unchecked RBX Pointer in CommandRcx0 (CVSS 8.2, GIGABYTE UEFI-GenericComponentSmmEntry)
- [CVE-2025-7028](https://cve.now/CVE-2025-7028.md): SMM Arbitrary Memory Access via Flash Handler with Unchecked FuncBlock Pointer (CVSS 7.8, GIGABYTE UEFI-SmiFlash)
- [CVE-2025-7027](https://cve.now/CVE-2025-7027.md): SMM Arbitrary Write via Dual-Controlled Pointers in CommandRcx1 (CVSS 8.2, GIGABYTE UEFI-GenericComponentSmmEntry)
- [CVE-2025-7029](https://cve.now/CVE-2025-7029.md): SMM Arbitrary Write via Unchecked OcHeader Buffer in Platform Configuration Handler (CVSS 8.2, GIGABYTE UEFI-OverClockSmiHandler)
- [CVE-2025-52988](https://cve.now/CVE-2025-52988.md): Junos OS and Junos OS Evolved: Privilege escalation to root via CLI command 'request system logout' (CVSS 6.7, Juniper Networks Junos OS)
- [CVE-2025-6549](https://cve.now/CVE-2025-6549.md): Junos OS: SRX Series: J-Web can be exposed on additional interfaces (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52989](https://cve.now/CVE-2025-52989.md): Junos OS and Junos OS Evolved: Annotate configuration command can be used to change the configuration (CVSS 5.1, Juniper Networks Junos OS)
- [CVE-2025-52986](https://cve.now/CVE-2025-52986.md): Junos OS and Junos OS Evolved: When RIB sharding is configured each time a show command is executed RPD memory leaks (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2025-52985](https://cve.now/CVE-2025-52985.md): Junos OS Evolved: When a control-plane firewall filter refers to a prefix-list with more than 10 entries it's not matching (CVSS 5.3, Juniper Networks Junos OS Evolved)
- [CVE-2025-52984](https://cve.now/CVE-2025-52984.md): Junos OS and Junos OS Evolved: When a static route points to a reject next-hop and a gNMI query for this route is processed, RPD crashes (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2025-52983](https://cve.now/CVE-2025-52983.md): Junos OS: After removing ssh public key authentication root can still log in (CVSS 7.2, Juniper Networks Junos OS)
- [CVE-2025-52982](https://cve.now/CVE-2025-52982.md): Junos OS: MX Series: When specific SIP packets are processed the MS-MPC will crash (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2025-52981](https://cve.now/CVE-2025-52981.md): Junos OS: SRX Series: Sequence of specific PIM packets causes a flowd crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-52980](https://cve.now/CVE-2025-52980.md): Junos OS: SRX300 Series: rpd will crash upon receiving a specific, valid BGP UPDATE message (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-52964](https://cve.now/CVE-2025-52964.md): Junos OS and Junos OS Evolved: Receipt of a specific BGP UPDATE causes an rpd crash on devices with BGP multipath configured (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52963](https://cve.now/CVE-2025-52963.md): Junos OS: A low-privileged user can disable an interface (CVSS 5.5, Juniper Networks Junos OS)
- [CVE-2025-52953](https://cve.now/CVE-2025-52953.md): Junos OS and Junos OS Evolved: An unauthenticated adjacent attacker sending a valid BGP UPDATE packet forces a BGP session reset (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52952](https://cve.now/CVE-2025-52952.md): Junos OS: MX Series with MPC-BUILTIN, MPC 1 through MPC 9: Receipt and processing of a malformed packet causes one or more FPCs to crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-48924](https://cve.now/CVE-2025-48924.md): Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs (CVSS 5.3, Apache Software Foundation Apache Commons Lang · org.apa… +1)
- [CVE-2025-52958](https://cve.now/CVE-2025-52958.md): Junos OS and Junos OS Evolved: When route validation is enabled, BGP connection establishment failure causes RPD crash (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2025-52955](https://cve.now/CVE-2025-52955.md): Junos OS and Junos OS Evolved: When jflow/sflow is configured continuous logical interface flaps causes rpd crash and restart (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52954](https://cve.now/CVE-2025-52954.md): Junos OS Evolved: A low-privileged user can execute arbitrary Junos commands and modify the configuration, thereby compromising the system (CVSS 7.8, Juniper Networks Junos OS Evolved)
- [CVE-2025-52951](https://cve.now/CVE-2025-52951.md): Junos OS: IPv6 firewall filter fails to match payload-protocol (CVSS 5.8, Juniper Networks Junos OS)
- [CVE-2025-52950](https://cve.now/CVE-2025-52950.md): Juniper Security Director: Insufficient authorization for multiple endpoints in web interface (CVSS 9.6, Juniper Networks Juniper Security Director)
- [CVE-2025-52949](https://cve.now/CVE-2025-52949.md): Junos OS and Junos OS Evolved: In an EVPN environment, receipt of specifically malformed BGP update causes RPD crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52948](https://cve.now/CVE-2025-52948.md): Junos OS: Specific unknown traffic pattern causes FPC and system to crash when packet capturing is enabled (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2025-52947](https://cve.now/CVE-2025-52947.md): Junos OS: ACX Series: When 'hot-standby' mode is configured for an L2 circuit, interface flap causes the FEB to crash (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-52946](https://cve.now/CVE-2025-52946.md): Junos OS and Junos OS Evolved: With traceoptions enabled, receipt of malformed AS PATH causes RPD crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-30661](https://cve.now/CVE-2025-30661.md): Junos OS: Low-privileged user can cause script to run as root, leading to privilege escalation (CVSS 7.3, Juniper Networks Junos OS)
- [CVE-2025-53861](https://cve.now/CVE-2025-53861.md): Aap: sensitive cookie(s) set without security flags (CVSS 3.1, Red Hat Ansible Automation Platform)
- [CVE-2025-53862](https://cve.now/CVE-2025-53862.md): Aap: aap-gateway: automation-hub: sensitive information disclosure (CVSS 3.5, Red Hat Ansible Automation Platform)
- [CVE-2025-6788](https://cve.now/CVE-2025-6788.md): A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, provid (CVSS 5.3, Schneider Electric EcoStruxure™ Power Monitoring Expert · S…)
- [CVE-2025-50124](https://cve.now/CVE-2025-50124.md): A CWE-269: Improper Privilege Management vulnerability exists that could cause privilege escalation when the server is accessed by a pr (CVSS 7.2, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-50125](https://cve.now/CVE-2025-50125.md): A CWE-918: Server-Side Request Forgery (SSRF) vulnerability exists that could cause unauthenticated remote code execution when the server (CVSS 6.3, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-50123](https://cve.now/CVE-2025-50123.md): A CWE-94: Improper Control of Generation of Code ('Code Injection') vulnerability exists that could cause remote command execution by a pri (CVSS 7.2, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-3933](https://cve.now/CVE-2025-3933.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3, huggingface/transformers · transformers)
- [CVE-2025-50122](https://cve.now/CVE-2025-50122.md): A CWE-331: Insufficient Entropy vulnerability exists that could cause root password discovery when the password generation algorithm is reve (CVSS 8.9, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-50121](https://cve.now/CVE-2025-50121.md): A CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability exists that could cause u (CVSS 9.5, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-6438](https://cve.now/CVE-2025-6438.md): A CWE-611: Improper Restriction of XML External Entity Reference vulnerability exists that could cause manipulation of SOAP API calls (CVSS 5.9, Schneider Electric EcoStruxure™ IT Data Center Expert)
- [CVE-2025-6838](https://cve.now/CVE-2025-6838.md): Broken Link Notifier \<= 1.3.0 - Authenticated (Contributor+) CSV Injection (CVSS 4.1, apos37 Broken Link Notifier)
- [CVE-2025-6851](https://cve.now/CVE-2025-6851.md): Broken Link Notifier \<= 1.3.0 - Unauthenticated Server-Side Request Forgery (CVSS 7.2, apos37 Broken Link Notifier)
- [CVE-2025-7442](https://cve.now/CVE-2025-7442.md): WPGYM - Wordpress Gym Management System \< 67.8.0 - Unauthenticated SQL Injection (CVSS 7.5, dasinfomedia WPGYM - Wordpress Gym Management System)
- [CVE-2025-6068](https://cve.now/CVE-2025-6068.md): FooGallery – Responsive Photo Gallery, Image Viewer, Justified, Masonry & Carousel \<= 2.4.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting (CVSS 6.4, fooplugins Gallery by FooGallery)
- [CVE-2025-5530](https://cve.now/CVE-2025-5530.md): WPC Smart Compare for WooCommerce \<= 6.4.6 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, wpclever WPC Smart Compare for WooCommerce)
- [CVE-2025-6745](https://cve.now/CVE-2025-6745.md): WoodMart \<= 8.2.5 - Unauthenticated Post Disclosure (CVSS 5.3, xTemos Woodmart)
- [CVE-2025-4593](https://cve.now/CVE-2025-4593.md): WP Register Profile With Shortcode \<= 3.6.2 - Authenticated (Contributor+) Sensitive Information Exposure (CVSS 6.5, avimegladon WP Register Profile With Shortcode)
- [CVE-2025-5992](https://cve.now/CVE-2025-5992.md): Passing values outside of expected range to QColorTransferGenericFunction can cause a denial of service (CVSS 2.3, Qt)
- [CVE-2025-5392](https://cve.now/CVE-2025-5392.md): GB Forms DB \<= 1.0.2 - Unauthenticated Remote Code Execution (CVSS 9.8, gb-plugins GB Forms DB)
- [CVE-2025-6716](https://cve.now/CVE-2025-6716.md): Contest Gallery \<= 26.0.8 - Authenticated (Author+) Stored Cross-Site Scripting (CVSS 6.4, contest-gallery Contest Gallery – Upload & Vote Photos, Med…)
- [CVE-2025-5028](https://cve.now/CVE-2025-5028.md): Arbitrary file deletion vulnerability in ESET product installers (CVSS 6.8, ESET, spol. s.r.o ESET NOD32 Antivirus · ESET, spol. s.r… +6)
- [CVE-2025-30026](https://cve.now/CVE-2025-30026.md): The AXIS Camera Station Server had a flaw that allowed to bypass authentication that is normally required. (CVSS 5.3, Axis Communications AB AXIS Camera Station Pro · Axis Commu…)
- [CVE-2025-30025](https://cve.now/CVE-2025-30025.md): The communication protocol used between the server process and the service control had a flaw that could lead to a local privilege escalatio (CVSS 4.8, Axis Communications AB AXIS Device Manager · Axis Commun… +1)
- [CVE-2025-30024](https://cve.now/CVE-2025-30024.md): The communication protocol used between client and server had a flaw that could be leveraged to execute a man in the middle attack. (CVSS 6.8, Axis Communications AB AXIS Device Manager)
- [CVE-2025-30023](https://cve.now/CVE-2025-30023.md): The communication protocol used between client and server had a flaw that could lead to an authenticated user performing a remote code execu (CVSS 9.0, Axis Communications AB AXIS Camera Station Pro · Axis Co… +1)
- [CVE-2025-6200](https://cve.now/CVE-2025-6200.md): GeoDirectory \< 2.8.120 - Contributor+ Stored XSS (CVSS 5.9, GeoDirectory)
- [CVE-2025-2942](https://cve.now/CVE-2025-2942.md): Order Delivery Date Pro for WooCommerce \< 12.6.0 - Unauthenticated Arbitrary Post Title Disclosure (CVSS 4.3, Order Delivery Date)
- [CVE-2025-7401](https://cve.now/CVE-2025-7401.md): Premium Age Verification / Restriction for WordPress \<= 3.0.2 - Unauthenticated Arbitrary File Read and Write via remote\_tunnel.php (CVSS 9.8, aa-team Premium Age Verification / Restriction for WordPress)
- [CVE-2025-7436](https://cve.now/CVE-2025-7436.md): Campcodes Online Recruitment Management System ajax.php sql injection (CVSS 6.9, Campcodes Online Recruitment Management System)
- [CVE-2025-7435](https://cve.now/CVE-2025-7435.md): LiveHelperChat lhc-php-resque Extension List list cross site scripting (CVSS 5.1, LiveHelperChat lhc-php-resque Extension)
- [CVE-2025-7434](https://cve.now/CVE-2025-7434.md): Tenda FH451 POST Request addressNat fromAddressNat stack-based overflow (CVSS 8.7, Tenda FH451)
- [CVE-2025-7423](https://cve.now/CVE-2025-7423.md): Tenda O3V2 httpd setWrlFilterList formWifiMacFilterSet stack-based overflow (CVSS 8.7, Tenda O3V2)
- [CVE-2025-7422](https://cve.now/CVE-2025-7422.md): Tenda O3V2 httpd setNetworkService setAutoReboot stack-based overflow (CVSS 8.7, Tenda O3V2)
- [CVE-2025-5241](https://cve.now/CVE-2025-5241.md): Denial-of-Service Vulnerability in MELSEC iQ-F Series (CVSS 5.3, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +71)
- [CVE-2025-7421](https://cve.now/CVE-2025-7421.md): Tenda O3V2 httpd operateMacFilter fromMacFilterModify stack-based overflow (CVSS 8.7, Tenda O3V2)
- [CVE-2013-3307](https://cve.now/CVE-2013-3307.md): Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell met (CVSS 8.3, Linksys E1000 · Linksys E1200 +1)
- [CVE-2023-38327](https://cve.now/CVE-2023-38327.md): An issue was discovered in eGroupWare 17.1.20190111. (CVSS 5.3)
- [CVE-2023-38329](https://cve.now/CVE-2023-38329.md): An issue was discovered in eGroupWare 17.1.20190111. (CVSS 6.1)
- [CVE-2025-45582](https://cve.now/CVE-2025-45582.md): GNU Tar through 1.35 allows file overwrite via directory traversal in crafted TAR archives, with a certain two-step process. (CVSS 4.1, GNU Tar)
- [CVE-2025-51591](https://cve.now/CVE-2025-51591.md): A Server-Side Request Forgery (SSRF) in JGM Pandoc v3.6.4 allows attackers to gain access to and compromise the whole infrastructure via inj (CVSS 3.7)
- [CVE-2025-52089](https://cve.now/CVE-2025-52089.md): A hidden remote support feature protected by a static secret in TOTOLINK N300RB firmware version 8.54 allows an authenticated attacker to ex (CVSS 8.8)
- [CVE-2025-52994](https://cve.now/CVE-2025-52994.md): gif\_outputAsJpeg in phpThumb through 1.7.23 allows phpthumb.gif.php OS Command Injection via a crafted parameter value. (CVSS 4.9, phpThumb project phpThumb · james-heinrich/phpthumb)
- [CVE-2025-53864](https://cve.now/CVE-2025-53864.md): Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deepl (CVSS 5.8, Connect2id Nimbus JOSE+JWT · com.nimbusds:nimbus-jose-jwt)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-07-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.