# CVEs published 2025-08-10

36 CVEs were published on August 10, 2025: 0 critical, 5 high. Days are UTC.

- [CVE-2025-8820](https://cve.now/CVE-2025-8820.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8819](https://cve.now/CVE-2025-8819.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8818](https://cve.now/CVE-2025-8818.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injection (CVSS 5.3, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8817](https://cve.now/CVE-2025-8817.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8816](https://cve.now/CVE-2025-8816.md): Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow (CVSS 8.7, Linksys RE6250 · Linksys RE6300 +4)
- [CVE-2025-8815](https://cve.now/CVE-2025-8815.md): 猫宁i Morning Shiro Configuration index path traversal (CVSS 6.9, 猫宁i Morning)
- [CVE-2025-8814](https://cve.now/CVE-2025-8814.md): atjiu pybbs CookieUtil.java setCookie cross-site request forgery (CVSS 5.3, atjiu pybbs)
- [CVE-2025-8813](https://cve.now/CVE-2025-8813.md): atjiu pybbs IndexController.java changeLanguage redirect (CVSS 5.1, atjiu pybbs)
- [CVE-2025-8812](https://cve.now/CVE-2025-8812.md): atjiu pybbs Admin Panel settings cross site scripting (CVSS 4.8, atjiu pybbs)
- [CVE-2025-8811](https://cve.now/CVE-2025-8811.md): code-projects Simple Art Gallery registration.php sql injection (CVSS 6.9, code-projects Simple Art Gallery)
- [CVE-2025-8810](https://cve.now/CVE-2025-8810.md): Tenda AC20 SetFirewallCfg strcpy stack-based overflow (CVSS 8.7, Tenda AC20)
- [CVE-2025-8809](https://cve.now/CVE-2025-8809.md): code-projects Online Medicine Guide addelidetails.php sql injection (CVSS 6.9, code-projects Online Medicine Guide)
- [CVE-2025-8808](https://cve.now/CVE-2025-8808.md): xujeff tianti 天梯 com.jeff.tianti.controller save exportOrder csv injection (CVSS 5.3, xujeff tianti 天梯)
- [CVE-2025-8807](https://cve.now/CVE-2025-8807.md): xujeff tianti 天梯 save authorization (CVSS 5.3, xujeff tianti 天梯)
- [CVE-2025-8806](https://cve.now/CVE-2025-8806.md): zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 treeData sql injection (CVSS 5.3, zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用…)
- [CVE-2025-8805](https://cve.now/CVE-2025-8805.md): Open5GS SMF gsm-sm.c smf\_gsm\_state\_wait\_pfcp\_deletion denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8804](https://cve.now/CVE-2025-8804.md): Open5GS AMF ngap\_build\_downlink\_nas\_transport assertion (CVSS 6.9, Open5GS)
- [CVE-2025-8803](https://cve.now/CVE-2025-8803.md): Open5GS AMF gmm-sm.c gmm\_state\_exception denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8802](https://cve.now/CVE-2025-8802.md): Open5GS SMF smf-sm.c smf\_state\_operational denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8801](https://cve.now/CVE-2025-8801.md): Open5GS AMF gmm-sm.c gmm\_state\_exception denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8800](https://cve.now/CVE-2025-8800.md): Open5GS AMF esm-handler.c esm\_handle\_pdn\_connectivity\_request denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8799](https://cve.now/CVE-2025-8799.md): Open5GS AMF npcf-build.c amf\_nsmf\_pdusession\_build\_create\_sm\_context denial of service (CVSS 6.9, Open5GS)
- [CVE-2025-8798](https://cve.now/CVE-2025-8798.md): oitcode samarium Create Product product unrestricted upload (CVSS 6.9, oitcode samarium)
- [CVE-2025-8797](https://cve.now/CVE-2025-8797.md): LitmusChaos Litmus LocalStorage permission (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8796](https://cve.now/CVE-2025-8796.md): LitmusChaos Litmus Delete Request delete\_project authorization (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8795](https://cve.now/CVE-2025-8795.md): LitmusChaos Litmus login access control (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8794](https://cve.now/CVE-2025-8794.md): LitmusChaos Litmus LocalStorage authorization (CVSS 4.8, LitmusChaos Litmus)
- [CVE-2025-8793](https://cve.now/CVE-2025-8793.md): LitmusChaos Litmus resource injection (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8792](https://cve.now/CVE-2025-8792.md): LitmusChaos Litmus client-side enforcement of server-side security (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8791](https://cve.now/CVE-2025-8791.md): LitmusChaos Litmus list\_projects improper authorization (CVSS 5.3, LitmusChaos Litmus)
- [CVE-2025-8790](https://cve.now/CVE-2025-8790.md): Portabilis i-Educar API Endpoint pessoa improper authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-8789](https://cve.now/CVE-2025-8789.md): Portabilis i-Educar API Endpoint Diario authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-8788](https://cve.now/CVE-2025-8788.md): Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting (CVSS 5.1, Portabilis i-Diario)
- [CVE-2025-8787](https://cve.now/CVE-2025-8787.md): Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting (CVSS 5.1, Portabilis i-Diario)
- [CVE-2025-8786](https://cve.now/CVE-2025-8786.md): Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting (CVSS 5.1, Portabilis i-Diario)
- [CVE-2025-52136](https://cve.now/CVE-2025-52136.md): In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. (CVSS 3.0, EMQX)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-08-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.