# CVEs published 2025-09-01

84 CVEs were published on September 1, 2025: 6 critical, 21 high. Days are UTC.

- [CVE-2025-9802](https://cve.now/CVE-2025-9802.md): RemoteClinic profile.php sql injection (CVSS 5.1, RemoteClinic)
- [CVE-2025-9801](https://cve.now/CVE-2025-9801.md): SimStudioAI sim path traversal (CVSS 5.3, SimStudioAI sim)
- [CVE-2025-9800](https://cve.now/CVE-2025-9800.md): SimStudioAI sim HTML File route.ts import unrestricted upload (CVSS 5.3, SimStudioAI sim)
- [CVE-2025-9799](https://cve.now/CVE-2025-9799.md): Langfuse Webhook promptRouter.ts promptChangeEventSourcing server-side request forgery (CVSS 2.3, Langfuse)
- [CVE-2025-9797](https://cve.now/CVE-2025-9797.md): mrvautin expressCart Edit Product edit injection (CVSS 4.8, mrvautin expressCart)
- [CVE-2025-9796](https://cve.now/CVE-2025-9796.md): thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting (CVSS 5.1, thinkgem JeeSite)
- [CVE-2024-28988](https://cve.now/CVE-2024-28988.md): SolarWinds Web Help Desk Java Deserialization Remote Code Execution Vulnerability (CVSS 9.8, SolarWinds Web Help Desk)
- [CVE-2025-9795](https://cve.now/CVE-2025-9795.md): xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload (CVSS 5.3, xujeff tianti 天梯)
- [CVE-2025-9794](https://cve.now/CVE-2025-9794.md): Campcodes Computer Sales and Inventory System pos\_transac.php sql injection (CVSS 6.9, Campcodes Computer Sales and Inventory System)
- [CVE-2025-9793](https://cve.now/CVE-2025-9793.md): itsourcecode Apartment Management System Setting admin.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9792](https://cve.now/CVE-2025-9792.md): itsourcecode Apartment Management System e\_all\_info.php sql injection (CVSS 6.9, itsourcecode Apartment Management System)
- [CVE-2025-9810](https://cve.now/CVE-2025-9810.md): TOCTOU race in Linenoise enables arbitrary file overwrite and permission changes (CVSS 6.8, antirez linenoise)
- [CVE-2025-9791](https://cve.now/CVE-2025-9791.md): Tenda AC20 fromAdvSetMacMtuWan stack-based overflow (CVSS 8.7, Tenda AC20)
- [CVE-2025-9809](https://cve.now/CVE-2025-9809.md): Out-of-bounds write in cdfs\_open\_cue\_track in libretro libretro-common latest on all platforms allows remote attackers to execute arbitrary (CVSS 8.4, libretro-common)
- [CVE-2025-9790](https://cve.now/CVE-2025-9790.md): SourceCodester Hotel Reservation System updateabout.php sql injection (CVSS 6.9, SourceCodester Hotel Reservation System)
- [CVE-2025-3586](https://cve.now/CVE-2025-3586.md): In Liferay Portal 7.4.3.27 through 7.4.3.42, and Liferay DXP 2024.Q1.1 through 2024.Q1.20, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2 (CVSS 7.5, Liferay Portal · Liferay DXP +1)
- [CVE-2025-9789](https://cve.now/CVE-2025-9789.md): SourceCodester Online Hotel Reservation System edituser.php sql injection (CVSS 6.9, SourceCodester Online Hotel Reservation System)
- [CVE-2025-9788](https://cve.now/CVE-2025-9788.md): SourceCodester/Campcodes School Log Management System admin\_class.php sql injection (CVSS 6.9, SourceCodester School Log Management System · Campcodes Sch…)
- [CVE-2025-9375](https://cve.now/CVE-2025-9375.md): xmltodict 0.14.2 - XML Injection (CVSS 6.9, xmltodict)
- [CVE-2025-57799](https://cve.now/CVE-2025-57799.md): StreamVault can perform remote command execution (CVSS 8.7, lemon8866 StreamVault)
- [CVE-2025-55007](https://cve.now/CVE-2025-55007.md): Knowage vulnerable to server-side request forgery (CVSS 3.5, KnowageLabs Knowage-Server)
- [CVE-2025-9786](https://cve.now/CVE-2025-9786.md): Campcodes Online Learning Management System teacher\_signup.php sql injection (CVSS 6.9, Campcodes Online Learning Management System)
- [CVE-2025-9783](https://cve.now/CVE-2025-9783.md): TOTOLINK A702R formParentControl sub\_418030 buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2025-0656](https://cve.now/CVE-2025-0656.md): IBM Concert Software cross-site scripting (CVSS 6.1, IBM Concert Software)
- [CVE-2025-33082](https://cve.now/CVE-2025-33082.md): IBM Concert Software cross-site scripting (CVSS 5.4, IBM Concert Software)
- [CVE-2025-33083](https://cve.now/CVE-2025-33083.md): IBM Concert Software cross-site scripting (CVSS 5.4, IBM Concert Software)
- [CVE-2025-33084](https://cve.now/CVE-2025-33084.md): IBM Concert Software information disclosure (CVSS 5.9, IBM Concert Software)
- [CVE-2025-33099](https://cve.now/CVE-2025-33099.md): IBM Concert Software information disclosure (CVSS 5.9, IBM Concert Software)
- [CVE-2025-33102](https://cve.now/CVE-2025-33102.md): IBM Concert Software information disclosure (CVSS 5.9, IBM Concert Software)
- [CVE-2025-9782](https://cve.now/CVE-2025-9782.md): TOTOLINK A702R formOneKeyAccessButton sub\_4466F8 buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2025-9781](https://cve.now/CVE-2025-9781.md): TOTOLINK A702R formFilter sub\_4162DC buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2025-9780](https://cve.now/CVE-2025-9780.md): TOTOLINK A702R formIpQoS sub\_419BE0 buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2025-2412](https://cve.now/CVE-2025-2412.md): OTP Bypass in Akinsoft's QR Menu (CVSS 8.6, Akinsoft QR Menu)
- [CVE-2025-0610](https://cve.now/CVE-2025-0610.md): CSRF in Akinsoft's QR Menu (CVSS 8.6, Akınsoft QR Menü)
- [CVE-2024-12925](https://cve.now/CVE-2024-12925.md): Host Header Injection in Akinsoft's QR Menu (CVSS 7.3, Akınsoft QR Menü)
- [CVE-2024-12924](https://cve.now/CVE-2024-12924.md): Open Redirect in Akinsoft's QR Menu (CVSS 6.3, Akınsoft QR Menü)
- [CVE-2025-9779](https://cve.now/CVE-2025-9779.md): TOTOLINK A702R formFilter sub\_4162DC buffer overflow (CVSS 8.7, TOTOLINK A702R)
- [CVE-2024-12914](https://cve.now/CVE-2024-12914.md): XSS in Akinsoft's QR Menu (CVSS 4.3, Akınsoft QR Menü)
- [CVE-2025-9778](https://cve.now/CVE-2025-9778.md): Tenda W12 Administrative shadow hard-coded credentials (CVSS 1.8, Tenda W12)
- [CVE-2025-36133](https://cve.now/CVE-2025-36133.md): IBM App Connect Enterprise information disclosure (CVSS 5.9, IBM App Connect Enterprise Certified Container)
- [CVE-2025-9775](https://cve.now/CVE-2025-9775.md): RemoteClinic edit-my-profile.php unrestricted upload (CVSS 6.9, RemoteClinic)
- [CVE-2025-9774](https://cve.now/CVE-2025-9774.md): RemoteClinic edit-patient.php information disclosure (CVSS 5.3, RemoteClinic)
- [CVE-2025-9773](https://cve.now/CVE-2025-9773.md): RemoteClinic edit.php cross site scripting (CVSS 5.3, RemoteClinic)
- [CVE-2025-9772](https://cve.now/CVE-2025-9772.md): RemoteClinic edit.php unrestricted upload (CVSS 6.9, RemoteClinic)
- [CVE-2025-9771](https://cve.now/CVE-2025-9771.md): SourceCodester Eye Clinic Management System search\_index\_Diagnosis.php sql injection (CVSS 6.9, SourceCodester Eye Clinic Management System)
- [CVE-2025-9770](https://cve.now/CVE-2025-9770.md): Campcodes Hospital Management System Admin Dashboard Login admin sql injection (CVSS 6.9, Campcodes Hospital Management System)
- [CVE-2025-9769](https://cve.now/CVE-2025-9769.md): D-Link DI-7400G+ mng\_platform.asp sub\_478D28 command injection (CVSS 2.4, D-Link DI-7400G+)
- [CVE-2025-9768](https://cve.now/CVE-2025-9768.md): itsourcecode Sports Management System mode.php sql injection (CVSS 5.3, itsourcecode Sports Management System)
- [CVE-2022-38696](https://cve.now/CVE-2022-38696.md): In BootRom, there's a possible missing payload size check. (CVSS 9.8, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T610/T618/T…)
- [CVE-2022-38695](https://cve.now/CVE-2022-38695.md): In BootRom, there's a possible unchecked command index. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T610/T618/T…)
- [CVE-2022-38694](https://cve.now/CVE-2022-38694.md): In BootRom, there is a possible unchecked write address. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC9863A//T310/T610/T618/)
- [CVE-2022-38693](https://cve.now/CVE-2022-38693.md): In FDL1, there is a possible missing payload size check. (CVSS 9.8, Unisoc (Shanghai) Technologies Co. SC9863A//T310/T610/T618/…)
- [CVE-2022-38692](https://cve.now/CVE-2022-38692.md): In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. (CVSS 9.8, Unisoc (Shanghai) Technologies Co. SC9863A/T310/T610/T618/T…)
- [CVE-2022-38691](https://cve.now/CVE-2022-38691.md): In BootROM, there is a possible missing validation for Certificate Type 0. (CVSS 7.8, Unisoc (Shanghai) Technologies Co. SC9863A//T310/T610/T618/)
- [CVE-2025-58318](https://cve.now/CVE-2025-58318.md): DIAView - Authentication Bypass Vulnerability (CVSS 5.8, Delta Electronics DIAView)
- [CVE-2025-9767](https://cve.now/CVE-2025-9767.md): itsourcecode Sports Management System sporttype.php sql injection (CVSS 6.9, itsourcecode Sports Management System)
- [CVE-2025-9766](https://cve.now/CVE-2025-9766.md): itsourcecode Sports Management System facilitator.php sql injection (CVSS 6.9, itsourcecode Sports Management System)
- [CVE-2025-9765](https://cve.now/CVE-2025-9765.md): itsourcecode Sports Management System tournament\_details.php sql injection (CVSS 6.9, itsourcecode Sports Management System)
- [CVE-2025-9764](https://cve.now/CVE-2025-9764.md): itsourcecode Sports Management System resultdetails.php sql injection (CVSS 6.9, itsourcecode Sports Management System)
- [CVE-2025-54857](https://cve.now/CVE-2025-54857.md): Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in SkyBridge BASIC MB-A130 Ver.1.5.8 (CVSS 9.8, Seiko Solutions SkyBridge BASIC MB-A130)
- [CVE-2025-20707](https://cve.now/CVE-2025-20707.md): In geniezone, there is a possible memory corruption due to use after free. (CVSS 6.7, MediaTek MT2718, MT6853, MT6877, MT6893, MT6899, MT6991, MT…)
- [CVE-2025-20706](https://cve.now/CVE-2025-20706.md): In mbrain, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek MT6899, MT6989, MT6991, MT8676, MT8678)
- [CVE-2025-20705](https://cve.now/CVE-2025-20705.md): In monitor\_hang, there is a possible memory corruption due to use after free. (CVSS 7.8, MediaTek MT2718, MT2735, MT6739, MT6761, MT6765, MT6768, MT…)
- [CVE-2025-20704](https://cve.now/CVE-2025-20704.md): In Modem, there is a possible out of bounds write due to a missing bounds check. (CVSS 8.0, MediaTek MT6813, MT6835, MT6835T, MT6878, MT6878M, MT6897,…)
- [CVE-2025-20703](https://cve.now/CVE-2025-20703.md): In Modem, there is a possible out of bounds read due to an incorrect bounds check. (CVSS 6.5, MediaTek MT2735, MT2737, MT6813, MT6833, MT6833P, MT6835, M…)
- [CVE-2025-20708](https://cve.now/CVE-2025-20708.md): In Modem, there is a possible out of bounds write due to an incorrect bounds check. (CVSS 8.8, MediaTek MT2735, MT2737, MT6813, MT6815, MT6833, MT6833P, M…)
- [CVE-2025-6507](https://cve.now/CVE-2025-6507.md): Deserialization of Untrusted Data in h2oai/h2o-3 (CVSS 9.8, h2oai/h2o-3)
- [CVE-2025-9763](https://cve.now/CVE-2025-9763.md): Campcodes Online Learning Management System student\_signup.php sql injection (CVSS 6.9, Campcodes Online Learning Management System)
- [CVE-2025-9761](https://cve.now/CVE-2025-9761.md): Campcodes Online Feeds Product Inventory System Login index.php sql injection (CVSS 6.9, Campcodes Online Feeds Product Inventory System)
- [CVE-2025-9760](https://cve.now/CVE-2025-9760.md): Portabilis i-Educar Matricula API matricula improper authorization (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-7731](https://cve.now/CVE-2025-7731.md): Information Disclosure Vulnerability in MELSEC iQ-F Series CPU module (CVSS 7.5, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +73)
- [CVE-2025-7405](https://cve.now/CVE-2025-7405.md): Information Disclosure, Information Tampering, and Denial of Service (DoS) Vulnerability in MELSEC iQ-F Series CPU module (CVSS 7.3, Mitsubishi Electric MELSEC iQ-F Series FX5U-32MT/ES · M… +73)
- [CVE-2025-9759](https://cve.now/CVE-2025-9759.md): Campcodes/SourceCodester Courier Management System ajax.php signup sql injection (CVSS 6.9, Campcodes Courier Management System · SourceCodester Courie…)
- [CVE-2025-9758](https://cve.now/CVE-2025-9758.md): deepakmisal24 Chemical Inventory Management System inventory\_form.php sql injection (CVSS 5.3, deepakmisal24 Chemical Inventory Management System)
- [CVE-2025-9570](https://cve.now/CVE-2025-9570.md): Sunnet｜eHRD CTMS - Arbitrary File Reading through Path Traversal (CVSS 6.9, Sunnet eHRD CTMS)
- [CVE-2025-9569](https://cve.now/CVE-2025-9569.md): Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 5.1, Sunnet eHRD CTMS)
- [CVE-2025-9568](https://cve.now/CVE-2025-9568.md): Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 5.1, Sunnet eHRD CTMS)
- [CVE-2025-9567](https://cve.now/CVE-2025-9567.md): Sunnet｜eHRD CTMS - Reflected Cross-site Scripting (CVSS 5.1, Sunnet eHRD CTMS)
- [CVE-2025-9757](https://cve.now/CVE-2025-9757.md): Campcodes/SourceCodester Courier Management System ajax.php login sql injection (CVSS 6.9, Campcodes Courier Management System · SourceCodester Courie…)
- [CVE-2025-9756](https://cve.now/CVE-2025-9756.md): PHPGurukul User Management System change-emailid.php sql injection (CVSS 5.3, PHPGurukul User Management System)
- [CVE-2025-9755](https://cve.now/CVE-2025-9755.md): Khanakag-17 Library Management System index.php cross site scripting (CVSS 5.3, Khanakag-17 Library Management System)
- [CVE-2025-9754](https://cve.now/CVE-2025-9754.md): Campcodes Online Hospital Management System Edit Profile edit-profile.php cross site scripting (CVSS 5.1, Campcodes Online Hospital Management System)
- [CVE-2025-9753](https://cve.now/CVE-2025-9753.md): Campcodes Online Hospital Management System Patient Search patient-search.php cross site scripting (CVSS 4.8, Campcodes Online Hospital Management System)
- [CVE-2025-9752](https://cve.now/CVE-2025-9752.md): D-Link DIR-852 SOAP Service soap.cgi soapcgi\_main os command injection (CVSS 6.9, D-Link DIR-852)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-01
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.