# CVEs published 2025-09-23

126 CVEs were published on September 23, 2025: 11 critical, 35 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-57882](https://cve.now/CVE-2025-57882.md): AutomationDirect CLICK PLUS Improper Resource Shutdown or Release (CVSS 8.2, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-55038](https://cve.now/CVE-2025-55038.md): AutomationDirect CLICK PLUS Missing Authorization (CVSS 7.6, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-58473](https://cve.now/CVE-2025-58473.md): AutomationDirect CLICK PLUS Improper Resource Shutdown or Release (CVSS 8.2, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-55069](https://cve.now/CVE-2025-55069.md): AutomationDirect CLICK PLUS Predictable Seed in Pseudo-Random Number Generator (CVSS 8.7, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-59484](https://cve.now/CVE-2025-59484.md): AutomationDirect CLICK PLUS Use of a Broken or Risky Cryptographic Algorithm (CVSS 8.7, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-58069](https://cve.now/CVE-2025-58069.md): AutomationDirect CLICK PLUS Use of Hard-coded Cryptographic Key (CVSS 6.9, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2025-54855](https://cve.now/CVE-2025-54855.md): AutomationDirect CLICK PLUS Cleartext Storage of Sensitive Information (CVSS 4.1, AutomationDirect CLICK PLUS C0-0x CPU firmware · Automat… +1)
- [CVE-2024-21935](https://cve.now/CVE-2024-21935.md): Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to manipulate Redfish® API commands (CVSS 5.0, AMD Instinct™ MI300X)
- [CVE-2024-21927](https://cve.now/CVE-2024-21927.md): Improper input validation in Satellite Management Controller (SMC) may allow an attacker with privileges to use certain special characters i (CVSS 5.0, AMD Instinct™ MI300X)
- [CVE-2025-58354](https://cve.now/CVE-2025-58354.md): Kata Containers coco-tdx malicious host can circumvent initdata verification (CVSS 6.9, kata-containers)
- [CVE-2025-59826](https://cve.now/CVE-2025-59826.md): FlagForgeCTF Vulnerable to Unauthorized Problem Creation (CVSS 7.6, FlagForgeCTF flagForge)
- [CVE-2025-59825](https://cve.now/CVE-2025-59825.md): astral-tokio-tar has a path traversal in tar extraction (CVSS 6.1, astral-sh tokio-tar · astral-tokio-tar)
- [CVE-2025-59822](https://cve.now/CVE-2025-59822.md): Http4s vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer section (CVSS 6.3, http4s · org.http4s:http4s-ember-core\_2.12 +2)
- [CVE-2025-58674](https://cve.now/CVE-2025-58674.md): WordPress \<= 6.8.2 - (Author+) Cross Site Scripting (XSS) Vulnerability (CVSS 5.9, WordPress)
- [CVE-2025-59534](https://cve.now/CVE-2025-59534.md): CryptoLib command Injection vulnerability in initialize\_kerberos\_keytab\_file\_login() (CVSS 7.3, nasa CryptoLib)
- [CVE-2025-54081](https://cve.now/CVE-2025-54081.md): SunshineService Has Unquoted Service Path That Allows Local SYSTEM Code Execution (CVSS 6.7, LizardByte Sunshine)
- [CVE-2025-59548](https://cve.now/CVE-2025-59548.md): DNN Vulnerable to Reflected Cross-Site Scripting (XSS) in CKEditor File Browser (CVSS 5.9, dnnsoftware Dnn.Platform)
- [CVE-2025-59547](https://cve.now/CVE-2025-59547.md): DNN's CKEditor File Uploader functionality vulnerable through Unicode obfuscation (CVSS 5.3, dnnsoftware Dnn.Platform)
- [CVE-2025-52905](https://cve.now/CVE-2025-52905.md): TOTOLINK X6000R Argument Injection Vulnerability (CVSS 7.0, TOTOLINK X6000R)
- [CVE-2025-8410](https://cve.now/CVE-2025-8410.md): Use After Free vulnerability in RTI Connext Professional (Security Plugins) allows File Manipulation. (CVSS 5.8, RTI Connext Professional)
- [CVE-2025-4993](https://cve.now/CVE-2025-4993.md): Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. (CVSS 8.3, RTI Connext Professional)
- [CVE-2025-4582](https://cve.now/CVE-2025-4582.md): Buffer Over-read, Off-by-one Error vulnerability in RTI Connext Professional (Core Libraries) allows File Manipulation, Overread Buffers. (CVSS 4.8, RTI Connext Professional)
- [CVE-2025-1255](https://cve.now/CVE-2025-1255.md): Untrusted Pointer Dereference vulnerability in RTI Connext Professional (Core Libraries) allows Pointer Manipulation. (CVSS 8.3, RTI Connext Professional)
- [CVE-2025-59821](https://cve.now/CVE-2025-59821.md): DNN vulnerable to Reflected Cross-Site Scripting (XSS) using url to profile (CVSS 6.5, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2025-59546](https://cve.now/CVE-2025-59546.md): DNN Vulnerable to Stored XSS Using Backend Admin Credentials (CVSS 2.4, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2025-59545](https://cve.now/CVE-2025-59545.md): DNN Vulnerable to Stored Cross-Site Scripting (XSS) in the Prompt module (CVSS 9.1, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2025-59539](https://cve.now/CVE-2025-59539.md): DNN affected by Stored Cross-Site Scripting (XSS) in Profile Biography field (CVSS 6.3, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2025-0672](https://cve.now/CVE-2025-0672.md): Authentication Bypass in Multiple WSO2 Products via Stale FIDO Credential Association (CVSS 3.3, WSO2 Identity Server as Key Manager · WSO2 Identity Serv… +1)
- [CVE-2025-58246](https://cve.now/CVE-2025-58246.md): WordPress \<= 6.8.2 - (Contributor+) Sensitive Data Exposure Vulnerability (CVSS 4.3, WordPress)
- [CVE-2025-0209](https://cve.now/CVE-2025-0209.md): Reflected Cross-Site Scripting (XSS) in WSO2 Identity Server Account Registration Flow (CVSS 6.1, WSO2 Identity Server)
- [CVE-2025-0663](https://cve.now/CVE-2025-0663.md): Potential cross-tenant account takeover vulnerability in Multiple WSO2 Products via Adaptive Authentication and Auto-Login (CVSS 6.8, WSO2 Open Banking IAM · WSO2 Identity Server as Key Mana… +1)
- [CVE-2024-6429](https://cve.now/CVE-2024-6429.md): Content Spoofing in Multiple WSO2 Products via Error Message Injection (CVSS 4.3, WSO2 Identity Server as Key Manager · WSO2 API Manager +2)
- [CVE-2025-9900](https://cve.now/CVE-2025-9900.md): Libtiff: libtiff write-what-where (CVSS 8.8, libtiff · Red Hat Enterprise Linux +3)
- [CVE-2025-5717](https://cve.now/CVE-2025-5717.md): Authenticated Remote Code Execution in Multiple WSO2 Products via Event Processor Admin Service (CVSS 6.8, WSO2 API Manager · WSO2 Open Banking AM +3)
- [CVE-2025-4760](https://cve.now/CVE-2025-4760.md): Authenticated Stored Cross-Site Scripting (XSS) in Multiple WSO2 Products via API Document Upload in Publisher (CVSS 4.8, WSO2 API Manager · WSO2 API Control Plane +5)
- [CVE-2017-20200](https://cve.now/CVE-2017-20200.md): Coinomi cleartext transmission (CVSS 6.3, Coinomi)
- [CVE-2025-6921](https://cve.now/CVE-2025-6921.md): Regular Expression Denial of Service (ReDoS) in huggingface/transformers (CVSS 5.3, huggingface/transformers · transformers)
- [CVE-2025-8354](https://cve.now/CVE-2025-8354.md): RFA File Parsing Type Confusion Vulnerability (CVSS 7.8, Autodesk Revit)
- [CVE-2025-9844](https://cve.now/CVE-2025-9844.md): Uncontrolled Search Path Element vulnerability in Salesforce Salesforce CLI on Windows allows Replace Trusted Executable.This issue affects (CVSS 8.8, Salesforce CLI)
- [CVE-2025-10184](https://cve.now/CVE-2025-10184.md): OnePlus OxygenOS Telephony provider permission bypass (CVSS 8.2, OnePlus OxygenOS)
- [CVE-2025-9846](https://cve.now/CVE-2025-9846.md): Unrestricted File Upload in TaletSys Inka.Net (CVSS 10.0, TalentSys Consulting Information Technology Industry Inka.N…)
- [CVE-2025-9966](https://cve.now/CVE-2025-9966.md): Execution with Unnecessary Privileges (CVSS 7.3, Novakon P series)
- [CVE-2025-9965](https://cve.now/CVE-2025-9965.md): UDP Service Weak Authentication (CVSS 9.3, Novakon P series)
- [CVE-2025-9964](https://cve.now/CVE-2025-9964.md): Weak Authentication for Root User (CVSS 8.6, Novakon P series)
- [CVE-2025-10244](https://cve.now/CVE-2025-10244.md): HTML Payload Stored Cross-Site Scripting (XSS) Vulnerability (CVSS 8.7, Autodesk Fusion)
- [CVE-2025-9963](https://cve.now/CVE-2025-9963.md): Path Traversal (CVSS 9.4, Novakon P series)
- [CVE-2025-9962](https://cve.now/CVE-2025-9962.md): Unauthenticated Buffer Overflow (CVSS 10.0, Novakon P series)
- [CVE-2024-4598](https://cve.now/CVE-2024-4598.md): Information Disclosure in Multiple WSO2 Products Due to Improper Handling in Enrich Mediator (CVSS 6.5, WSO2 API Manager · WSO2 Micro Integrator)
- [CVE-2025-7106](https://cve.now/CVE-2025-7106.md): Authorization Bypass due to Incorrect Access Control in danny-avila/librechat (CVSS 5.3, danny-avila/librechat)
- [CVE-2025-10412](https://cve.now/CVE-2025-10412.md): Product Options and Price Calculation Formulas for WooCommerce – Uni CPO (Premium) \<= 4.9.55 - Unauthenticated Arbitrary File Upload via 'uni\_cpo\_upload\_file' (CVSS 9.8, MooMoo Product Options and Price Calculation Formulas for W…)
- [CVE-2025-9342](https://cve.now/CVE-2025-9342.md): IDOR in Anadolu Hayat Emeklilik's AHE Mobile (CVSS 6.5, Anadolu Hayat Emeklilik AHE Mobile)
- [CVE-2025-9798](https://cve.now/CVE-2025-9798.md): Stored XSS in Netcad Software's Netigma (CVSS 8.9, Netcad Software Netigma)
- [CVE-2025-10857](https://cve.now/CVE-2025-10857.md): Campcodes Point of Sale System POS login.php sql injection (CVSS 6.9, Campcodes Point of Sale System POS)
- [CVE-2025-10147](https://cve.now/CVE-2025-10147.md): Podlove Podcast Publisher \<= 4.2.6 - Unauthenticated Arbitrary File Upload (CVSS 9.8, eteubert Podlove Podcast Publisher)
- [CVE-2025-10851](https://cve.now/CVE-2025-10851.md): Campcodes Gym Management System ajax.php sql injection (CVSS 6.9, Campcodes Gym Management System)
- [CVE-2025-9588](https://cve.now/CVE-2025-9588.md): OS Command Injection in Iron Mountain's enVision (CVSS 10.0, Iron Mountain Archiving Services enVision)
- [CVE-2025-10848](https://cve.now/CVE-2025-10848.md): Campcodes Society Membership Information System check\_student.php sql injection (CVSS 5.3, Campcodes Society Membership Information System)
- [CVE-2025-10846](https://cve.now/CVE-2025-10846.md): Portabilis i-Educar edit sql injection (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-10548](https://cve.now/CVE-2025-10548.md): Missing Certificate Validation in CleverControl Installer Allows Remote Code Execution (CVSS 6.5, CleverControl employee monitoring software)
- [CVE-2025-10845](https://cve.now/CVE-2025-10845.md): Portabilis i-Educar view sql injection (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-10844](https://cve.now/CVE-2025-10844.md): Portabilis i-Educar aluno sql injection (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-10843](https://cve.now/CVE-2025-10843.md): Reservation Online Hotel Reservation System paypalpayout.php sql injection (CVSS 6.9, Online Hotel Reservation System)
- [CVE-2025-10842](https://cve.now/CVE-2025-10842.md): code-projects Online Bidding System wew.php sql injection (CVSS 6.9, code-projects Online Bidding System)
- [CVE-2025-39888](https://cve.now/CVE-2025-39888.md): fuse: Block access to folio overlimit (CVSS 7.8, Linux)
- [CVE-2025-39887](https://cve.now/CVE-2025-39887.md): tracing/osnoise: Fix null-ptr-deref in bitmap\_parselist() (CVSS 5.5, Linux)
- [CVE-2025-39886](https://cve.now/CVE-2025-39886.md): bpf: Tell memcg to use allow\_spinning=false path in bpf\_timer\_init() (CVSS 5.5, Linux)
- [CVE-2025-39885](https://cve.now/CVE-2025-39885.md): ocfs2: fix recursive semaphore deadlock in fiemap call (no CVSS, Linux)
- [CVE-2025-39884](https://cve.now/CVE-2025-39884.md): btrfs: fix subvolume deletion lockup caused by inodes xarray race (CVSS 4.7, Linux)
- [CVE-2025-39883](https://cve.now/CVE-2025-39883.md): mm/memory-failure: fix VM\_BUG\_ON\_PAGE(PagePoisoned(page)) when unpoison memory (no CVSS, Linux)
- [CVE-2025-39882](https://cve.now/CVE-2025-39882.md): drm/mediatek: fix potential OF node use-after-free (CVSS 8.4, Linux)
- [CVE-2025-39881](https://cve.now/CVE-2025-39881.md): kernfs: Fix UAF in polling when open file is released (CVSS 7.8, Linux)
- [CVE-2025-39880](https://cve.now/CVE-2025-39880.md): libceph: fix invalid accesses to ceph\_connection\_v1\_info (CVSS 9.8, Linux)
- [CVE-2025-39879](https://cve.now/CVE-2025-39879.md): ceph: always call ceph\_shift\_unused\_folios\_left() (CVSS 5.5, Linux)
- [CVE-2025-39878](https://cve.now/CVE-2025-39878.md): ceph: fix crash after fscrypt\_encrypt\_pagecache\_blocks() error (CVSS 5.5, Linux)
- [CVE-2025-39877](https://cve.now/CVE-2025-39877.md): mm/damon/sysfs: fix use-after-free in state\_show() (no CVSS, Linux)
- [CVE-2025-39876](https://cve.now/CVE-2025-39876.md): net: fec: Fix possible NPD in fec\_enet\_phy\_reset\_after\_clk\_enable() (no CVSS, Linux)
- [CVE-2025-39875](https://cve.now/CVE-2025-39875.md): igb: Fix NULL pointer dereference in ethtool loopback test (CVSS 5.5, Linux)
- [CVE-2025-39874](https://cve.now/CVE-2025-39874.md): macsec: sync features on RTM\_NEWLINK (CVSS 5.5, Linux)
- [CVE-2025-39873](https://cve.now/CVE-2025-39873.md): can: xilinx\_can: xcan\_write\_frame(): fix use-after-free of transmitted SKB (CVSS 7.8, Linux)
- [CVE-2025-39872](https://cve.now/CVE-2025-39872.md): hsr: hold rcu and dev lock for hsr\_get\_port\_ndev (CVSS 7.8, Linux)
- [CVE-2025-39871](https://cve.now/CVE-2025-39871.md): dmaengine: idxd: Remove improper idxd\_free (no CVSS, Linux)
- [CVE-2025-39870](https://cve.now/CVE-2025-39870.md): dmaengine: idxd: Fix double free in idxd\_setup\_wqs() (no CVSS, Linux)
- [CVE-2025-39869](https://cve.now/CVE-2025-39869.md): dmaengine: ti: edma: Fix memory allocation size for queue\_priority\_map (CVSS 8.4, Linux)
- [CVE-2025-39868](https://cve.now/CVE-2025-39868.md): erofs: fix runtime warning on truncate\_folio\_batch\_exceptionals() (CVSS 7.8, Linux)
- [CVE-2025-8282](https://cve.now/CVE-2025-8282.md): SureForms \< 1.9.1 - Admin+ Stored XSS (CVSS 3.5, SureForms)
- [CVE-2025-10841](https://cve.now/CVE-2025-10841.md): code-projects Online Bidding System weweee.php sql injection (CVSS 6.9, code-projects Online Bidding System)
- [CVE-2025-26399](https://cve.now/CVE-2025-26399.md): SolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation Vulnerability (CVSS 9.8, KEV, SolarWinds Web Help Desk)
- [CVE-2025-10840](https://cve.now/CVE-2025-10840.md): SourceCodester Pet Grooming Management Software print-payment.php sql injection (CVSS 5.3, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10839](https://cve.now/CVE-2025-10839.md): SourceCodester Pet Grooming Management Software inv-print.php sql injection (CVSS 5.3, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10838](https://cve.now/CVE-2025-10838.md): Tenda AC21 WifiExtraSet sub\_45BB10 buffer overflow (CVSS 8.7, Tenda AC21)
- [CVE-2025-1131](https://cve.now/CVE-2025-1131.md): Asterisk Unsafe Shell Sourcing in safe\_asterisk Leads to Local Privilege Escalation (CVSS 7.0, Asterisk)
- [CVE-2025-9321](https://cve.now/CVE-2025-9321.md): WPCasa \<= 1.4.1 - Unauthenticated Code Injection (CVSS 9.8, wpsight WPCasa)
- [CVE-2025-10837](https://cve.now/CVE-2025-10837.md): code-projects Simple Food Ordering System order.php cross site scripting (CVSS 5.1, code-projects Simple Food Ordering System)
- [CVE-2025-8902](https://cve.now/CVE-2025-8902.md): Widget Options - Extended \<= 5.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting (CVSS 6.4, Marketing Fire Widget Options - Extended)
- [CVE-2025-10380](https://cve.now/CVE-2025-10380.md): Advanced Views – Display Posts, Custom Fields, and More \<= 3.7.19 - Authenticated (Author+) Remote Code Execution via SSTI (CVSS 8.8, wplakeorg Advanced Views – Display Custom Fields (ACF, Pods…)
- [CVE-2025-10836](https://cve.now/CVE-2025-10836.md): SourceCodester Pet Grooming Management Software print1.php sql injection (CVSS 6.9, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10835](https://cve.now/CVE-2025-10835.md): SourceCodester Pet Grooming Management Software view\_payorder.php sql injection (CVSS 5.3, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10834](https://cve.now/CVE-2025-10834.md): itsourcecode Open Source Job Portal login.php sql injection (CVSS 6.9, itsourcecode Open Source Job Portal)
- [CVE-2025-10833](https://cve.now/CVE-2025-10833.md): 1000projects Bookstore Management System login.php sql injection (CVSS 6.9, 1000projects Bookstore Management System)
- [CVE-2025-58915](https://cve.now/CVE-2025-58915.md): WordPress Request a Quote plugin \<= 2.5.0 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, emarket-design Request a Quote)
- [CVE-2025-10832](https://cve.now/CVE-2025-10832.md): SourceCodester Pet Grooming Management Software fetch\_product\_details.php sql injection (CVSS 6.9, SourceCodester Pet Grooming Management Software)
- [CVE-2025-42907](https://cve.now/CVE-2025-42907.md): Server-Side Request Forgery in SAP BI Platform (CVSS 4.3, SAP\_SE SAP BI Platform)
- [CVE-2025-10831](https://cve.now/CVE-2025-10831.md): Campcodes Computer Sales and Inventory System pro\_edit1.php sql injection (CVSS 6.9, Campcodes Computer Sales and Inventory System)
- [CVE-2025-10830](https://cve.now/CVE-2025-10830.md): Campcodes Computer Sales and Inventory System inv\_edit1.php sql injection (CVSS 6.9, Campcodes Computer Sales and Inventory System)
- [CVE-2025-9495](https://cve.now/CVE-2025-9495.md): Viessmann Vitogate 300 Authentication Bypass (CVSS 8.7, Viessmann Vitogate)
- [CVE-2025-9494](https://cve.now/CVE-2025-9494.md): Viessmann Vitogate 300 OS Command Injection (CVSS 8.5, Viessmann Vitogate)
- [CVE-2025-10829](https://cve.now/CVE-2025-10829.md): Campcodes Computer Sales and Inventory System sup\_edit1.php sql injection (CVSS 6.9, Campcodes Computer Sales and Inventory System)
- [CVE-2025-10828](https://cve.now/CVE-2025-10828.md): SourceCodester Pet Grooming Management Software edit.php sql injection (CVSS 5.3, SourceCodester Pet Grooming Management Software)
- [CVE-2025-10827](https://cve.now/CVE-2025-10827.md): PHPJabbers Restaurant Menu Maker preview.php cross site scripting (CVSS 5.3, PHPJabbers Restaurant Menu Maker)
- [CVE-2025-10826](https://cve.now/CVE-2025-10826.md): Campcodes Online Beauty Parlor Management System sales-reports-detail.php sql injection (CVSS 5.3, Campcodes Online Beauty Parlor Management System)
- [CVE-2025-10825](https://cve.now/CVE-2025-10825.md): Campcodes Online Beauty Parlor Management System view-appointment.php sql injection (CVSS 5.3, Campcodes Online Beauty Parlor Management System)
- [CVE-2025-10824](https://cve.now/CVE-2025-10824.md): axboe fio init.c \_\_parse\_jobs\_ini use after free (CVSS 4.8, axboe fio)
- [CVE-2025-29083](https://cve.now/CVE-2025-29083.md): SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Plugin (CVSS 6.5)
- [CVE-2025-29084](https://cve.now/CVE-2025-29084.md): SQL Injection vulnerability in CSZ-CMS v.1.3.0 allows a remote attacker to execute arbitrary code via the execSqlFile function in the Upgrad (CVSS 6.5)
- [CVE-2025-45326](https://cve.now/CVE-2025-45326.md): An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit\_size.php component. (CVSS 6.5)
- [CVE-2025-51005](https://cve.now/CVE-2025-51005.md): A heap-buffer-overflow vulnerability exists in the tcpliveplay utility of the tcpreplay-4.5.1. (CVSS 7.5)
- [CVE-2025-55780](https://cve.now/CVE-2025-55780.md): A null pointer dereference occurs in the function break\_word\_for\_overflow\_wrap() in MuPDF 1.26.4 when rendering a malformed EPUB document. (CVSS 7.5)
- [CVE-2025-56146](https://cve.now/CVE-2025-56146.md): Indian Bank IndSMART Android App 3.8.1 is vulnerable to Missing SSL Certificate Validation in NuWebViewActivity. (CVSS 5.3)
- [CVE-2025-56304](https://cve.now/CVE-2025-56304.md): Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page. (CVSS 6.1)
- [CVE-2025-56311](https://cve.now/CVE-2025-56311.md): In Shenzhen C-Data Technology Co. (CVSS 6.5)
- [CVE-2025-56394](https://cve.now/CVE-2025-56394.md): Free5gc 4.0.1 is vulnerable to Buffer Overflow. (CVSS 7.5)
- [CVE-2025-57407](https://cve.now/CVE-2025-57407.md): A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart \<=10.0.3 allows a remote authenticated attacker to injec (CVSS 5.4, s-cart/core · gp247/core)
- [CVE-2025-57636](https://cve.now/CVE-2025-57636.md): OS Command injection vulnerability in D-Link C1 2020-02-21. (CVSS 6.5)
- [CVE-2025-57637](https://cve.now/CVE-2025-57637.md): Buffer overflow vulnerability in D-Link DI-7100G 2020-02-21 in the sub\_451754 function of the jhttpd service in the viav4 parameter allowing (CVSS 7.5)
- [CVE-2025-57638](https://cve.now/CVE-2025-57638.md): Buffer overflow vulnerability in Tenda AC9 1.0 via the user supplied sys.vendor configuration value. (CVSS 7.5)
- [CVE-2025-57639](https://cve.now/CVE-2025-57639.md): OS Command injection vulnerability in Tenda AC9 1.0 was discovered to contain a command injection vulnerability via the usb.samba.guest.user (CVSS 6.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-09-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.