# CVEs published 2025-10-09

169 CVEs were published on October 9, 2025: 20 critical, 61 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2025-61928](https://cve.now/CVE-2025-61928.md): Better Auth: Unauthenticated API key creation through api-key plugin (CVSS 9.3, better-auth)
- [CVE-2025-61926](https://cve.now/CVE-2025-61926.md): Allstar Reviewbot has Authentication Bypass via Hard-coded Webhook Secret (CVSS 4.6, ossf allstar · github.com/ossf/allstar)
- [CVE-2016-15047](https://cve.now/CVE-2016-15047.md): AVTECH CloudSetup.cgi Authenticated Command Injection (CVSS 8.7, AVTECH SECURITY IP Camera, NVR, and DVR Devices)
- [CVE-2025-62240](https://cve.now/CVE-2025-62240.md): Multiple cross-site scripting (XSS) vulnerabilities with Calendar events in Liferay Portal 7.4.3.35 through 7.4.3.111, and Liferay DXP 2023. (CVSS 4.8, Liferay Portal · Liferay DXP +1)
- [CVE-2025-59286](https://cve.now/CVE-2025-59286.md): Copilot Information Disclosure Vulnerability (CVSS 9.3, Microsoft 365 Copilot's Business Chat)
- [CVE-2025-59272](https://cve.now/CVE-2025-59272.md): Copilot Information Disclosure Vulnerability (CVSS 9.3, Microsoft 365 Copilot's Business Chat)
- [CVE-2025-59271](https://cve.now/CVE-2025-59271.md): Redis Enterprise Elevation of Privilege Vulnerability (CVSS 8.7, Microsoft Azure Cache for Redis Enterprise · Microsoft Azur…)
- [CVE-2025-59252](https://cve.now/CVE-2025-59252.md): M365 Copilot Information Disclosure Vulnerability (CVSS 9.3, Microsoft 365 Word Copilot)
- [CVE-2025-55321](https://cve.now/CVE-2025-55321.md): Azure Monitor Log Analytics Spoofing Vulnerability (CVSS 9.3, Microsoft Azure Monitor)
- [CVE-2025-59247](https://cve.now/CVE-2025-59247.md): Azure PlayFab Elevation of Privilege Vulnerability (CVSS 8.8, Microsoft Azure PlayFab)
- [CVE-2025-59246](https://cve.now/CVE-2025-59246.md): Azure Entra ID Elevation of Privilege Vulnerability (CVSS 9.8, Microsoft Entra)
- [CVE-2025-59218](https://cve.now/CVE-2025-59218.md): Azure Entra ID Elevation of Privilege Vulnerability (CVSS 9.6, Microsoft Entra)
- [CVE-2025-11558](https://cve.now/CVE-2025-11558.md): code-projects E-Commerce Website user\_index\_search.php sql injection (CVSS 6.9, code-projects E-Commerce Website)
- [CVE-2025-11557](https://cve.now/CVE-2025-11557.md): projectworlds Gate Pass Management System add-pass.php sql injection (CVSS 6.9, projectworlds Gate Pass Management System)
- [CVE-2025-61783](https://cve.now/CVE-2025-61783.md): Python Social Auth - Django has unsafe account association (CVSS 6.3, python-social-auth social-app-django · social-auth-app-djan…)
- [CVE-2025-61779](https://cve.now/CVE-2025-61779.md): Trustee's attestation-policy endpoint is not protected by admin autentication (CVSS 8.7, confidential-containers trustee)
- [CVE-2025-43296](https://cve.now/CVE-2025-43296.md): A logic issue was addressed with improved validation. (CVSS 5.5, Apple macOS)
- [CVE-2025-61773](https://cve.now/CVE-2025-61773.md): pyLoad CNL and captcha handlers allow code Injection via unsanitized parameters (CVSS 8.1, pyload · pyload-ng)
- [CVE-2025-34248](https://cve.now/CVE-2025-34248.md): D-Link Nuclias Connect \< v1.3.1.4 Directory Traversal to Arbitrary File Deletion (CVSS 7.2, D-Link Nuclias Connect)
- [CVE-2025-61602](https://cve.now/CVE-2025-61602.md): BigBlueButton vulnerable to Chat DoS via invalid reactionEmojiId (CVSS 7.5, bigbluebutton)
- [CVE-2025-11556](https://cve.now/CVE-2025-11556.md): code-projects Simple Leave Manager user.php sql injection (CVSS 6.9, code-projects Simple Leave Manager)
- [CVE-2025-11555](https://cve.now/CVE-2025-11555.md): Campcodes Online Learning Management System calendar\_of\_events.php sql injection (CVSS 6.9, Campcodes Online Learning Management System)
- [CVE-2025-61601](https://cve.now/CVE-2025-61601.md): BigBlueButton vulnerable to DoS via PollSubmitVote GraphQL mutation (CVSS 7.5, bigbluebutton)
- [CVE-2025-35061](https://cve.now/CVE-2025-35061.md): Newforma Info Exchange (NIX) forced NTLMv2 authentication via /NPCSRemoteWeb/LegacyIntegrationServices.asmx (CVSS 8.2, Newforma Project Center)
- [CVE-2025-35062](https://cve.now/CVE-2025-35062.md): Newforma Info Exchange (NIX) default anonymous access (CVSS 6.9, Newforma Project Center)
- [CVE-2025-35060](https://cve.now/CVE-2025-35060.md): Newforma Info Exchange (NIX) stored XSS via SVG file upload (CVSS 5.1, Newforma Project Center)
- [CVE-2025-35059](https://cve.now/CVE-2025-35059.md): Newforma Info Exchange (NIX) open URL redirect via /DownloadWeb/hyperlinkredirect.aspx (CVSS 4.3, Newforma Project Center)
- [CVE-2025-35058](https://cve.now/CVE-2025-35058.md): Newforma Info Exchange (NIX) forced NTLMv2 authentication via /UserWeb/Common/MarkupServices.ashx (CVSS 8.2, Newforma Project Center)
- [CVE-2025-35057](https://cve.now/CVE-2025-35057.md): Newforma Info Exchange (NIX) forced NTLMv2 authentication via /RemoteWeb/IntegrationServices.ashx (CVSS 6.0, Newforma Project Center)
- [CVE-2025-35056](https://cve.now/CVE-2025-35056.md): Newforma Info Exchange (NIX) limited file read (CVSS 5.0, Newforma Project Center)
- [CVE-2025-35055](https://cve.now/CVE-2025-35055.md): Newforma Info Exchange (NIX) insecure file upload (CVSS 8.8, Newforma Project Center)
- [CVE-2025-35054](https://cve.now/CVE-2025-35054.md): Newforma Info Exchange (NIX) insufficiently protected credentials (CVSS 5.3, Newforma Project Center)
- [CVE-2025-35053](https://cve.now/CVE-2025-35053.md): Newforma Info Exchange (NIX) arbitrary file read and delete (CVSS 6.4, Newforma Project Center)
- [CVE-2025-35052](https://cve.now/CVE-2025-35052.md): Newforma Info Exchange (NIX) shared hard-coded secret key (CVSS 5.3, Newforma Project Center)
- [CVE-2025-35051](https://cve.now/CVE-2025-35051.md): Newforma Project Center Server (NPCS) .NET unauthenticated deserialization (CVSS 9.8, Newforma Project Center)
- [CVE-2025-35050](https://cve.now/CVE-2025-35050.md): Newforma Info Exchange (NIX) .NET unauthenticated deserialization (CVSS 9.3, Newforma Project Center)
- [CVE-2025-11554](https://cve.now/CVE-2025-11554.md): Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions (CVSS 5.3, Portabilis i-Educar)
- [CVE-2025-11553](https://cve.now/CVE-2025-11553.md): code-projects Courier Management System add-courier.php sql injection (CVSS 5.3, code-projects Courier Management System)
- [CVE-2025-11552](https://cve.now/CVE-2025-11552.md): code-projects Online Complaint Site category.php sql injection (CVSS 5.3, code-projects Online Complaint Site)
- [CVE-2025-59146](https://cve.now/CVE-2025-59146.md): New API has Authenticated Server-Side Request Forgery (SSRF) issue (CVSS 8.5, QuantumNous new-api)
- [CVE-2025-55200](https://cve.now/CVE-2025-55200.md): BigBlueButton vulnerable to Stored XSS via name of user at Shared Notes (CVSS 7.1, bigbluebutton)
- [CVE-2025-4615](https://cve.now/CVE-2025-4615.md): PAN-OS: Improper Neutralization of Input in the Management Web Interface (CVSS 5.4, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-4614](https://cve.now/CVE-2025-4614.md): PAN-OS: Session Token Disclosure Vulnerability (CVSS 4.8, Palo Alto Networks Cloud NGFW · Palo Alto Networks PAN-OS +1)
- [CVE-2025-11551](https://cve.now/CVE-2025-11551.md): code-projects Student Result Manager Database.java sql injection (CVSS 5.3, code-projects Student Result Manager)
- [CVE-2025-11550](https://cve.now/CVE-2025-11550.md): Tenda W12 HTTP Request modules wifiScheduledSet null pointer dereference (CVSS 7.1, Tenda W12)
- [CVE-2025-11573](https://cve.now/CVE-2025-11573.md): Denial of Service issue in Amazon.IonDotnet (CVSS 8.7, Amazon.IonDotnet)
- [CVE-2025-11549](https://cve.now/CVE-2025-11549.md): Tenda W12 HTTP Request modules wifiMacFilterSet stack-based overflow (CVSS 8.7, Tenda W12)
- [CVE-2017-20203](https://cve.now/CVE-2017-20203.md): NetSarang v5.0 Malicious Backdoor Supply Chain Compromise (CVSS 9.3, NetSarang Computer Xmanager Enterprise · NetSarang Compu… +3)
- [CVE-2025-11371](https://cve.now/CVE-2025-11371.md): Gladinet CentreStack and TrioFox Local File Inclusion Flaw (CVSS 7.5, KEV, Gladinet CentreStack and TrioFox)
- [CVE-2025-60010](https://cve.now/CVE-2025-60010.md): Junos OS and Junos OS Evolved: Device allows login for user with expired password (CVSS 5.4, Juniper Networks Junos OS)
- [CVE-2025-60009](https://cve.now/CVE-2025-60009.md): Junos Space: CLI Configlet page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-60006](https://cve.now/CVE-2025-60006.md): Junos OS Evolved: OS command injection vulnerabilities fixed (CVSS 5.3, Juniper Networks Junos OS Evolved)
- [CVE-2025-60004](https://cve.now/CVE-2025-60004.md): Junos OS and Junos OS Evolved: Specific BGP EVPN update message causes rpd crash (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-60002](https://cve.now/CVE-2025-60002.md): Junos Space: Template Definitions page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-60001](https://cve.now/CVE-2025-60001.md): Junos Space: Create Quick Template page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-60000](https://cve.now/CVE-2025-60000.md): Junos Space: Generate Report page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59999](https://cve.now/CVE-2025-59999.md): Junos Space: API Access Profiles page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59998](https://cve.now/CVE-2025-59998.md): Junos Space: Archive Logs screen is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59997](https://cve.now/CVE-2025-59997.md): Junos Space: Fields in the CLI Configlets are vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59996](https://cve.now/CVE-2025-59996.md): Junos Space: Configuration View page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59995](https://cve.now/CVE-2025-59995.md): Junos Space: Template creation through Definition is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59994](https://cve.now/CVE-2025-59994.md): Junos Space: Quick Template page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59993](https://cve.now/CVE-2025-59993.md): Junos Space: Space Node Setting fields are vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59992](https://cve.now/CVE-2025-59992.md): Junos Space: Secure Console page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59991](https://cve.now/CVE-2025-59991.md): Junos Space: Device Management pages are vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59990](https://cve.now/CVE-2025-59990.md): Junos Space: Template creation pages are vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59989](https://cve.now/CVE-2025-59989.md): Junos Space: Device Discovery page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59988](https://cve.now/CVE-2025-59988.md): Junos Space: Generate Report page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59987](https://cve.now/CVE-2025-59987.md): Junos Space: The arbitrary device search field is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59986](https://cve.now/CVE-2025-59986.md): Junos Space: Input fields in Model Devices are vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59985](https://cve.now/CVE-2025-59985.md): Junos Space: Purging Policy field is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59984](https://cve.now/CVE-2025-59984.md): Junos Space: Global Search is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59983](https://cve.now/CVE-2025-59983.md): Junos Space: Template Definition page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59982](https://cve.now/CVE-2025-59982.md): Junos Space: Dashboard Search field is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59981](https://cve.now/CVE-2025-59981.md): Junos Space: Device Template Definition page is vulnerable to reflected cross-site script injection (CVSS 6.1, Juniper Networks Junos Space)
- [CVE-2025-59980](https://cve.now/CVE-2025-59980.md): Junos OS: When a user with the name ftp or anonymous is configured unauthenticated filesystem access is allowed (CVSS 6.5, Juniper Networks Junos OS)
- [CVE-2025-59978](https://cve.now/CVE-2025-59978.md): Junos Space: Stored cross-site scripting vulnerability in web application (CVSS 9.0, Juniper Networks Junos Space)
- [CVE-2025-59976](https://cve.now/CVE-2025-59976.md): Junos Space: Arbitrary file download vulnerability in web interface (CVSS 6.5, Juniper Networks Junos Space)
- [CVE-2025-59975](https://cve.now/CVE-2025-59975.md): Junos Space: Flooding device with inbound API calls leads to WebUI and CLI management access DoS (CVSS 7.5, Juniper Networks Junos Space)
- [CVE-2025-59974](https://cve.now/CVE-2025-59974.md): Junos Space Security Director: Persistent Cross-Site Scripting (XSS) vulnerability (CVSS 8.4, Juniper Networks Junos Space Security Director)
- [CVE-2025-59968](https://cve.now/CVE-2025-59968.md): Junos Space Security Director: Insufficient authorization for sensitive resources in web interface (CVSS 8.6, Juniper Networks Junos Space Security Director · Juniper Ne…)
- [CVE-2025-59967](https://cve.now/CVE-2025-59967.md): Junos OS Evolved: ACX7024, ACX7024X, ACX7100-32C, ACX7100-48L, ACX7348, ACX7509: When specific valid multicast traffic is received on the L3 interface on a vulnerable device evo-pfemand crashes and restarts (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2025-59964](https://cve.now/CVE-2025-59964.md): Junos OS: SRX4700: When forwarding-options sampling is enabled any traffic destined to the RE will cause the forwarding line card to crash and restart (CVSS 7.5, Juniper Networks Junos OS)
- [CVE-2025-10284](https://cve.now/CVE-2025-10284.md): Improper Archive Extraction in unarchive Enables RCE (CVSS 9.6, BLSOPS bbot · bbot)
- [CVE-2025-10283](https://cve.now/CVE-2025-10283.md): Improper .git Sanitization in gitdumper Enables RCE (CVSS 9.6, BLSOPS bbot · bbot)
- [CVE-2025-10282](https://cve.now/CVE-2025-10282.md): GitLab Domain Confusion in gitlab Leaks API Key (CVSS 4.7, BLSOPS bbot · bbot)
- [CVE-2025-10281](https://cve.now/CVE-2025-10281.md): Insecure URL Handling in git\_clone Leading to Leaked API Key (CVSS 4.7, BLSOPS bbot · bbot)
- [CVE-2025-59962](https://cve.now/CVE-2025-59962.md): Junos OS and Junos OS Evolved: With BGP sharding enabled, change in indirect next-hop can cause RPD crash (CVSS 5.3, Juniper Networks Junos OS)
- [CVE-2025-59958](https://cve.now/CVE-2025-59958.md): Junos OS Evolved: PTX Series: When a firewall filter rejects traffic these packets are erroneously sent to the RE (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2025-59957](https://cve.now/CVE-2025-59957.md): Junos OS: EX4600 Series and QFX5000 Series: An attacker with physical access can open a persistent backdoor (CVSS 6.8, Juniper Networks Junos OS)
- [CVE-2025-52961](https://cve.now/CVE-2025-52961.md): Junos OS Evolved: PTX Series except PTX10003: An unauthenticated adjacent attacker sending specific valid traffic can cause a memory leak in cfmman leading to FPC crash and restart (CVSS 6.5, Juniper Networks Junos OS Evolved)
- [CVE-2025-52960](https://cve.now/CVE-2025-52960.md): Junos OS: SRX Series and MX Series: Receipt of specific SIP packets in a high utilization situation causes a flowd/mspmand crash (CVSS 5.9, Juniper Networks Junos OS)
- [CVE-2025-11198](https://cve.now/CVE-2025-11198.md): Security Director Policy Enforcer: An unrestricted API allows a network-based unauthenticated attacker to deploy malicious vSRX images to VMWare NSX Server (CVSS 7.4, Juniper Networks Security Director Policy Enforcer)
- [CVE-2025-39664](https://cve.now/CVE-2025-39664.md): Path-Traversal in report scheduler (CVSS 7.1, Checkmk)
- [CVE-2025-32919](https://cve.now/CVE-2025-32919.md): Privilege Escalation in Windows License plugin for Checkmk Windows Agent (CVSS 8.8, Checkmk)
- [CVE-2025-32916](https://cve.now/CVE-2025-32916.md): Sensitive form data in URL query parameters (CVSS 1.0, Checkmk)
- [CVE-2025-36171](https://cve.now/CVE-2025-36171.md): IBM Aspera Faspex denial of service (CVSS 4.9, IBM Aspera Faspex)
- [CVE-2025-36225](https://cve.now/CVE-2025-36225.md): IBM Aspera Faspex information disclosure (CVSS 4.3, IBM Aspera Faspex)
- [CVE-2023-37401](https://cve.now/CVE-2023-37401.md): IBM Aspera Faspex cross-origin resource sharing (CVSS 5.3, IBM Aspera Faspex)
- [CVE-2025-11561](https://cve.now/CVE-2025-11561.md): Sssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systems (CVSS 8.8, sssd · Red Hat Enterprise Linux +2)
- [CVE-2025-62228](https://cve.now/CVE-2025-62228.md): Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC, Apache Flink CDC: SQL injection via maliciously crafted identifiers (CVSS 5.1, Apache Software Foundation Apache Flink CDC · org.apache… +4)
- [CVE-2025-10240](https://cve.now/CVE-2025-10240.md): Possibility of unintended actions when a user clicks a malicious link in the Progress Flowmon web application (CVSS 8.8, Progress Software Flowmon)
- [CVE-2025-10239](https://cve.now/CVE-2025-10239.md): Unintended command execution via troubleshooting scripts in Progress Flowmon (CVSS 7.2, Progress Software Flowmon)
- [CVE-2025-39963](https://cve.now/CVE-2025-39963.md): io\_uring: fix incorrect io\_kiocb reference in io\_link\_skb (CVSS 7.8, Linux)
- [CVE-2025-39962](https://cve.now/CVE-2025-39962.md): rxrpc: Fix untrusted unsigned subtract (CVSS 7.5, Linux)
- [CVE-2025-39961](https://cve.now/CVE-2025-39961.md): iommu/amd/pgtbl: Fix possible race while increase page table level (CVSS 8.8, Linux)
- [CVE-2025-39960](https://cve.now/CVE-2025-39960.md): gpiolib: acpi: initialize acpi\_gpio\_info struct (CVSS 7.3, Linux)
- [CVE-2025-10004](https://cve.now/CVE-2025-10004.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 7.5, GitLab)
- [CVE-2025-11340](https://cve.now/CVE-2025-11340.md): Incorrect Authorization in GitLab (CVSS 7.7, GitLab)
- [CVE-2025-2934](https://cve.now/CVE-2025-2934.md): Allocation of Resources Without Limits or Throttling in GitLab (CVSS 4.3, GitLab)
- [CVE-2025-9371](https://cve.now/CVE-2025-9371.md): Betheme \<= 28.1.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'page\_title' (CVSS 6.4, MuffinGroup Betheme)
- [CVE-2025-10249](https://cve.now/CVE-2025-10249.md): Slider Revolution \<= 6.7.37 - Missing Authorization to Authenticated (Contributor+) Arbitrary File Read (CVSS 6.5, Revolution Slider Slider Revolution)
- [CVE-2025-39959](https://cve.now/CVE-2025-39959.md): ASoC: amd: acp: Fix incorrect retrival of acp\_chip\_info (no CVSS, Linux)
- [CVE-2025-39958](https://cve.now/CVE-2025-39958.md): iommu/s390: Make attach succeed when the device was surprise removed (no CVSS, Linux)
- [CVE-2025-39957](https://cve.now/CVE-2025-39957.md): wifi: mac80211: increase scan\_ies\_len for S1G (CVSS 7.1, Linux)
- [CVE-2025-39956](https://cve.now/CVE-2025-39956.md): igc: don't fail igc\_probe() on LED setup error (CVSS 7.8, Linux)
- [CVE-2025-39955](https://cve.now/CVE-2025-39955.md): tcp: Clear tcp\_sk(sk)-\>fastopen\_rsk in tcp\_disconnect(). (no CVSS, Linux)
- [CVE-2025-39954](https://cve.now/CVE-2025-39954.md): clk: sunxi-ng: mp: Fix dual-divider clock rate readback (no CVSS, Linux)
- [CVE-2025-10862](https://cve.now/CVE-2025-10862.md): Popup builder with Gamification, Multi-Step Popups, Page-Level Targeting, and WooCommerce Triggers \<= 2.1.3 - Unauthenticated SQL Injection via 'id' (CVSS 7.5, roxnor Popup builder with Gamification, Multi-Step Popups,…)
- [CVE-2025-11522](https://cve.now/CVE-2025-11522.md): Search & Go - Directory WordPress Theme \<= 2.7 - Authentication Bypass to Privilege Escalation via Account Takeover (CVSS 9.8, Elated-Themes Search & Go - Directory WordPress Theme)
- [CVE-2025-11539](https://cve.now/CVE-2025-11539.md): Arbitrary Code Execution in Grafana Image Renderer Plugin (CVSS 9.9, grafana-image-renderer)
- [CVE-2025-7634](https://cve.now/CVE-2025-7634.md): WP Travel Engine – Tour Booking Plugin – Tour Operator Software \<= 6.6.7 - Unauthenticated Local File Inclusion (CVSS 9.8, wptravelengine WP Travel Engine – Tour Booking Plugin – Tou…)
- [CVE-2025-7526](https://cve.now/CVE-2025-7526.md): WP Travel Engine – Tour Booking Plugin – Tour Operator Software \<= 6.6.7 - Authenticated (Subscriber+) Arbitrary File Deletion via File Renaming (CVSS 9.8, wptravelengine WP Travel Engine – Tour Booking Plugin – Tou…)
- [CVE-2025-11530](https://cve.now/CVE-2025-11530.md): code-projects Online Complaint Site state.php sql injection (CVSS 5.3, code-projects Online Complaint Site)
- [CVE-2025-6038](https://cve.now/CVE-2025-6038.md): Lisfinity Core - Lisfinity Core plugin used for pebas® Lisfinity WordPress theme \<= 1.4.0 - Authenticated (Subscriber+) Privilege Escalation (CVSS 8.8, Lisfinity Core - Lisfinity Core plugin used for pebas® Lisf…)
- [CVE-2025-47355](https://cve.now/CVE-2025-47355.md): Out-of-bounds Write in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47354](https://cve.now/CVE-2025-47354.md): Use After Free in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47351](https://cve.now/CVE-2025-47351.md): Integer Overflow or Wraparound in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47349](https://cve.now/CVE-2025-47349.md): Use of Out-of-range Pointer Offset in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47347](https://cve.now/CVE-2025-47347.md): Stack-based Buffer Overflow in Automotive Software platform based on QNX (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47342](https://cve.now/CVE-2025-47342.md): Use After Free in BT Controller (CVSS 7.1, Qualcomm Snapdragon)
- [CVE-2025-47341](https://cve.now/CVE-2025-47341.md): Buffer Copy Without Checking Size of Input in Camera (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47340](https://cve.now/CVE-2025-47340.md): Out-of-bounds Write in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-47338](https://cve.now/CVE-2025-47338.md): Untrusted Pointer Dereference in DSP Service (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27060](https://cve.now/CVE-2025-27060.md): Untrusted Pointer Dereference in TZ Firmware (CVSS 8.8, Qualcomm Snapdragon)
- [CVE-2025-27059](https://cve.now/CVE-2025-27059.md): Use of Out-of-range Pointer Offset in TZ Firmware (CVSS 8.8, Qualcomm Snapdragon)
- [CVE-2025-27054](https://cve.now/CVE-2025-27054.md): Out-of-bounds Write in Display (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27053](https://cve.now/CVE-2025-27053.md): Incorrect Calculation of Buffer Size in HLOS (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27049](https://cve.now/CVE-2025-27049.md): Buffer Over-read in Camera (CVSS 5.5, Qualcomm Snapdragon)
- [CVE-2025-27048](https://cve.now/CVE-2025-27048.md): Untrusted Pointer Dereference in Camera (CVSS 7.8, Qualcomm Snapdragon)
- [CVE-2025-27045](https://cve.now/CVE-2025-27045.md): Buffer Over-read in Video (CVSS 6.1, Qualcomm Snapdragon)
- [CVE-2025-27041](https://cve.now/CVE-2025-27041.md): Buffer Over-read in Video (CVSS 5.5, Qualcomm Snapdragon)
- [CVE-2025-27040](https://cve.now/CVE-2025-27040.md): Improper Input Validation in TZ Firmware (CVSS 6.5, Qualcomm Snapdragon)
- [CVE-2025-27039](https://cve.now/CVE-2025-27039.md): Detection of Error Condition Without Action in Computer Vision (CVSS 6.6, Qualcomm Snapdragon)
- [CVE-2025-11529](https://cve.now/CVE-2025-11529.md): ChurchCRM API Endpoint AuthMiddleware.php AuthMiddleware missing authentication (CVSS 6.9, ChurchCRM)
- [CVE-2025-11528](https://cve.now/CVE-2025-11528.md): Tenda AC7 saveAutoQos stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-11527](https://cve.now/CVE-2025-11527.md): Tenda AC7 fast\_setting\_pppoe\_set stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-11526](https://cve.now/CVE-2025-11526.md): Tenda AC7 WifiMacFilterSet stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-10496](https://cve.now/CVE-2025-10496.md): Cookie Notice & Consent \<= 1.6.5 - Unauthenticated Stored Cross-Site Scripting (CVSS 7.2, christophrado Cookie Notice & Consent)
- [CVE-2025-10586](https://cve.now/CVE-2025-10586.md): Community Events \<= 1.5.1 - Unauthenticated SQL Injection (CVSS 9.8, jackdewey Community Events)
- [CVE-2025-11166](https://cve.now/CVE-2025-11166.md): WP Go Maps (formerly WP Google Maps) \<= 9.0.46 - Cross-Site Request Forgery to Plugin Settings Update (CVSS 5.4, wpgmaps WP Go Maps)
- [CVE-2025-11525](https://cve.now/CVE-2025-11525.md): Tenda AC7 SetUpnpCfg stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-11524](https://cve.now/CVE-2025-11524.md): Tenda AC7 SetDDNSCfg stack-based overflow (CVSS 8.7, Tenda AC7)
- [CVE-2025-11523](https://cve.now/CVE-2025-11523.md): Tenda AC7 AdvSetLanip command injection (CVSS 5.3, Tenda AC7)
- [CVE-2025-11516](https://cve.now/CVE-2025-11516.md): code-projects Online Complaint Site complaint-details.php sql injection (CVSS 5.3, code-projects Online Complaint Site)
- [CVE-2025-11515](https://cve.now/CVE-2025-11515.md): code-projects Online Complaint Site register-complaint.php sql injection (CVSS 5.3, code-projects Online Complaint Site)
- [CVE-2025-11514](https://cve.now/CVE-2025-11514.md): code-projects Online Complaint Site index.php sql injection (CVSS 5.3, code-projects Online Complaint Site)
- [CVE-2025-45095](https://cve.now/CVE-2025-45095.md): Lavasoft Web Companion (also known as Ad-Aware WebCompanion) versions 8.9.0.1091 through 12.1.3.1037 installs the DCIService.exe service wit (CVSS 7.3)
- [CVE-2025-56426](https://cve.now/CVE-2025-56426.md): An issue WebKul Bagisto v.2.3.6 allows a remote attacker to execute arbitrary code via the Cart/Checkout API endpoint, specifically, the pri (CVSS 6.5)
- [CVE-2025-56683](https://cve.now/CVE-2025-56683.md): A cross-site scripting (XSS) vulnerability in the component /app/marketplace.html of Logseq v0.10.9 allows attackers to execute arbitrary co (CVSS 9.6)
- [CVE-2025-60265](https://cve.now/CVE-2025-60265.md): In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in user/list is not securely filtered, resulting in a SQ (CVSS 6.5)
- [CVE-2025-60266](https://cve.now/CVE-2025-60266.md): In xckk v9.6, there is a SQL injection vulnerability in which the orderBy parameter in address/list is not securely filtered, resulting in a (CVSS 6.5)
- [CVE-2025-60267](https://cve.now/CVE-2025-60267.md): In xckk v9.6, there is a SQL injection vulnerability in which the cond parameter in notice/list is not securely filtered, resulting in a SQL (CVSS 6.5)
- [CVE-2025-60302](https://cve.now/CVE-2025-60302.md): code-projects Client Details System 1.0 is vulnerable to Cross Site Scripting (XSS). (CVSS 6.1)
- [CVE-2025-60304](https://cve.now/CVE-2025-60304.md): code-projects Simple Scheduling System 1.0 is vulnerable to Cross Site Scripting (XSS) via the Subject Description field. (CVSS 6.1)
- [CVE-2025-60316](https://cve.now/CVE-2025-60316.md): SourceCodester Pet Grooming Management Software 1.0 is vulnerable to SQL Injection in admin/view\_customer.php via the ID parameter. (CVSS 9.4)
- [CVE-2025-60375](https://cve.now/CVE-2025-60375.md): The authentication mechanism in Perfex CRM before 3.3.1 allows attackers to bypass login credentials due to insufficient server-side validat (CVSS 7.3)
- [CVE-2025-61532](https://cve.now/CVE-2025-61532.md): Cross Site Scripting vulnerability in SVX Portal v.2.7A to execute arbitrary code via the TG parameter on last\_heard\_page.php component (CVSS 6.1)
- [CVE-2025-61577](https://cve.now/CVE-2025-61577.md): D-Link DIR-816A2\_FWv1.10CNB05 was discovered to contain a stack overflow via the statuscheckpppoeuser parameter in the dir\_setWanWifi functi (CVSS 7.5)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.