# CVEs published 2025-10-17

83 CVEs were published on October 17, 2025: 19 critical, 11 high. Days are UTC.

- [CVE-2025-62655](https://cve.now/CVE-2025-62655.md): SQL injection in Cargo via Special:CargoExport (CVSS 2.1, The Wikimedia Foundation MediaWiki Cargo extension)
- [CVE-2025-62654](https://cve.now/CVE-2025-62654.md): Stored XSS through system messages in QuizGame (CVSS 2.0, The Wikimedia Foundation MediaWiki QuizGame extension)
- [CVE-2025-62653](https://cve.now/CVE-2025-62653.md): Stored XSS through system messages in PollNY (CVSS 2.0, The Wikimedia Foundation MediaWiki PollNY extension)
- [CVE-2025-62652](https://cve.now/CVE-2025-62652.md): Stored XSS in WebAuthn key name (CVSS 5.8, The Wikimedia Foundation MediaWiki WebAuthn extension)
- [CVE-2025-62515](https://cve.now/CVE-2025-62515.md): Remote Code Execution by Pickle Deserialization via FlightServer in pyquokka (CVSS 9.8, marsupialtail quokka · pyquokka)
- [CVE-2025-11914](https://cve.now/CVE-2025-11914.md): Shenzhen Ruiming Technology Streamax Crocus DeviceFileReport.do download path traversal (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-62508](https://cve.now/CVE-2025-62508.md): Citizen vulnerable to stored XSS in sticky header button messages (CVSS 6.5, StarCitizenTools mediawiki-skins-Citizen · starcitizentools…)
- [CVE-2025-11913](https://cve.now/CVE-2025-11913.md): Shenzhen Ruiming Technology Streamax Crocus Service.do download path traversal (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-11912](https://cve.now/CVE-2025-11912.md): Shenzhen Ruiming Technology Streamax Crocus DeviceState.do Query sql injection (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-11925](https://cve.now/CVE-2025-11925.md): Incorrect Content-Type Header (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-62511](https://cve.now/CVE-2025-62511.md): yt-grabber-tui local arbitrary file overwrite via TOCTOU race in config file creation (CVSS 6.3, zheny-creator YtGrabber-TUI)
- [CVE-2025-11911](https://cve.now/CVE-2025-11911.md): Shenzhen Ruiming Technology Streamax Crocus DeviceFault.do Query sql injection (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-11910](https://cve.now/CVE-2025-11910.md): Shenzhen Ruiming Technology Streamax Crocus MemoryState.do query sql injection (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-34282](https://cve.now/CVE-2025-34282.md): ThingsBoard \< v4.2.1 SVG Image SSRF (CVSS 6.9, ThingsBoard)
- [CVE-2025-34281](https://cve.now/CVE-2025-34281.md): Stored Cross-Site Scripting (XSS) in ThingsBoard (CVSS 6.2, thingsboard · org.thingsboard:application)
- [CVE-2025-11909](https://cve.now/CVE-2025-11909.md): Shenzhen Ruiming Technology Streamax Crocus RepairRecord.do queryLast sql injection (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-11908](https://cve.now/CVE-2025-11908.md): Shenzhen Ruiming Technology Streamax Crocus FileDir.do uploadFile unrestricted upload (CVSS 5.3, Shenzhen Ruiming Technology Streamax Crocus)
- [CVE-2025-62505](https://cve.now/CVE-2025-62505.md): SSRF in lobehub/lobe-chat with native web fetch module (CVSS 3.0, lobehub lobe-chat · @lobehub/chat)
- [CVE-2025-62430](https://cve.now/CVE-2025-62430.md): ClipBucket v5 stored XSS via video/photo fields (CVSS 5.4, MacWarrior clipbucket-v5)
- [CVE-2025-62424](https://cve.now/CVE-2025-62424.md): ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write (CVSS 6.7, MacWarrior clipbucket-v5)
- [CVE-2025-62419](https://cve.now/CVE-2025-62419.md): DataEase vulnerable to JDBC URL injection in DB2 and MongoDB data source configuration (CVSS 8.2, dataease)
- [CVE-2025-62420](https://cve.now/CVE-2025-62420.md): DataEase vulnerable to remote code execution via H2 JDBC driver bypass (CVSS 8.2, dataease)
- [CVE-2025-62421](https://cve.now/CVE-2025-62421.md): DataEase vulnerable to stored cross-site scripting via file upload bypass (CVSS 5.5, dataease)
- [CVE-2025-62422](https://cve.now/CVE-2025-62422.md): DataEase SQL injection vulnerability (CVSS 8.7, dataease)
- [CVE-2025-62171](https://cve.now/CVE-2025-62171.md): ImageMagick vulnerable to denial of service via integer overflow in BMP decoder on 32-bit systems (CVSS 5.9, ImageMagick · Magick.NET-Q16-AnyCPU +5)
- [CVE-2025-62168](https://cve.now/CVE-2025-62168.md): Squid vulnerable to information disclosure via authentication credential leakage in error handling (CVSS 10.0, squid-cache squid)
- [CVE-2025-59043](https://cve.now/CVE-2025-59043.md): OpenBao vulnerable to denial of service via malicious JSON request processing (CVSS 7.5, openbao · github.com/openbao/openbao)
- [CVE-2025-8414](https://cve.now/CVE-2025-8414.md): Zigbee Green Power Host Buffer Overflow Vulnerability (CVSS 9.4, silabs.com Simplicity SDK · silabs.com Gecko SDK)
- [CVE-2025-58747](https://cve.now/CVE-2025-58747.md): Dify MCP OAuth Flow Vulnerable to XSS (CVSS 2.0, langgenius dify)
- [CVE-2025-62356](https://cve.now/CVE-2025-62356.md): A path traversal vulnerability in all versions of the Qodo Qodo Gen IDE enables a threat actor to read arbitrary local files in and outside (CVSS 7.5, Qodo Gen)
- [CVE-2025-11905](https://cve.now/CVE-2025-11905.md): yanyutao0402 ChanCMS gather.js getArticle code injection (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-26625](https://cve.now/CVE-2025-26625.md): Git LFS may write to arbitrary files via crafted symlinks (CVSS 8.6, git-lfs · github.com/git-lfs/git-lfs +1)
- [CVE-2025-62353](https://cve.now/CVE-2025-62353.md): A path traversal vulnerability in all versions of the Windsurf IDE enables a threat actor to read and write arbitrary local files in and out (CVSS 9.8, Windsurf)
- [CVE-2025-49655](https://cve.now/CVE-2025-49655.md): Deserialization of untrusted data can occur in versions of the Keras framework running versions 3.11.0 up to but not including 3.11.3, enabl (CVSS 9.8, Keras)
- [CVE-2025-11904](https://cve.now/CVE-2025-11904.md): yanyutao0402 ChanCMS hasUse sql injection (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-55085](https://cve.now/CVE-2025-55085.md): Web http client: Unchecked Server-Side Malicious Packet Issue (CVSS 8.8, Eclipse Foundation NetX Duo)
- [CVE-2025-48087](https://cve.now/CVE-2025-48087.md): WordPress Memberlite Shortcodes plugin \<= 1.4.1 - Cross Site Scripting (XSS) vulnerability (CVSS 6.5, Jason C. Memberlite Shortcodes)
- [CVE-2025-11903](https://cve.now/CVE-2025-11903.md): yanyutao0402 ChanCMS update sql injection (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-11902](https://cve.now/CVE-2025-11902.md): yanyutao0402 ChanCMS findField sql injection (CVSS 5.3, yanyutao0402 ChanCMS)
- [CVE-2025-48044](https://cve.now/CVE-2025-48044.md): Authorization bypass when bypass policy condition evaluates to true (CVSS 8.6, ash-project ash)
- [CVE-2023-28815](https://cve.now/CVE-2023-28815.md): Some versions of Hikvision's iSecure Center Product contain insufficient parameter validation, resulting in a command injection vulnerabilit (CVSS 9.8, Hikvision iSecure Center)
- [CVE-2023-28814](https://cve.now/CVE-2023-28814.md): Some versions of Hikvision's iSecure Center Product have an improper file upload control vulnerability. (CVSS 9.8, Hikvision iSecure Center)
- [CVE-2025-11895](https://cve.now/CVE-2025-11895.md): Binary MLM Plan \<= 5.0 - Authenticated (Subscriber+) Insecure Direct Object Reference (CVSS 4.3, letscms Binary MLM Plan)
- [CVE-2025-55087](https://cve.now/CVE-2025-55087.md): In NextX Duo's snmp addon versions before 6.4.4, a part of the Eclipse Foundation ThreadX, an attacker could cause an out-of-bound read by a (CVSS 6.3, Eclipse Foundation NextX Duo)
- [CVE-2025-55100](https://cve.now/CVE-2025-55100.md): Potential out-of-bounds read in \_ux\_host\_class\_audio10\_sam\_parse\_func() (CVSS 2.4, Eclipse Foundation USBX)
- [CVE-2025-55099](https://cve.now/CVE-2025-55099.md): Potential out-of-bounds read in \_ux\_host\_class\_audio\_alternate\_setting\_locate() (CVSS 2.4, Eclipse Foundation USBX)
- [CVE-2025-55098](https://cve.now/CVE-2025-55098.md): Potential out-of-bounds read in \_ux\_host\_class\_audio\_device\_type\_get() (CVSS 1.0, Eclipse Foundation USBX)
- [CVE-2025-55097](https://cve.now/CVE-2025-55097.md): Potential out-of-bounds read in \_ux\_host\_class\_audio\_streaming\_sampling\_get() (CVSS 2.4, Eclipse Foundation USBX)
- [CVE-2025-55096](https://cve.now/CVE-2025-55096.md): Inadequate bounds check and potential underflow in \_ux\_host\_class\_hid\_report\_descriptor\_get() (CVSS 2.1, Eclipse Foundation NetX Duo)
- [CVE-2025-55094](https://cve.now/CVE-2025-55094.md): Potential out-of-bounds read in \_nx\_icmpv6\_validate\_options() (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-55093](https://cve.now/CVE-2025-55093.md): Out of bound read and write in \_nx\_ipv4\_packet\_receive() when handling unicast DHCP messages (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-55092](https://cve.now/CVE-2025-55092.md): Potential out of bound read in \_nx\_ipv4\_option\_process() (CVSS 6.9, Eclipse Foundation NetX Duo)
- [CVE-2025-11849](https://cve.now/CVE-2025-11849.md): Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.11.0; versions of th (CVSS 6.4, mammoth · org.zwobble.mammoth:mammoth)
- [CVE-2025-11900](https://cve.now/CVE-2025-11900.md): HGiga｜iSherlock - OS Command Injection (CVSS 9.3, HGiga iSherlock)
- [CVE-2025-11899](https://cve.now/CVE-2025-11899.md): Flowring Technology｜Agentflow - Use of Hard-coded Cryptographic Key (CVSS 9.2, Flowring Technology Agentflow)
- [CVE-2025-11898](https://cve.now/CVE-2025-11898.md): Flowring Technology｜Agentflow - Arbitrary File Reading through Path Traversal (CVSS 7.5, Flowring Technology Agentflow)
- [CVE-2025-6950](https://cve.now/CVE-2025-6950.md): An Use of Hard-coded Credentials vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.9, Moxa EDR-G9010 Series · Moxa EDR-8010 Series +5)
- [CVE-2025-6949](https://cve.now/CVE-2025-6949.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.3, Moxa EDR-G9010 Series · Moxa EDR-8010 Series +5)
- [CVE-2025-6894](https://cve.now/CVE-2025-6894.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 5.3, Moxa EDR-G9010 Series · Moxa EDR-8010 Series +5)
- [CVE-2025-6893](https://cve.now/CVE-2025-6893.md): An Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 9.3, Moxa EDR-G9010 Series · Moxa EDR-8010 Series +5)
- [CVE-2025-6892](https://cve.now/CVE-2025-6892.md): An Incorrect Authorization vulnerability has been identified in Moxa’s network security appliances and routers. (CVSS 8.7, Moxa EDR-G9010 Series · Moxa EDR-8010 Series +5)
- [CVE-2024-31573](https://cve.now/CVE-2024-31573.md): XMLUnit for Java before 2.10.0, in the default configuration, might allow code execution via an untrusted stylesheet (used for an XSLT trans (CVSS 4.0, XMLUnit for Java · org.xmlunit:xmlunit-core)
- [CVE-2025-56218](https://cve.now/CVE-2025-56218.md): An arbitrary file upload vulnerability in SigningHub v8.6.8 allows attackers to execute arbitrary code via uploading a crafted PDF file. (CVSS 9.8)
- [CVE-2025-56221](https://cve.now/CVE-2025-56221.md): A lack of rate limiting in the login mechanism of SigningHub v8.6.8 allows attackers to bypass authentication via a brute force attack. (CVSS 9.8)
- [CVE-2025-56316](https://cve.now/CVE-2025-56316.md): A SQL injection vulnerability in the content\_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to exec (CVSS 9.8, net.mingsoft:ms-mcms)
- [CVE-2025-56320](https://cve.now/CVE-2025-56320.md): CobbleStone Enterprise Contract Management Portal v.22.4.0 is vulnerable to Stored Cross-Site Scripting (XSS) in its chat box component. (CVSS 5.4)
- [CVE-2025-57164](https://cve.now/CVE-2025-57164.md): Flowise through v3.0.4 is vulnerable to remote code execution via unsanitized evaluation of user input in the "Supabase RPC Filter" field. (CVSS 6.5, flowise)
- [CVE-2025-57567](https://cve.now/CVE-2025-57567.md): A remote code execution (RCE) vulnerability exists in the PluXml CMS theme editor, specifically in the minify.php file located under the def (CVSS 9.1)
- [CVE-2025-60279](https://cve.now/CVE-2025-60279.md): A server-side request forgery (SSRF) vulnerability in Illia Cloud illia-Builder before v4.8.5 allows authenticated users to send arbitrary r (CVSS 9.6)
- [CVE-2025-60359](https://cve.now/CVE-2025-60359.md): radare2 v5.9.8 and before contains a memory leak in the function r\_bin\_object\_new. (CVSS 5.5)
- [CVE-2025-60360](https://cve.now/CVE-2025-60360.md): radare2 v5.9.8 and before contains a memory leak in the function r2r\_subprocess\_init. (CVSS 5.5)
- [CVE-2025-60361](https://cve.now/CVE-2025-60361.md): radare2 v5.9.8 and before contains a memory leak in the function bochs\_open. (CVSS 3.3)
- [CVE-2025-60514](https://cve.now/CVE-2025-60514.md): Tillywork v0.1.3 and below is vulnerable to SQL Injection in app/common/helpers/query.builder.helper.ts. (CVSS 6.5)
- [CVE-2025-62642](https://cve.now/CVE-2025-62642.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 has an "Anyone Can Join This Party" signup API that does not (CVSS 5.8, Restaurant Brands International assistant platform)
- [CVE-2025-62643](https://cve.now/CVE-2025-62643.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 transmits passwords of user accounts in cleartext e-mail mes (CVSS 3.4, Restaurant Brands International assistant platform)
- [CVE-2025-62644](https://cve.now/CVE-2025-62644.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 has a Global Store Directory that shares personal informatio (CVSS 5.0, Restaurant Brands International assistant platform)
- [CVE-2025-62645](https://cve.now/CVE-2025-62645.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows a remote authenticated attacker to obtain a token wit (CVSS 9.9, Restaurant Brands International assistant platform)
- [CVE-2025-62646](https://cve.now/CVE-2025-62646.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to review the stored audio of conver (CVSS 5.0, Restaurant Brands International assistant platform)
- [CVE-2025-62647](https://cve.now/CVE-2025-62647.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 provides the functionality of returning a JWT that can be us (CVSS 5.0, Restaurant Brands International assistant platform)
- [CVE-2025-62648](https://cve.now/CVE-2025-62648.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 allows remote attackers to adjust Drive Thru speaker audio v (CVSS 6.4, Restaurant Brands International assistant platform)
- [CVE-2025-62649](https://cve.now/CVE-2025-62649.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for submission of equip (CVSS 5.8, Restaurant Brands International assistant platform)
- [CVE-2025-62650](https://cve.now/CVE-2025-62650.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 relies on client-side authentication for use of the diagnost (CVSS 8.3, Restaurant Brands International assistant platform)
- [CVE-2025-62651](https://cve.now/CVE-2025-62651.md): The Restaurant Brands International (RBI) assistant platform through 2025-09-06 does not implement access control for the bathroom rating in (CVSS 6.5, Restaurant Brands International assistant platform)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.