# CVEs published 2025-10-28

147 CVEs were published on October 28, 2025: 15 critical, 57 high. Days are UTC.

- [CVE-2025-4665](https://cve.now/CVE-2025-4665.md): WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that (CVSS 9.6, WordPress Contact Form 7 Database Addon CFDB7 By Arshid CFD…)
- [CVE-2025-64095](https://cve.now/CVE-2025-64095.md): DNN Insufficient Access Control - Image Upload allows for Site Content Overwrite (CVSS 10.0, dnnsoftware Dnn.Platform · DNN.PLATFORM)
- [CVE-2025-64094](https://cve.now/CVE-2025-64094.md): DNN vulnerable to stored cross-site-scripting (XSS) via SVG upload (CVSS 6.4, dnnsoftware Dnn.Platform · DotNetNuke.Core)
- [CVE-2025-62802](https://cve.now/CVE-2025-62802.md): DNN CKEditor Provider allows unauthenticated upload out-of-the-box (CVSS 4.3, dnnsoftware Dnn.Platform · Dnn.Platform)
- [CVE-2025-62801](https://cve.now/CVE-2025-62801.md): FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server\_name (CVSS 5.4, jlowin fastmcp · fastmcp)
- [CVE-2025-62800](https://cve.now/CVE-2025-62800.md): FastMCP vulnerable to reflected XSS in client's callback page (CVSS 5.3, jlowin fastmcp · fastmcp)
- [CVE-2025-62798](https://cve.now/CVE-2025-62798.md): Sharp user-provided input can be evaluated in a SharpShowTextField with Vue template syntax (CVSS 5.4, code16 sharp · code16/sharp)
- [CVE-2025-62794](https://cve.now/CVE-2025-62794.md): GitHub Workflow Updater stored the optional Github token in plaintext (CVSS 3.8, RichardoC github-workflow-updater-extension)
- [CVE-2025-62796](https://cve.now/CVE-2025-62796.md): PrivateBin persistent HTML injection in attachment filename enables redirect and defacement (CVSS 5.8, PrivateBin · privatebin/privatebin)
- [CVE-2025-43017](https://cve.now/CVE-2025-43017.md): HP ThinPro 8.1 SP8 Security Updates (CVSS 8.5, HP ThinPro)
- [CVE-2025-61598](https://cve.now/CVE-2025-61598.md): Discourse is missing Cache-Control response header on error responses (CVSS 6.3, discourse)
- [CVE-2025-11374](https://cve.now/CVE-2025-11374.md): Consul's KV endpoint is vulnerable to denial of service (CVSS 6.5, HashiCorp Consul · github.com/hashicorp/consul)
- [CVE-2025-62727](https://cve.now/CVE-2025-62727.md): Starlette vulnerable to O(n^2) DoS via Range header merging in starlette.responses.FileResponse (CVSS 7.5, Kludex starlette · starlette)
- [CVE-2025-11375](https://cve.now/CVE-2025-11375.md): Consul's event endpoint is vulnerable to denial of service (CVSS 6.5, HashiCorp Consul · github.com/hashicorp/consul)
- [CVE-2025-62368](https://cve.now/CVE-2025-62368.md): Taiga Authenticated Remote Code Execution (CVSS 9.1, taigaio taiga-back)
- [CVE-2025-62367](https://cve.now/CVE-2025-62367.md): Taiga Blind SQL Injection Time Based (CVSS 4.8, taigaio taiga-back)
- [CVE-2025-59837](https://cve.now/CVE-2025-59837.md): astro allows bypass of image proxy domain validation leading to SSRF and potential XSS (CVSS 7.2, withastro astro · astro)
- [CVE-2025-27093](https://cve.now/CVE-2025-27093.md): Sliver does not restricted traffic between Wireguard clients. (CVSS 6.3, BishopFox sliver · github.com/BishopFox/sliver)
- [CVE-2025-40843](https://cve.now/CVE-2025-40843.md): Buffer overflow in CodeChecker log command (CVSS 5.9, Ericsson CodeChecker · codechecker)
- [CVE-2025-12425](https://cve.now/CVE-2025-12425.md): Local Privilege Escalation (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12424](https://cve.now/CVE-2025-12424.md): Privilege Escalation through SUID-bit Binary (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12423](https://cve.now/CVE-2025-12423.md): Denial of Service - Protocol Manipulation (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-12422](https://cve.now/CVE-2025-12422.md): Vulnerable Upgrade Feature (Arbitrary File Write) (CVSS 10.0, Azure Access Technology BLU-IC2 · Azure Access Technology B…)
- [CVE-2025-36386](https://cve.now/CVE-2025-36386.md): There is a vulnerability in the IBM Maximo Manage application in IBM Maximo Application Suite for Cognos Analytics (CVSS 9.8, IBM Maximo Application Suite)
- [CVE-2025-36085](https://cve.now/CVE-2025-36085.md): Multiple Vulnerabilities in IBM Concert Software. (CVSS 5.4, IBM Concert)
- [CVE-2025-36083](https://cve.now/CVE-2025-36083.md): Multiple Vulnerabilities in IBM Concert Software. (CVSS 6.2, IBM Concert Software)
- [CVE-2025-36081](https://cve.now/CVE-2025-36081.md): Multiple Vulnerabilities in IBM Concert Software. (CVSS 5.3, IBM Concert Software)
- [CVE-2025-34311](https://cve.now/CVE-2025-34311.md): IPFire \< v2.29 Command Injection via Proxy Report Creation (CVSS 8.7, IPFire.org IPFire)
- [CVE-2025-34312](https://cve.now/CVE-2025-34312.md): IPFire \< v2.29 Command Injection via URL Filter Blacklist (CVSS 8.7, IPFire.org IPFire)
- [CVE-2025-34304](https://cve.now/CVE-2025-34304.md): IPFire \< v2.29 SQL Injection via OpenVPN Connection Logs (CVSS 7.1, IPFire.org IPFire)
- [CVE-2025-34307](https://cve.now/CVE-2025-34307.md): IPFire \< v2.29 Stored XSS via Default Country Search (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34306](https://cve.now/CVE-2025-34306.md): IPFire \< v2.29 Stored XSS via Default IP Search Value (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34308](https://cve.now/CVE-2025-34308.md): IPFire \< v2.29 Stored XSS via Default Time Sync (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34318](https://cve.now/CVE-2025-34318.md): IPFire \< v2.29 Stored XSS via DNS Creation (proxy.cgi) (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34317](https://cve.now/CVE-2025-34317.md): IPFire \< v2.29 Stored XSS via DNS Creation (dns.cgi) (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34309](https://cve.now/CVE-2025-34309.md): IPFire \< v2.29 Stored XSS via Dynamic DNS Host (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34301](https://cve.now/CVE-2025-34301.md): IPFire \< v2.29 Stored XSS via Location Group Creation (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34316](https://cve.now/CVE-2025-34316.md): IPFire \< v2.29 Stored XSS via Mail Server Settings (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34305](https://cve.now/CVE-2025-34305.md): IPFire \< v2.29 Stored XSS via Multiple Methods in cleanhtml() (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34310](https://cve.now/CVE-2025-34310.md): IPFire \< v2.29 Stored XSS via Quality of Service (QoS) Settings (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34315](https://cve.now/CVE-2025-34315.md): IPFire \< v2.29 Stored XSS via Remote Syslog Server Address (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34302](https://cve.now/CVE-2025-34302.md): IPFire \< v2.29 Stored XSS via Service Creation (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34314](https://cve.now/CVE-2025-34314.md): IPFire \< v2.29 Stored XSS via Time Constraint Rule URL Filter (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34313](https://cve.now/CVE-2025-34313.md): IPFire \< v2.29 Stored XSS via User Quota Rule URL Filter (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-34303](https://cve.now/CVE-2025-34303.md): IPFire \< v2.29 Stored XSS via Whitelisted Host Creation (CVSS 5.1, IPFire.org IPFire)
- [CVE-2025-12380](https://cve.now/CVE-2025-12380.md): Use-after-free in WebGPU internals triggered from a compromised child process (CVSS 9.8, Mozilla Firefox)
- [CVE-2025-53855](https://cve.now/CVE-2025-53855.md): An out-of-bounds write vulnerability exists in the XML parser functionality of GCC Productions Inc. (CVSS 7.8, GCC Productions Fade In)
- [CVE-2025-53814](https://cve.now/CVE-2025-53814.md): A use-after-free vulnerability exists in the XML parser functionality of GCC Productions Inc. (CVSS 7.8, GCC Productions Fade In)
- [CVE-2025-12103](https://cve.now/CVE-2025-12103.md): Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace (CVSS 5.0, Red Hat OpenShift AI)
- [CVE-2025-12390](https://cve.now/CVE-2025-12390.md): Org.keycloak.protocol.oidc.endpoints.logoutendpoint: offline session takeover due to reused authentication session id (CVSS 6.0, keycloak · Red Hat build of Keycloak +1)
- [CVE-2025-1038](https://cve.now/CVE-2025-1038.md): The “Diagnostics Tools” page of the web-based configuration utility does not properly validate user-controlled input, allowing an authentica (CVSS 7.5, Hitachi Energy TropOS 4th Gen)
- [CVE-2025-1037](https://cve.now/CVE-2025-1037.md): By making minor configuration changes to the TropOS 4th Gen device, an authenticated user with the ability to run user level shell commands (CVSS 7.5, Hitachi Energy TropOS 4th Gen)
- [CVE-2025-1036](https://cve.now/CVE-2025-1036.md): Command injection vulnerability exists in the “Logging” page of the web-based configuration utility. (CVSS 8.7, Hitachi Energy TropOS 4th Gen)
- [CVE-2025-9313](https://cve.now/CVE-2025-9313.md): Unauthorized database access in Asseco mMedica (CVSS 9.3, Asseco Poland S.A. mMedica)
- [CVE-2025-40082](https://cve.now/CVE-2025-40082.md): hfsplus: fix slab-out-of-bounds read in hfsplus\_uni2asc() (CVSS 7.1, Linux)
- [CVE-2025-40081](https://cve.now/CVE-2025-40081.md): perf: arm\_spe: Prevent overflow in PERF\_IDX2OFF() (CVSS 7.8, Linux)
- [CVE-2025-40080](https://cve.now/CVE-2025-40080.md): nbd: restrict sockets to TCP and UDP (no CVSS, Linux)
- [CVE-2025-40079](https://cve.now/CVE-2025-40079.md): riscv, bpf: Sign extend struct ops return values properly (CVSS 7.8, Linux)
- [CVE-2025-40078](https://cve.now/CVE-2025-40078.md): bpf: Explicitly check accesses to bpf\_sock\_addr (no CVSS, Linux)
- [CVE-2025-40077](https://cve.now/CVE-2025-40077.md): f2fs: fix to avoid overflow while left shift operation (no CVSS, Linux)
- [CVE-2025-40076](https://cve.now/CVE-2025-40076.md): PCI: rcar-host: Pass proper IRQ domain to generic\_handle\_domain\_irq() (no CVSS, Linux)
- [CVE-2025-40075](https://cve.now/CVE-2025-40075.md): tcp\_metrics: use dst\_dev\_net\_rcu() (CVSS 8.1, Linux)
- [CVE-2025-40074](https://cve.now/CVE-2025-40074.md): ipv4: start using dst\_dev\_rcu() (CVSS 9.8, Linux)
- [CVE-2025-40073](https://cve.now/CVE-2025-40073.md): drm/msm: Do not validate SSPP when it is not ready (no CVSS, Linux)
- [CVE-2025-40072](https://cve.now/CVE-2025-40072.md): fanotify: Validate the return value of mnt\_ns\_from\_dentry() before dereferencing (no CVSS, Linux)
- [CVE-2025-40071](https://cve.now/CVE-2025-40071.md): tty: n\_gsm: Don't block input queue by waiting MSC (no CVSS, Linux)
- [CVE-2025-40070](https://cve.now/CVE-2025-40070.md): pps: fix warning in pps\_register\_cdev when register device fail (no CVSS, Linux)
- [CVE-2025-40069](https://cve.now/CVE-2025-40069.md): drm/msm: Fix obj leak in VM\_BIND error path (CVSS 7.8, Linux)
- [CVE-2025-40068](https://cve.now/CVE-2025-40068.md): fs: ntfs3: Fix integer overflow in run\_unpack() (CVSS 8.4, Linux)
- [CVE-2025-40067](https://cve.now/CVE-2025-40067.md): fs/ntfs3: reject index allocation if $BITMAP is empty but blocks exist (CVSS 7.8, Linux)
- [CVE-2025-40066](https://cve.now/CVE-2025-40066.md): wifi: mt76: mt7996: Check phy before init msta\_link in mt7996\_mac\_sta\_add\_links() (no CVSS, Linux)
- [CVE-2025-40065](https://cve.now/CVE-2025-40065.md): RISC-V: KVM: Write hgatp register with valid mode bits (no CVSS, Linux)
- [CVE-2025-40064](https://cve.now/CVE-2025-40064.md): smc: Fix use-after-free in \_\_pnet\_find\_base\_ndev(). (CVSS 7.8, Linux)
- [CVE-2025-40063](https://cve.now/CVE-2025-40063.md): crypto: comp - Use same definition of context alloc and free ops (CVSS 7.0, Linux)
- [CVE-2025-40062](https://cve.now/CVE-2025-40062.md): crypto: hisilicon/qm - set NULL to qm-\>debug.qm\_diff\_regs (no CVSS, Linux)
- [CVE-2025-40061](https://cve.now/CVE-2025-40061.md): RDMA/rxe: Fix race in do\_task() when draining (CVSS 7.8, Linux)
- [CVE-2025-40060](https://cve.now/CVE-2025-40060.md): coresight: trbe: Return NULL pointer for allocation failures (no CVSS, Linux)
- [CVE-2025-40059](https://cve.now/CVE-2025-40059.md): coresight: Fix incorrect handling for return value of devm\_kzalloc (no CVSS, Linux)
- [CVE-2025-40058](https://cve.now/CVE-2025-40058.md): iommu/vt-d: Disallow dirty tracking if incoherent page walk (CVSS 8.8, Linux)
- [CVE-2025-40057](https://cve.now/CVE-2025-40057.md): ptp: Add a upper bound on max\_vclocks (no CVSS, Linux)
- [CVE-2025-40056](https://cve.now/CVE-2025-40056.md): vhost: vringh: Fix copy\_to\_iter return value check (no CVSS, Linux)
- [CVE-2025-40055](https://cve.now/CVE-2025-40055.md): ocfs2: fix double free in user\_cluster\_connect() (no CVSS, Linux)
- [CVE-2025-40054](https://cve.now/CVE-2025-40054.md): f2fs: fix UAF issue in f2fs\_merge\_page\_bio() (CVSS 7.8, Linux)
- [CVE-2025-40053](https://cve.now/CVE-2025-40053.md): net: dlink: handle copy\_thresh allocation failure (CVSS 7.5, Linux)
- [CVE-2025-40052](https://cve.now/CVE-2025-40052.md): smb: client: fix crypto buffers in non-linear memory (no CVSS, Linux)
- [CVE-2025-40051](https://cve.now/CVE-2025-40051.md): vhost: vringh: Modify the return value check (CVSS 7.8, Linux)
- [CVE-2025-40050](https://cve.now/CVE-2025-40050.md): bpf: Skip scalar adjustment for BPF\_NEG if dst is a pointer (no CVSS, Linux)
- [CVE-2025-40049](https://cve.now/CVE-2025-40049.md): Squashfs: fix uninit-value in squashfs\_get\_parent (no CVSS, Linux)
- [CVE-2025-40048](https://cve.now/CVE-2025-40048.md): uio\_hv\_generic: Let userspace take care of interrupt mask (CVSS 7.5, Linux)
- [CVE-2025-40047](https://cve.now/CVE-2025-40047.md): io\_uring/waitid: always prune wait queue entry in io\_waitid\_wait() (CVSS 7.8, Linux)
- [CVE-2025-40046](https://cve.now/CVE-2025-40046.md): io\_uring/zcrx: fix overshooting recv limit (CVSS 8.6, Linux)
- [CVE-2025-40045](https://cve.now/CVE-2025-40045.md): ASoC: codecs: wcd937x: set the comp soundwire port correctly (CVSS 7.8, Linux)
- [CVE-2025-40044](https://cve.now/CVE-2025-40044.md): fs: udf: fix OOB read in lengthAllocDescs handling (CVSS 7.8, Linux)
- [CVE-2025-40043](https://cve.now/CVE-2025-40043.md): net: nfc: nci: Add parameter validation for packet data (CVSS 8.8, Linux)
- [CVE-2025-40042](https://cve.now/CVE-2025-40042.md): tracing: Fix race condition in kprobe initialization causing NULL pointer dereference (no CVSS, Linux)
- [CVE-2025-40041](https://cve.now/CVE-2025-40041.md): LoongArch: BPF: Sign-extend struct ops return values properly (CVSS 7.8, Linux)
- [CVE-2025-40040](https://cve.now/CVE-2025-40040.md): mm/ksm: fix flag-dropping behavior in ksm\_madvise (CVSS 7.8, Linux)
- [CVE-2025-40039](https://cve.now/CVE-2025-40039.md): ksmbd: Fix race condition in RPC handle list access (CVSS 8.8, Linux)
- [CVE-2025-40038](https://cve.now/CVE-2025-40038.md): KVM: SVM: Skip fastpath emulation on VM-Exit if next RIP isn't valid (CVSS 7.1, Linux)
- [CVE-2025-40037](https://cve.now/CVE-2025-40037.md): fbdev: simplefb: Fix use after free in simplefb\_detach\_genpds() (no CVSS, Linux)
- [CVE-2025-40036](https://cve.now/CVE-2025-40036.md): misc: fastrpc: fix possible map leak in fastrpc\_put\_args (no CVSS, Linux)
- [CVE-2025-40035](https://cve.now/CVE-2025-40035.md): Input: uinput - zero-initialize uinput\_ff\_upload\_compat to avoid info leak (no CVSS, Linux)
- [CVE-2025-40034](https://cve.now/CVE-2025-40034.md): PCI/AER: Avoid NULL pointer dereference in aer\_ratelimit() (no CVSS, Linux)
- [CVE-2025-40033](https://cve.now/CVE-2025-40033.md): remoteproc: pru: Fix potential NULL pointer dereference in pru\_rproc\_set\_ctable() (no CVSS, Linux)
- [CVE-2025-40032](https://cve.now/CVE-2025-40032.md): PCI: endpoint: pci-epf-test: Add NULL check for DMA channels before release (no CVSS, Linux)
- [CVE-2025-40031](https://cve.now/CVE-2025-40031.md): tee: fix register\_shm\_helper() (no CVSS, Linux)
- [CVE-2025-40030](https://cve.now/CVE-2025-40030.md): pinctrl: check the return value of pinmux\_ops::get\_function\_name() (no CVSS, Linux)
- [CVE-2025-40029](https://cve.now/CVE-2025-40029.md): bus: fsl-mc: Check return value of platform\_get\_resource() (no CVSS, Linux)
- [CVE-2025-55758](https://cve.now/CVE-2025-55758.md): Extension - jdownloads.com - CSRF vectors in jDownloads component 1.0.0 - 4.0.47 for Joomla (CVSS 5.4, jdownloads.com JDownloads component for Joomla)
- [CVE-2025-40028](https://cve.now/CVE-2025-40028.md): binder: fix double-free in dbitmap (CVSS 7.8, Linux)
- [CVE-2025-40027](https://cve.now/CVE-2025-40027.md): net/9p: fix double req put in p9\_fd\_cancelled (CVSS 7.8, Linux)
- [CVE-2025-40026](https://cve.now/CVE-2025-40026.md): KVM: x86: Don't (re)check L1 intercepts when completing userspace I/O (CVSS 7.9, Linux)
- [CVE-2025-40025](https://cve.now/CVE-2025-40025.md): f2fs: fix to do sanity check on node footer for non inode dnode (CVSS 7.8, Linux)
- [CVE-2025-41090](https://cve.now/CVE-2025-41090.md): Improper Access Control in CCN-CERT microCLAUDIA (CVSS 7.6, CCN-CERT microCLAUDIA)
- [CVE-2025-10151](https://cve.now/CVE-2025-10151.md): Malicious TCP/IP thread locking leads into diverse malfunctions (CVSS 7.2, Softing Industrial Automation smartLink HW-PN · Softing Ind…)
- [CVE-2025-10150](https://cve.now/CVE-2025-10150.md): Webserver crash caused by scanning on TCP port 80 (CVSS 8.7, Softing Industrial Automation smartLink HW-PN · Softing Ind…)
- [CVE-2025-12378](https://cve.now/CVE-2025-12378.md): code-projects Simple Food Ordering System addproduct.php unrestricted upload (CVSS 6.9, code-projects Simple Food Ordering System)
- [CVE-2025-11735](https://cve.now/CVE-2025-11735.md): HUSKY – Products Filter Professional for WooCommerce \<= 1.3.7.1 - Unauthenticated SQL Injection via \`phrase\` Parameter (CVSS 7.5, realmag777 HUSKY – Products Filter Professional for WooComm…)
- [CVE-2025-62777](https://cve.now/CVE-2025-62777.md): Use of Hard-Coded Credentials issue exists in MZK-DP300N version 1.07 and earlier, which may allow an attacker within the local network to l (CVSS 8.8, PLANEX COMMUNICATIONS MZK-DP300N)
- [CVE-2025-10939](https://cve.now/CVE-2025-10939.md): Org.keycloak/keycloak-quarkus-server: unable to restrict access to the admin console (CVSS 3.7, keycloak · Red Hat build of Keycloak +1)
- [CVE-2025-12347](https://cve.now/CVE-2025-12347.md): MaxSite CMS save-file-ajax.php unrestricted upload (CVSS 5.3, MaxSite CMS)
- [CVE-2025-12346](https://cve.now/CVE-2025-12346.md): MaxSite CMS HTTP Header uploads-require-maxsite.php unrestricted upload (CVSS 5.3, MaxSite CMS)
- [CVE-2025-12344](https://cve.now/CVE-2025-12344.md): Yonyou U8 Cloud Request Header NCloudGatewayServlet unrestricted upload (CVSS 5.3, Yonyou U8 Cloud)
- [CVE-2025-12342](https://cve.now/CVE-2025-12342.md): Serdar Bayram Ghost Hot Spot Login Auth.php sql injection (CVSS 6.9, Serdar Bayram Ghost Hot Spot)
- [CVE-2025-12341](https://cve.now/CVE-2025-12341.md): ermig1979 AntiDupl Delete Duplicate Image AntiDupl.NET.WinForms.exe link following (CVSS 8.5, ermig1979 AntiDupl)
- [CVE-2025-12339](https://cve.now/CVE-2025-12339.md): Campcodes Retro Basketball Shoes Online Store admin\_football.php sql injection (CVSS 6.9, Campcodes Retro Basketball Shoes Online Store)
- [CVE-2025-12338](https://cve.now/CVE-2025-12338.md): Campcodes Retro Basketball Shoes Online Store admin\_product.ph sql injection (CVSS 6.9, Campcodes Retro Basketball Shoes Online Store)
- [CVE-2025-12337](https://cve.now/CVE-2025-12337.md): Campcodes Retro Basketball Shoes Online Store admin\_feature.php sql injection (CVSS 6.9, Campcodes Retro Basketball Shoes Online Store)
- [CVE-2025-12336](https://cve.now/CVE-2025-12336.md): Campcodes Retro Basketball Shoes Online Store admin\_index.php sql injection (CVSS 6.9, Campcodes Retro Basketball Shoes Online Store)
- [CVE-2025-54604](https://cve.now/CVE-2025-54604.md): Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 1 of 2). (CVSS 7.5)
- [CVE-2025-54605](https://cve.now/CVE-2025-54605.md): Bitcoin Core through 29.0 allows Uncontrolled Resource Consumption (issue 2 of 2). (CVSS 7.5)
- [CVE-2025-56399](https://cve.now/CVE-2025-56399.md): alexusmai laravel-file-manager 3.3.1 and before allows an authenticated attacker to achieve Remote Code Execution (RCE) through a crafted fi (CVSS 8.8)
- [CVE-2025-60349](https://cve.now/CVE-2025-60349.md): An issue was discovered in Prevx v3.0.5.220 allowing attackers to cause a denial of service via sending IOCTL code 0x22E044 to the pxscan.sy (CVSS 7.5)
- [CVE-2025-60354](https://cve.now/CVE-2025-60354.md): Unauthorized modification of arbitrary articles vulnerability exists in blog-vue-springboot. (CVSS 7.5)
- [CVE-2025-60355](https://cve.now/CVE-2025-60355.md): zhangyd-c OneBlog v2.3.9 and before was vulnerable to SSTI (Server-Side Template Injection) via FreeMarker templates. (CVSS 9.8)
- [CVE-2025-60800](https://cve.now/CVE-2025-60800.md): Incorrect access control in the /jshERP-boot/user/info interface of jshERP up to commit 90c411a allows attackers to access sensitive informa (CVSS 7.5)
- [CVE-2025-60805](https://cve.now/CVE-2025-60805.md): An issue was discovered in BESSystem BES Application Server thru 9.5.x allowing unauthorized attackers to gain sensitive information via the (CVSS 7.5)
- [CVE-2025-60858](https://cve.now/CVE-2025-60858.md): Reolink Video Doorbell Wi-Fi DB\_566128M5MP\_W stores and transmits DDNS credentials in plaintext within its configuration and update scripts, (CVSS 7.5)
- [CVE-2025-61043](https://cve.now/CVE-2025-61043.md): An out-of-bounds read vulnerability has been discovered in Monkey's Audio 11.31, specifically in the CAPECharacterHelper::GetUTF16FromUTF8 f (CVSS 9.1)
- [CVE-2025-61080](https://cve.now/CVE-2025-61080.md): A reflected Cross-Site Scripting (XSS) vulnerability has been identified in Clear2Pay Bank Visibility Application - Payment Execution 1.10.0 (CVSS 5.4)
- [CVE-2025-61103](https://cve.now/CVE-2025-61103.md): FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show\_vty\_ext\_link\_lan\_adj\_sid function (CVSS 7.5)
- [CVE-2025-61104](https://cve.now/CVE-2025-61104.md): FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show\_vty\_unknown\_tlv function at ospf\_e (CVSS 7.5)
- [CVE-2025-61106](https://cve.now/CVE-2025-61106.md): FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show\_vty\_ext\_pref\_pref\_sid function at (CVSS 7.5)
- [CVE-2025-61107](https://cve.now/CVE-2025-61107.md): FRRouting/frr from v4.0 through v10.4.1 was discovered to contain a NULL pointer dereference via the show\_vty\_ext\_pref\_pref\_sid function at (CVSS 7.5)
- [CVE-2025-61128](https://cve.now/CVE-2025-61128.md): Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3\_V240730, and possibly other wavlink models allo (CVSS 9.1)
- [CVE-2025-61155](https://cve.now/CVE-2025-61155.md): The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL han (CVSS 5.5)
- [CVE-2025-61235](https://cve.now/CVE-2025-61235.md): An issue was discovered in Dataphone A920 v2025.07.161103. (CVSS 9.1)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2025-10-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.