8.8

CVSS4.0

CVE-2025-8101 - Linkify 4.3.1 - Prototype Pollution & HTML Attribute Injection (XSS)

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') vulnerability in Linkify (linkifyjs) allows XSS Targeting HTML Attributes and Manipulating User-Controlled Variables.This issue affects Linkify: from 4.3.1 before 4.3.2.

πŸ“… Published: July 25, 2025, 9:52 p.m. πŸ”„ Last Modified: April 15, 2026, 12:35 a.m.

5.3

CVSS4.0

CVE-2025-8171 - code-projects Document Management System insert.php unrestricted upload

A vulnerability, which was classified as critical, has been found in code-projects Document Management System 1.0. This issue affects some unknown processing of the file /insert.php. The manipulation of the argument uploaded_file leads to unrestricted upload. The attack may be initiated remotely. T…

πŸ“… Published: July 25, 2025, 9:32 p.m. πŸ”„ Last Modified: Aug. 5, 2025, 9:04 p.m.

8.7

CVSS4.0

CVE-2025-8170 - TOTOLINK T6 MQTT Packet meshSlaveDlfw tcpcheck_net buffer overflow

A vulnerability classified as critical was found in TOTOLINK T6 4.1.5cu.748_B20211015. This vulnerability affects the function tcpcheck_net of the file /router/meshSlaveDlfw of the component MQTT Packet Handler. The manipulation of the argument serverIp leads to buffer overflow. The attack can be i…

πŸ“… Published: July 25, 2025, 9:02 p.m. πŸ”„ Last Modified: Aug. 7, 2025, 2:34 p.m.

8.7

CVSS4.0

CVE-2025-8169 - D-Link DIR-513 HTTP POST Request formSetWanPPTPpath formSetWanPPTPcallback buffer overflow

A vulnerability classified as critical has been found in D-Link DIR-513 1.10. This affects the function formSetWanPPTPcallback of the file /goform/formSetWanPPTPpath of the component HTTP POST Request Handler. The manipulation of the argument curTime leads to buffer overflow. It is possible to init…

πŸ“… Published: July 25, 2025, 8:32 p.m. πŸ”„ Last Modified: July 31, 2025, 5:27 p.m.

8.7

CVSS4.0

CVE-2025-8168 - D-Link DIR-513 formSetWanPPPoE websAspInit buffer overflow

A vulnerability was found in D-Link DIR-513 1.10. It has been rated as critical. Affected by this issue is the function websAspInit of the file /goform/formSetWanPPPoE. The manipulation of the argument curTime leads to buffer overflow. The attack may be launched remotely. The exploit has been discl…

πŸ“… Published: July 25, 2025, 8:02 p.m. πŸ”„ Last Modified: July 31, 2025, 5:28 p.m.

5.1

CVSS4.0

CVE-2025-8167 - code-projects Church Donation System edit_members.php cross site scripting

A vulnerability was found in code-projects Church Donation System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_members.php. The manipulation of the argument fname leads to cross site scripting. The attack can be launche…

πŸ“… Published: July 25, 2025, 7:32 p.m. πŸ”„ Last Modified: Aug. 5, 2025, 9:04 p.m.

5.3

CVSS3.1

CVE-2025-52455 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (EPS Server modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:11 p.m. πŸ”„ Last Modified: Oct. 29, 2025, 8:31 p.m.

8.2

CVSS3.1

CVE-2025-52454 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Amazon S3 Connector modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:08 p.m. πŸ”„ Last Modified: March 23, 2026, 9:16 p.m.

8.2

CVSS3.1

CVE-2025-52453 -

Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server on Windows, Linux (Flow Data Source modules) allows Resource Location Spoofing. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19.

πŸ“… Published: July 25, 2025, 7:05 p.m. πŸ”„ Last Modified: Oct. 31, 2025, 5:28 p.m.

6.9

CVSS4.0

CVE-2025-8166 - code-projects Church Donation System HTTP POST Request index.php sql injection

A vulnerability was found in code-projects Church Donation System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/index.php of the component HTTP POST Request Handler. The manipulation of the argument Username leads to sql injection. It is possible to lau…

πŸ“… Published: July 25, 2025, 7:02 p.m. πŸ”„ Last Modified: Aug. 5, 2025, 9:04 p.m.
Total resulsts: 349182
Page 4505 of 34,919
Β« previous page Β» next page
Filters