CVEs published in October 2025
4,220 vulnerabilities, 323 critical, 10 exploited.
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R POST Parameter cstecgi.cgi setSyslogCfg stack-based overflow8.7 High
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R POST Parameter cstecgi.cgi setScheduleCfg stack-based overflow8.7 High
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R POST Parameter cstecgi.cg setOpModeCfg stack-based overflow8.7 High
- oretnom23 online student result systemSourceCodester Online Student Result System view_result.php sql injection6.9 Medium
- carmelo online event judging systemcode-projects Online Event Judging System edit_contestant.php sql injection5.3 Medium
- zte mc889a proDOS Vulnerability in ZTE MC889A Pro product5.3 Medium
- carmelo online event judging systemcode-projects Online Event Judging System add_contestant.php sql injection5.3 Medium
- carmelo online event judging systemcode-projects Online Event Judging System add_judge.php sql injection5.3 Medium
- amtt hotel broadband operation system, amttgroup hibos +1 moreAMTT Hotel Broadband Operation System get_expiredtime.php sql injection6.9 Medium
- google wearosIntent Abuse in Google Messages for Wear OS for Silent Message Sending6.9 Medium
- zte zxmp m721Private Key Disclosure Vulnerability in ZTE ZXMP M721 Product7.7 High
- carmelo online event judging systemcode-projects Online Event Judging System action.php sql injection5.3 Medium
- No product listedOpenWGA Admin UI cross site scripting5.1 Medium
- No product listedOpenWGA TMLScript API WGA.File path traversal5.1 Medium
- axosoft scrum and bug trackingAxosoft Scrum and Bug Tracking Edit Ticket csv injection5.3 Medium
- No product listedCLTPHP search.html sql injection6.9 Medium
- hasleo backup suiteHasleo Backup Suite HasleoImageMountService/HasleoBackupSuiteService unquoted search path7.3 High
- perx technologies customer engagement & loyalty platformStored Cross-Site Scripting in Perx Customer Engagement & Loyalty Platform7.1 High
- chatwootchatwoot Admin IframeLoader.vue cross site scripting5.3 Medium
- chatwootchatwoot Widget IFrameHelper.js initPostMessageCommunication origin validation6.9 Medium
- code-projects simple e-banking systemcode-projects Simple E-Banking System register.php cross site scripting5.3 Medium
- code-projects client details systemcode-projects Client Details System GET Parameter welcome.php sql injection5.3 Medium
- code-projects gym management systemCodeAstro Gym Management System check-attendance.php sql injection5.3 Medium
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R POST Parameter cstecgi.cgi setLanguageCfg stack-based overflow8.7 High
- mpdv mikrolab gmbh fedra 2, hydra x, mip 2 +2 moreUnauthenticated Local File Disclosure in MPDV Mikrolab MIP 2 / FEDRA 2 / HYDRA X Manufacturing Execution System7.5 High
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R cstecgi.cgi setDmzCfg buffer overflow8.7 High
- totolink a3300r, a3300r firmware +1 moreTOTOLINK A3300R cstecgi.cgi setDdnsCfg buffer overflow8.7 High
- code-projects automated voting systemcode-projects Automated Voting System user.php sql injection5.3 Medium
- projectworlds advanced library management systemprojectworlds Advanced Library Management System index.php sql injection6.9 Medium
- tenda ch22, ch22 firmware +1 moreTenda CH22 DhcpListClient fromDhcpListClient buffer overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 SetIpBind fromSetIpBind buffer overflow8.6 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 SafeMacFilter fromSafeMacFilter buffer overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 SafeUrlFilter fromSafeUrlFilter buffer overflow8.7 High
- tenda ch22, ch22 firmware +1 moreTenda CH22 SafeClientFilter fromSafeClientFilter buffer overflow8.7 High
- projectworlds expense management systemprojectworlds Expense Management System Expense Categories create cross site scripting4.8 Medium
- projectworlds expense management systemprojectworlds Expense Management System Currency create cross site scripting4.8 Medium
- foysal imran idonateIDonate < 2.1.13 - Unauthenticated User Deletion5.4 Medium
- projectworlds expense management systemprojectworlds Expense Management System Roles Page create cross site scripting4.8 Medium
- projectworlds expense management systemprojectworlds Expense Management System Users Page create cross site scripting4.8 Medium
- projectworlds gate pass management systemprojectworlds Gate Pass Management System add-pass.php cross site scripting5.1 Medium
- mayurik best house rental management systemSourceCodester Best House Rental Management System admin_class.php save_house sql injection5.1 Medium
- tenda ac6, ac6 firmware +1 moreTenda AC6 HTTP Request WifiGuestSet stack-based overflow8.7 High
- iqbolshoh php-business-websiteIqbolshoh php-business-website contact.php cross site scripting5.1 Medium
- bdtask flight booking softwareBdtask Flight Booking Software Package Information package-information unrestricted upload5.3 Medium
- bdtask flight booking softwareBdtask Flight Booking Software Deposit deposit unrestricted upload5.3 Medium
- projectworlds online shopping systemprojectworlds Online Shopping System login_submit.php sql injection6.9 Medium
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 sysAutoReboot GetValue stack-based overflow8.7 High
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 setVlanConfig GetValue stack-based overflow8.7 High
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 setNetworkService GetValue stack-based overflow8.7 High
- tenda o3, o3 firmware1.0.0.10\(2478\) +1 moreTenda O3 setDmzInfo GetValue stack-based overflow8.7 High
- Show moreLoading…