NVD disclosure day

Published threat advisories for August 13, 2025

CVE advisoryCRITICAL

CVE-2011-10019

Spreecommerce Search Parameter Remote Command Execution

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability in Spreecommerce's search functionality allows unauthenticated remote command execution on affected servers. This means an attacker could potentially run any command on the server hosting the Spreecommerce application by manipulating the search input. This could compromise server operations, ma

CVE advisoryCRITICAL

CVE-2025-51451

TOTOLINK EX1200T Firmware Login Bypass Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability exists in TOTOLINK EX1200T devices that allows unauthenticated attackers to bypass login controls by sending a specific request to the `formLoginAuth.htm` page. This could enable unauthorized administrative access to the device, potentially impacting network security. The relevance and exposure

CVE advisoryCRITICAL

CVE-2025-51452

TOTOLINK A7000R Authentication Bypass Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A vulnerability in TOTOLINK router firmware allows unauthenticated network access to the administrative interface by sending a specific request, bypassing login. This could expose router settings and management functions to unauthorized control if the interface is network-reachable.