NVD disclosure day

Published threat advisories for August 19, 2025

CVE advisoryCRITICAL

CVE-2025-51543

Cicool Builder Password Reset Vulnerability

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A critical vulnerability exists in Cicool builder's password reset function, allowing unauthenticated attackers to reset administrator passwords. This could lead to unauthorized administrative access and potential system compromise if the affected endpoint is reachable. It is uncertain if Cicool builder is used or expo

NVD published:

CVE advisoryCRITICAL

CVE-2025-50567

Saurus CMS SQL Injection Vulnerability Allows Code Execution.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

A vulnerability in Saurus CMS Community Edition's database query function allows for SQL injection, potentially leading to arbitrary PHP code execution. This could impact system data and services if the affected technology is reachable. Confirming usage and potential exposure is advised.

NVD published: