Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7780 State: PUBLISHED Published: 2025-07-24T09:22:16.242Z Last Updated: 2025-07-24T13:15:16.696Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: tigroumeow Products: AI Engine Problem Types: CWE-200 Description: The AI Engine plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.4. The simpleTranscribeAudio endpoint fails to restrict URL schemes before calling get_audio(). This makes it possible for authenticated attackers, with Subscriber-level access and above, to read any file on the web server and exfiltrate it via the plugin’s OpenAI API integration. Additional Analyst Notes: - CI
ead any file on the web server and exfiltrate it via the plugin’s OpenAI API integration. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/513274bc-3016-4adb-be78-b13c5fae9c03?source=cve - https://wordpress.org/plugins/ai-engine/#developers - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/engines/chatml.php#L829 - https://plugins.trac.wordpress.org/browser/ai-engine/tags/2.9.3/classes/api.php#L625 - https://plugins.trac.wordpress.org/changeset/3332540/
CVE ID: CVE-2025-7781 State: PUBLISHED Published: 2025-10-10T11:17:07.402Z Last Updated: 2025-10-10T12:24:28.290Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: n/a Products: WP JobHunt Problem Types: CWE-79 Description: The WP JobHunt plugin for WordPress, used by the JobCareer theme, is vulnerable to Stored Cross-Site Scripting via the ‘cs_job_title’ parameter in all versions up to, and including, 7.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Candidate-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Addit
s and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0e3575f8-7adc-4546-9f78-bcb2cf3caa2a?source=cve - https://themeforest.net/item/jobcareer-job-board-responsive-wordpress-theme/14221636
CVE ID: CVE-2025-7783 State: PUBLISHED Published: 2025-07-18T16:34:44.889Z Last Updated: 2025-11-03T20:07:41.307Z Problem Types: CWE-330 Description: Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/form-data/form-data/security/advisories/GHSA-fjxv-7rqg-78g4 - https://github.com/form-data/form-data/commit/3d1723080e6577a66f17f163ecd345a21d8d0fd0
CVE ID: CVE-2025-7784 State: PUBLISHED Published: 2025-07-18T13:48:45.713Z Last Updated: 2025-11-07T21:37:40.791Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat build of Keycloak 26, Red Hat build of Keycloak 26.2, Red Hat JBoss Enterprise Application Platform 8, Red Hat JBoss Enterprise Application Platform Expansion Pack, Red Hat Single Sign-On 7 Problem Types: CWE-269 Description: A flaw was found in the Keycloak identity and access management system when Fine-Grained Admin Permissions(FGAPv2) are enabled. An administrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enf
dministrative user with the manage-users role can escalate their privileges to realm-admin due to improper privilege enforcement. This vulnerability allows unauthorized elevation of access rights, compromising the intended separation of administrative duties and posing a security risk to the realm. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:12015 - https://access.redhat.com/errata/RHSA-2025:12016 - https://access.redhat.com/security/cve/CVE-2025-7784 - https://bugzilla.redhat.com/show_bug.cgi?id=2381861
CVE ID: CVE-2025-7785 State: PUBLISHED Published: 2025-07-18T11:44:07.100Z Last Updated: 2025-07-18T13:43:05.675Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: thinkgem Products: JeeSite Problem Types: CWE-601 Description: A vulnerability classified as problematic was found in thinkgem JeeSite up to 5.12.0. This vulnerability affects the function sso of the file src/main/java/com/jeesite/modules/sys/web/SsoController.java. The manipulation of the argument redirect leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is re
n disclosed to the public and may be used. The patch is identified as 3d06b8d009d0267f0255acc87ea19d29d07cedc3. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316846 - https://vuldb.com/?ctiid.316846 - https://vuldb.com/?submit.616104 - https://github.com/thinkgem/jeesite5/issues/29 - https://github.com/thinkgem/jeesite5/issues/29#issuecomment-3045862084 - https://github.com/thinkgem/jeesite5/issues/29#issue-3209433725 - https://github.com/thinkgem/jeesite5/commit/3d06b8d009d0267f0255acc87ea19d29d07cedc3
CVE ID: CVE-2025-7786 State: PUBLISHED Published: 2025-07-18T13:14:05.648Z Last Updated: 2025-07-18T13:39:57.109Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Gnuboard Products: g6 Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316847 - https://vuldb.com/?ctiid.316847 - https://vuldb.com/?submit.615735 - https://github.com/gnuboard/g6/issues/645
CVE ID: CVE-2025-7787 State: PUBLISHED Published: 2025-07-18T14:14:05.692Z Last Updated: 2025-07-18T14:55:54.873Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Xuxueli Products: xxl-job Problem Types: CWE-918 Description: A vulnerability, which was classified as critical, was found in Xuxueli xxl-job up to 3.1.1. Affected is the function httpJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
ploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316848 - https://vuldb.com/?ctiid.316848 - https://vuldb.com/?submit.615741 - https://github.com/xuxueli/xxl-job/issues/3749
CVE ID: CVE-2025-7788 State: PUBLISHED Published: 2025-07-18T15:02:05.770Z Last Updated: 2025-07-18T16:57:40.388Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Xuxueli Products: xxl-job Problem Types: CWE-78, CWE-77 Description: A vulnerability has been found in Xuxueli xxl-job up to 3.1.1 and classified as critical. Affected by this vulnerability is the function commandJobHandler of the file src\main\java\com\xxl\job\executor\service\jobhandler\SampleXxlJob.java. The manipulation leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
otely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316849 - https://vuldb.com/?ctiid.316849 - https://vuldb.com/?submit.615758 - https://github.com/xuxueli/xxl-job/issues/3750
CVE ID: CVE-2025-7789 State: PUBLISHED Published: 2025-07-18T15:14:05.920Z Last Updated: 2025-07-18T15:28:47.143Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Xuxueli Products: xxl-job Problem Types: CWE-916, CWE-326 Description: A vulnerability was found in Xuxueli xxl-job up to 3.1.1 and classified as problematic. Affected by this issue is the function makeToken of the file src/main/java/com/xxl/job/admin/controller/IndexController.java of the component Token Generation. The manipulation leads to password hash with insufficient computational effort. The attack may be launched remotely. The complexity of an attack is rather high. The exploitat
ent computational effort. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316850 - https://vuldb.com/?ctiid.316850 - https://vuldb.com/?submit.615760 - https://github.com/xuxueli/xxl-job/issues/3751
CVE ID: CVE-2025-7790 State: PUBLISHED Published: 2025-07-18T15:32:06.709Z Last Updated: 2025-07-22T15:02:15.795Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DI-8100 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been classified as critical. This affects an unknown part of the file /menu_nat.asp of the component HTTP Request Handler. The manipulation of the argument out_addr/in_addr/out_port/proto leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vul
attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316851 - https://vuldb.com/?ctiid.316851 - https://vuldb.com/?submit.616196 - https://github.com/XiDP0/MyCVE/blob/main/CVE/D-Link%20DI_8100-16.07.26A1/menu_nat_asp/menu_nat_asp.md - https://www.dlink.com/
CVE ID: CVE-2025-7791 State: PUBLISHED Published: 2025-07-18T15:44:06.774Z Last Updated: 2025-07-22T15:04:27.442Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Security Guards Hiring System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Online Security Guards Hiring System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/search.php. The manipulation of the argument searchdata leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnri
ated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316852 - https://vuldb.com/?ctiid.316852 - https://vuldb.com/?submit.616217 - https://github.com/i-Corner/cve/issues/9 - https://phpgurukul.com/
CVE ID: CVE-2025-7792 State: PUBLISHED Published: 2025-07-18T16:14:07.229Z Last Updated: 2025-07-22T15:13:06.030Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda FH451 1.0.0.9. It has been rated as critical. This issue affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316853 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316853 - https://vuldb.com/?ctiid.316853 - https://vuldb.com/?submit.616316 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formSafeEmailFilter.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7793 State: PUBLISHED Published: 2025-07-18T16:32:06.924Z Last Updated: 2025-07-22T15:12:00.445Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. Affected is the function formWebTypeLibrary of the file /goform/webtypelibrary. The manipulation of the argument webSiteId leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316854 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316854 - https://vuldb.com/?ctiid.316854 - https://vuldb.com/?submit.616317 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formWebTypeLibrary.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/formWebTypeLibrary.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7794 State: PUBLISHED Published: 2025-07-18T17:02:07.410Z Last Updated: 2025-07-18T17:52:20.428Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda FH451 1.0.0.9. Affected by this vulnerability is the function fromNatStaticSetting of the file /goform/NatStaticSetting. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316855 - https://vuldb.com/?ctiid.316855 - https://vuldb.com/?submit.616318 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromNatStaticSetting.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromNatStaticSetting.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7795 State: PUBLISHED Published: 2025-07-18T17:14:07.333Z Last Updated: 2025-07-18T17:32:26.766Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, has been found in Tenda FH451 1.0.0.9. Affected by this issue is the function fromP2pListFilter of the file /goform/P2pListFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316856 - https://vuldb.com/?ctiid.316856 - https://vuldb.com/?submit.616344 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromP2pListFilter.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromP2pListFilter.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7796 State: PUBLISHED Published: 2025-07-18T17:32:06.712Z Last Updated: 2025-07-18T18:17:41.360Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument Username leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31685
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316857 - https://vuldb.com/?ctiid.316857 - https://vuldb.com/?submit.616345 - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromPptpUserAdd.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh451/fromPptpUserAdd.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7797 State: PUBLISHED Published: 2025-07-18T17:44:07.920Z Last Updated: 2025-07-18T18:04:07.333Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: GPAC Problem Types: CWE-476, CWE-404 Description: A vulnerability was found in GPAC up to 2.4. It has been rated as problematic. Affected by this issue is the function gf_dash_download_init_segment of the file src/media_tools/dash_client.c. The manipulation of the argument base_init_url leads to null pointer dereference. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The patch is identified as 153ea314b6b053db17164f8bc3c
ly. The exploit has been disclosed to the public and may be used. The patch is identified as 153ea314b6b053db17164f8bc3c7e1e460938eaa. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316862 - https://vuldb.com/?ctiid.316862 - https://vuldb.com/?submit.616664 - https://drive.google.com/file/d/1Z-C6RajpZ40ujo1iGNt3_mG855mPbs1Q/view?usp=share_link - https://github.com/gpac/gpac/commit/153ea314b6b053db17164f8bc3c7e1e460938eaa
CVE ID: CVE-2025-7798 State: PUBLISHED Published: 2025-07-18T18:14:06.670Z Last Updated: 2025-07-18T18:43:01.562Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Beijing Shenzhou Shihan Technology Products: Multimedia Integrated Business Display System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in Beijing Shenzhou Shihan Technology Multimedia Integrated Business Display System up to 8.2. This affects an unknown part of the file /admin/system/structure/getdirectorydata/web/baseinfo/companyManage. The manipulation of the argument Struccture_ID leads to sql injection. It is possible to initiate the attack remot
nage. The manipulation of the argument Struccture_ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316863 - https://vuldb.com/?ctiid.316863 - https://vuldb.com/?submit.616739 - https://github.com/qiantx/cve/blob/main/cve1.md
CVE ID: CVE-2025-7800 State: PUBLISHED Published: 2025-07-18T18:32:04.603Z Last Updated: 2025-07-18T18:42:59.191Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR) Vendors: cgpandey Products: hotelmis Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in cgpandey hotelmis up to c572198e6c4780fccc63b1d3e8f3f72f825fc94e. This vulnerability affects unknown code of the file admin.php of the component HTTP GET Request Handler. The manipulation of the argument Search leads to cross site scripting. The attack can be initiated remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details fo
iated remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316864 - https://vuldb.com/?ctiid.316864 - https://vuldb.com/?submit.616838
CVE ID: CVE-2025-7801 State: PUBLISHED Published: 2025-07-18T18:44:05.284Z Last Updated: 2025-07-22T14:53:31.229Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: BossSoft Products: CRM Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in BossSoft CRM 6.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /crm/module/HNDCBas_customPrmSearchDtl.jsp. The manipulation of the argument cstid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316867 - https://vuldb.com/?ctiid.316867 - https://vuldb.com/?submit.616840 - https://github.com/cc2024k/CVE/issues/1
CVE ID: CVE-2025-7802 State: PUBLISHED Published: 2025-07-18T19:02:06.832Z Last Updated: 2025-07-22T14:27:10.503Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/complaint-search.php. The manipulation of the argument Search leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment:
motely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316868 - https://vuldb.com/?ctiid.316868 - https://vuldb.com/?submit.616740 - https://github.com/N1n3b9S/cve/issues/7 - https://phpgurukul.com/
CVE ID: CVE-2025-7803 State: PUBLISHED Published: 2025-07-18T19:14:04.761Z Last Updated: 2025-07-22T14:25:44.298Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:ND/RL:ND/RC:UR) Vendors: descreekert Products: wx-discuz Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in descreekert wx-discuz up to 12bd4745c63ec203cb32119bf77ead4a923bf277. It has been classified as problematic. This affects the function validToken of the file /wx.php. The manipulation of the argument echostr leads to cross site scripting. It is possible to initiate the attack remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affe
This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316869 - https://vuldb.com/?ctiid.316869 - https://vuldb.com/?submit.616885
CVE ID: CVE-2025-7805 State: PUBLISHED Published: 2025-07-18T19:32:08.275Z Last Updated: 2025-07-22T14:25:05.325Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH451 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical has been found in Tenda FH451 1.0.0.9. This affects the function fromPptpUserSetting of the file /goform/PPTPUserSetting. The manipulation of the argument delno leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316881