Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-9408 State: PUBLISHED Published: 2025-11-11T15:34:58.719Z Last Updated: 2025-11-12T20:02:52.616Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: zephyrproject-rtos Products: Zephyr Problem Types: CWE-270 Description: System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-3r6j-5mp3-75wr
CVE ID: CVE-2025-9409 State: PUBLISHED Published: 2025-08-25T16:02:07.354Z Last Updated: 2025-08-25T20:31:50.515Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: lostvip-com Products: ruoyi-go Problem Types: CWE-22 Description: A security flaw has been discovered in lostvip-com ruoyi-go up to 2.1. Impacted is the function DownloadTmp/DownloadUpload of the file modules/system/controller/CommonController.go. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure
. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321250 - https://vuldb.com/?ctiid.321250 - https://vuldb.com/?submit.633661 - https://vuldb.com/?submit.633663 - https://github.com/on-theway/cve/issues/1 - https://github.com/on-theway/cve/issues/2
CVE ID: CVE-2025-9410 State: PUBLISHED Published: 2025-08-25T16:32:06.462Z Last Updated: 2025-08-25T20:34:45.643Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lostvip-com Products: ruoyi-go Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in lostvip-com ruoyi-go up to 2.1. The affected element is the function SelectListByPage of the file modules/system/dao/GenTableDao.go. Executing manipulation of the argument isAsc/orderByColumn can lead to sql injection. It is possible to launch the attack remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did
s been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321251 - https://vuldb.com/?ctiid.321251 - https://vuldb.com/?submit.633677 - https://vuldb.com/?submit.633679 - https://github.com/on-theway/cve/issues/3 - https://github.com/on-theway/cve/issues/4
CVE ID: CVE-2025-9411 State: PUBLISHED Published: 2025-08-25T17:02:06.294Z Last Updated: 2025-08-25T20:36:42.402Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lostvip-com Products: ruoyi-go Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in lostvip-com ruoyi-go up to 2.1. The impacted element is the function SelectPageList of the file modules/system/service/LoginInforService.go. The manipulation of the argument isAsc leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Add
losed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321252 - https://vuldb.com/?ctiid.321252 - https://vuldb.com/?submit.633688 - https://github.com/on-theway/cve/issues/5
CVE ID: CVE-2025-9412 State: PUBLISHED Published: 2025-08-25T17:32:07.046Z Last Updated: 2025-08-25T20:37:18.379Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lostvip-com Products: ruoyi-go Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in lostvip-com ruoyi-go up to 2.1. This affects the function SelectListByPage of the file modules/system/dao/DictDataDao.go. The manipulation of the argument orderByColumn/isAsc results in sql injection. The attack can be launched remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA AD
The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321253 - https://vuldb.com/?ctiid.321253 - https://vuldb.com/?submit.633704 - https://vuldb.com/?submit.633705 - https://github.com/on-theway/cve/issues/6 - https://github.com/on-theway/cve/issues/7
CVE ID: CVE-2025-9413 State: PUBLISHED Published: 2025-08-25T18:02:08.185Z Last Updated: 2025-08-25T18:09:50.560Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: lostvip-com Products: ruoyi-go Problem Types: CWE-89, CWE-74 Description: A flaw has been found in lostvip-com ruoyi-go up to 2.1. This impacts the function SelectListByPage of the file modules/system/system_router.go. This manipulation of the argument orderByColumn/isAsc causes sql injection. The attack may be initiated remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vuln
ndor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321254 - https://vuldb.com/?ctiid.321254 - https://vuldb.com/?submit.633730 - https://vuldb.com/?submit.633731 - https://github.com/on-theway/cve/issues/8 - https://github.com/on-theway/cve/issues/9
CVE ID: CVE-2025-9414 State: PUBLISHED Published: 2025-08-25T18:32:07.112Z Last Updated: 2025-08-25T19:00:18.358Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: kalcaddle Products: kodbox Problem Types: CWE-918 Description: A vulnerability was found in kalcaddle kodbox 1.61. Affected by this vulnerability is an unknown functionality of the file /?explorer/upload/serverDownload of the component Download from Link Handler. Performing manipulation of the argument url results in server-side request forgery. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did
ssible. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321256 - https://vuldb.com/?ctiid.321256 - https://vuldb.com/?submit.633727 - https://gist.github.com/SysEternals/a03d45b582451f243f9c24076593c49c
CVE ID: CVE-2025-9415 State: PUBLISHED Published: 2025-08-25T19:02:06.467Z Last Updated: 2025-08-25T19:49:58.316Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: GreenCMS Problem Types: CWE-434, CWE-284 Description: A vulnerability was identified in GreenCMS up to 2.3.0603. This affects an unknown part of the file /index.php?m=admin&c=media&a=fileconnect. The manipulation of the argument upload[] leads to unrestricted upload. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA
his vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321258 - https://vuldb.com/?ctiid.321258 - https://vuldb.com/?submit.633847 - https://github.com/lan041221/cvec/issues/10
CVE ID: CVE-2025-9416 State: PUBLISHED Published: 2025-08-25T19:32:06.890Z Last Updated: 2025-08-25T19:52:20.705Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: oitcode Products: samarium Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in oitcode samarium up to 0.9.6. This vulnerability affects unknown code of the file /cms/webpage/ of the component Pages Image Handler. The manipulation results in cross site scripting. The attack may be performed from a remote location. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321259 -
c and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321259 - https://vuldb.com/?ctiid.321259 - https://vuldb.com/?submit.633921 - https://github.com/MaiqueSilva/VulnDB/blob/main/README09.md
CVE ID: CVE-2025-9417 State: PUBLISHED Published: 2025-08-25T20:02:07.233Z Last Updated: 2025-08-25T20:30:30.110Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Apartment Management System 1.0. This issue affects some unknown processing of the file /employee/addemployee.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
e available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321260 - https://vuldb.com/?ctiid.321260 - https://vuldb.com/?submit.634073 - https://github.com/zzb1388/cve/issues/41 - https://itsourcecode.com/
CVE ID: CVE-2025-9418 State: PUBLISHED Published: 2025-08-25T20:32:07.252Z Last Updated: 2025-08-26T19:53:02.527Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in itsourcecode Apartment Management System 1.0. Impacted is an unknown function of the file /owner/addowner.php. Such manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.32126
d publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321261 - https://vuldb.com/?ctiid.321261 - https://vuldb.com/?submit.634074 - https://github.com/zzb1388/cve/issues/40 - https://itsourcecode.com/
CVE ID: CVE-2025-9419 State: PUBLISHED Published: 2025-08-25T21:02:07.267Z Last Updated: 2025-08-26T19:22:33.675Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was detected in itsourcecode Apartment Management System 1.0. The affected element is an unknown function of the file /unit/addunit.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321262 - https://vuldb.
be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321262 - https://vuldb.com/?ctiid.321262 - https://vuldb.com/?submit.634075 - https://github.com/zzb1388/cve/issues/39 - https://itsourcecode.com/
CVE ID: CVE-2025-9420 State: PUBLISHED Published: 2025-08-25T21:32:07.698Z Last Updated: 2025-08-26T14:32:13.862Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A flaw has been found in itsourcecode Apartment Management System 1.0. The impacted element is an unknown function of the file /floor/addfloor.php. Executing manipulation of the argument hdnid can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321263 - https://vuld
ay be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321263 - https://vuldb.com/?ctiid.321263 - https://vuldb.com/?submit.634076 - https://github.com/zzb1388/cve/issues/38 - https://itsourcecode.com/
CVE ID: CVE-2025-9421 State: PUBLISHED Published: 2025-08-25T22:02:07.902Z Last Updated: 2025-08-26T14:28:17.267Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Apartment Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in itsourcecode Apartment Management System 1.0. This affects an unknown function of the file /complain/addcomplain.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321264 - https
c and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321264 - https://vuldb.com/?ctiid.321264 - https://vuldb.com/?submit.634077 - https://github.com/zhuyi-hz/cve/issues/16 - https://itsourcecode.com/
CVE ID: CVE-2025-9422 State: PUBLISHED Published: 2025-08-25T22:02:10.112Z Last Updated: 2025-08-26T14:24:44.923Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: oitcode Products: samarium Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in oitcode samarium up to 0.9.6. This impacts an unknown function of the file /dashboard/team of the component Team Image Handler. The manipulation results in cross site scripting. The attack may be launched remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321265 - https://vuldb.com/?ctiid.321265 - https://vul
tes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321265 - https://vuldb.com/?ctiid.321265 - https://vuldb.com/?submit.634084 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme10.md
CVE ID: CVE-2025-9423 State: PUBLISHED Published: 2025-08-25T22:32:07.983Z Last Updated: 2025-08-26T14:23:48.795Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Water Billing System Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in Campcodes Online Water Billing System 1.0. Affected is an unknown function of the file /editecex.php. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321266 - https://vuldb.com
lized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321266 - https://vuldb.com/?ctiid.321266 - https://vuldb.com/?submit.634128 - https://github.com/Yuanwennnn/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-9424 State: PUBLISHED Published: 2025-08-25T22:32:10.274Z Last Updated: 2025-08-26T14:23:11.485Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Ruijie Products: WS7204-A Problem Types: CWE-78, CWE-77 Description: A vulnerability was identified in Ruijie WS7204-A 2017.06.15. Affected by this vulnerability is an unknown functionality of the file /itbox_pi/branch_import.php?a=branch_list. Such manipulation of the argument province leads to os command injection. The attack can be executed remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
le and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321267 - https://vuldb.com/?ctiid.321267 - https://vuldb.com/?submit.634135 - https://github.com/Hwwg/cve/issues/1
CVE ID: CVE-2025-9425 State: PUBLISHED Published: 2025-08-25T23:02:07.942Z Last Updated: 2025-08-26T14:22:34.897Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in itsourcecode Online Tour and Travel Management System 1.0. Affected by this issue is some unknown functionality of the file /enquiry.php. Performing manipulation of the argument pid results in sql injection. The attack is possible to be carried out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP
ied out remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321268 - https://vuldb.com/?ctiid.321268 - https://vuldb.com/?submit.634149 - https://github.com/shq3526/cve/issues/6 - https://itsourcecode.com/
CVE ID: CVE-2025-9426 State: PUBLISHED Published: 2025-08-25T23:02:10.901Z Last Updated: 2025-08-26T20:21:02.956Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: itsourcecode Products: Online Tour and Travel Management System Problem Types: CWE-89, CWE-74 Description: A weakness has been identified in itsourcecode Online Tour and Travel Management System 1.0. This affects an unknown part of the file /package.php. Executing manipulation of the argument subcatid can lead to sql injection. The attack may be performed from a remote location. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment:
xploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321269 - https://vuldb.com/?ctiid.321269 - https://vuldb.com/?submit.634154 - https://github.com/shq3526/cve/issues/7 - https://itsourcecode.com/
CVE ID: CVE-2025-9428 State: PUBLISHED Published: 2025-10-21T11:43:07.027Z Last Updated: 2025-10-22T03:55:28.671Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Zohocorp Products: Analytics Plus Problem Types: CWE-89 Description: Zohocorp ManageEngine Analytics Plus versions 6171 and prior are vulnerable to authenticated SQL Injection via the key update api. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.manageengine.com/analytics-plus/CVE-2025-9428.html
CVE ID: CVE-2025-9429 State: PUBLISHED Published: 2025-08-25T23:32:10.844Z Last Updated: 2025-08-26T20:21:43.342Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-79, CWE-94 Description: A security vulnerability has been detected in mtons mblog up to 3.5.0. This vulnerability affects unknown code of the file /post/submit of the component Post Handler. The manipulation of the argument content/title/ leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321270
publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321270 - https://vuldb.com/?ctiid.321270 - https://vuldb.com/?submit.634153 - https://vuldb.com/?submit.634155 - https://gitee.com/mtons/mblog/issues/ICPMLJ - https://gitee.com/mtons/mblog/issues/ICPMLW
CVE ID: CVE-2025-9430 State: PUBLISHED Published: 2025-08-26T00:02:10.350Z Last Updated: 2025-08-26T20:22:39.422Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in mtons mblog up to 3.5.0. This issue affects some unknown processing of the file /admin/options/update. The manipulation of the argument input results in cross site scripting. It is possible to launch the attack remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321271 - https://vuldb.com/?ctiid.321271 - https://vuldb.co
- CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321271 - https://vuldb.com/?ctiid.321271 - https://vuldb.com/?submit.634156 - https://gitee.com/mtons/mblog/issues/ICPMMF
CVE ID: CVE-2025-9431 State: PUBLISHED Published: 2025-08-26T00:02:15.323Z Last Updated: 2025-08-26T20:23:35.024Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-79, CWE-94 Description: A flaw has been found in mtons mblog up to 3.5.0. Impacted is an unknown function of the file /search. This manipulation of the argument kw causes cross site scripting. The attack can be initiated remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321272 - https://vuldb.com/?ctiid.321272 - https://vuldb.com/?submit.634157 - https://gitee.com/mtons/
s://vuldb.com/?id.321272 - https://vuldb.com/?ctiid.321272 - https://vuldb.com/?submit.634157 - https://gitee.com/mtons/mblog/issues/ICPMML
CVE ID: CVE-2025-9432 State: PUBLISHED Published: 2025-08-26T00:32:09.602Z Last Updated: 2025-08-26T20:24:22.961Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in mtons mblog up to 3.5.0. The affected element is an unknown function of the file /admin/post/list of the component Admin Panel. Such manipulation of the argument Title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321273 - https://vuldb.co
e used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321273 - https://vuldb.com/?ctiid.321273 - https://vuldb.com/?submit.634158 - https://gitee.com/mtons/mblog/issues/ICPMMQ
CVE ID: CVE-2025-9433 State: PUBLISHED Published: 2025-08-26T01:02:12.291Z Last Updated: 2025-08-26T20:25:03.194Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: mtons Products: mblog Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in mtons mblog up to 3.5.0. The impacted element is an unknown function of the file /admin/user/list of the component Admin Panel. Performing manipulation of the argument Name results in cross site scripting. The attack may be initiated remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321274 - https://vuldb.com/?ctii
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321274 - https://vuldb.com/?ctiid.321274 - https://vuldb.com/?submit.634169 - https://gitee.com/mtons/mblog/issues/ICPMMW