Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8797 State: PUBLISHED Published: 2025-08-10T06:32:06.582Z Last Updated: 2025-08-13T14:37:02.141Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-275, CWE-266 Description: A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the component LocalStorage Handler. The manipulation leads to permission issues. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
d. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319325 - https://vuldb.com/?ctiid.319325 - https://vuldb.com/?submit.625991 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme07.md
CVE ID: CVE-2025-8798 State: PUBLISHED Published: 2025-08-10T07:02:05.831Z Last Updated: 2025-08-12T16:03:50.730Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: oitcode Products: samarium Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /dashboard/product of the component Create Product Page. The manipulation leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319326 - https://vuldb.com/?ctiid.319326 - https://vuldb.com/?submit.626077 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme08.md
CVE ID: CVE-2025-8799 State: PUBLISHED Published: 2025-08-10T07:32:07.845Z Last Updated: 2025-08-15T13:43:42.910Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amf_npcf_am_policy_control_build_create/amf_nsmf_pdusession_build_create_sm_context of the file src/amf/npcf-build.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address t
remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is named cf63dd63197bf61a4b041aa364ba6a6199ab15e4. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319327 - https://vuldb.com/?ctiid.319327 - https://vuldb.com/?submit.626112 - https://github.com/open5gs/open5gs/issues/3979 - https://github.com/open5gs/open5gs/issues/3979#issuecomment-3054369376 - https://github.com/user-attachments/files/21104682/5g_amf_crash_ran.zip - https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4 - https://g
82/5g_amf_crash_ran.zip - https://github.com/open5gs/open5gs/commit/cf63dd63197bf61a4b041aa364ba6a6199ab15e4 - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8799
CVE ID: CVE-2025-8800 State: PUBLISHED Published: 2025-08-10T08:02:07.661Z Last Updated: 2025-08-15T09:03:55.652Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the file src/mme/esm-handler.c of the component AMF Component. The manipulation leads to denial of service. The attack may be launched remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 701505102f514cbde2856cd2ebc9bedb7efc820d. It is recommended to upgrade
to address this issue. The name of the patch is 701505102f514cbde2856cd2ebc9bedb7efc820d. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319328 - https://vuldb.com/?ctiid.319328 - https://vuldb.com/?submit.626113 - https://github.com/open5gs/open5gs/issues/3980 - https://github.com/open5gs/open5gs/issues/3980#issuecomment-3054894281 - https://github.com/open5gs/open5gs/commit/701505102f514cbde2856cd2ebc9bedb7efc820d - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8800
CVE ID: CVE-2025-8801 State: PUBLISHED Published: 2025-08-10T08:32:08.824Z Last Updated: 2025-08-15T13:43:55.423Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is f47f2bd4f7274295c5fbb19e2f806753d183d09a.
to version 2.7.6 is able to address this issue. The identifier of the patch is f47f2bd4f7274295c5fbb19e2f806753d183d09a. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319329 - https://vuldb.com/?ctiid.319329 - https://vuldb.com/?submit.626118 - https://github.com/open5gs/open5gs/issues/3977 - https://github.com/open5gs/open5gs/issues/3977#issuecomment-3052575886 - https://github.com/user-attachments/files/21095572/nudm-sdm.zip - https://github.com/open5gs/open5gs/commit/f47f2bd4f7274295c5fbb19e2f806753d183d09a - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELL
74295c5fbb19e2f806753d183d09a - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8801
CVE ID: CVE-2025-8802 State: PUBLISHED Published: 2025-08-10T09:02:07.285Z Last Updated: 2025-08-15T13:43:59.382Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smf_state_operational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version v2.7.6 is able to address this issue. The patch is identified as f168f7586a
public and may be used. Upgrading to version v2.7.6 is able to address this issue. The patch is identified as f168f7586a4fa536cee95ae60ac437d997f15b97. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319330 - https://vuldb.com/?ctiid.319330 - https://vuldb.com/?submit.626122 - https://github.com/open5gs/open5gs/issues/3978 - https://github.com/user-attachments/files/21104269/5G_SMF.AMF_crash.zip - https://github.com/open5gs/open5gs/commit/f168f7586a4fa536cee95ae60ac437d997f15b97 - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-880
tps://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8802
CVE ID: CVE-2025-8803 State: PUBLISHED Published: 2025-08-10T09:32:07.220Z Last Updated: 2025-08-15T16:14:20.905Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected
this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319332 - https://vuldb.com/?ctiid.319332 - https://vuldb.com/?submit.626123 - https://github.com/open5gs/open5gs/issues/3948 - https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 - https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport
CVE ID: CVE-2025-8804 State: PUBLISHED Published: 2025-08-10T10:02:08.574Z Last Updated: 2025-08-15T13:44:07.710Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-617 Description: A vulnerability was found in Open5GS up to 2.7.5. Affected by this vulnerability is the function ngap_build_downlink_nas_transport of the component AMF. The manipulation leads to reachable assertion. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b83831162566d4626428. It
version 2.7.6 is able to address this issue. The identifier of the patch is bca0a7b6e01d254f4223b83831162566d4626428. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319333 - https://vuldb.com/?ctiid.319333 - https://vuldb.com/?submit.626124 - https://vuldb.com/?submit.625698 - https://github.com/open5gs/open5gs/issues/3950 - https://github.com/open5gs/open5gs/issues/3950#issuecomment-3034693457 - https://github.com/user-attachments/files/21030801/newdata_for_ngap.zip - https://github.com/open5gs/open5gs/commit/bca0a7b6e01d254f4223b83831162566d4626428 - https://github.com/open5gs/open5gs/releases/tag/
b.com/open5gs/open5gs/commit/bca0a7b6e01d254f4223b83831162566d4626428 - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport/blob/main/CVE-2025-8804
CVE ID: CVE-2025-8805 State: PUBLISHED Published: 2025-08-10T10:32:08.617Z Last Updated: 2025-08-15T13:44:03.739Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:P/RL:O/RC:C) Vendors: n/a Products: Open5GS Problem Types: CWE-404 Description: A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0
be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319334 - https://vuldb.com/?ctiid.319334 - https://vuldb.com/?submit.626125 - https://github.com/open5gs/open5gs/issues/4000 - https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 - https://github.com/user-attachments/files/21229739/smf_crash.zip - https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6 - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github
ommit/c58b8f081986aaf2a312d73a0a17985518b47fe6 - https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - https://github.com/ZHENGHAOHELLO/BugReport
CVE ID: CVE-2025-8806 State: PUBLISHED Published: 2025-08-10T11:02:06.062Z Last Updated: 2025-08-12T16:02:59.116Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: zhilink 智互联(深圳)科技有限公司 Products: ADP Application Developer Platform 应用开发者平台 Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in zhilink 智互联(深圳)科技有限公司 ADP Application Developer Platform 应用开发者平台 1.0.0. It has been classified as critical. This affects an unknown part of the file /adpweb/a/sys/office/treeData. The manipulation of the argument extId leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The ven
n. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319335 - https://vuldb.com/?ctiid.319335 - https://vuldb.com/?submit.626189
CVE ID: CVE-2025-8807 State: PUBLISHED Published: 2025-08-10T11:32:05.977Z Last Updated: 2025-08-12T16:02:51.855Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: xujeff Products: tianti 天梯 Problem Types: CWE-862, CWE-863 Description: A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been declared as critical. This vulnerability affects unknown code of the file /tianti-module-admin/user/ajax/save. The manipulation leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst No
may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319336 - https://vuldb.com/?ctiid.319336 - https://vuldb.com/?submit.626344 - https://github.com/N1n3b9S/cve/issues/15 - https://github.com/N1n3b9S/cve/issues/15#issue-3280910303
CVE ID: CVE-2025-8808 State: PUBLISHED Published: 2025-08-10T12:02:06.561Z Last Updated: 2025-08-12T15:36:53.591Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: xujeff Products: tianti 天梯 Problem Types: CWE-1236, CWE-74 Description: A vulnerability was found in xujeff tianti 天梯 up to 2.3. It has been rated as problematic. This issue affects the function exportOrder of the file /tianti-module-admin/user/ajax/save of the component com.jeff.tianti.controller. The manipulation leads to csv injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclos
emotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319337 - https://vuldb.com/?ctiid.319337 - https://vuldb.com/?submit.626673 - https://github.com/N1n3b9S/cve/issues/16
CVE ID: CVE-2025-8809 State: PUBLISHED Published: 2025-08-10T12:32:06.113Z Last Updated: 2025-08-13T14:17:20.171Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Online Medicine Guide Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in code-projects Online Medicine Guide 1.0. Affected is an unknown function of the file /addelidetails.php. The manipulation of the argument del leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.
d to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319338 - https://vuldb.com/?ctiid.319338 - https://vuldb.com/?submit.627335 - https://github.com/Find33-3/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-8810 State: PUBLISHED Published: 2025-08-10T13:02:08.230Z Last Updated: 2025-08-12T19:41:47.916Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC20 Problem Types: CWE-121, CWE-119 Description: A vulnerability classified as critical was found in Tenda AC20 16.03.08.05. Affected by this vulnerability is the function strcpy of the file /goform/SetFirewallCfg. The manipulation of the argument firewallEn leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319339 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319339 - https://vuldb.com/?ctiid.319339 - https://vuldb.com/?submit.627394 - https://github.com/LaiwanHundun/CVE/blob/main/cve1 - https://www.tenda.com.cn/
CVE ID: CVE-2025-8811 State: PUBLISHED Published: 2025-08-10T13:32:06.700Z Last Updated: 2025-08-12T19:36:32.493Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Art Gallery Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Simple Art Gallery 1.0. Affected by this issue is some unknown functionality of the file /Admin/registration.php. The manipulation of the argument fname leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319340 - https://vuldb.com/?ctiid.319340 - https://vuldb.com/?submit.627395 - https://github.com/Darlingzero2/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-8812 State: PUBLISHED Published: 2025-08-10T14:02:06.299Z Last Updated: 2025-08-12T19:34:51.554Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. This affects an unknown part of the file /api/settings of the component Admin Panel. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch
ay be used. The identifier of the patch is 2fe4a51afbce0068c291bc1818bbc8f7f3b01a22. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319341 - https://vuldb.com/?ctiid.319341 - https://vuldb.com/?submit.622331 - https://github.com/atjiu/pybbs/issues/209 - https://github.com/atjiu/pybbs/issues/209#issuecomment-3134772651 - https://github.com/atjiu/pybbs/commit/2fe4a51afbce0068c291bc1818bbc8f7f3b01a22
CVE ID: CVE-2025-8813 State: PUBLISHED Published: 2025-08-10T14:32:06.046Z Last Updated: 2025-08-12T19:17:04.112Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-601 Description: A vulnerability has been found in atjiu pybbs up to 6.0.0 and classified as problematic. This vulnerability affects the function changeLanguage of the file src/main/java/co/yiiu/pybbs/controller/front/IndexController.java. The manipulation of the argument referer leads to open redirect. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as edb14ff13e9e05394960ba46c3d31d844ff2d
ploit has been disclosed to the public and may be used. The patch is identified as edb14ff13e9e05394960ba46c3d31d844ff2deac. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319342 - https://vuldb.com/?ctiid.319342 - https://vuldb.com/?submit.622333 - https://github.com/atjiu/pybbs/issues/210 - https://github.com/atjiu/pybbs/issues/210#issuecomment-3134906856 - https://github.com/atjiu/pybbs/issues/210#issue-3256474679 - https://github.com/atjiu/pybbs/commit/edb14ff13e9e05394960ba46c3d31d844ff2deac
CVE ID: CVE-2025-8814 State: PUBLISHED Published: 2025-08-10T15:02:06.599Z Last Updated: 2025-08-12T19:13:54.849Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:OF/RC:C) Vendors: atjiu Products: pybbs Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in atjiu pybbs up to 6.0.0 and classified as problematic. This issue affects the function setCookie of the file src/main/java/co/yiiu/pybbs/util/CookieUtil.java. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 8aa2bb1aef3346e49aec6358edf5e47ce905ae7b. It is recommended to apply a patch to fi
c and may be used. The patch is named 8aa2bb1aef3346e49aec6358edf5e47ce905ae7b. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319343 - https://vuldb.com/?ctiid.319343 - https://vuldb.com/?submit.622334 - https://vuldb.com/?submit.622353 - https://github.com/atjiu/pybbs/issues/211 - https://github.com/atjiu/pybbs/issues/211#issuecomment-3134960777 - https://github.com/atjiu/pybbs/issues/211#issue-3256483043 - https://github.com/atjiu/pybbs/commit/8aa2bb1aef3346e49aec6358edf5e47ce905ae7b
CVE ID: CVE-2025-8815 State: PUBLISHED Published: 2025-08-10T15:32:11.150Z Last Updated: 2025-08-12T19:07:21.609Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: 猫宁i Products: Morning Problem Types: CWE-22 Description: A vulnerability was found in 猫宁i Morning up to bc782730c74ff080494f145cc363a0b4f43f7d3e. It has been classified as critical. Affected is an unknown function of the file /index of the component Shiro Configuration. The manipulation leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no
ed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319344 - https://vuldb.com/?ctiid.319344 - https://vuldb.com/?submit.622348 - https://gitee.com/morning-pro/Morning/issues/ICOVAK
CVE ID: CVE-2025-8816 State: PUBLISHED Published: 2025-08-10T15:48:21.300Z Last Updated: 2025-08-12T19:04:31.824Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 up to 20250801. Affected is the function setOpMode of the file /goform/setOpMode. The manipulation of the argument ethConv leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about t