Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-50484 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T19:26:12.575Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /crm/change-password.php of PHPGurukul Small CRM v3.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://small.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50484
CVE ID: CVE-2025-50485 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T19:58:41.896Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50485
CVE ID: CVE-2025-50486 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T20:01:05.986Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /carrental/update-password.php of PHPGurukul Car Rental Project v3.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://car.com - https://github.com/sahel0708/CVE/tree/main/CVE-2025-50486
CVE ID: CVE-2025-50487 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T19:23:07.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /bbdms/change-password.php of PHPGurukul Blood Bank & Donor Management System v2.4 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://blood.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50487
CVE ID: CVE-2025-50488 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:36:12.047Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /library/change-password.php of PHPGurukul Online Library Management System v3.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://online.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50488
CVE ID: CVE-2025-50489 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:40:13.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /srms/change-password.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://student.com - http://phpgurukul.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50489
CVE ID: CVE-2025-50490 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:25:17.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /elms/emp-changepassword.php of PHPGurukul Student Result Management System v2.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://employee.com - http://phpgurukul.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50490
CVE ID: CVE-2025-50491 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T18:20:16.340Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /banker/change-password.php of PHPGurukul Bank Locker Management System v1 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://bank.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50491
CVE ID: CVE-2025-50492 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:41:54.772Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /edms/change-password.php of PHPGurukul e-Diary Management System v1 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://e-diary.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50492
CVE ID: CVE-2025-50493 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:37:46.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Doctor Appointment Management System v1 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://doctor.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50493
CVE ID: CVE-2025-50494 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-28T17:38:41.043Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper session invalidation in the component /doctor/change-password.php of PHPGurukul Car Washing Management System v1.0 allows attackers to execute a session hijacking attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://phpgurukul.com - http://car.com - https://github.com/VasilVK/CVE/tree/main/CVE-2025-50494
CVE ID: CVE-2025-50503 State: PUBLISHED Published: 2025-08-20T00:00:00.000Z Last Updated: 2025-08-20T13:51:51.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the password reset workflow of the Touch Lebanon Mobile App 2.20.2 allows an attacker to bypass the OTP reset password mechanism. By manipulating the reset process, an unauthorized user may be able to reset the password and gain access to the account without needing to provide a legitimate authentication factor, such as an OTP. This compromises account security and allows for potential unauthorized access to user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.touch.c
l unauthorized access to user data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.touch.com.lb/autoforms/portal/touch/personal/contentandapps/mobileapp - https://github.com/ksarieddine/disclosures/blob/main/Touch%20Mobile%20Application/2FA%20Bypass%20-%20Touch%20Lebanon.md
CVE ID: CVE-2025-50505 State: PUBLISHED Published: 2025-10-07T00:00:00.000Z Last Updated: 2025-10-08T13:36:44.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: Clash Verge Rev thru 2.2.3 forces the installation of system services(clash-verge-service) by default and exposes key functions through the unauthorized HTTP API `/start_clash`, allowing local users to submit arbitrary bin_path parameters and pass them directly to the service process for execution, resulting in local privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/clash-verge-rev/clash-verge-rev - https://github.com/clash-verge-rev/clash-verge-service - https://ww
https://github.com/clash-verge-rev/clash-verge-rev - https://github.com/clash-verge-rev/clash-verge-service - https://www.clashverge.dev/ - https://github.com/bron1e/CVE-2025-50505
CVE ID: CVE-2025-50515 State: PUBLISHED Published: 2025-08-14T00:00:00.000Z Last Updated: 2025-08-15T16:34:30.626Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in phome Empirebak 2010 in ebak2008/upload/class/config.php allowing attackers to execute arbitrary code when the config file was loaded. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/lcc316/df0kgm/bfzpfvb6yaat45nt - https://gist.github.com/Master-0-0/5debd3fbda86edabb1ee80e25c029663
CVE ID: CVE-2025-50518 State: PUBLISHED Published: 2025-08-14T00:00:00.000Z Last Updated: 2025-09-11T17:46:17.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: A use-after-free vulnerability exists in the coap_delete_pdu_lkd function within coap_pdu.c of the libcoap library. This issue occurs due to improper handling of memory after the freeing of a PDU object, leading to potential memory corruption or the possibility of executing arbitrary code. NOTE: this is disputed by the Supplier because it only occurs when an application uses libcoap incorrectly. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IreneTheITCrowd/blog/blob/main/libcoap-vuln
nal Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/IreneTheITCrowd/blog/blob/main/libcoap-vulnerability.md - https://github.com/IreneTheITCrowd/blog/issues/1 - https://github.com/obgm/libcoap/issues/1724#issuecomment-3199631257 - https://github.com/obgm/libcoap/issues/1724#issuecomment-3234613482
CVE ID: CVE-2025-50528 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T19:59:17.319Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability exists in the fromNatStaticSetting function of Tenda AC6 <=V15.03.05.19 via the page parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/pfwqdxwdd/cve/blob/main/1.md
CVE ID: CVE-2025-50538 State: PUBLISHED Published: 2025-10-06T00:00:00.000Z Last Updated: 2025-10-06T13:53:37.852Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N) Vendors: FlowiseAI Products: Flowise Problem Types: CWE-79 Description: Flowise before 3.0.5 allows XSS via an IFRAME element when an admin views the chat log. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/FlowiseAI/Flowise/security/advisories/GHSA-964p-j4gg-mhwc - https://github.com/FlowiseAI/Flowise/pull/4905 - https://github.com/FlowiseAI/Flowise/releases/tag/flowise%403.0.5
CVE ID: CVE-2025-50565 State: PUBLISHED Published: 2025-09-02T00:00:00.000Z Last Updated: 2025-09-02T19:47:32.876Z Vendors: n/a Products: n/a Problem Types: n/a Description: Doubo ERP 1.0 has an SQL injection vulnerability due to a lack of filtering of user input, which can be remotely initiated by an attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OoO7ce/CVE-2025-50565
CVE ID: CVE-2025-50567 State: PUBLISHED Published: 2025-08-19T00:00:00.000Z Last Updated: 2025-08-19T14:01:15.942Z Vendors: n/a Products: n/a Problem Types: n/a Description: Saurus CMS Community Edition 4.7.1 contains a vulnerability in the custom DB::prepare() function, which uses preg_replace() with the deprecated /e (eval) modifier to interpolate SQL query parameters. This leads to injection of user-controlled SQL statements, potentially leading to arbitrary PHP code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://saurus.com - http://saurused.com - https://in.linkedin.com/in/rahul-hoysala-221a26341 - https://github.com/rahulhoysala/security-research/blob
urused.com - https://in.linkedin.com/in/rahul-hoysala-221a26341 - https://github.com/rahulhoysala/security-research/blob/main/CVE-2025-50567.md
CVE ID: CVE-2025-50572 State: PUBLISHED Published: 2025-07-31T00:00:00.000Z Last Updated: 2025-07-31T19:54:17.131Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Archer Technology RSA Archer 6.11.00204.10014 allowing attackers to execute arbitrary code via crafted system inputs that would be exported into the CSV and be executed after the user opened the file with compatible applications. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://archer.com - http://rsa.com - https://github.com/shorooq-hummdi/Archer-csv-injection-command-exec/blob/main/README.md
CVE ID: CVE-2025-50574 State: PUBLISHED Published: 2025-10-30T00:00:00.000Z Last Updated: 2025-11-04T15:42:06.733Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in blog-details.php in Hiruna Gallage's Glamour Salon Management System v1 allows remote attackers to inject arbitrary web script or HTML via the blog comment section parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Kiezroy/XSS-Disclosure-Glamour-Salon - https://github.com/hirunaofficial/salon-management-system - https://gist.github.com/Kiezroy/3396b04389c0b91815e538590167f670
CVE ID: CVE-2025-50578 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T15:43:42.692Z Vendors: n/a Products: n/a Problem Types: n/a Description: LinuxServer.io heimdall 2.6.3-ls307 contains a vulnerability in how it handles user-supplied HTTP headers, specifically `X-Forwarded-Host` and `Referer`. An unauthenticated remote attacker can manipulate these headers to perform Host Header Injection and Open Redirect attacks. This allows the loading of external resources from attacker-controlled domains and unintended redirection of users, potentially enabling phishing, UI redress, and session theft. The vulnerability exists due to insufficient validation and trust of u
enabling phishing, UI redress, and session theft. The vulnerability exists due to insufficient validation and trust of untrusted input, affecting the integrity and trustworthiness of the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/linuxserver/Heimdall - https://medium.com/@juanfelipeoz.rar/cve-2025-50578-exploiting-host-header-injection-open-redirect-in-heimdall-application-733afceff2ea - https://github.com/linuxserver/Heimdall/issues/1451
CVE ID: CVE-2025-50579 State: PUBLISHED Published: 2025-08-19T00:00:00.000Z Last Updated: 2025-08-19T19:49:10.338Z Vendors: n/a Products: n/a Problem Types: n/a Description: A CORS misconfiguration in Nginx Proxy Manager v2.12.3 allows unauthorized domains to access sensitive data, particularly JWT tokens, due to improper validation of the Origin header. This misconfiguration enables attackers to intercept tokens using a simple browser script and exfiltrate them to a remote attacker-controlled server, potentially leading to unauthorized actions within the application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager - h
ional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/NginxProxyManager/nginx-proxy-manager - https://github.com/NginxProxyManager/nginx-proxy-manager/issues/4509
CVE ID: CVE-2025-50581 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-21T18:39:25.271Z Vendors: n/a Products: n/a Problem Types: n/a Description: MRCMS v3.1.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/group/save.do. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://mrcms.com - https://gitee.com/marker/MRCMS - https://github.com/SimonKang949/Vulnerabilities/issues/6
CVE ID: CVE-2025-50582 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-21T18:39:18.914Z Vendors: n/a Products: n/a Problem Types: n/a Description: StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Course module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://studentmanage.com - https://gitee.com/DayCloud/student-manage - https://github.com/SimonKang949/Vulnerabilities/issues/5
CVE ID: CVE-2025-50583 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-21T18:39:13.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Student module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://studentmanage.com - https://gitee.com/DayCloud/student-manage - https://github.com/SimonKang949/Vulnerabilities/issues/4
CVE ID: CVE-2025-50584 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-21T18:39:36.930Z Vendors: n/a Products: n/a Problem Types: n/a Description: StudentManage v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Add A New Teacher module. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://studentmanage.com - https://gitee.com/DayCloud/student-manage - https://github.com/SimonKang949/Vulnerabilities/issues/3
CVE ID: CVE-2025-50585 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-21T18:39:42.739Z Vendors: n/a Products: n/a Problem Types: n/a Description: StudentManage v1.0 was discovered to contain a SQL injection vulnerability via the component /admin/adminStudentUrl. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://studentmanage.com - https://gitee.com/DayCloud/student-manage - https://github.com/SimonKang949/Vulnerabilities/issues/2
CVE ID: CVE-2025-50586 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-07-18T18:34:19.951Z Vendors: n/a Products: n/a Problem Types: n/a Description: StudentManage v1.0 was discovered to contain Cross-Site Request Forgery (CSRF). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://studentmanage.com - https://gitee.com/DayCloud/student-manage - https://github.com/SimonKang949/Vulnerabilities/issues/1
CVE ID: CVE-2025-50592 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T20:05:51.889Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://seacms.com - https://seacms.net/ - https://github.com/1515601525/CVE-2025-50592/issues/1
CVE ID: CVE-2025-50594 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:55:33.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in /Code/Websites/DanpheEMR/Controllers/Settings/SecuritySettingsController.cs in Danphe Health Hospital Management System EMR 3.2 allowing attackers to reset any account password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.aecyberpro.com/blog/general/2025-04-30-Account-Takeover-BOLA-Hospital-Management-System-EMR/
CVE ID: CVE-2025-50608 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:38:23.789Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/1
CVE ID: CVE-2025-50609 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T17:30:37.669Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/2
CVE ID: CVE-2025-50610 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:40:56.299Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/3
CVE ID: CVE-2025-50611 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:43:17.971Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/4
CVE ID: CVE-2025-50612 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:48:30.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set in the payload, which may cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/5
CVE ID: CVE-2025-50613 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:50:35.519Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_key_wep in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/6
CVE ID: CVE-2025-50614 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:52:32.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/7
CVE ID: CVE-2025-50615 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:16:56.549Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00470c50 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_mac_filter_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/8