Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-5745 State: PUBLISHED Published: 2025-06-05T19:20:23.405Z Last Updated: 2025-06-05T20:13:51.068Z Vendors: The GNU C Library Products: glibc Description: The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller (those registers are defined as non-volatile registers by the powerpc64le ABI), resulting in overwriting of its contents and potentially altering control flow of the caller, or leaking the input strings to the function to other parts of the program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzill
er parts of the program. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://sourceware.org/bugzilla/show_bug.cgi?id=33060
CVE ID: CVE-2025-5746 State: PUBLISHED Published: 2025-07-02T03:47:23.533Z Last Updated: 2025-07-02T13:19:00.371Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: CodeDropz Products: Drag and Drop Multiple File Upload (Pro) - WooCommerce Problem Types: CWE-434 Description: The Drag and Drop Multiple File Upload (Pro) - WooCommerce plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the dnd_upload_cf7_upload_chunks() function in version 5.0 - 5.0.5 (when bundled with the PrintSpace theme) and all versions up to, and including, 1.7.1 (in the standalone version). This makes it possible for unauthenticated attacke
all versions up to, and including, 1.7.1 (in the standalone version). This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible. The execution of PHP is disabled via a .htaccess file but is still possible in certain server configurations. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/3c1f625e-4456-45e4-8a7f-809b22edb66b?source=cve - https://www.codedropz.com/woocommerce-drag-drop-multiple-file-upload/
CVE ID: CVE-2025-5747 State: PUBLISHED Published: 2025-06-06T15:30:59.842Z Last Updated: 2025-06-06T15:53:13.993Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WOLFBOX Products: Level 2 EV Charger Problem Types: CWE-115 Description: WOLFBOX Level 2 EV Charger MCU Command Parsing Misinterpretation of Input Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installatons of WOLFBOX Level 2 EV Charger devices. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of command frames received by the MCU. When parsing frames, the process does n
specific flaw exists within the handling of command frames received by the MCU. When parsing frames, the process does not properly detect the start of a frame, which can lead to misinterpretation of input. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of the device. Was ZDI-CAN-26501. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-326/
CVE ID: CVE-2025-5748 State: PUBLISHED Published: 2025-06-06T15:30:05.415Z Last Updated: 2025-06-06T15:53:34.528Z Severity: HIGH (CVSS 8 CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: WOLFBOX Products: Level 2 EV Charger Problem Types: CWE-749 Description: WOLFBOX Level 2 EV Charger LAN OTA Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Tuya communications module software. The iss
thentication mechanism can be bypassed. The specific flaw exists within the Tuya communications module software. The issue results from the exposure of a method allowing the upload of crafted software images to the module. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26349. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-327/
CVE ID: CVE-2025-5749 State: PUBLISHED Published: 2025-06-06T15:30:00.721Z Last Updated: 2025-06-06T15:53:57.850Z Severity: MEDIUM (CVSS 6.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: WOLFBOX Products: Level 2 EV Charger Problem Types: CWE-457 Description: WOLFBOX Level 2 EV Charger BLE Encryption Keys Uninitialized Variable Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger devices. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of cryptographic keys used in vendor-specific encrypted communications. Th
The specific flaw exists within the handling of cryptographic keys used in vendor-specific encrypted communications. The issue results from the lack of proper initialization of a variable prior to accessing it. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26295. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-328/
CVE ID: CVE-2025-5750 State: PUBLISHED Published: 2025-06-06T15:29:55.993Z Last Updated: 2025-06-06T15:54:21.408Z Severity: HIGH (CVSS 8.8 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: WOLFBOX Products: Level 2 EV Charger Problem Types: CWE-122 Description: WOLFBOX Level 2 EV Charger tuya_svc_devos_activate_result_parse Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of WOLFBOX Level 2 EV Charger. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of the secKey, localKey, stdTimeZone and devId parameters. The
lnerability. The specific flaw exists within the handling of the secKey, localKey, stdTimeZone and devId parameters. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the device. Was ZDI-CAN-26294. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-329/
CVE ID: CVE-2025-5751 State: PUBLISHED Published: 2025-06-06T15:29:51.274Z Last Updated: 2025-06-06T15:54:40.568Z Severity: MEDIUM (CVSS 4.6 CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N) Vendors: WOLFBOX Products: Level 2 EV Charger Problem Types: CWE-798 Description: WOLFBOX Level 2 EV Charger Management Card Hard-coded Credentials Authentication Bypass Vulnerability. This vulnerability allows physically present attackers to bypass authentication on affected installations of WOLFBOX Level 2 EV Charger. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of management cards. The issue results from the lack of personalization of managemen
fic flaw exists within the handling of management cards. The issue results from the lack of personalization of management cards. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-26292. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-330/
CVE ID: CVE-2025-5752 State: PUBLISHED Published: 2025-07-18T05:24:00.364Z Last Updated: 2025-07-18T14:02:21.701Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: gopiplus Products: Vertical scroll image slideshow gallery Problem Types: CWE-79 Description: The Vertical scroll image slideshow gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘width’ parameter in all versions up to, and including, 11.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user acc
with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/be9abb15-f375-4dca-a998-e621d50fa273?source=cve - https://plugins.trac.wordpress.org/browser/vertical-scroll-image-slideshow-gallery/trunk/vertical-scroll-image-slideshow-gallery.php#L65 - https://wordpress.org/plugins/vertical-scroll-image-slideshow-gallery/#developers
CVE ID: CVE-2025-5753 State: PUBLISHED Published: 2025-07-23T02:24:39.743Z Last Updated: 2025-07-23T18:23:43.606Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: reallaunch Products: Valuation Calculator Problem Types: CWE-79 Description: The Valuation Calculator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘link’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional A
bove, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/eb14f2ed-6ae8-409e-86fc-c305a56f5d5b?source=cve - https://plugins.trac.wordpress.org/browser/commercial-real-estate-valuation-calculator/trunk/valuation-calculator.php#L386 - https://wordpress.org/plugins/commercial-real-estate-valuation-calculator/#developers
CVE ID: CVE-2025-5754 State: PUBLISHED Published: 2025-07-18T05:23:57.764Z Last Updated: 2025-07-18T13:51:41.768Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: bbc000tommy Products: Useful Tab Block – Responsive & AMP-Compatible Problem Types: CWE-79 Description: The Useful Tab Block – Responsive & AMP-Compatible plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘className’ parameter in all versions up to, and including, 1.3.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execu
thenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/56b637dc-4382-438f-ae36-e5075580a7d6?source=cve - https://plugins.trac.wordpress.org/browser/useful-tab-block-responsive-amp-compatible/trunk/dynamic.php#L161 - https://wordpress.org/plugins/useful-tab-block-responsive-amp-compatible/#developers
CVE ID: CVE-2025-5755 State: PUBLISHED Published: 2025-06-06T09:31:05.607Z Last Updated: 2025-06-06T15:41:12.686Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Open Source Clinic Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in SourceCodester Open Source Clinic Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /email_config.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
k remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311298 - https://vuldb.com/?ctiid.311298 - https://vuldb.com/?submit.590639 - https://github.com/mysq13/CVE/issues/5 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5756 State: PUBLISHED Published: 2025-06-06T10:00:07.640Z Last Updated: 2025-06-06T15:15:55.695Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Real Estate Property Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Real Estate Property Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /Admin/EditCity.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311299 - https://vuldb.com/?ctiid.311299 - https://vuldb.com/?submit.590641 - https://vuldb.com/?submit.590640 - https://github.com/Darlingzero2/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-5757 State: PUBLISHED Published: 2025-06-06T10:31:05.200Z Last Updated: 2025-06-06T15:14:10.761Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Traffic Offense Reporting System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Traffic Offense Reporting System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /save-reported.php. The manipulation of the argument offence_id/vehicle_no/driver_license/name/address/gender/officer_reporting/offence leads to cross site scripting. The attack may be launched remotely. The exploit has been disc
/officer_reporting/offence leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311300 - https://vuldb.com/?ctiid.311300 - https://vuldb.com/?submit.590649 - https://github.com/tuooo/CVE/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-5758 State: PUBLISHED Published: 2025-06-06T11:00:17.020Z Last Updated: 2025-06-06T15:12:56.406Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Open Source Clinic Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in SourceCodester Open Source Clinic Management System 1.0. This affects an unknown part of the file /doctor.php. The manipulation of the argument doctorname leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional A
. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311301 - https://vuldb.com/?ctiid.311301 - https://vuldb.com/?submit.590651 - https://github.com/mysq13/CVE/issues/6 - https://www.sourcecodester.com/
CVE ID: CVE-2025-5759 State: PUBLISHED Published: 2025-06-06T11:00:20.045Z Last Updated: 2025-06-06T15:10:13.183Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Local Services Search Engine Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Local Services Search Engine Management System 2.1. This vulnerability affects unknown code of the file /admin/edit-person-detail.php?editid=2. The manipulation of the argument editid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes:
ttack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311302 - https://vuldb.com/?ctiid.311302 - https://vuldb.com/?submit.590654 - https://github.com/Pjwww13447/pjwww/issues/21 - https://phpgurukul.com/
CVE ID: CVE-2025-5760 State: PUBLISHED Published: 2025-06-06T11:13:16.129Z Last Updated: 2025-06-06T16:08:09.477Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: eskapism Products: Simple History – Track, Log, and Audit WordPress Changes Problem Types: CWE-256 Description: The Simple History plugin for WordPress is vulnerable to sensitive data exposure via Detective Mode due to improper sanitization within the append_debug_info_to_context() function in versions prior to 5.8.1. When Detective Mode is enabled, the plugin’s logger captures the entire contents of $_POST (and sometimes raw request bodies or $_GET) without redacting any password‐related keys. As a
entire contents of $_POST (and sometimes raw request bodies or $_GET) without redacting any password‐related keys. As a result, whenever a user submits a login form, whether via native wp_login or a third‐party login widget, their actual password is written in clear text into the logs. An authenticated attacker or any user whose actions generate a login event will have their password recorded; an administrator (or anyone with database read access) can then read those logs and retrieve every captured password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/b6364415-da02-4236-b635-d8fbd27faa33?source=cve - https://sim
https://www.wordfence.com/threat-intel/vulnerabilities/id/b6364415-da02-4236-b635-d8fbd27faa33?source=cve - https://simple-history.com/support/detective-mode/ - https://wordpress.org/plugins/simple-history/#developers - https://github.com/bonny/WordPress-Simple-History/issues/546 - https://github.com/bonny/WordPress-Simple-History/commit/68eab0cab6882eafef4bfece884093eeda5ac018 - https://wordpress.org/support/topic/security-vulnerability-passwords-stored-as-plain-text-in-logs/ - https://plugins.trac.wordpress.org/changeset/3267487/
CVE ID: CVE-2025-5761 State: PUBLISHED Published: 2025-06-06T11:31:06.662Z Last Updated: 2025-06-06T16:50:06.983Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: BP Monitoring Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul BP Monitoring Management System 1.0. This issue affects some unknown processing of the file /edit-family-member.php. The manipulation of the argument memberage leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichme
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311303 - https://vuldb.com/?ctiid.311303 - https://vuldb.com/?submit.590708 - https://github.com/qingchuana/q1ngchuan/issues/5 - https://phpgurukul.com/
CVE ID: CVE-2025-5762 State: PUBLISHED Published: 2025-06-06T12:00:16.604Z Last Updated: 2025-06-09T12:55:37.363Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Patient Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Patient Record Management System 1.0. Affected is an unknown function of the file view_hematology.php. The manipulation of the argument itr_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311304 - https://vuldb.com/?ctiid.311304 - https://vuldb.com/?submit.590749 - https://github.com/bazhahei123/CVE/blob/main/sql_cve_6_5.pdf - https://code-projects.org/
CVE ID: CVE-2025-5763 State: PUBLISHED Published: 2025-06-06T12:00:23.470Z Last Updated: 2025-06-09T12:55:05.771Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: CP3 Problem Types: CWE-77, CWE-74 Description: A vulnerability has been found in Tenda CP3 11.10.00.2311090948 and classified as critical. Affected by this vulnerability is the function sub_F3C8C of the file apollo. The manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311305 - https://vuldb.com/?ctiid.311305 - h
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311305 - https://vuldb.com/?ctiid.311305 - https://vuldb.com/?submit.590784 - https://blog.kevgen.ru/posts/rce_in_tenda_cp3_camera - https://github.com/k3vg3n/researches/blob/main/RCE_in_Tenda_CP3_camera.md - https://www.tenda.com.cn/
CVE ID: CVE-2025-5764 State: PUBLISHED Published: 2025-06-06T12:31:05.347Z Last Updated: 2025-06-06T13:45:24.206Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Laundry System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/insert_laundry.php. The manipulation of the argument Customer leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311306 - https://vuldb.com/?ctiid.311306 - https://vuldb.com/?submit.590800 - https://github.com/tuooo/CVE/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-5765 State: PUBLISHED Published: 2025-06-06T12:31:07.174Z Last Updated: 2025-06-06T13:42:53.240Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in code-projects Laundry System 1.0. It has been classified as problematic. This affects an unknown part of the file /data/edit_laundry.php. The manipulation of the argument Customer leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311307 - https://vuldb.com/?ctiid.311307 - https://vuldb.com/?submit.590809 - https://github.com/tuooo/CVE/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-5766 State: PUBLISHED Published: 2025-06-06T13:00:17.800Z Last Updated: 2025-06-06T13:36:02.817Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Laundry System Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in code-projects Laundry System 1.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311308 - https://vuldb.com/?ctiid.311308 -