Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307334 - https://vuldb.com/?ctiid.307334 - https://vuldb.com/?submit.562690 - https://github.com/zzZxby/Vulnerability-Exploration/blob/main/Online%20Bus%20Reservation%20System/Online%20Bus%20Reservation%20System1.md - https://code-projects.org/
CVE ID: CVE-2025-4244 State: PUBLISHED Published: 2025-05-03T20:00:04.848Z Last Updated: 2025-05-05T14:50:28.336Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: code-projects Products: Online Bus Reservation System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Online Bus Reservation System 1.0. This affects an unknown part of the file /seatlocation.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307335 - https://vuldb.com/?ctiid.307335 - https://vuldb.com/?submit.562691 - https://github.com/zzZxby/Vulnerability-Exploration/blob/main/Online%20Bus%20Reservation%20System/Online%20Bus%20Reservation%20System2.md - https://code-projects.org/
CVE ID: CVE-2025-4247 State: PUBLISHED Published: 2025-05-04T04:31:04.835Z Last Updated: 2025-05-05T14:49:39.981Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple To-Do List System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester Simple To-Do List System 1.0. Affected is an unknown function of the file /delete_task.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307344
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307344 - https://vuldb.com/?ctiid.307344 - https://vuldb.com/?submit.562699 - https://github.com/zonesec0/findcve/issues/8 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4248 State: PUBLISHED Published: 2025-05-04T06:00:08.873Z Last Updated: 2025-05-05T14:48:41.687Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: SourceCodester Products: Simple To-Do List System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in SourceCodester Simple To-Do List System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /complete_task.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307345 - https://vuldb.com/?ctiid.307345 - https://vuldb.com/?submit.562700 - https://github.com/zonesec0/findcve/issues/9 - https://www.sourcecodester.com/
CVE ID: CVE-2025-4249 State: PUBLISHED Published: 2025-05-04T06:31:05.870Z Last Updated: 2025-05-06T14:14:13.707Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: e-Diary Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul e-Diary Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /manage-categories.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.30
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307346 - https://vuldb.com/?ctiid.307346 - https://vuldb.com/?submit.562836 - https://github.com/MichaelZhuang521/curly-memory/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4250 State: PUBLISHED Published: 2025-05-04T09:00:07.131Z Last Updated: 2025-05-06T14:13:21.032Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: code-projects Products: Nero Social Networking Site Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Nero Social Networking Site 1.0. It has been classified as critical. This affects an unknown part of the file /index.php. The manipulation of the argument fname/lname/login/password2/cpassword/address/cnumber/email/gender/propic/month leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst
ssible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307347 - https://vuldb.com/?ctiid.307347 - https://vuldb.com/?submit.562906 - https://github.com/zzZxby/Vulnerability-Exploration/blob/main/Nero%20Social%20Networking%20Site/Nero_Social_Networking_Site.md - https://code-projects.org/
CVE ID: CVE-2025-4251 State: PUBLISHED Published: 2025-05-04T22:00:06.293Z Last Updated: 2025-05-06T14:16:59.536Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. This issue affects some unknown processing of the component RMDIR Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307355 - https://vuldb.com/?ctiid.307355 - https://vuldb.com
CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307355 - https://vuldb.com/?ctiid.307355 - https://vuldb.com/?submit.561597 - https://fitoxs.com/exploit/exploit-a10ec24750e57a60258d3b176f899b0246b544785f86e8a1cb58c8b275a2fdee.txt
CVE ID: CVE-2025-4252 State: PUBLISHED Published: 2025-05-04T22:31:04.033Z Last Updated: 2025-05-06T14:17:08.528Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component APPEND Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307356 - https://vuldb.com/?ctiid.307356 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307356 - https://vuldb.com/?ctiid.307356 - https://vuldb.com/?submit.561606 - https://fitoxs.com/exploit/exploit-65b1721b02d84e0c79b6cd3c2473d3ed9c441087d702bd3a76b82fc2ae04388b.txt
CVE ID: CVE-2025-4253 State: PUBLISHED Published: 2025-05-04T23:00:07.041Z Last Updated: 2025-05-06T14:17:18.196Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HASH Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307357 - https://vuldb.com/?ctiid.30735
onal Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307357 - https://vuldb.com/?ctiid.307357 - https://vuldb.com/?submit.561609 - https://fitoxs.com/exploit/exploit-6a5b279ed51b35667909c1b56d4d85d71d41bc6e73d4fbbf3de2b1f59ebd6d08.txt
CVE ID: CVE-2025-4254 State: PUBLISHED Published: 2025-05-04T23:31:03.671Z Last Updated: 2025-05-06T14:17:35.701Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component LIST Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307358 - https://vuldb.com/?ctiid.307358 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307358 - https://vuldb.com/?ctiid.307358 - https://vuldb.com/?submit.561611 - https://fitoxs.com/exploit/exploit-e4fd898014889301fef4607c9a2641c3db234bb5a057a22952bfb70e70b4c279.txt
CVE ID: CVE-2025-4255 State: PUBLISHED Published: 2025-05-05T00:00:07.962Z Last Updated: 2025-05-06T14:17:46.272Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PCMan Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RMD Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307359 - https://vuldb.com/?ctiid.307359 - https://vuldb.com/?sub
ADP Vulnrichment: References: - https://vuldb.com/?id.307359 - https://vuldb.com/?ctiid.307359 - https://vuldb.com/?submit.561623 - https://fitoxs.com/exploit/exploit-52a33c7f018ae348f748582eae6aa7d38b2b5f1f3dc5d3b6793772e1f8223eb0.txt
CVE ID: CVE-2025-4256 State: PUBLISHED Published: 2025-05-05T00:31:03.665Z Last Updated: 2025-05-05T14:48:32.791Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: SeaCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307360 - https://vuldb.com/?ctiid.307360 - https://vuldb.com/?sub
ADP Vulnrichment: References: - https://vuldb.com/?id.307360 - https://vuldb.com/?ctiid.307360 - https://vuldb.com/?submit.562718 - https://github.com/seacms-net/CMS/issues/25 - https://github.com/seacms-net/CMS/issues/25#issue-3007083568
CVE ID: CVE-2025-4257 State: PUBLISHED Published: 2025-05-05T01:00:07.156Z Last Updated: 2025-05-08T13:02:23.484Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: n/a Products: SeaCMS Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /admin_pay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307361 - https://vuldb.com/?ctiid.307361 - https
yst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307361 - https://vuldb.com/?ctiid.307361 - https://vuldb.com/?submit.562719 - https://github.com/seacms-net/CMS/issues/26 - https://github.com/seacms-net/CMS/issues/26#issue-3007084603
CVE ID: CVE-2025-4258 State: PUBLISHED Published: 2025-05-05T01:31:04.472Z Last Updated: 2025-05-05T13:59:08.870Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: zhangyanbo2007 Products: youkefu Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu up to 4.2.0. Affected is the function Upload of the file \youkefu-master\src\main\java\com\ukefu\webim\web\handler\resource\MediaController.java. The manipulation of the argument imgFile leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA AD
h the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307362 - https://vuldb.com/?ctiid.307362 - https://vuldb.com/?submit.562848 - https://github.com/Fc04dB/VUL/blob/main/ukefu_upload.md
CVE ID: CVE-2025-4259 State: PUBLISHED Published: 2025-05-05T02:00:05.736Z Last Updated: 2025-05-05T13:54:10.160Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: n/a Products: newbee-mall Problem Types: CWE-434, CWE-284 Description: A vulnerability has been found in newbee-mall 1.0 and classified as critical. Affected by this vulnerability is the function Upload of the file ltd/newbee/mall/controller/common/UploadController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaff
ed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307363 - https://vuldb.com/?ctiid.307363 - https://vuldb.com/?submit.562865 - https://github.com/yaklang/IRifyScanResult/blob/main/newbee-mall/arbitrary-file-upload-in-uploadController.md
CVE ID: CVE-2025-4260 State: PUBLISHED Published: 2025-05-05T02:31:04.576Z Last Updated: 2025-05-05T13:53:02.461Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: zhangyanbo2007 Products: youkefu Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in zhangyanbo2007 youkefu up to 4.2.0 and classified as problematic. Affected by this issue is the function impsave of the file m\web\handler\admin\system\TemplateController.java. The manipulation of the argument dataFile leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
ly. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307364 - https://vuldb.com/?ctiid.307364 - https://vuldb.com/?submit.562902 - https://github.com/Serein123y/vulnerability/blob/main/vul.md
CVE ID: CVE-2025-4261 State: PUBLISHED Published: 2025-05-05T03:00:06.085Z Last Updated: 2025-05-05T15:32:42.028Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: GAIR-NLP Products: factool Problem Types: CWE-94, CWE-74 Description: A vulnerability was found in GAIR-NLP factool up to 3f3914bc090b644be044b7e0005113c135d8b20f. It has been classified as critical. This affects the function run_single of the file factool/factool/math/tool.py. The manipulation leads to code injection. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious deli
disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307365 - https://vuldb.com/?ctiid.307365 - https://vuldb.com/?submit.562942 - https://github.com/GAIR-NLP/factool/issues/50 - https://github.com/GAIR-NLP/factool/issues/50#issue-3007905464
CVE ID: CVE-2025-4262 State: PUBLISHED Published: 2025-05-05T03:31:05.162Z Last Updated: 2025-05-05T15:24:35.550Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online DJ Booking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/user-search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307366 - https://vuldb.com/?ctiid.307366 - https://vuldb.com/?submit.562965 - https://github.com/MoshangChunfeng/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4263 State: PUBLISHED Published: 2025-05-05T04:00:09.327Z Last Updated: 2025-05-05T15:08:34.787Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Online DJ Booking Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online DJ Booking Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/booking-search.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
xploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307367 - https://vuldb.com/?ctiid.307367 - https://vuldb.com/?submit.562991 - https://github.com/MoshangChunfeng/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4264 State: PUBLISHED Published: 2025-05-05T04:31:05.832Z Last Updated: 2025-05-05T14:56:22.743Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/edit-ambulance.php. The manipulation of the argument dconnum leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vul
en disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307368 - https://vuldb.com/?ctiid.307368 - https://vuldb.com/?submit.562992 - https://github.com/xiguala123/myCVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-4265 State: PUBLISHED Published: 2025-05-05T05:00:08.791Z Last Updated: 2025-05-05T14:34:42.179Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Emergency Ambulance Hiring Portal Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/contact-us.php. The manipulation of the argument mobnum leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes
t has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307369 - https://vuldb.com/?ctiid.307369 - https://vuldb.com/?submit.562993 - https://github.com/xiguala123/myCVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4266 State: PUBLISHED Published: 2025-05-05T05:31:05.206Z Last Updated: 2025-05-05T14:30:54.788Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php?vid=2. The manipulation of the argument fromdate/tomdate leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307370 - https://vuldb.com/?ctiid.307370 - https://vuldb.com/?submit.563148 - https://github.com/bottlekv/CVE/issues/2 - https://phpgurukul.com/
CVE ID: CVE-2025-4267 State: PUBLISHED Published: 2025-05-05T06:00:06.417Z Last Updated: 2025-05-05T13:50:46.574Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P) Vendors: SourceCodester, oretnom23 Products: Stock Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in SourceCodester/oretnom23 Stock Management System 1.0. This affects an unknown part of the file /admin/?page=purchase_order/view_po of the component Purchase Order Details Page. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional
t is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307371 - https://vuldb.com/?ctiid.307371 - https://vuldb.com/?submit.563231 - https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/SQLi/PO/info.md
CVE ID: CVE-2025-4268 State: PUBLISHED Published: 2025-05-05T06:31:07.005Z Last Updated: 2025-05-05T13:47:06.365Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: TOTOLINK Products: A720R Problem Types: CWE-306, CWE-287 Description: A vulnerability has been found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This vulnerability affects unknown code of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument topicurl with the input RebootSystem leads to missing authentication. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.307372 - https://vuldb.com/?ctiid.307372 - https://vuldb.com/?submit.563429 - https://github.com/at0de/my_vulns/blob/main/TOTOLINK/A720R/RebootSystem.md - https://www.totolink.net/
CVE ID: CVE-2025-4269 State: PUBLISHED Published: 2025-05-05T07:00:06.643Z Last Updated: 2025-05-05T13:25:55.775Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: TOTOLINK Products: A720R Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in TOTOLINK A720R 4.1.5cu.374 and classified as critical. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi of the component Log Handler. The manipulation of the argument topicurl with the input clearDiagnosisLog/clearSyslog/clearTracerouteLog leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Add