Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313281 - https://vuldb.com/?ctiid.313281 - https://vuldb.com/?submit.593074 - https://github.com/eeeeeekkkkkkkk/POC/blob/main/%E9%BB%84%E9%87%91%E9%80%9A%E4%BA%8C%E7%BA%A7%E7%B3%BB%E7%BB%9F%E4%B8%89%E4%BB%A3%E7%AE%A1%E7%90%86%E7%AB%AF%E7%B3%BB%E7%BB%9FcustTakeInfoPage%E6%8E%A5%E5%8F%A3%E5%AD%98%E5%9C%A8SQL%E6%B3%A8%E5%85%A5.md
CVE ID: CVE-2025-6278 State: PUBLISHED Published: 2025-06-19T20:31:05.135Z Last Updated: 2025-06-23T19:30:11.485Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: Upsonic Problem Types: CWE-22 Description: A vulnerability classified as critical was found in Upsonic up to 0.55.6. This vulnerability affects the function os.path.join of the file markdown/server.py. The manipulation of the argument file.filename leads to path traversal. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313282 - https://vuldb.com/?ctiid.313282 - https://vu
otes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313282 - https://vuldb.com/?ctiid.313282 - https://vuldb.com/?submit.593096 - https://github.com/Upsonic/Upsonic/issues/356
CVE ID: CVE-2025-6279 State: PUBLISHED Published: 2025-06-19T21:00:14.350Z Last Updated: 2025-06-23T19:30:05.511Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: Upsonic Problem Types: CWE-502, CWE-20 Description: A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/add_tool of the component Pickle Handler. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313283 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313283 - https://vuldb.com/?ctiid.313283 - https://vuldb.com/?submit.593099 - https://github.com/Upsonic/Upsonic/issues/353
CVE ID: CVE-2025-6280 State: PUBLISHED Published: 2025-06-19T21:27:45.359Z Last Updated: 2025-06-23T19:29:57.906Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: TransformerOptimus Products: SuperAGI Problem Types: CWE-22 Description: A vulnerability, which was classified as critical, was found in TransformerOptimus SuperAGI up to 0.0.14. Affected is the function download_attachment of the file SuperAGI/superagi/helper/read_email.py of the component EmailToolKit. The manipulation of the argument filename leads to path traversal. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
l. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313284 - https://vuldb.com/?ctiid.313284 - https://vuldb.com/?submit.593614 - https://github.com/TransformerOptimus/SuperAGI/issues/1466
CVE ID: CVE-2025-6281 State: PUBLISHED Published: 2025-06-19T21:31:05.566Z Last Updated: 2025-06-23T19:29:53.164Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: OpenBMB Products: XAgent Problem Types: CWE-22 Description: A vulnerability has been found in OpenBMB XAgent up to 1.0.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /conv/community. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313285 - https://vuldb.com/?ctiid.313285 - https://vuldb.com/?
ISA ADP Vulnrichment: References: - https://vuldb.com/?id.313285 - https://vuldb.com/?ctiid.313285 - https://vuldb.com/?submit.593615 - https://github.com/OpenBMB/XAgent/issues/415
CVE ID: CVE-2025-6282 State: PUBLISHED Published: 2025-06-19T22:00:16.250Z Last Updated: 2025-06-23T19:29:48.205Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: xlang-ai Products: OpenAgents Problem Types: CWE-22 Description: A vulnerability was found in xlang-ai OpenAgents up to ff2e46440699af1324eb25655b622c4a131265bb and classified as critical. Affected by this issue is the function create_upload_file of the file backend/api/file.py. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affect
may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The reported GitHub issue was closed automatically with the label "not planned" by a bot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313286 - https://vuldb.com/?ctiid.313286 - https://vuldb.com/?submit.593616 - https://github.com/xlang-ai/OpenAgents/issues/141
CVE ID: CVE-2025-6283 State: PUBLISHED Published: 2025-06-19T22:31:07.828Z Last Updated: 2025-06-23T19:29:42.982Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:X/RL:O/RC:C) Vendors: xataio Products: Xata Agent Problem Types: CWE-22 Description: A vulnerability was found in xataio Xata Agent up to 0.3.0. It has been classified as problematic. This affects the function GET of the file apps/dbagent/src/app/api/evals/route.ts. The manipulation of the argument passed leads to path traversal. Upgrading to version 0.3.1 is able to address this issue. The patch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component. Additional
atch is named 03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313287 - https://vuldb.com/?ctiid.313287 - https://vuldb.com/?submit.593627 - https://github.com/xataio/agent/issues/179 - https://github.com/xataio/agent/pull/191 - https://github.com/xataio/agent/commit/03f27055e0cf5d4fa7e874d34ce8c74c7b9086cc - https://github.com/xataio/agent/releases/tag/v0.3.1
CVE ID: CVE-2025-6284 State: PUBLISHED Published: 2025-06-19T22:31:11.482Z Last Updated: 2025-06-23T19:29:37.412Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Car Rental Portal Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in PHPGurukul Car Rental Portal 3.0. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313288 - https://vuldb.com/?ctiid.313288 -
Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313288 - https://vuldb.com/?ctiid.313288 - https://vuldb.com/?submit.593775 - https://medium.com/@kkfavas481/csrf-in-car-rental-portal-b202b3f2a4f6 - https://phpgurukul.com/
CVE ID: CVE-2025-6285 State: PUBLISHED Published: 2025-06-19T23:00:20.107Z Last Updated: 2025-06-23T19:29:31.802Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in PHPGurukul COVID19 Testing Management System 2021. It has been rated as problematic. This issue affects some unknown processing of the file /search-report-result.php. The manipulation of the argument q leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313289 - https://vuldb.com/?ctiid.313289 - https://vuldb.com/?submit.593789 - https://phpgurukul.com/
CVE ID: CVE-2025-6286 State: PUBLISHED Published: 2025-06-19T23:00:22.589Z Last Updated: 2025-06-23T19:29:26.800Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-601 Description: A vulnerability classified as problematic has been found in PHPGurukul COVID19 Testing Management System 2021. Affected is an unknown function of the file /search-report-result.php. The manipulation of the argument q leads to open redirect. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313290 - https://vuldb.com/?ctiid.313290 - https://vuldb.com/?submit.593794 - https://phpgurukul.com/
CVE ID: CVE-2025-6287 State: PUBLISHED Published: 2025-06-19T23:31:06.185Z Last Updated: 2025-06-23T19:29:21.474Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: COVID19 Testing Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in PHPGurukul COVID19 Testing Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /test-details.php of the component Take Action. The manipulation of the argument remark leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analys
ng. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313291 - https://vuldb.com/?ctiid.313291 - https://vuldb.com/?submit.593878 - https://phpgurukul.com/
CVE ID: CVE-2025-6288 State: PUBLISHED Published: 2025-06-20T00:00:20.793Z Last Updated: 2025-06-23T19:29:16.376Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:ND/RL:ND/RC:UR) Vendors: PHPGurukul Products: Bus Pass Management System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Bus Pass Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/admin-profile.php of the component Profile Page. The manipulation of the argument profile name leads to cross site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
site scripting. The attack may be launched remotely. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313292 - https://vuldb.com/?ctiid.313292 - https://vuldb.com/?submit.593923 - https://phpgurukul.com/
CVE ID: CVE-2025-6290 State: PUBLISHED Published: 2025-06-26T02:06:34.003Z Last Updated: 2025-06-27T14:52:18.882Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: blakelong Products: Tournament Bracket Generator Problem Types: CWE-79 Description: The Tournament Bracket Generator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'bracket' shortcode in all versions up to, and including, 1.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute
nticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/bdde01aa-2d38-4085-b11a-ef8633ee928a?source=cve - https://wordpress.org/plugins/tournament-bracket-generator/#developers
CVE ID: CVE-2025-6291 State: PUBLISHED Published: 2025-06-20T00:00:22.878Z Last Updated: 2025-06-23T19:29:11.039Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-825 Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in D-Link DIR-825 2.03. This affects the function do_file of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Not
be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313293 - https://vuldb.com/?ctiid.313293 - https://vuldb.com/?submit.593937 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir825-dlink - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir825-dlink#poc - https://www.dlink.com/
CVE ID: CVE-2025-6292 State: PUBLISHED Published: 2025-06-20T00:31:05.948Z Last Updated: 2025-06-23T19:29:05.747Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-825 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in D-Link DIR-825 2.03 and classified as critical. This vulnerability affects the function sub_4091AC of the component HTTP POST Request Handler. The manipulation leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst
may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313294 - https://vuldb.com/?ctiid.313294 - https://vuldb.com/?submit.593938 - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir825-dlink-sub_4091AC - https://github.com/xiaobor123/vul-finds/tree/main/vul-find-dir825-dlink-sub_4091AC#poc - https://www.dlink.com/
CVE ID: CVE-2025-6293 State: PUBLISHED Published: 2025-06-20T00:31:07.923Z Last Updated: 2025-06-23T19:28:59.635Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /contact_manager.php. The manipulation of the argument student_roll_no leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313295 - https://vuldb.com/?ctiid.313295 - https://vuldb.com/?submit.593996 - https://github.com/1xxxgg/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-6294 State: PUBLISHED Published: 2025-06-20T01:00:21.568Z Last Updated: 2025-06-23T18:23:09.494Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /contact.php. The manipulation of the argument hostel_name leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313296 - https://vuldb.com/?ctiid.313296 - https://vuldb.com/?submit.593997 - https://github.com/1xxxgg/cve/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-6295 State: PUBLISHED Published: 2025-06-20T01:31:05.698Z Last Updated: 2025-06-23T19:28:54.575Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /allocated_rooms.php. The manipulation of the argument search_box leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichmen
remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313297 - https://vuldb.com/?ctiid.313297 - https://vuldb.com/?submit.593998 - https://github.com/1xxxgg/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6296 State: PUBLISHED Published: 2025-06-20T01:31:07.547Z Last Updated: 2025-06-23T19:28:49.353Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Hostel Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Hostel Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /empty_rooms.php. The manipulation of the argument search_box leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313298 - https://vuldb.com/?ctiid.313298 - https://vuldb.com/?submit.594016 - https://github.com/y2xsec324/cve/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-6297 State: PUBLISHED Published: 2025-07-01T16:16:54.624Z Last Updated: 2025-07-01T17:30:37.332Z Vendors: Debian Products: dpkg Description: It was discovered that dpkg-deb does not properly sanitize directory permissions when extracting a control member into a temporary directory, which is documented as being a safe operation even on untrusted data. This may result in leaving temporary files behind on cleanup. Given automated and repeated execution of dpkg-deb commands on adversarial .deb packages or with well compressible files, placed inside a directory with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota ex
with permissions not allowing removal by a non-root user, this can end up in a DoS scenario due to causing disk quota exhaustion or disk full conditions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://git.dpkg.org/cgit/dpkg/dpkg.git/commit/?id=ed6bbd445dd8800308c67236ba35d08004c98e82
CVE ID: CVE-2025-6298 State: PUBLISHED Published: 2025-11-11T06:56:50.533Z Last Updated: 2025-11-12T04:57:44.894Z Severity: MEDIUM (CVSS 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Axis Communications AB Products: AXIS OS Problem Types: CWE-1287 Description: ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/da
l a malicious ACAP application. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axis.com/dam/public/ef/91/c3/cve-2025-6298pdf-en-US-504215.pdf
CVE ID: CVE-2025-6299 State: PUBLISHED Published: 2025-06-20T02:00:18.242Z Last Updated: 2025-06-20T19:28:36.983Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: N150RT Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical has been found in TOTOLINK N150RT 3.4.0-B20190525. This affects an unknown part of the file /boa/formWSC. The manipulation of the argument targetAPSsid leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313299 - https://vu
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313299 - https://vuldb.com/?ctiid.313299 - https://vuldb.com/?submit.594650 - https://docs.google.com/document/d/1meuD3WLzPE0HHQAm_Ar6zx1NDyO29zsK/edit?usp=sharing&ouid=108490350035271792747&rtpof=true&sd=true - https://www.totolink.net/
CVE ID: CVE-2025-6300 State: PUBLISHED Published: 2025-06-20T02:00:22.327Z Last Updated: 2025-06-20T19:26:44.826Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Employee Record Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Employee Record Management System 1.3. This vulnerability affects unknown code of the file /admin/editempeducation.php. The manipulation of the argument yopgra leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313300 - https://vuldb.com/?ctiid.313300 - https://vuldb.com/?submit.595366 - https://github.com/GarminYoung/myCVE/issues/10 - https://phpgurukul.com/
CVE ID: CVE-2025-6301 State: PUBLISHED Published: 2025-06-20T02:31:06.254Z Last Updated: 2025-06-20T19:48:19.800Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Notice Board System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in PHPGurukul Notice Board System 1.0. This issue affects some unknown processing of the file /admin/manage-notices.php of the component Add Notice. The manipulation of the argument Title/Description leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Note
attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.313301 - https://vuldb.com/?ctiid.313301 - https://vuldb.com/?submit.595373 - https://phpgurukul.com/
CVE ID: CVE-2025-6302 State: PUBLISHED Published: 2025-06-20T03:00:16.754Z Last Updated: 2025-06-20T19:46:47.945Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: TOTOLINK Products: EX1200T Problem Types: CWE-121, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK EX1200T 4.1.2cu.5232_B20210713. Affected is the function setStaticDhcpConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument Comment leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h