Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The identifier of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310749 - https://vuldb.com/?ctiid.310749 - https://vuldb.com/?submit.583531 - https://github.com/Stolichnayer/mist-ce-account-takeover - https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad - https://github.com/mistio/mist-ce/releases/tag/v4.7.2
CVE ID: CVE-2025-5410 State: PUBLISHED Published: 2025-06-01T22:31:05.433Z Last Updated: 2025-06-02T03:36:20.446Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N) Vendors: Mist Products: Community Edition Problem Types: CWE-352, CWE-862 Description: A vulnerability was found in Mist Community Edition up to 4.7.1. It has been declared as problematic. This vulnerability affects the function session_start_response of the file src/mist/api/auth/middleware.py. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is identified as
sed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is identified as db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310750 - https://vuldb.com/?ctiid.310750 - https://vuldb.com/?submit.583532 - https://github.com/Stolichnayer/mist-ce-csrf - https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad - https://github.com/mistio/mist-ce/releases/tag/v4.7.2
CVE ID: CVE-2025-5411 State: PUBLISHED Published: 2025-06-01T23:00:19.416Z Last Updated: 2025-06-02T03:34:23.365Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Mist Products: Community Edition Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Mist Community Edition up to 4.7.1. It has been rated as problematic. This issue affects the function tag_resources of the file src/mist/api/tag/views.py. The manipulation of the argument tag leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is named db10ecb62ac832c1ed4924
lic and may be used. Upgrading to version 4.7.2 is able to address this issue. The patch is named db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310751 - https://vuldb.com/?ctiid.310751 - https://vuldb.com/?submit.583533 - https://github.com/Stolichnayer/mist-ce-xss - https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad - https://github.com/mistio/mist-ce/releases/tag/v4.7.2
CVE ID: CVE-2025-5412 State: PUBLISHED Published: 2025-06-01T23:31:05.448Z Last Updated: 2025-06-02T03:33:00.189Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: Mist Products: Community Edition Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic has been found in Mist Community Edition up to 4.7.1. Affected is the function Login of the file src/mist/api/views.py of the component Authentication Endpoint. The manipulation of the argument return_to leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The name
oit has been disclosed to the public and may be used. Upgrading to version 4.7.2 is able to address this issue. The name of the patch is db10ecb62ac832c1ed4924556d167efb9bc07fad. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310752 - https://vuldb.com/?ctiid.310752 - https://vuldb.com/?submit.583534 - https://github.com/Stolichnayer/mist-ce-open-redirect - https://github.com/mistio/mist.api/commit/db10ecb62ac832c1ed4924556d167efb9bc07fad - https://github.com/mistio/mist-ce/releases/tag/v4.7.2
CVE ID: CVE-2025-5416 State: PUBLISHED Published: 2025-06-20T16:04:05.694Z Last Updated: 2025-11-21T07:36:39.759Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N) Vendors: Red Hat Products: Red Hat Build of Keycloak Problem Types: CWE-497 Description: A vulnerability has been identified in Keycloak that could lead to unauthorized information disclosure. While it requires an already authenticated user, the /admin/serverinfo endpoint can inadvertently provide sensitive environment information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/security/cve/CVE-2025-5416 - https://bugzilla.redhat.com/show_bug.cgi?id=2369601
CVE ID: CVE-2025-5417 State: PUBLISHED Published: 2025-08-19T04:28:08.316Z Last Updated: 2025-11-20T21:12:37.845Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N) Vendors: Red Hat Products: Red Hat Developer Hub 1.7 Problem Types: CWE-266 Description: An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made a
and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2025:14090 - https://access.redhat.com/security/cve/CVE-2025-5417 - https://bugzilla.redhat.com/show_bug.cgi?id=2369602
CVE ID: CVE-2025-5419 State: PUBLISHED Published: 2025-06-02T23:36:53.221Z Last Updated: 2025-10-21T22:55:13.861Z Vendors: Google Products: Chrome Problem Types: Out of bounds read and write Description: Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://chromereleases.googleblog.com/2025/06/stable-channel-update-for-desktop.html - https://issues.chromium.org/issues/420636529
CVE ID: CVE-2025-5420 State: PUBLISHED Published: 2025-06-02T00:00:15.186Z Last Updated: 2025-06-02T03:31:39.878Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: juzaweb Products: CMS Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in juzaweb CMS up to 3.4.2. Affected by this vulnerability is an unknown functionality of the file /admin-cp/file-manager/upload of the component Profile Page. The manipulation of the argument Upload leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any
isclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310753 - https://vuldb.com/?ctiid.310753 - https://vuldb.com/?submit.584048 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_avatar_xss.md
CVE ID: CVE-2025-5421 State: PUBLISHED Published: 2025-06-02T00:31:04.139Z Last Updated: 2025-06-02T03:29:49.870Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as critical, has been found in juzaweb CMS up to 3.4.2. Affected by this issue is some unknown functionality of the file /admin-cp/plugin/editor of the component Plugin Editor Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
d to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310754 - https://vuldb.com/?ctiid.310754 - https://vuldb.com/?submit.584049 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_access_edit_plugins.md
CVE ID: CVE-2025-5422 State: PUBLISHED Published: 2025-06-02T01:00:24.461Z Last Updated: 2025-06-02T03:28:50.384Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as problematic, was found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/logs/email of the component Email Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Ad
d to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310755 - https://vuldb.com/?ctiid.310755 - https://vuldb.com/?submit.584050 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_access_email_logs.md
CVE ID: CVE-2025-5423 State: PUBLISHED Published: 2025-06-02T01:31:04.401Z Last Updated: 2025-06-02T03:28:05.055Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability has been found in juzaweb CMS up to 3.4.2 and classified as critical. This vulnerability affects unknown code of the file /admin-cp/setting/system/general of the component General Setting Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional
public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310756 - https://vuldb.com/?ctiid.310756 - https://vuldb.com/?submit.584051 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_access_modify_general_settings.md
CVE ID: CVE-2025-5424 State: PUBLISHED Published: 2025-06-02T02:00:16.127Z Last Updated: 2025-06-02T03:26:48.633Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in juzaweb CMS up to 3.4.2 and classified as critical. This issue affects some unknown processing of the file /admin-cp/media of the component Media Page. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vul
endor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310757 - https://vuldb.com/?ctiid.310757 - https://vuldb.com/?submit.584052 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_access_modify_media_page.md
CVE ID: CVE-2025-5425 State: PUBLISHED Published: 2025-06-02T02:31:04.441Z Last Updated: 2025-06-02T03:11:20.488Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been classified as critical. Affected is an unknown function of the file /admin-cp/theme/editor/default of the component Theme Editor Page. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional A
ublic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310758 - https://vuldb.com/?ctiid.310758 - https://vuldb.com/?submit.584053 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_access_theme_editing.md
CVE ID: CVE-2025-5426 State: PUBLISHED Published: 2025-06-02T03:00:14.266Z Last Updated: 2025-06-02T03:10:33.505Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin-cp/menus of the component Menu Page. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst
nd may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310759 - https://vuldb.com/?ctiid.310759 - https://vuldb.com/?submit.584054 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_acess_modify_menu.md
CVE ID: CVE-2025-5427 State: PUBLISHED Published: 2025-06-02T03:31:04.377Z Last Updated: 2025-06-02T03:45:40.356Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in juzaweb CMS up to 3.4.2. It has been rated as critical. Affected by this issue is some unknown functionality of the file /admin-cp/permalinks of the component Permalinks Page. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analys
and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310760 - https://vuldb.com/?ctiid.310760 - https://vuldb.com/?submit.584055 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_acess_modify_permalinks.md
CVE ID: CVE-2025-5428 State: PUBLISHED Published: 2025-06-02T04:00:18.636Z Last Updated: 2025-06-02T13:09:06.877Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical has been found in juzaweb CMS up to 3.4.2. This affects an unknown part of the file /admin-cp/log-viewer of the component Error Logs Page. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA
. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310761 - https://vuldb.com/?ctiid.310761 - https://vuldb.com/?submit.584056 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_list_delete_logs.md
CVE ID: CVE-2025-5429 State: PUBLISHED Published: 2025-06-02T04:31:04.885Z Last Updated: 2025-06-02T13:40:50.044Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: juzaweb Products: CMS Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical was found in juzaweb CMS up to 3.4.2. This vulnerability affects unknown code of the file /admin-cp/plugin/install of the component Plugins Page. The manipulation leads to improper access controls. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP
he vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310762 - https://vuldb.com/?ctiid.310762 - https://vuldb.com/?submit.584057 - https://github.com/Cyber-Wo0dy/report/blob/main/juzawebcms/3.4.2/juzawebcms_unprivileged_user_list_install_plugins.md
CVE ID: CVE-2025-5430 State: PUBLISHED Published: 2025-06-02T05:00:18.238Z Last Updated: 2025-06-02T13:08:34.679Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: AssamLook Products: CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in AssamLook CMS 1.0. This issue affects some unknown processing of the file /product.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310763 - https://vuldb.com/?ctiid.310763 - https://vuldb.com/?submit.584257 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20AssamLook%20CMS-v1.0.md
CVE ID: CVE-2025-5431 State: PUBLISHED Published: 2025-06-02T05:31:04.392Z Last Updated: 2025-06-02T13:08:06.024Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: AssamLook Products: CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in AssamLook CMS 1.0. Affected is an unknown function of the file /department-profile.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
tacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310764 - https://vuldb.com/?ctiid.310764 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20AssamLook%20CMS-v1.0.md
CVE ID: CVE-2025-5432 State: PUBLISHED Published: 2025-06-02T06:00:22.461Z Last Updated: 2025-06-02T13:07:29.516Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: AssamLook Products: CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in AssamLook CMS 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /view_tender.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrich
was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310765 - https://vuldb.com/?ctiid.310765 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20AssamLook%20CMS-v1.0.md
CVE ID: CVE-2025-5433 State: PUBLISHED Published: 2025-06-02T06:31:04.742Z Last Updated: 2025-06-02T13:35:50.746Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: Fengoffice Products: Feng Office Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Fengoffice Feng Office 3.5.1.5 and classified as critical. Affected by this issue is some unknown functionality of the file /index.php?c=account&a=set_timezone. The manipulation of the argument tz_offset leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addition
he public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310766 - https://vuldb.com/?ctiid.310766 - https://vuldb.com/?submit.584259 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20fengoffice_3.5.1.5.md
CVE ID: CVE-2025-5434 State: PUBLISHED Published: 2025-06-02T07:00:18.097Z Last Updated: 2025-06-02T13:34:35.805Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Aem Solutions Products: CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Aem Solutions CMS up to 1.0. It has been classified as critical. This affects an unknown part of the file /page.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
tacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310767 - https://vuldb.com/?ctiid.310767 - https://vuldb.com/?submit.584261 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20Aem%20Solutions%20CMS%20v1.0.md
CVE ID: CVE-2025-5435 State: PUBLISHED Published: 2025-06-02T07:31:04.282Z Last Updated: 2025-06-02T13:31:39.681Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: Marwal Infotech Products: CMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in Marwal Infotech CMS 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /page.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
ted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.310768 - https://vuldb.com/?ctiid.310768 - https://vuldb.com/?submit.584262 - https://github.com/YZS17/CVE/blob/main/SQL/SQLi%20in%20Marwal%20Infotech%20v1.0.md
CVE ID: CVE-2025-5436 State: PUBLISHED Published: 2025-06-02T08:00:18.503Z Last Updated: 2025-06-02T17:01:34.447Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) Vendors: Multilaser Products: Sirius RE016 Problem Types: CWE-200, CWE-284 Description: A vulnerability was found in Multilaser Sirius RE016 MLT1.0. It has been rated as problematic. This issue affects some unknown processing of the file /cgi-bin/cstecgi.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst