Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
o exploit this vulnerability. The specific flaw exists within the Foxit Reader Update Service. The product loads a library from an unsecured location. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM. Was ZDI-CAN-25709. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.zerodayinitiative.com/advisories/ZDI-25-870/ - https://www.foxit.com/support/security-bulletins.html
CVE ID: CVE-2025-9331 State: PUBLISHED Published: 2025-08-22T11:14:00.384Z Last Updated: 2025-08-22T14:01:46.285Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: themegrill Products: Spacious Problem Types: CWE-862 Description: The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'welcome_notice_import_handler' function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attackers, with Subscriber-level access and above, to import demo data into the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-i
data into the site. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/03fd2eee-429c-4053-8105-e1816f99ea91?source=cve - https://themes.trac.wordpress.org/changeset/282946/ - https://research.cleantalk.org/cve-2025-9331/
CVE ID: CVE-2025-9332 State: PUBLISHED Published: 2025-10-03T11:17:11.613Z Last Updated: 2025-10-03T18:08:08.113Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: clickanatomy Products: Interactive Human Anatomy with Clickable Body Parts Problem Types: CWE-79 Description: The Interactive Human Anatomy with Clickable Body Parts plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will
enticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/445e762c-7e90-4994-8542-31a84bc91388?source=cve - https://wordpress.org/plugins/interactive-medical-drawing-of-human-body/#developers
CVE ID: CVE-2025-9333 State: PUBLISHED Published: 2025-10-03T11:17:08.738Z Last Updated: 2025-10-03T18:00:08.745Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: ibachal Products: Smart Docs Problem Types: CWE-79 Description: The Smart Docs plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.1.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site insta
ary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/269b0edd-2358-4a71-8fbe-de9a1c939807?source=cve - https://wordpress.org/plugins/smart-docs/#developers
CVE ID: CVE-2025-9334 State: PUBLISHED Published: 2025-11-08T05:52:43.249Z Last Updated: 2025-11-10T19:12:37.316Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: codesolz Products: Better Find and Replace – AI-Powered Suggestions Problem Types: CWE-94 Description: The Better Find and Replace – AI-Powered Suggestions plugin for WordPress is vulnerable to Limited Code Injection in all versions up to, and including, 1.7.7. This is due to insufficient input validation and restriction on the 'rtafar_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to call arbitrary plugin functions and execute code within t
nticated attackers, with Subscriber-level access and above, to call arbitrary plugin functions and execute code within those functions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/232f3a15-3bd3-44fa-aa07-f055e8fcda88?source=cve - https://plugins.trac.wordpress.org/browser/real-time-auto-find-and-replace/trunk/core/actions/RTAFAR_CustomAjax.php#L29 - https://plugins.trac.wordpress.org/browser/real-time-auto-find-and-replace/trunk/core/lib/Util.php#L233 - https://plugins.trac.wordpress.org/browser/real-time-auto-find-and-replace/trunk/core/admin/functions/DbReplacer.php#L507 - https://plugins.trac.wordpress.org/chan
real-time-auto-find-and-replace/trunk/core/admin/functions/DbReplacer.php#L507 - https://plugins.trac.wordpress.org/changeset/3389979/
CVE ID: CVE-2025-9336 State: PUBLISHED Published: 2025-10-13T09:24:04.749Z Last Updated: 2025-10-14T14:37:01.918Z Vendors: ASUS Products: Armoury Crate Problem Types: CWE-121 Description: A stack buffer overflow has been identified in the AsIO3.sys driver. This vulnerability can be triggered by input manipulation, may leading to a system crash (BSOD) or other potentially undefined execution. Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-9337 State: PUBLISHED Published: 2025-10-13T09:24:35.975Z Last Updated: 2025-10-21T19:56:21.842Z Vendors: ASUS Products: Armoury Crate Problem Types: CWE-476 Description: A null pointer dereference has been identified in the AsIO3.sys driver. The vulnerability can be triggered by a specially crafted input, which may lead to a system crash (BSOD). Refer to the 'Security Update for Armoury Crate App' section on the ASUS Security Advisory for more information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-9338 State: PUBLISHED Published: 2025-11-06T06:02:48.738Z Last Updated: 2025-11-06T15:37:38.417Z Vendors: ASUS Products: Armoury Crate Problem Types: CWE-119 Description: A improper restriction of operations within the bounds of a memory buffer exists in AsIO3.sys driver. This vulnerability can be triggered by manually executing a specially crafted process, potentially leading to local privilage escalation. For additional information, please refer to the 'Security Update for Armoury Crate App' section of the ASUS Security Advisory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.asus.com/security-advisory/
CVE ID: CVE-2025-9339 State: PUBLISHED Published: 2025-10-21T13:34:32.571Z Last Updated: 2025-10-24T14:10:08.590Z Vendors: Simple SA Products: SIMPLE.ERP Problem Types: CWE-89 Description: SQL injection vulnerability in the fields of warehouse document filtering form in SIMPLE.ERP software allows logged-in user a malicious query injection. Potential exploitation is limited by the 20-character limit in form fields. Identified use case allows to delete tables with a name of maximum 6 characters. We weren't able to identify a way to exfiltrate data within query character limit. This issue affects SIMPLE.ERP in versions before 6.30@a04.3. Additional Analyst Notes: - CISA ADP Vulnrichment: Refere
. This issue affects SIMPLE.ERP in versions before 6.30@a04.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://cert.pl/en/posts/2025/10/CVE-2025-9339/ - https://simple.com.pl/
CVE ID: CVE-2025-9340 State: PUBLISHED Published: 2025-08-22T09:39:47.303Z Last Updated: 2025-08-22T10:37:18.585Z Vendors: Legion of the Bouncy Castle Inc. Products: Bouncy Castle for Java Problem Types: CWE-787 Description: Out-of-bounds Write vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java bc-fips on All (API modules). This vulnerability is associated with program files org/bouncycastle/jcajce/provider/BaseCipher. This issue affects Bouncy Castle for Java: from BC-FJA 2.1.0 through 2.1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909340
CVE ID: CVE-2025-9341 State: PUBLISHED Published: 2025-08-22T09:09:17.111Z Last Updated: 2025-10-24T22:40:33.075Z Vendors: Legion of the Bouncy Castle Inc. Products: Bouncy Castle for Java FIPS, Bouncy Castle for Java LTS Problem Types: CWE-400 Description: Uncontrolled Resource Consumption vulnerability in Legion of the Bouncy Castle Inc. Bouncy Castle for Java FIPS bc-fips on All (API modules), Legion of the Bouncy Castle Inc. Bouncy Castle for Java LTS bcprov-lts8on on All (API modules) allows Excessive Allocation. This vulnerability is associated with program files org/bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java. This issue affects Bouncy
bouncycastle/crypto/fips/AESNativeCBC.Java, org/bouncycastle/crypto/engines/AESNativeCBC.Java. This issue affects Bouncy Castle for Java FIPS: 2.1.0; Bouncy Castle for Java LTS: from 2.73.0 through 2.73.7. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bcgit/bc-java/wiki/CVE%E2%80%902025%E2%80%909341
CVE ID: CVE-2025-9342 State: PUBLISHED Published: 2025-09-23T09:18:48.984Z Last Updated: 2025-09-23T19:31:08.221Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Anadolu Hayat Emeklilik Inc. Products: AHE Mobile Problem Types: CWE-639 Description: Authorization Bypass Through User-Controlled Key vulnerability in Anadolu Hayat Emeklilik Inc. AHE Mobile allows Privilege Abuse.This issue affects AHE Mobile: from 1.9.7 before 1.9.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.usom.gov.tr/bildirim/tr-25-0287
CVE ID: CVE-2025-9344 State: PUBLISHED Published: 2025-08-28T01:46:29.181Z Last Updated: 2025-08-28T15:18:48.003Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: stiofansisland Products: UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP Problem Types: CWE-79 Description: The UsersWP – Front-end login form, User Registration, User Profile & Members Directory plugin for WP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'uwp_profile' and 'uwp_profile_header' shortcodes in all versions up to, and including, 1.2.42 due to insufficient input sanitization and output escaping on user
ortcodes in all versions up to, and including, 1.2.42 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/0ecba857-03d8-4a2e-9450-146d442f5533?source=cve - https://github.com/AyeCode/userswp/commit/2e18c3f70a3f24f4f4ef2ec44d38fda82866c902 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349701%40userswp&new=33
fda82866c902 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349701%40userswp&new=3349701%40userswp&sfp_email=&sfph_mail=
CVE ID: CVE-2025-9345 State: PUBLISHED Published: 2025-08-28T03:42:45.718Z Last Updated: 2025-08-28T14:49:05.815Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: softdiscover Products: File Manager, Code Editor, and Backup by Managefy Problem Types: CWE-22 Description: The File Manager, Code Editor, and Backup by Managefy plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.4.8 via the ajax_downloadfile() function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to perform actions on files outside of the originally intended directory. Additional Analyst Notes: - CISA ADP Vuln
ove, to perform actions on files outside of the originally intended directory. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/f53cf99e-3136-4a1d-bbbd-ff484f1df5c3?source=cve - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3350045%40softdiscover-db-file-manager&new=3350045%40softdiscover-db-file-manager&sfp_email=&sfph_mail=
CVE ID: CVE-2025-9346 State: PUBLISHED Published: 2025-08-28T03:42:44.982Z Last Updated: 2025-08-28T14:49:12.818Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: wpdevelop Products: Booking Calendar Problem Types: CWE-79 Description: The Booking Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via settings in all versions up to, and including, 10.14.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Administrator-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - C
rbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/ca47486b-0761-48b8-94a7-77175ed5a37e?source=cve - https://plugins.trac.wordpress.org/changeset/3348957/booking/trunk/core/any/class-admin-settings-api.php
CVE ID: CVE-2025-9352 State: PUBLISHED Published: 2025-08-28T01:46:28.617Z Last Updated: 2025-08-28T14:49:31.408Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: pronamic Products: Pronamic Google Maps Problem Types: CWE-79 Description: The Pronamic Google Maps plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the description field in all versions up to, and including, 2.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional An
ove, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/06752651-4c7f-48dd-989c-c254c6ca7ae4?source=cve - https://github.com/pronamic/wp-pronamic-google-maps/commit/b71e6f6a8fc61ac1065a0a2789490cb058b1bffe - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3349668%40pronamic-google-maps&new=3349668%40pronamic-google-maps&sfp_email=&sfph_mail=
CVE ID: CVE-2025-9353 State: PUBLISHED Published: 2025-09-24T12:27:28.647Z Last Updated: 2025-09-24T13:00:24.349Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: themifyme Products: Themify Builder Problem Types: CWE-79 Description: The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in all versions up to, and including, 7.6.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was par
ct arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 7.6.9. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/508e97a0-9757-426c-bf0f-cdce6b489ce7?source=cve - https://plugins.trac.wordpress.org/browser/themify-builder/trunk/templates/template-icon.php#L95 - https://plugins.trac.wordpress.org/browser/themify-builder/trunk/templates/template-fancy-heading.php#L73 - https://plugins.trac.wordpress.org/browser/themify-builder/trunk/templates/template-fancy-heading.php#L96 - https://plugins.trac.wordpress.org/browser/themify-builder/
ify-builder/trunk/templates/template-fancy-heading.php#L96 - https://plugins.trac.wordpress.org/browser/themify-builder/trunk/js/editor/build/modules.min.js - https://plugins.trac.wordpress.org/changeset/3366817/ - https://plugins.trac.wordpress.org/changeset/3355757/
CVE ID: CVE-2025-9355 State: PUBLISHED Published: 2025-08-22T21:02:07.395Z Last Updated: 2025-08-25T19:22:58.106Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this vulnerability is the function scheduleAdd of the file /goform/scheduleAdd. Performing manipulation of the argument ruleName results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been ma
eName results in stack-based buffer overflow. The attack is possible to be carried out remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321058 - https://vuldb.com/?ctiid.321058 - https://vuldb.com/?submit.631527 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_23/23.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_23/23.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9356 State: PUBLISHED Published: 2025-08-22T21:02:09.690Z Last Updated: 2025-08-26T14:29:54.383Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was determined in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Affected by this issue is the function inboundFilterAdd of the file /goform/inboundFilterAdd. Executing manipulation of the argument ruleName can lead to stack-based buffer overflow. The attack may be performed from a remote location. The exploit has
nt ruleName can lead to stack-based buffer overflow. The attack may be performed from a remote location. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321059 - https://vuldb.com/?ctiid.321059 - https://vuldb.com/?submit.631528 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_24/24.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9357 State: PUBLISHED Published: 2025-08-23T06:02:05.980Z Last Updated: 2025-08-25T18:19:15.727Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A vulnerability was identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This affects the function langSwitchByBBS of the file /goform/langSwitchByBBS. The manipulation of the argument langSelectionOnly leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available
leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321060 - https://vuldb.com/?ctiid.321060 - https://vuldb.com/?submit.631529 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_25/25.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_25/25.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9358 State: PUBLISHED Published: 2025-08-23T07:32:06.304Z Last Updated: 2025-08-25T18:14:09.791Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A security flaw has been discovered in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This vulnerability affects the function setSysAdm of the file /goform/setSysAdm. The manipulation of the argument admpasshint results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to
results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321061 - https://vuldb.com/?ctiid.321061 - https://vuldb.com/?submit.631530 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_26/26.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_26/26.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9359 State: PUBLISHED Published: 2025-08-23T09:32:06.481Z Last Updated: 2025-08-25T18:13:23.246Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A weakness has been identified in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. This issue affects the function RP_checkCredentialsByBBS of the file /goform/RP_checkCredentialsByBBS. This manipulation of the argument ssidhex/pwd causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made a
gument ssidhex/pwd causes stack-based buffer overflow. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.321062 - https://vuldb.com/?ctiid.321062 - https://vuldb.com/?submit.631531 - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_27/27.md - https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_27/27.md#poc - https://www.linksys.com/
CVE ID: CVE-2025-9360 State: PUBLISHED Published: 2025-08-23T10:32:06.525Z Last Updated: 2025-08-25T18:07:05.251Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Linksys Products: RE6250, RE6300, RE6350, RE6500, RE7000, RE9000 Problem Types: CWE-121, CWE-119 Description: A security vulnerability has been detected in Linksys RE6250, RE6300, RE6350, RE6500, RE7000 and RE9000 1.0.013.001/1.0.04.001/1.0.04.002/1.1.05.003/1.2.07.001. Impacted is the function accessControlAdd of the file /goform/accessControlAdd. Such manipulation of the argument ruleName/schedule leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed