Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-63220 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-20T16:18:36.463Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sound4 FIRST web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sound4helpdesk.com/ - https://www.sound4helpdesk.com/first-downloads/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-
ttps://www.sound4helpdesk.com/first-downloads/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63220_Sound4%20FIRST%20RCE
CVE ID: CVE-2025-63221 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-19T15:47:14.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Axel Technology puma devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device. References: - https://www.axeltechnology.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63221_Axel%20Technology%20puma%20-%20Broken%20Acces
/github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63221_Axel%20Technology%20puma%20-%20Broken%20Access%20Control
CVE ID: CVE-2025-63223 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-20T16:12:52.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Axel Technology StreamerMAX MK II devices (firmware versions 0.8.5 to 1.0.3) are vulnerable to Broken Access Control due to missing authentication on the /cgi-bin/gstFcgi.fcgi endpoint. Unauthenticated remote attackers can list user accounts, create new administrative users, delete users, and modify system settings, leading to full compromise of the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.axeltechnology.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/m
ichment: References: - https://www.axeltechnology.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63223_Axel%20Technology%20StreamerMAX%20MK%20II%20-%20Broken%20Access%20Control
CVE ID: CVE-2025-63224 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-19T16:22:56.142Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Itel DAB Encoder (IDEnc build 25aec8d) is vulnerable to Authentication Bypass due to improper JWT validation across devices. Attackers can reuse a valid JWT token obtained from one device to authenticate and gain administrative access to any other device running the same firmware, even if the passwords and networks are different. This allows full compromise of affected devices. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.itel.it/ - https://github.com/shiky8/my--cve-vulnerability-resea
tes: - CISA ADP Vulnrichment: References: - https://www.itel.it/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63224_Itel%20DAB%20Encoder%20Authentication%20Bypass
CVE ID: CVE-2025-63225 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T18:50:14.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Eurolab ELTS100_UBX device (firmware version ELTS100v1.UBX) is vulnerable to Broken Access Control due to missing authentication on critical administrative endpoints. Attackers can directly access and modify sensitive system and network configurations, upload firmware, and execute unauthorized actions without any form of authentication. This vulnerability allows remote attackers to fully compromise the device, control its functionality, and disrupt its operation. Additional Analyst Notes: - CISA ADP Vulnrichment: Ref
the device, control its functionality, and disrupt its operation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://eurolab-srl.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63225_Eurolab_ELTS100_UBX_Broken_Access_Control
CVE ID: CVE-2025-63226 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T18:52:23.807Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sencore SMP100 SMP Media Platform (firmware versions V4.2.160, V60.1.4, V60.1.29) is vulnerable to session hijacking due to improper session management on the /UserManagement.html endpoint. Attackers who are on the same network as the victim and have access to the target's logged-in session can access the endpoint and add new users without any authentication. This allows attackers to gain unauthorized access to the system and perform malicious activities. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
ed access to the system and perform malicious activities. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sencore.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63226_Sencore_SMP100_Session_Hijacking
CVE ID: CVE-2025-63227 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T15:46:24.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unrestricted file upload vulnerability in the /patch.php endpoint. An attacker with administrative credentials can upload arbitrary files (e.g., PHP webshells), which are stored in the /patch/ directory. This allows the attacker to execute arbitrary commands on the server, potentially leading to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/
ise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63227_Mozart_FM_Transmitter_authenticated_File_Upload
CVE ID: CVE-2025-63228 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T15:45:32.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains an unauthenticated file upload vulnerability in the /upload_file.php endpoint. An attacker can exploit this by sending a crafted POST request with a malicious file (e.g., a PHP webshell) to the server. The uploaded file is stored in the /upload/ directory, enabling remote code execution and full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/shiky8/m
itional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63228_Mozart_FM_Transmitter_Unauthenticated_File_Upload
CVE ID: CVE-2025-63229 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T14:09:03.395Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Mozart FM Transmitter web management interface on version WEBMOZZI-00287, contains a reflected Cross-Site Scripting (XSS) vulnerability in the /main0.php endpoint. By injecting a malicious JavaScript payload into the ?m= query parameter, an attacker can execute arbitrary code in the victim's browser, potentially stealing sensitive information, hijacking sessions, or performing unauthorized actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/shiky
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dbbroadcast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-63229_Mozart_FM_Transmitter_xss
CVE ID: CVE-2025-63243 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-19T15:43:58.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability exists in the password change functionality of Pixeon WebLaudos 25.1 (01). The sle_sSenha parameter to the loginAlterarSenha.asp file. An attacker can craft a malicious URL that, when visited by a victim, causes arbitrary JavaScript code to be executed in the victim's browser within the security context of the vulnerable application. This issue could allow attackers to steal session cookies, disclose sensitive information, perform unauthorized actions on behalf of the
allow attackers to steal session cookies, disclose sensitive information, perform unauthorized actions on behalf of the user, or conduct phishing attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.pixeon.com/ - https://medium.com/@wagneralves_87750/cve-2025-63243-reflected-cross-site-scripting-in-loginalterarsenha-asp-via-sle-slogin-parameter-53808fbbeeee
CVE ID: CVE-2025-63248 State: PUBLISHED Published: 2025-11-05T00:00:00.000Z Last Updated: 2025-11-05T20:03:23.117Z Vendors: n/a Products: n/a Problem Types: n/a Description: DWSurvey 6.14.0 is vulnerable to Incorrect Access Control. When deleting a questionnaire, replacing the questionnaire ID with the ID of another questionnaire can enable the deletion of other questionnaires. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/wkeyuan/DWSurvey - https://github.com/Chen1-Boop/CVE/blob/main/CVE-2025-63248.md
CVE ID: CVE-2025-63258 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-19T14:09:04.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote command execution (RCE) vulnerability was discovered in all H3C ERG3/ERG5 series routers and XiaoBei series routers, cloud gateways, and wireless access points (versions R0162P07, UAP700-WPT330-E2265, UAP672-WPT330-R2262, UAP662E-WPT330-R2262P03, WAP611-WPT330-R1348-OASIS, WAP662-WPT330-R2262, WAP662H-WPT330-R2262, USG300V2-WPT330-R2129, MSG300-WPT330-R1350, and MSG326-WPT330-R2129). Attackers are able to exploit this vulnerability via injecting crafted commands into the sessionid parameter. Additional Analyst N
are able to exploit this vulnerability via injecting crafted commands into the sessionid parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://h3c.com - https://zhiliao.h3c.com/Theme/details/232571
CVE ID: CVE-2025-63288 State: PUBLISHED Published: 2025-11-10T00:00:00.000Z Last Updated: 2025-11-12T20:18:35.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Open5GS 2.7.6, AMF crashes when receiving an abnormal NGSetupRequest message, resulting in denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open5gs/open5gs/issues/4087 - https://github.com/open5gs/open5gs/commit/be765fe2b03e350836272eee5afb3931bdfb86d5
CVE ID: CVE-2025-63289 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T15:08:35.839Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sogexia Android App Compile Affected SDK v35, Max SDK 32 and fixed in v36, was discovered to contain hardcoded encryption keys in the encryption_helper.dart file Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.linkedin.com/in/umanhonlengabriel - https://medium.com/@sudosu01/information-disclosure-hardcoded-encryption-keys-fc375abf68a3
CVE ID: CVE-2025-63291 State: PUBLISHED Published: 2025-11-14T00:00:00.000Z Last Updated: 2025-11-16T21:06:15.784Z Vendors: n/a Products: n/a Problem Types: n/a Description: When processing API requests, the Alteryx server 2022.1.1.42654 and 2024.1 used MongoDB object IDs to uniquely identify the data being requested by the caller. The Alteryx server did not check whether the authenticated user had permission to access the specified MongoDB object ID. By specifying particlar MongoDB object IDs, callers could obtain records for other users without proper authorization. Records retrievable using this attack included administrative API keys and private studio api keys. Additional Analyst Notes:
ds retrievable using this attack included administrative API keys and private studio api keys. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.alteryx.com/current/en/server/api-overview/alteryx-server-api-v3/server-api-configuration-and-authorization.html - https://help.alteryx.com/current/en/server/api-overview.html - https://aleksazatezalo.medium.com/alteryx-server-idor-advisory-782e3013ee38
CVE ID: CVE-2025-63292 State: PUBLISHED Published: 2025-11-17T00:00:00.000Z Last Updated: 2025-11-18T16:23:31.441Z Vendors: n/a Products: n/a Problem Types: n/a Description: Freebox v5 HD (firmware = 1.7.20), Freebox v5 Crystal (firmware = 1.7.20), Freebox v6 Révolution r1–r3 (firmware = 4.7.x), Freebox Mini 4K (firmware = 4.7.x), and Freebox One (firmware = 4.7.x) were discovered to expose subscribers' IMSI identifiers in plaintext during the initial phase of EAP-SIM authentication over the `FreeWifi_secure` network. During the EAP-Response/Identity exchange, the subscriber's full Network Access Identifier (NAI), which embeds the raw IMSI, is transmitted without encryption, tunneling, or ps
r's full Network Access Identifier (NAI), which embeds the raw IMSI, is transmitted without encryption, tunneling, or pseudonymization. An attacker located within Wi-Fi range (~100 meters) can passively capture these frames without requiring user interaction or elevated privileges. The disclosed IMSI enables device tracking, subscriber correlation, and long-term monitoring of user presence near any broadcasting Freebox device. The vendor acknowledged the vulnerability, and the `FreeWifi_secure` service is planned for full deactivation by 1 October 2025. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/7h30th3r0n3/1a0fadb19f1528e3d3f6bad9f680c3b0#file-c
otes: - CISA ADP Vulnrichment: References: - https://gist.github.com/7h30th3r0n3/1a0fadb19f1528e3d3f6bad9f680c3b0#file-cve-2025-63292-frebox-imsi-md - https://7h30th3r0n3.fr/the-vulnerability-that-killed-freewifi_secure/
CVE ID: CVE-2025-63293 State: PUBLISHED Published: 2025-11-03T00:00:00.000Z Last Updated: 2025-11-03T20:48:19.963Z Vendors: n/a Products: n/a Problem Types: n/a Description: FairSketch Rise Ultimate Project Manager & CRM 3.9.4 is vulnerable to Insecure Permissions. A remote authenticated user can append comments or upload attachments to tickets for which they lack view or edit authorization, due to missing authorization checks in the ticketing/commenting API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://fairsketch.com - https://medium.com/@barrattjack89/cve-2025-63293-insecure-permissions-in-rise-crm-3-9-4-452c88c24195
CVE ID: CVE-2025-63294 State: PUBLISHED Published: 2025-11-04T00:00:00.000Z Last Updated: 2025-11-04T15:52:40.974Z Vendors: n/a Products: n/a Problem Types: n/a Description: WorkDo HRM SaaS HR and Payroll Tool 8.1 is affected vulnerable to Insecure Permissions. An authenticated user can create leave or resignation records on behalf of other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://codecanyon.net/item/hrm-saas-hr-and-payroll-tool/25982934 - https://workdo.io/hrm-saas-human-resource-management-software/ - https://medium.com/@barrattjack89/cve-2025-63294-insecure-permissions-in-workdo-hrm-saas-hr-and-payroll-8-1-d6bb03c21177
CVE ID: CVE-2025-63296 State: PUBLISHED Published: 2025-11-10T00:00:00.000Z Last Updated: 2025-11-12T20:30:52.093Z Vendors: n/a Products: n/a Problem Types: n/a Description: KERUI K259 5MP Wi-Fi / Tuya Smart Security Camera firmware v33.53.87 contains a code execution vulnerability in its boot/update logic: during startup /usr/sbin/anyka_service.sh scans mounted TF/SD cards and, if /mnt/update.nor.sh is present, copies it to /tmp/net.sh and executes it as root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/t4e-3/082cdd0b7ee6b650c7aaae97fd4e016c - https://github.com/t4e-3/CVE-2025-63296
CVE ID: CVE-2025-63298 State: PUBLISHED Published: 2025-10-30T00:00:00.000Z Last Updated: 2025-10-30T20:57:36.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: A path traversal vulnerability was identified in SourceCodester Pet Grooming Management System 1.0, affecting the admin/manage_website.php component. An authenticated user with administrative privileges can leverage this flaw by submitting a specially crafted POST request, enabling the deletion of arbitrary files on the web server or underlying operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sourcecodester.com/sites/default/files/download/mayuri_k/petgrooming_erp.zip - https
richment: References: - https://www.sourcecodester.com/sites/default/files/download/mayuri_k/petgrooming_erp.zip - https://github.com/z3rObyte/CVE-2025-63298
CVE ID: CVE-2025-63307 State: PUBLISHED Published: 2025-11-06T00:00:00.000Z Last Updated: 2025-11-06T19:08:37.837Z Vendors: n/a Products: n/a Problem Types: n/a Description: alexusmai laravel-file-manager 3.3.1 is vulnerable to Cross Site Scripting (XSS). The application permits user-controlled upload, create, and rename of files to HTML and SVG types and serves those files inline without adequate content-type validation or output sanitization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/alexusmai/laravel-file-manager - https://github.com/Theethat-Thamwasin/CVE-2025-63307
CVE ID: CVE-2025-63334 State: PUBLISHED Published: 2025-11-05T00:00:00.000Z Last Updated: 2025-11-05T20:18:30.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: PocketVJ CP PocketVJ-CP-v3 pvj version 3.9.1 contains an unauthenticated remote code execution vulnerability in the submit_opacity.php component. The application fails to sanitize user input in the opacityValue POST parameter before passing it to a shell command, allowing remote attackers to execute arbitrary commands with root privileges on the underlying system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magdesign/PocketVJ-CP-v3/releases/tag/release - https://gist.github.com/mam
lnrichment: References: - https://github.com/magdesign/PocketVJ-CP-v3/releases/tag/release - https://gist.github.com/mamdouhalrekabi-ops/e7686a0bdd197c77c1b54191e1a2880f
CVE ID: CVE-2025-63353 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T15:55:57.714Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in FiberHome GPON ONU HG6145F1 RP4423 allows the device's factory default Wi-Fi password (WPA/WPA2 pre-shared key) to be predicted from the SSID. The device generates default passwords using a deterministic algorithm that derives the router passphrase from the SSID, enabling an attacker who can observe the SSID to predict the default password without authentication or user interaction. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hanianis/CVE-2025-63353 - https://med
dditional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hanianis/CVE-2025-63353 - https://medium.com/@hanianis.bouzid/fiberhome-gpon-onu-model-hg6145f1-router-predictable-wifi-passwords-and-real-risks-d8e54da385d3
CVE ID: CVE-2025-63371 State: PUBLISHED Published: 2025-11-19T00:00:00.000Z Last Updated: 2025-11-20T14:51:13.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in the functionality responsible for extracting and handling ZIP archive contents. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.onecommander.com/ - https://jeroscope.com/advisories/2025/jero-2025-007/
CVE ID: CVE-2025-63384 State: PUBLISHED Published: 2025-11-10T00:00:00.000Z Last Updated: 2025-11-12T20:39:11.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability was discovered in RISC-V Rocket-Chip v1.6 and before implementation where the SRET (Supervisor-mode Exception Return) instruction fails to correctly transition the processor's privilege level. Instead of downgrading from Machine-mode (M-mode) to Supervisor-mode (S-mode) as specified by the sstatus.SPP bit, the processor incorrectly remains in M-mode, leading to a critical privilege retention vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chipsalliance/ro
tion vulnerability. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/chipsalliance/rocket-chip.git - https://github.com/107040503/RISC-V-Vulnerability-Disclosure_SRET
CVE ID: CVE-2025-63396 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T15:54:49.051Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in PyTorch v2.5 and v2.7.1. Omission of profiler.stop() can cause torch.profiler.profile (PythonTracer) to crash or hang during finalization, leading to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Daisy2ang - http://pytorch.com - https://github.com/pytorch/pytorch - https://github.com/pytorch/pytorch/issues/156563
CVE ID: CVE-2025-63397 State: PUBLISHED Published: 2025-11-10T00:00:00.000Z Last Updated: 2025-11-12T20:29:15.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Improper input validation in OneFlow v0.9.0 allows attackers to cause a segmentation fault via adding a Python sequence to the native code during broadcasting/type conversion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Daisy2ang - http://oneflow.com - https://github.com/Oneflow-Inc/oneflow - https://github.com/Oneflow-Inc/oneflow/issues/10666
CVE ID: CVE-2025-63406 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-19T14:27:09.172Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Intermesh BV GroupOffice vulnerable before v.25.0.47 and 6.8.136 allows a remote attacker to execute arbitrary code via the dbToApi() and eval() in the FunctionField.php Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://noahheraud.com/posts/CVE-2025-63406/ - https://github.com/WinDyAlphA/CVE-2025-63406-PoC
CVE ID: CVE-2025-63408 State: PUBLISHED Published: 2025-11-18T00:00:00.000Z Last Updated: 2025-11-18T17:00:51.156Z Vendors: n/a Products: n/a Problem Types: n/a Description: Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive information, cause a server-side forgery request (SSRF), or execute OS commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.ericholub.com/blog/agent-dvr-rce/ - https://ispysoftware.github.io/Agent_API/
CVE ID: CVE-2025-63416 State: PUBLISHED Published: 2025-11-05T00:00:00.000Z Last Updated: 2025-11-05T19:08:09.280Z Vendors: n/a Products: n/a Problem Types: n/a Description: ** exclusively-hosted-service ** A Stored Cross-Site Scripting (XSS) vulnerability in the chat functionality of the SelfBest platform 2023.3 allows authenticated low-privileged attackers to execute arbitrary JavaScript in the context of other users' sessions. This can be exploited to access administrative data and functions, leading to privilege escalation and full compromise of sensitive user data, as demonstrated by the ability to fetch and exfiltrate the contents of the /admin/users endpoint. Additional Analyst Notes: