Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329950 - https://vuldb.com/?ctiid.329950 - https://vuldb.com/?submit.674201 - https://github.com/hellonewbie/tutorial/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-12281 State: PUBLISHED Published: 2025-10-27T13:32:08.483Z Last Updated: 2025-10-27T14:21:09.648Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Client Details System Problem Types: CWE-79, CWE-94 Description: A vulnerability was determined in code-projects Client Details System 1.0. Impacted is an unknown function of the file /admin/clientview.php. Executing manipulation can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329951 - https://vuldb.c
tilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329951 - https://vuldb.com/?ctiid.329951 - https://vuldb.com/?submit.674203 - https://github.com/hellonewbie/tutorial/issues/9 - https://code-projects.org/
CVE ID: CVE-2025-12282 State: PUBLISHED Published: 2025-10-27T13:32:11.414Z Last Updated: 2025-10-27T13:32:11.414Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Client Details System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in code-projects Client Details System 1.0. The affected element is an unknown function of the file /admin/manage-users.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit is publicly available and might be used. References: - https://vuldb.com/?id.329952 - https://vuldb.com/?ctiid.329952 - https://vuldb.com/?submit.674206 - https://
ferences: - https://vuldb.com/?id.329952 - https://vuldb.com/?ctiid.329952 - https://vuldb.com/?submit.674206 - https://vuldb.com/?submit.674217 - https://github.com/hellonewbie/tutorial/issues/10 - https://github.com/hellonewbie/tutorial/issues/12 - https://code-projects.org/
CVE ID: CVE-2025-12283 State: PUBLISHED Published: 2025-10-27T14:02:05.718Z Last Updated: 2025-10-27T14:02:05.718Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: code-projects Products: Client Details System Problem Types: CWE-639, CWE-285 Description: A security flaw has been discovered in code-projects Client Details System 1.0. The impacted element is an unknown function. The manipulation results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be exploited. References: - https://vuldb.com/?id.329953 - https://vuldb.com/?ctiid.329953 - https://vuldb.com/?submit.674213 - https:
References: - https://vuldb.com/?id.329953 - https://vuldb.com/?ctiid.329953 - https://vuldb.com/?submit.674213 - https://github.com/hellonewbie/tutorial/issues/11 - https://code-projects.org/
CVE ID: CVE-2025-12284 State: PUBLISHED Published: 2025-10-26T16:21:56.272Z Last Updated: 2025-10-28T14:35:55.307Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-20 Description: Lack of Input Validation in the web UI might lead to potential exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12285 State: PUBLISHED Published: 2025-10-26T16:24:09.001Z Last Updated: 2025-10-28T14:44:03.485Z Vendors: Azure Access Technology Products: BLU-IC2, BLU-IC4 Problem Types: CWE-20 Description: Missing Initial Password Change.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through 1.19.5. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://azure-access.com/security-advisories
CVE ID: CVE-2025-12286 State: PUBLISHED Published: 2025-10-27T14:02:08.168Z Last Updated: 2025-10-27T14:02:08.168Z Severity: HIGH (CVSS 7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:R) Vendors: n/a Products: VeePN Problem Types: CWE-428, CWE-426 Description: A weakness has been identified in VeePN up to 1.6.2. This affects an unknown function of the file C:\Program Files (x86)\VeePN\avservice\avservice.exe of the component AVService. This manipulation causes unquoted search path. The attack requires local access. A high degree of complexity is needed for the attack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not resp
tack. The exploitability is reported as difficult. The vendor was contacted early about this disclosure but did not respond in any way. References: - https://vuldb.com/?id.329954 - https://vuldb.com/?ctiid.329954 - https://vuldb.com/?submit.672512 - https://github.com/lakshayyverma/CVE-Discovery/blob/main/VeePn.md
CVE ID: CVE-2025-12287 State: PUBLISHED Published: 2025-10-27T14:32:06.663Z Last Updated: 2025-10-27T14:32:06.663Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Bdtask Products: Wholesale Inventory Control and Inventory Management System Problem Types: CWE-89, CWE-74 Description: A security vulnerability has been detected in Bdtask Wholesale Inventory Control and Inventory Management System up to 20251013. This impacts an unknown function of the file /Admin_dashboard/edit_profile. Such manipulation of the argument first_name/last_name leads to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vend
to sql injection. The attack may be launched remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way. References: - https://vuldb.com/?id.329955 - https://vuldb.com/?ctiid.329955 - https://vuldb.com/?submit.674274 - https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-12287.md
CVE ID: CVE-2025-12288 State: PUBLISHED Published: 2025-10-27T14:32:09.211Z Last Updated: 2025-10-30T14:16:30.330Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Bdtask Products: Pharmacy Management System Problem Types: CWE-639, CWE-285 Description: A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4. Affected is an unknown function of the file /user/edit_user/ of the component User Profile Handler. Performing manipulation results in authorization bypass. Remote exploitation of the attack is possible. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in
The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329956 - https://vuldb.com/?ctiid.329956 - https://vuldb.com/?submit.674883 - https://github.com/4m3rr0r/PoCVulDb/blob/main/CVE-2025-12288.md
CVE ID: CVE-2025-12289 State: PUBLISHED Published: 2025-10-27T15:02:05.980Z Last Updated: 2025-10-27T15:55:56.418Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Sui Shang Information Technology Products: Suishang Enterprise-Level B2B2C Multi-User Mall System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this vulnerability is an unknown functionality of the file /Point/index/activity_state/1/category_id/1001. Executing manipulation of the argument category_id can lead to cross site scripting. The attack can be executed remotely. The expl
manipulation of the argument category_id can lead to cross site scripting. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329957 - https://vuldb.com/?ctiid.329957 - https://vuldb.com/?submit.675435 - https://github.com/1276486/CVE/issues/19
CVE ID: CVE-2025-12290 State: PUBLISHED Published: 2025-10-27T15:02:08.700Z Last Updated: 2025-10-27T15:55:50.999Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Sui Shang Information Technology Products: Suishang Enterprise-Level B2B2C Multi-User Mall System Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Sui Shang Information Technology Suishang Enterprise-Level B2B2C Multi-User Mall System 1.0. Affected by this issue is some unknown functionality of the file /i/359. The manipulation of the argument keywords leads to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the publi
to cross site scripting. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329958 - https://vuldb.com/?ctiid.329958 - https://vuldb.com/?submit.675436 - https://github.com/1276486/CVE/issues/18
CVE ID: CVE-2025-12291 State: PUBLISHED Published: 2025-10-27T15:32:05.824Z Last Updated: 2025-10-30T14:16:42.162Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: ashymuzuro Products: Full-Ecommece-Website, Muzuro Ecommerce System Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in ashymuzuro Full-Ecommece-Website and Muzuro Ecommerce System up to 1.1.0. This affects an unknown part of the file /admin/index.php?add_product of the component Add Product Page. The manipulation results in unrestricted upload. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this d
e performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329959 - https://vuldb.com/?ctiid.329959 - https://vuldb.com/?submit.675846 - https://github.com/Lianhaorui/Report/blob/main/FileUpload-1.docx
CVE ID: CVE-2025-12292 State: PUBLISHED Published: 2025-10-27T15:32:09.216Z Last Updated: 2025-10-30T14:16:59.817Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Point of Sales Problem Types: CWE-89, CWE-74 Description: A vulnerability was determined in SourceCodester Point of Sales 1.0. This vulnerability affects unknown code of the file /index.php. This manipulation of the argument Username causes sql injection. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329960 - https://vuldb.com/?c
ed. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329960 - https://vuldb.com/?ctiid.329960 - https://vuldb.com/?submit.675847 - https://github.com/J-Fy2767/CVE/issues/2 - https://www.sourcecodester.com/
CVE ID: CVE-2025-12293 State: PUBLISHED Published: 2025-10-27T16:02:07.688Z Last Updated: 2025-10-27T20:31:16.208Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Point of Sales Problem Types: CWE-89, CWE-74 Description: A vulnerability was identified in SourceCodester Point of Sales 1.0. This issue affects some unknown processing of the file /category.php. Such manipulation of the argument Category leads to sql injection. It is possible to launch the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329961 - https://vuldb.com/?cti
. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329961 - https://vuldb.com/?ctiid.329961 - https://vuldb.com/?submit.675852 - https://github.com/J-Fy2767/CVE/issues/4 - https://www.sourcecodester.com/
CVE ID: CVE-2025-12294 State: PUBLISHED Published: 2025-10-27T16:02:10.885Z Last Updated: 2025-10-27T20:31:41.606Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: SourceCodester Products: Point of Sales Problem Types: CWE-89, CWE-74 Description: A security flaw has been discovered in SourceCodester Point of Sales 1.0. Impacted is an unknown function of the file /delete_category.php. Performing manipulation of the argument ID results in sql injection. The attack can be initiated remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329962 - https://vuldb.
xploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329962 - https://vuldb.com/?ctiid.329962 - https://vuldb.com/?submit.675856 - https://github.com/J-Fy2767/CVE/issues/6 - https://www.sourcecodester.com/
CVE ID: CVE-2025-12295 State: PUBLISHED Published: 2025-10-27T16:32:06.340Z Last Updated: 2025-10-27T17:44:26.651Z Severity: N/A (CVSS 6.8 AV:N/AC:H/Au:M/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DAP-2695 Problem Types: CWE-347, CWE-345 Description: A weakness has been identified in D-Link DAP-2695 2.00RC13. The affected element is the function sub_40C6B8 of the component Firmware Update Handler. Executing manipulation can lead to improper verification of cryptographic signature. The attack can be launched remotely. Attacks of this nature are highly complex. The exploitability is described as difficult. The exploit has been made available to the public and could be exploited.
The exploitability is described as difficult. The exploit has been made available to the public and could be exploited. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329963 - https://vuldb.com/?ctiid.329963 - https://vuldb.com/?submit.675854 - https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DAP-2695_Inte.md - https://www.dlink.com/
CVE ID: CVE-2025-12296 State: PUBLISHED Published: 2025-10-27T16:32:09.223Z Last Updated: 2025-10-30T14:17:17.330Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DAP-2695 Problem Types: CWE-78, CWE-77 Description: A security vulnerability has been detected in D-Link DAP-2695 2.00RC13. The impacted element is the function sub_4174B0 of the component Firmware Update Handler. The manipulation leads to os command injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnri
bility only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329964 - https://vuldb.com/?ctiid.329964 - https://vuldb.com/?submit.675855 - https://github.com/IOTRes/IOT_Firmware_Update/blob/main/Dlink/DAP-2695_Injection.md - https://www.dlink.com/
CVE ID: CVE-2025-12297 State: PUBLISHED Published: 2025-10-27T16:32:14.311Z Last Updated: 2025-10-27T17:26:20.100Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: atjiu Products: pybbs Problem Types: CWE-200, CWE-284 Description: A vulnerability was detected in atjiu pybbs up to 6.0.0. This affects an unknown function of the file UserApiController.java. The manipulation results in information disclosure. The attack may be launched remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329965 - https://vuldb.com/?ctiid.329965 - https://vuldb.com/?submit.675906 -
hment: References: - https://vuldb.com/?id.329965 - https://vuldb.com/?ctiid.329965 - https://vuldb.com/?submit.675906 - https://www.yuque.com/yuqueyonghutxhnup/pbbo84/ruh1cg5isrmugkh3?singleDoc
CVE ID: CVE-2025-12298 State: PUBLISHED Published: 2025-10-27T17:02:06.443Z Last Updated: 2025-10-27T17:23:52.692Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-79, CWE-94 Description: A vulnerability was identified in code-projects Simple Food Ordering System 1.0. This affects an unknown part of the file /editcategory.php. The manipulation of the argument pname leads to cross site scripting. It is possible to initiate the attack remotely. The exploit is publicly available and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329970 - https
and might be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329970 - https://vuldb.com/?ctiid.329970 - https://vuldb.com/?submit.675998 - https://github.com/underatted/CVE/issues/19 - https://code-projects.org/
CVE ID: CVE-2025-12299 State: PUBLISHED Published: 2025-10-27T17:02:09.143Z Last Updated: 2025-10-27T17:20:34.973Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-79, CWE-94 Description: A security flaw has been discovered in code-projects Simple Food Ordering System 1.0. This vulnerability affects unknown code of the file /addproduct.php. The manipulation of the argument pname/category/price results in cross site scripting. It is possible to launch the attack remotely. The exploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
xploit has been released to the public and may be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329971 - https://vuldb.com/?ctiid.329971 - https://vuldb.com/?submit.676011 - https://github.com/underatted/CVE/issues/18 - https://code-projects.org/
CVE ID: CVE-2025-12300 State: PUBLISHED Published: 2025-10-27T17:32:05.932Z Last Updated: 2025-10-27T20:34:02.804Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-79, CWE-94 Description: A weakness has been identified in code-projects Simple Food Ordering System 1.0. This issue affects some unknown processing of the file /addcategory.php. This manipulation of the argument cname causes cross site scripting. The attack can be initiated remotely. The exploit has been made available to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
ble to the public and could be exploited. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329972 - https://vuldb.com/?ctiid.329972 - https://vuldb.com/?submit.676012 - https://github.com/underatted/CVE/issues/20 - https://code-projects.org/
CVE ID: CVE-2025-12301 State: PUBLISHED Published: 2025-10-27T17:32:08.574Z Last Updated: 2025-10-27T19:07:17.223Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-434, CWE-284 Description: A security vulnerability has been detected in code-projects Simple Food Ordering System 1.0. Impacted is an unknown function of the file /editproduct.php. Such manipulation of the argument photo leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329
sed publicly and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329973 - https://vuldb.com/?ctiid.329973 - https://vuldb.com/?submit.676087 - https://github.com/underatted/CVE/issues/22 - https://code-projects.org/
CVE ID: CVE-2025-12302 State: PUBLISHED Published: 2025-10-27T18:02:06.307Z Last Updated: 2025-10-27T19:06:09.730Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Simple Food Ordering System Problem Types: CWE-79, CWE-94 Description: A vulnerability was detected in code-projects Simple Food Ordering System 1.0. The affected element is an unknown function of the file /editproduct.php. Performing manipulation of the argument pname/category/price results in cross site scripting. The attack may be initiated remotely. The exploit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
oit is now public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329974 - https://vuldb.com/?ctiid.329974 - https://vuldb.com/?submit.676098 - https://github.com/underatted/CVE/issues/21 - https://code-projects.org/
CVE ID: CVE-2025-12303 State: PUBLISHED Published: 2025-10-27T18:02:11.761Z Last Updated: 2025-10-27T18:50:39.152Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Curfew e-Pass Management System Problem Types: CWE-79, CWE-94 Description: A flaw has been found in PHPGurukul Curfew e-Pass Management System 1.0. The impacted element is an unknown function of the file admin-profile.php. Executing manipulation of the argument adminname/email can lead to cross site scripting. The attack may be launched remotely. The exploit has been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
been published and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329975 - https://vuldb.com/?ctiid.329975 - https://vuldb.com/?submit.676197 - https://github.com/kiyoleee/CVE/issues/1 - https://phpgurukul.com/
CVE ID: CVE-2025-12304 State: PUBLISHED Published: 2025-10-27T18:32:05.681Z Last Updated: 2025-10-27T20:34:32.121Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: dulaiduwang003 Products: TIME-SEA-PLUS Problem Types: CWE-285, CWE-266 Description: A vulnerability has been found in dulaiduwang003 TIME-SEA-PLUS up to fb299162f18498dd9cf17da906886d80a077d53b. This affects the function alipayIsSucceed of the file PayController.java of the component Order Status Handler. The manipulation leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Note
itation of the attack is possible. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329976 - https://vuldb.com/?ctiid.329976 - https://vuldb.com/?submit.676283 - https://github.com/Hwwg/cve/issues/3
CVE ID: CVE-2025-12305 State: PUBLISHED Published: 2025-10-27T18:32:08.283Z Last Updated: 2025-10-27T20:34:58.437Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: quequnlong Products: shiyi-blog Problem Types: CWE-502, CWE-20 Description: A vulnerability was found in quequnlong shiyi-blog up to 1.2.1. This impacts an unknown function of the file src/main/java/com/mojian/controller/SysJobController.java of the component Job Handler. The manipulation results in deserialization. The attack can be executed remotely. The exploit has been made public and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329977 - htt
c and could be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.329977 - https://vuldb.com/?ctiid.329977 - https://vuldb.com/?submit.676725 - https://vuldb.com/?submit.676730 - https://github.com/dongodid/cve-sub/blob/main/shiyi-blog/RCE.md