Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-29452 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-18T15:49:22.759Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Seo Panel 4.11.0 allows a remote attacker to obtain sensitive information via the Proxy Manager component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/dsvvsv8get5i2dzg
CVE ID: CVE-2025-29453 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T17:45:56.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the my-contacts-settings component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/pgg9q7kdbkggtq08
CVE ID: CVE-2025-29454 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T17:50:37.428Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Upload function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/cyql4n0xiubspntl
CVE ID: CVE-2025-29455 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T17:49:24.718Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the Travel Ideas" function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/hfonnxwggi2kfgmw
CVE ID: CVE-2025-29456 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-21T17:47:25.283Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in personal-management-system Personal Management System 1.4.65 allows a remote attacker to obtain sensitive information via the create Notes function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/ckogwt5qwnkd821k
CVE ID: CVE-2025-29457 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-23T12:59:36.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/vro4dvxzuiwlg6uv - https://docs.mybb.com/1.8/administration/security/protection/#limit-access-to-private-hosts-and-ip-addresses
CVE ID: CVE-2025-29458 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-23T13:01:06.479Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Change Avatar function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/qu7zyyxr84qno64e - https://docs.mybb.com/1.8/administration/security/protection/#limit-access-to-private-hosts-and-ip-addresses
CVE ID: CVE-2025-29459 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-23T13:02:24.406Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Mail function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/ggnmg5nnu635kvrc - https://docs.mybb.com/1.8/administration/security/protection/#limit-access-to-private-hosts-and-ip-addresses
CVE ID: CVE-2025-29460 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-23T13:04:01.605Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Add Mycode function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/fgg059stiog457ch - https://docs.mybb.com/1.8/administration/security/protection/#limit-access-to-private-hosts-and-ip-addresses
CVE ID: CVE-2025-29461 State: PUBLISHED Published: 2025-04-17T00:00:00.000Z Last Updated: 2025-04-18T14:02:36.979Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in a-blogcms 3.1.15 allows a remote attacker to obtain sensitive information via the /bid/1/admin/entry-edit/ path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/xagedb4qdy5gouep
CVE ID: CVE-2025-29462 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-07T14:54:47.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Tenda Ac15 V15.13.07.13. The vulnerability occurs when the webCgiGetUploadFile function calls the socketRead function to process HTTP request messages, resulting in the overwriting of a buffer on the stack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackmd.io/@7QWW9EKUSNGgPWZNOHkL2w/Sk4xbvejyx
CVE ID: CVE-2025-29471 State: PUBLISHED Published: 2025-04-15T00:00:00.000Z Last Updated: 2025-04-16T18:31:29.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Scripting vulnerability in Nagios Log Server v.2024R1.3.1 allows a remote attacker to execute arbitrary code via a payload into the Email field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://youtu.be/MvJuIkdTSQg - https://www.nagios.com/changelog/#log-server - https://www.exploit-db.com/exploits/52117
CVE ID: CVE-2025-29476 State: PUBLISHED Published: 2025-04-04T00:00:00.000Z Last Updated: 2025-04-07T18:42:21.615Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in compress_chunk_fuzzer with oss-fuzz on commit 16450518afddcb3139de627157208e49bfef6987 in c-blosc2 v.2.17.0 and before. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Blosc/c-blosc2/issues/656 - https://github.com/lmarch2/poc/blob/main/c-blosk2/c-blosk2.md
CVE ID: CVE-2025-29477 State: PUBLISHED Published: 2025-04-04T00:00:00.000Z Last Updated: 2025-04-07T18:31:24.907Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the function consume_event. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md
CVE ID: CVE-2025-29478 State: PUBLISHED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-04-08T13:31:09.929Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lmarch2/poc/blob/main/fluent-bit/fluent-bit.md
CVE ID: CVE-2025-29479 State: REJECTED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-04-12T16:52:25.366Z Description: No description available.
CVE ID: CVE-2025-29480 State: PUBLISHED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-07-24T14:34:48.120Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function. NOTE: the Supplier indicates that the report is invalid and could not be reproduced. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lmarch2/poc/blob/main/gdal/gdal.md - https://github.com/OSGeo/gdal/issues/12188#issuecomment-2847873794
CVE ID: CVE-2025-29481 State: PUBLISHED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-04-09T15:02:32.831Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lmarch2/poc/blob/main/libbpf/libbpf.md
CVE ID: CVE-2025-29482 State: PUBLISHED Published: 2025-04-07T00:00:00.000Z Last Updated: 2025-04-09T14:58:06.917Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/lmarch2/poc/blob/main/libheif/libheif.md
CVE ID: CVE-2025-29483 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-27T18:11:26.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a memory leak via the parseSWF_ENABLEDEBUGGER2 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330
CVE ID: CVE-2025-29484 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T16:23:26.105Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-memory error in the parseABC_NS_SET_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330
CVE ID: CVE-2025-29485 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T14:53:19.770Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileRETURN function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz4.readme
CVE ID: CVE-2025-29486 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T14:55:07.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a memory leak via the parseSWF_PLACEOBJECT3 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz3.readme
CVE ID: CVE-2025-29487 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T14:56:21.004Z Vendors: n/a Products: n/a Problem Types: n/a Description: An out-of-memory error in the parseABC_STRING_INFO function of libming v0.4.8 allows attackers to cause a Denial of Service (DoS) due to allocator exhaustion. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz6.readme
CVE ID: CVE-2025-29488 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T14:57:58.959Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a memory leak via the parseSWF_INITACTION function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz5.readme
CVE ID: CVE-2025-29489 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:00:32.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHLINESTYLES function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz7.readme
CVE ID: CVE-2025-29490 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:02:42.202Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileCALLMETHOD function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz8.readme
CVE ID: CVE-2025-29491 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T16:22:00.502Z Vendors: n/a Products: n/a Problem Types: n/a Description: An allocation-size-too-big error in the parseSWF_DEFINEBINARYDATA function of libming v0.48 allows attackers to cause a Denial of Service (DoS) via supplying a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz10.readme
CVE ID: CVE-2025-29492 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:06:56.981Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileSETVARIABLE function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz9.readme
CVE ID: CVE-2025-29493 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T16:20:39.420Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETPROPERTY function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz11.readme
CVE ID: CVE-2025-29494 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T16:20:00.322Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileGETMEMBER function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz12.readme
CVE ID: CVE-2025-29496 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T16:19:14.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a segmentation fault via the decompileDUPLICATECLIP function. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted SWF file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz14.readme
CVE ID: CVE-2025-29497 State: PUBLISHED Published: 2025-03-27T00:00:00.000Z Last Updated: 2025-03-28T15:09:30.455Z Vendors: n/a Products: n/a Problem Types: n/a Description: libming v0.4.8 was discovered to contain a memory leak via the parseSWF_MORPHFILLSTYLES function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/libming/libming/issues/330 - https://github.com/goodmow/PoC/blob/main/libming/libming-fuzz15.readme
CVE ID: CVE-2025-29504 State: PUBLISHED Published: 2025-04-03T00:00:00.000Z Last Updated: 2025-04-04T15:20:58.512Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/huang-yk/student-manage/issues/IBQ14H
CVE ID: CVE-2025-29509 State: PUBLISHED Published: 2025-05-09T00:00:00.000Z Last Updated: 2025-05-12T15:03:02.039Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jan v0.5.14 and before is vulnerable to remote code execution (RCE) when the user clicks on a rendered link in the conversation, due to opening external website in the app and the exposure of electronAPI, with a lack of filtering of URL when calling shell.openExternal(). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Suuuuuzy/b8fa2fa083793c460e3686c182f8c4d1 - https://drive.google.com/file/d/1qDztNtn2merSjYgPRLWFFXqlXM9tcrjD/view?usp=sharing
CVE ID: CVE-2025-29512 State: PUBLISHED Published: 2025-04-18T00:00:00.000Z Last Updated: 2025-04-18T18:22:04.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code and potentially render the blacklist IP functionality unusable until content is removed via the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nodebb.com - https://www.tonysec.com/posts/cve-2025-29512/
CVE ID: CVE-2025-29513 State: PUBLISHED Published: 2025-04-18T00:00:00.000Z Last Updated: 2025-04-18T18:22:59.153Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-Site Scripting (XSS) vulnerability in NodeBB v4.0.4 and before allows remote attackers to store arbitrary code in the admin API Access token generator. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://nodebb.com - https://www.tonysec.com/posts/cve-2025-29513/
CVE ID: CVE-2025-29514 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T19:14:36.934Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the config.xgi function of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to download the configuration file via providing a crafted web request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/1fc5dcc63e4b4e9f5523167be11abf17
CVE ID: CVE-2025-29515 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T20:00:04.005Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the DELT_file.xgi endpoint of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to modify arbitrary settings within the device's XML database, including the administrator’s password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/0bf32385245f71dfe11b0ef77c468392
CVE ID: CVE-2025-29516 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T20:05:17.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the backup function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/07639885a3357674f44b44e6e891bb34
CVE ID: CVE-2025-29517 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T18:38:36.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the traceroute6 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/8ddb33c26f3a5987f5382a3d7744c241
CVE ID: CVE-2025-29519 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T15:20:22.874Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability in the EXE parameter of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to execute arbitrary commands via supplying a crafted GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/5cf73b94dd0f32a72f0b33b17429a423
CVE ID: CVE-2025-29520 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T16:02:10.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the Maintenance module of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows authenticated attackers with low-level privileges to arbitrarily change the high-privileged account passwords and escalate privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/da01c377030fd8c92274feca54661202
CVE ID: CVE-2025-29521 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T16:01:12.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure default credentials for the Adminsitrator account of D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 allows attackers to escalate privileges via a bruteforce attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/73f06459df5ac3257ff451e382497832
CVE ID: CVE-2025-29522 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T15:59:38.505Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/f44abd7f660a73b0c7f23b7b215d2e05
CVE ID: CVE-2025-29523 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T15:55:59.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DSL-7740C with firmware DSL7740C.V6.TR069.20211230 was discovered to contain a command injection vulnerability via the ping6 function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dlink.com/en/security-bulletin/ - https://gist.github.com/stevenyu113228/6dbc5eb4311390e4e9a8f89fdb659406
CVE ID: CVE-2025-29524 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T15:57:58.597Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in the component /cgi-bin/system_diagnostic_main.asp of DASAN GPON ONU H660WM H660WMR210825 allows attackers to access sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/stevenyu113228/fd09d455214193525f5957c4e4046386
CVE ID: CVE-2025-29525 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-26T15:56:58.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: DASAN GPON ONU H660WM OS version H660WMR210825 Hardware version DS-E5-583-A1 was discovered to contain insecure default credentials in the modem's control panel. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/stevenyu113228/20ecc24a10e2b1b7038634b838503d7c