Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-8772 State: PUBLISHED Published: 2025-08-09T19:32:06.289Z Last Updated: 2025-08-12T16:04:32.845Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Vinades Products: NukeViet Problem Types: CWE-918 Description: A vulnerability, which was classified as problematic, has been found in Vinades NukeViet up to 4.5.06. This issue affects some unknown processing of the file /admin/index.php?language=en&nv=upload of the component Module Handler. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this
iated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319295 - https://vuldb.com/?ctiid.319295 - https://vuldb.com/?submit.624976 - https://hkohi.ca/vulnerability/19
CVE ID: CVE-2025-8773 State: PUBLISHED Published: 2025-08-09T20:02:05.789Z Last Updated: 2025-08-12T16:04:26.122Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Dinstar Products: Monitoring Platform 甘肃省危险品库监控平台 Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in Dinstar Monitoring Platform 甘肃省危险品库监控平台 1.0. Affected is an unknown function of the file /itc/$%7BappPath%7D/login_getPasswordErrorNum.action. The manipulation of the argument userBean.loginName leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacte
ble to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319296 - https://vuldb.com/?ctiid.319296 - https://vuldb.com/?submit.625361 - https://github.com/qiantx/cve/blob/main/cve6.md
CVE ID: CVE-2025-8774 State: PUBLISHED Published: 2025-08-09T20:32:05.812Z Last Updated: 2025-08-12T16:04:18.886Z Severity: LOW (CVSS 2.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: riscv-boom Products: SonicBOOM Problem Types: CWE-208, CWE-203 Description: A vulnerability has been found in riscv-boom SonicBOOM up to 2.2.3 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component L1 Data Cache Handler. The manipulation leads to observable timing discrepancy. Local access is required to approach this attack. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted ea
ttack. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319297 - https://vuldb.com/?ctiid.319297 - https://vuldb.com/?submit.625550 - https://github.com/fizz-is-on-the-way/vuls_cpu/tree/master/MSHRush
CVE ID: CVE-2025-8775 State: PUBLISHED Published: 2025-08-09T21:02:07.185Z Last Updated: 2025-08-12T16:04:12.027Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Qiyuesuo Products: Eelectronic Signature Platform Problem Types: CWE-434, CWE-284 Description: A vulnerability was found in Qiyuesuo Eelectronic Signature Platform up to 4.34 and classified as critical. Affected by this issue is the function execute of the file /api/code/upload of the component Scheduled Task Handler. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was conta
The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319298 - https://vuldb.com/?ctiid.319298 - https://vuldb.com/?submit.625551 - https://vuldb.com/?submit.625553 - https://github.com/nn0nkey/nn0nkey/blob/main/QYS/QYS_task.md
CVE ID: CVE-2025-8776 State: PUBLISHED Published: 2025-10-03T11:17:17.971Z Last Updated: 2025-10-03T18:17:19.897Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: mikemayhem3030 Products: Epic Bootstrap Buttons Problem Types: CWE-79 Description: The Epic Bootstrap Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icol’ parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additi
and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/91ddc368-bfe5-4581-aa99-ac9f4bcf9da4?source=cve - https://plugins.svn.wordpress.org/epic-bootstrap-buttons/trunk/epicboot.php - https://wordpress.org/plugins/epic-bootstrap-buttons/#developers
CVE ID: CVE-2025-8777 State: PUBLISHED Published: 2025-09-30T03:35:34.141Z Last Updated: 2025-09-30T15:38:26.743Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: planetcalc Products: planetcalc Problem Types: CWE-79 Description: The planetcalc plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘language’ parameter in all versions up to, and including, 2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CI
bitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/fa8aac87-f9bd-4426-85da-e434805c66ec?source=cve - https://plugins.svn.wordpress.org/planetcalc/tags/2.2/planetcalc.php - https://wordpress.org/plugins/planetcalc/#developers
CVE ID: CVE-2025-8778 State: PUBLISHED Published: 2025-09-10T06:38:47.044Z Last Updated: 2025-09-10T16:11:56.415Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) Vendors: nitropack Products: NitroPack – Caching & Speed Optimization for Core Web Vitals, Defer CSS & JS, Lazy load Images and CDN Problem Types: CWE-862 Description: The NitroPack plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the nitropack_set_compression_ajax() function in all versions up to, and including, 1.18.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the nitropack-enableCompress
it possible for authenticated attackers, with Subscriber-level access and above, to update the nitropack-enableCompression option and effectively change plugin compression settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/750f35ce-0f1c-4a12-a7a0-2c217de277fd?source=cve - https://plugins.trac.wordpress.org/browser/nitropack/trunk/functions.php#L2907 - https://wordpress.org/plugins/nitropack/#developers - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3354452%40nitropack&new=3354452%40nitropack&sfp_email=&sfph_mail=
CVE ID: CVE-2025-8782 State: REJECTED Published: N/A Last Updated: 2025-08-19T15:32:33.497Z Description: No description available.
CVE ID: CVE-2025-8783 State: PUBLISHED Published: 2025-08-19T10:57:28.201Z Last Updated: 2025-08-19T13:16:42.582Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N) Vendors: kleor Products: Contact Manager Problem Types: CWE-79 Description: The Contact Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'title’ parameter in all versions up to, and including, 8.6.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level access, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site insta
ary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/7e52a487-8e87-49b7-a044-9fb8452f3dd1?source=cve - https://plugins.trac.wordpress.org/browser/contact-manager/trunk/admin-pages-functions.php#L524 - https://plugins.trac.wordpress.org/changeset/3345750/
CVE ID: CVE-2025-8784 State: PUBLISHED Published: 2025-08-09T23:02:07.394Z Last Updated: 2025-08-12T16:04:05.576Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Portabilis i-Educar up to 2.9. This vulnerability affects unknown code of the file /intranet/funcionario_vinculo_cad.php of the component Cadastrar Vínculo Page. The manipulation of the argument nome leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosu
motely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319312 - https://vuldb.com/?ctiid.319312 - https://vuldb.com/?submit.625777 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8784.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Stored%20XSS%20funcionario_vinculo_cad.php%20parameter%20nome.md
CVE ID: CVE-2025-8785 State: PUBLISHED Published: 2025-08-09T23:32:06.389Z Last Updated: 2025-08-12T16:03:58.238Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Educar Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar up to 2.9. This issue affects some unknown processing of the file /intranet/educar_usuario_lst.php. The manipulation of the argument nm_pessoa/matricula/matricula_interna leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this
iated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319313 - https://vuldb.com/?ctiid.319313 - https://vuldb.com/?submit.625788 - https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-8785.md - https://github.com/marcelomulder/CVE/blob/main/i-educar/Reflected_XSS_endpoint_educar_usuario_lst.php_parameters_nm_pessoa,_matricula_and_matricula_interna.md
CVE ID: CVE-2025-8786 State: PUBLISHED Published: 2025-08-10T00:32:06.409Z Last Updated: 2025-08-12T15:20:46.108Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Diario Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in Portabilis i-Diario up to 1.5.0. Affected is an unknown function of the file /registros-de-conteudos-por-areas-de-conhecimento/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be
s site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319314 - https://vuldb.com/?ctiid.319314 - https://vuldb.com/?submit.625794 - https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8786.md - https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20registros-de-conteudos-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md
CVE ID: CVE-2025-8787 State: PUBLISHED Published: 2025-08-10T01:02:06.962Z Last Updated: 2025-08-12T15:21:39.122Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Diario Problem Types: CWE-79, CWE-94 Description: A vulnerability has been found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /registros-de-conteudos-por-disciplina/ of the component Registro das atividades. The manipulation of the argument Registro de atividades/Conteúdos leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may
leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319315 - https://vuldb.com/?ctiid.319315 - https://vuldb.com/?submit.625795 - https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8787.md - https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20registros-de-conteudos-por-disciplina.(ID)%20in%20multiples%20parameters.md
CVE ID: CVE-2025-8788 State: PUBLISHED Published: 2025-08-10T01:32:06.017Z Last Updated: 2025-08-13T14:57:37.781Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Portabilis Products: i-Diario Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Portabilis i-Diario up to 1.5.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /planos-de-aula-por-areas-de-conhecimento/ of the component Informações adicionais. The manipulation of the argument Parecer/Conteúdos/Objetivos leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The
site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319316 - https://vuldb.com/?ctiid.319316 - https://vuldb.com/?submit.625799 - https://github.com/marcelomulder/CVE/blob/main/i-diario/CVE-2025-8788.md - https://github.com/marcelomulder/CVE/blob/main/i-diario/Stored%20XSS%20endpoint%20planos-de-aula-por-areas-de-conhecimento.(ID)%20in%20multiples%20parameters.md
CVE ID: CVE-2025-8789 State: PUBLISHED Published: 2025-08-10T02:02:05.666Z Last Updated: 2025-08-13T14:21:57.708Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Portabilis Products: i-Educar Problem Types: CWE-639, CWE-285 Description: A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not
loit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319317 - https://vuldb.com/?ctiid.319317 - https://vuldb.com/?submit.625917 - https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md
CVE ID: CVE-2025-8790 State: PUBLISHED Published: 2025-08-10T02:32:05.895Z Last Updated: 2025-08-13T14:29:55.521Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Portabilis Products: i-Educar Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affects unknown code of the file /module/Api/pessoa of the component API Endpoint. The manipulation of the argument ID leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclo
remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319318 - https://vuldb.com/?ctiid.319318 - https://vuldb.com/?submit.625918 - https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8790.md
CVE ID: CVE-2025-8791 State: PUBLISHED Published: 2025-08-10T03:02:06.365Z Last Updated: 2025-08-13T15:03:30.033Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-285, CWE-266 Description: A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of the file /auth/list_projects. The manipulation of the argument role leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Addition
he public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319319 - https://vuldb.com/?ctiid.319319 - https://vuldb.com/?submit.625949 - https://github.com/MaiqueSilva/VulnDB/blob/main/readmi1.md
CVE ID: CVE-2025-8792 State: PUBLISHED Published: 2025-08-10T03:32:06.333Z Last Updated: 2025-08-13T15:05:42.123Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N/E:P/RL:X/RC:R) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-602 Description: A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CIS
ed. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319320 - https://vuldb.com/?ctiid.319320 - https://vuldb.com/?submit.625952 - https://github.com/MaiqueSilva/VulnDB/blob/main/README02.md
CVE ID: CVE-2025-8793 State: PUBLISHED Published: 2025-08-10T04:02:06.295Z Last Updated: 2025-08-13T15:07:23.503Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-99 Description: A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functionality. The manipulation of the argument projectID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
sed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319321 - https://vuldb.com/?ctiid.319321 - https://vuldb.com/?submit.625956 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme03.md
CVE ID: CVE-2025-8794 State: PUBLISHED Published: 2025-08-10T04:32:06.433Z Last Updated: 2025-08-13T19:49:12.667Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-639, CWE-285 Description: A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unknown functionality of the component LocalStorage Handler. The manipulation of the argument projectID leads to authorization bypass. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early ab
to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319322 - https://vuldb.com/?ctiid.319322 - https://vuldb.com/?submit.625982 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme04.md
CVE ID: CVE-2025-8795 State: PUBLISHED Published: 2025-08-10T05:32:06.512Z Last Updated: 2025-08-13T20:11:50.769Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-284, CWE-266 Description: A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /auth/login. The manipulation of the argument projectID leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additiona
e public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319323 - https://vuldb.com/?ctiid.319323 - https://vuldb.com/?submit.625984 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme05.md
CVE ID: CVE-2025-8796 State: PUBLISHED Published: 2025-08-10T06:02:06.440Z Last Updated: 2025-08-13T14:38:03.654Z Severity: N/A (CVSS 5.5 AV:N/AC:L/Au:S/C:N/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: LitmusChaos Products: Litmus Problem Types: CWE-862, CWE-863 Description: A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of the file /auth/delete_project/ of the component Delete Request Handler. The manipulation of the argument projectID leads to missing authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disc
d remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.319324 - https://vuldb.com/?ctiid.319324 - https://vuldb.com/?submit.625989 - https://github.com/MaiqueSilva/VulnDB/blob/main/readme06.md