Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The name of the patch is 5705d99cc1f23f36f9a84aab26d1724010b97798. It is recommended to apply a patch to fix this issue. The documentation explains that the parameter -T is experimental and "crashy". Further analysis has shown "the race is not a real problem unless you use asan". A new warning has been added. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311136 - https://vuldb.com/?ctiid.311136 - https://vuldb.com/?submit.586929 - https://github.com/radareorg/radare2/issues/
1136 - https://vuldb.com/?ctiid.311136 - https://vuldb.com/?submit.586929 - https://github.com/radareorg/radare2/issues/24238 - https://github.com/radareorg/radare2/issues/24238#issuecomment-2918850876 - https://drive.google.com/file/d/1StQvpouGzMCOGmF3b5q_NxAJiZwivnjp/view?usp=sharing - https://github.com/radareorg/radare2/commit/5705d99cc1f23f36f9a84aab26d1724010b97798
CVE ID: CVE-2025-5649 State: PUBLISHED Published: 2025-06-05T09:00:17.302Z Last Updated: 2025-06-05T14:07:31.722Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Student Result Management System Problem Types: CWE-284, CWE-266 Description: A vulnerability classified as critical has been found in SourceCodester Student Result Management System 1.0. This affects an unknown part of the file /admin/core/new_user of the component Register Interface. The manipulation leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CI
itiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311139 - https://vuldb.com/?ctiid.311139 - https://vuldb.com/?submit.589458 - https://github.com/Watskip/GeneralResearch/blob/main/Exploits/SRMS/Unauthorized%20privileged%20user%20creation.md - https://www.sourcecodester.com/
CVE ID: CVE-2025-5650 State: PUBLISHED Published: 2025-06-05T09:31:04.871Z Last Updated: 2025-06-05T14:07:25.580Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: 1000projects Products: Online Notice Board Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in 1000projects Online Notice Board 1.0. This vulnerability affects unknown code of the file /register.php. The manipulation of the argument fname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
Other parameters might be affected as well. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311140 - https://vuldb.com/?ctiid.311140 - https://vuldb.com/?submit.589819 - https://github.com/ubfbuz3/cve/issues/17
CVE ID: CVE-2025-5651 State: PUBLISHED Published: 2025-06-05T10:00:19.573Z Last Updated: 2025-06-05T14:07:15.145Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N) Vendors: code-projects Products: Traffic Offense Reporting System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, has been found in code-projects Traffic Offense Reporting System 1.0. This issue affects some unknown processing of the file saveuser.php. The manipulation of the argument user_id/username/email/name/position leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA
y be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311141 - https://vuldb.com/?ctiid.311141 - https://vuldb.com/?submit.589962 - https://github.com/tuooo/CVE/issues/1 - https://code-projects.org/
CVE ID: CVE-2025-5652 State: PUBLISHED Published: 2025-06-05T10:00:32.536Z Last Updated: 2025-06-05T14:07:08.624Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/between-date-complaintreport.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referenc
he exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311142 - https://vuldb.com/?ctiid.311142 - https://vuldb.com/?submit.589963 - https://github.com/f1rstb100d/myCVE/issues/41 - https://phpgurukul.com/
CVE ID: CVE-2025-5653 State: PUBLISHED Published: 2025-06-05T10:31:07.021Z Last Updated: 2025-06-05T14:57:46.884Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/between-date-userreport.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment
emotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311143 - https://vuldb.com/?ctiid.311143 - https://vuldb.com/?submit.589964 - https://github.com/f1rstb100d/myCVE/issues/42 - https://phpgurukul.com/
CVE ID: CVE-2025-5654 State: PUBLISHED Published: 2025-06-05T11:00:18.893Z Last Updated: 2025-06-05T14:51:05.435Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Complaint Management System 2.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-state.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuld
n disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311144 - https://vuldb.com/?ctiid.311144 - https://vuldb.com/?submit.589965 - https://github.com/f1rstb100d/myCVE/issues/43 - https://phpgurukul.com/
CVE ID: CVE-2025-5655 State: PUBLISHED Published: 2025-06-05T11:00:22.391Z Last Updated: 2025-06-05T14:32:17.317Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been classified as critical. This affects an unknown part of the file /admin/edit-subcategory.php. The manipulation of the argument subcategory leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311145 - https://vuldb.com/?ctiid.311145 - https://vuldb.com/?submit.589966 - https://github.com/f1rstb100d/myCVE/issues/44 - https://phpgurukul.com/
CVE ID: CVE-2025-5656 State: PUBLISHED Published: 2025-06-05T11:31:06.625Z Last Updated: 2025-06-05T14:23:01.556Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/edit-category.php. The manipulation of the argument description leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311146 - https://vuldb.com/?ctiid.311146 - https://vuldb.com/?submit.589967 - https://github.com/f1rstb100d/myCVE/issues/45 - https://phpgurukul.com/
CVE ID: CVE-2025-5657 State: PUBLISHED Published: 2025-06-05T12:00:12.770Z Last Updated: 2025-06-05T13:58:26.994Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Complaint Management System 2.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/manage-users.php. The manipulation of the argument uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311147 - https://vuldb.com/?ctiid.311147 - https://vuldb.com/?submit.589968 - https://github.com/f1rstb100d/myCVE/issues/46 - https://phpgurukul.com/
CVE ID: CVE-2025-5658 State: PUBLISHED Published: 2025-06-05T12:31:07.351Z Last Updated: 2025-06-05T13:46:46.368Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Complaint Management System 2.0. Affected is an unknown function of the file /admin/updatecomplaint.php. The manipulation of the argument Status leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.3
to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311148 - https://vuldb.com/?ctiid.311148 - https://vuldb.com/?submit.589979 - https://github.com/f1rstb100d/myCVE/issues/47 - https://phpgurukul.com/
CVE ID: CVE-2025-5659 State: PUBLISHED Published: 2025-06-05T13:00:18.761Z Last Updated: 2025-06-05T14:06:48.832Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Complaint Management System 2.0. Affected by this vulnerability is an unknown functionality of the file /user/profile.php. The manipulation of the argument pincode leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/
losed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311149 - https://vuldb.com/?ctiid.311149 - https://vuldb.com/?submit.589980 - https://github.com/f1rstb100d/myCVE/issues/48 - https://phpgurukul.com/
CVE ID: CVE-2025-5660 State: PUBLISHED Published: 2025-06-05T13:00:24.909Z Last Updated: 2025-06-05T14:06:38.774Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Complaint Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Complaint Management System 2.0. Affected by this issue is some unknown functionality of the file /user/register-complaint.php. The manipulation of the argument noc leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: -
loit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311150 - https://vuldb.com/?ctiid.311150 - https://vuldb.com/?submit.589981 - https://github.com/f1rstb100d/myCVE/issues/49 - https://phpgurukul.com/
CVE ID: CVE-2025-5661 State: PUBLISHED Published: 2025-06-05T13:31:04.822Z Last Updated: 2025-06-05T13:47:49.530Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N) Vendors: code-projects Products: Traffic Offense Reporting System Problem Types: CWE-79, CWE-94 Description: A vulnerability, which was classified as problematic, was found in code-projects Traffic Offense Reporting System 1.0. This affects an unknown part of the file /save-settings.php of the component Setting Handler. The manipulation of the argument site_name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: -
initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311151 - https://vuldb.com/?ctiid.311151 - https://vuldb.com/?submit.590020 - https://github.com/tuooo/CVE/issues/2 - https://code-projects.org/
CVE ID: CVE-2025-5662 State: PUBLISHED Published: 2025-09-02T11:14:52.744Z Last Updated: 2025-09-02T15:50:21.879Z Severity: CRITICAL (CVSS 9.8 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: h2oai Products: h2oai/h2o-3 Problem Types: CWE-502 Description: A deserialization vulnerability exists in the H2O-3 REST API (POST /99/ImportSQLTable) that affects all versions up to 3.46.0.7. This vulnerability allows remote code execution (RCE) due to improper validation of JDBC connection parameters when using a Key-Value format. The vulnerability is present in the MySQL JDBC Driver version 8.0.19 and JDK version 8u112. The issue is resolved in version 3.46.0.8. Additional Analyst Notes: - CISA
Driver version 8.0.19 and JDK version 8u112. The issue is resolved in version 3.46.0.8. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://huntr.com/bounties/057a743b-b2ec-4312-8262-ce0ff8bc161c - https://github.com/h2oai/h2o-3/commit/f714edd6b8429c7a7211b779b6ec108a95b7382d
CVE ID: CVE-2025-5663 State: PUBLISHED Published: 2025-06-05T14:00:16.685Z Last Updated: 2025-06-05T14:18:34.966Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: PHPGurukul Products: Auto Taxi Stand Management System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Auto Taxi Stand Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/search-autoortaxi.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - h
oit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311152 - https://vuldb.com/?ctiid.311152 - https://vuldb.com/?submit.590055 - https://github.com/Pjwww13447/pjwww/issues/20 - https://phpgurukul.com/
CVE ID: CVE-2025-5664 State: PUBLISHED Published: 2025-06-05T14:31:04.298Z Last Updated: 2025-06-05T14:45:19.828Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0 and classified as critical. This issue affects some unknown processing of the component RESTART Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311153 - https://vuldb.com/?ctiid.311153 - https://v
Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311153 - https://vuldb.com/?ctiid.311153 - https://vuldb.com/?submit.587021 - https://fitoxs.com/exploit/exploit-e18bb6a8ab3c9991cf4de291efced47f926725e0d76b9d0cfb0c3a1835f99ce3.txt
CVE ID: CVE-2025-5665 State: PUBLISHED Published: 2025-06-05T15:00:18.109Z Last Updated: 2025-06-05T15:16:20.584Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0. It has been classified as critical. Affected is an unknown function of the component XCWD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311154 - https://vuldb.com/?ctiid.311154 - https:
st Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311154 - https://vuldb.com/?ctiid.311154 - https://vuldb.com/?submit.587024 - https://fitoxs.com/exploit/exploit-e4f6f2a0b9cd918ca9c6dbdb1098d674b121997846a06f423d0023084f7cf3df.txt
CVE ID: CVE-2025-5666 State: PUBLISHED Published: 2025-06-05T15:31:04.734Z Last Updated: 2025-06-05T15:52:00.541Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component XMKD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311155 - https://vuldb.com/?ctiid
Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311155 - https://vuldb.com/?ctiid.311155 - https://vuldb.com/?submit.587025 - https://fitoxs.com/exploit/exploit-8d9aefc49c178ba5c5d3f5464ff43e8e981c28b95c2cf867d3e20c17f4b9f994.txt
CVE ID: CVE-2025-5667 State: PUBLISHED Published: 2025-06-05T16:00:16.577Z Last Updated: 2025-06-13T19:06:28.219Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P) Vendors: FreeFloat Products: FTP Server Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in FreeFloat FTP Server 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the component REIN Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311156 - https://vuldb.com/?ctiid.311156 -
l Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311156 - https://vuldb.com/?ctiid.311156 - https://vuldb.com/?submit.587026 - https://fitoxs.com/exploit/exploit-28d5c2bfb3678b7195e43efb6617f46439a1b1cb7e36b7891094a8ad7f8193dc.txt
CVE ID: CVE-2025-5668 State: PUBLISHED Published: 2025-06-05T16:31:07.006Z Last Updated: 2025-06-05T17:33:27.336Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Medical Card Generation System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311157 -
public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311157 - https://vuldb.com/?ctiid.311157 - https://vuldb.com/?submit.590064 - https://github.com/f1rstb100d/myCVE/issues/50 - https://phpgurukul.com/
CVE ID: CVE-2025-5669 State: PUBLISHED Published: 2025-06-05T16:31:10.129Z Last Updated: 2025-06-05T17:32:36.874Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Medical Card Generation System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Medical Card Generation System 1.0. This vulnerability affects unknown code of the file /admin/unreadenq.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311158 - h
ublic and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311158 - https://vuldb.com/?ctiid.311158 - https://vuldb.com/?submit.590065 - https://github.com/f1rstb100d/myCVE/issues/51 - https://phpgurukul.com/
CVE ID: CVE-2025-5670 State: PUBLISHED Published: 2025-06-05T17:00:18.517Z Last Updated: 2025-06-05T17:32:28.107Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P) Vendors: PHPGurukul Products: Medical Card Generation System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in PHPGurukul Medical Card Generation System 1.0. This issue affects some unknown processing of the file /admin/manage-card.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vu
een disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311159 - https://vuldb.com/?ctiid.311159 - https://vuldb.com/?submit.590066 - https://github.com/f1rstb100d/myCVE/issues/52 - https://phpgurukul.com/
CVE ID: CVE-2025-5671 State: PUBLISHED Published: 2025-06-05T17:31:07.818Z Last Updated: 2025-06-05T17:47:37.026Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: N302R Plus Problem Types: CWE-120, CWE-119 Description: A vulnerability, which was classified as critical, was found in TOTOLINK N302R Plus up to 3.4.0-B20201028. Affected is an unknown function of the file /boafrm/formPortFw of the component HTTP POST Request Handler. The manipulation of the argument service_type leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.311160 - https://vuldb.com/?ctiid.311160 - https://vuldb.com/?submit.590093 - https://github.com/byxs0x0/cve2/blob/main/530/1.md - https://www.totolink.net/
CVE ID: CVE-2025-5672 State: PUBLISHED Published: 2025-06-05T17:31:10.945Z Last Updated: 2025-06-05T17:43:03.220Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C) Vendors: TOTOLINK Products: N302R Plus Problem Types: CWE-120, CWE-119 Description: A vulnerability has been found in TOTOLINK N302R Plus up to 3.4.0-B20201028 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /boafrm/formFilter of the component HTTP POST Request Handler. The manipulation of the argument url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R