Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-30125 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-30T15:12:26.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. All dashcams were shipped with the same default credentials of 12345678, which creates an insecure-by-default condition. For users who change their passwords, it's limited to 8 characters. These short passwords can be cracked in 8 hours via low-end commercial cloud resources. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41ad
- https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41ade - https://www.protiviti.com/sg-en/blogs/6259-8-character-password-still-dead - https://github.com/geo-chen/Marbella/blob/main/README.md#finding-1---cve-2025-30125-same-default-credentials-and-limited-password-combinations
CVE ID: CVE-2025-30126 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-30T15:19:35.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Via port 7777 without any need to pair or press a physical button, a remote attacker can disable recording, delete recordings, or even disable battery protection to cause a flat battery to essentially disable the car from being used. During the process of changing these settings, there are no indications or sounds on the dashcam to alert the dashcam owner that someone else is making those changes. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
the dashcam owner that someone else is making those changes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41adec - https://github.com/geo-chen/IROAD-V?tab=readme-ov-file#finding-7---cve-2025-30108-exposed-ftp-administrator-credentials
CVE ID: CVE-2025-30127 State: PUBLISHED Published: 2025-08-06T00:00:00.000Z Last Updated: 2025-08-06T17:47:29.029Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on Marbella KR8s Dashcam FF 2.0.8 devices. Once access is gained either by default, common, or cracked passwords, the video recordings (containing sensitive routes, conversations, and footage) are open for downloading by creating a socket to command port 7777, and then downloading video via port 7778 and audio via port 7779. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab4
rences: - https://github.com/geo-chen/Marbella/ - https://makagps.com/ - https://geochen.medium.com/marbella-dashcam-ab40ca41adec - https://github.com/geo-chen/Marbella/blob/main/README.md#finding-2---cve-2025-30127-video-recordings-open-to-being-downloaded-via-ports-7777-7778-7779
CVE ID: CVE-2025-30131 State: PUBLISHED Published: 2025-06-26T00:00:00.000Z Last Updated: 2025-06-26T20:24:08.614Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam. Additionally, by uploading a netcat (nc) binary, the attacker can establish a reverse shell, maintaining persistent remote and privileged access to the device. This allows complete device takeover. Additional Analyst Notes: - CISA
stent remote and privileged access to the device. This allows complete device takeover. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iroadau.com.au/downloads/ - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-11---cve-2025-30131-unrestricted-webshell
CVE ID: CVE-2025-30132 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-21T13:48:53.858Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device traffic. If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could lead to data exfiltration or man-in-the-middle attacks. Additional Analyst Notes: - CISA ADP Vulnrichme
ocally, it could lead to data exfiltration or man-in-the-middle attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-6-public-domain-used-for-internal-domain-name - https://github.com/geo-chen/IROAD-V
CVE ID: CVE-2025-30133 State: PUBLISHED Published: 2025-07-28T00:00:00.000Z Last Updated: 2025-07-30T15:17:37.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on IROAD Dashcam FX2 devices. Bypass of Device Pairing/Registration can occur. It requires device registration via the "IROAD X View" app for authentication, but its HTTP server lacks this restriction. Once connected to the dashcam's Wi-Fi network via the default password ("qwertyuiop"), an attacker can directly access the HTTP server at http://192.168.10.1 without undergoing the pairing process. Additionally, no alert is triggered on the device when an attacker connects, making this intrusion com
pairing process. Additionally, no alert is triggered on the device when an attacker connects, making this intrusion completely silent. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iroadau.com.au/downloads/ - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-7-bypass-of-device-pairingregistration-for-iroad-fx2 - https://github.com/geo-chen/IROAD/blob/main/README.md#finding-12---cve-2025-30133-unprotected-url-shortcut
CVE ID: CVE-2025-30135 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T19:42:32.655Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on IROAD Dashcam FX2 devices. Dumping Files Over HTTP and RTSP Without Authentication can occur. It lacks authentication controls on its HTTP and RTSP interfaces, allowing attackers to retrieve sensitive files and video recordings. By connecting to http://192.168.10.1/mnt/extsd/event/, an attacker can download all stored video recordings in an unencrypted manner. Additionally, the RTSP stream on port 8554 is accessible without authentication, allowing an attacker to view live footage. Additional A
e RTSP stream on port 8554 is accessible without authentication, allowing an attacker to view live footage. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.iroadau.com.au/downloads/ - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-8-dumping-files-over-http-and-rtsp-without-authentication - https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-13---cve-2025-30135-locking-owner-out-of-device-dos
CVE ID: CVE-2025-30137 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T16:47:42.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to, the attacker sends a crafted authentication command with TibetList and 000000 to list settings of the dashcam at port 9091. There's a separate set of credentials for port 9092 (stream) that is also exposed in cleartext: admin +
am at port 9091. There's a separate set of credentials for port 9092 (stream) that is also exposed in cleartext: admin + tibet. For settings, the required credentials are adim + 000000. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30138 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T16:40:28.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract sensitive car and driver information, mute dashcam alerts to prevent detection, disable recording functionality, or even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car
even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car battery when left on overnight. These actions not only compromise privacy but also pose potential physical harm by rendering the dashcam non-functional or causing vehicle battery failure. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30139 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T15:38:45.471Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=2
al Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30140 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T15:29:45.678Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on G-Net Dashcam BB GONX devices. A Public Domain name is Used for the Internal Domain Name. It uses an unregistered public domain name as an internal domain, creating a security risk. This domain was not owned by GNET originally, allowing an attacker to register it and potentially intercept sensitive device traffic (it has since been registered by the vulnerability discoverer). If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could
If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could lead to data exfiltration or man-in-the-middle attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30141 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T15:36:51.282Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all stored recordings and convert them from JDR format to MP4. Additionally, port 9092's RTSP stream can be accessed remotely, allowing real-time video feeds to be extracted without the owner's knowledge. Additional Analyst Notes: - CI
d remotely, allowing real-time video feeds to be extracted without the owner's knowledge. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30142 State: PUBLISHED Published: 2025-03-18T00:00:00.000Z Last Updated: 2025-03-25T15:32:49.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP scanning or other means, an attacker can spoof the MAC address and connect to the dashcam without going through the pairing process. This enables full access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
ugh the pairing process. This enables full access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gnetsystem.com/eng/product/list?viewMode=view&idx=246&ca_id=0201 - https://github.com/geo-chen/GNET
CVE ID: CVE-2025-30143 State: PUBLISHED Published: 2025-03-17T00:00:00.000Z Last Updated: 2025-03-17T17:59:14.320Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N) Vendors: Akamai Products: App & API Protector Problem Types: CWE-79 Description: Rule 3000216 (before version 2) in Akamai App & API Protector (with Akamai ASE) before 2024-12-10 does not properly consider JavaScript variable assignment to built-in functions and properties. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://techdocs.akamai.com/app-api-protector/changelog/dec-9-2024-waf-rule-updates - https://github.com/geo-chen/Akamai/blob/main/README.md#cve-2025-30143---waf-bypass-in-
log/dec-9-2024-waf-rule-updates - https://github.com/geo-chen/Akamai/blob/main/README.md#cve-2025-30143---waf-bypass-in-akamai-ase-application-security-edge-due-to-obfuscated-payload-leading-to-reflected-xss
CVE ID: CVE-2025-30144 State: PUBLISHED Published: 2025-03-19T15:41:19.642Z Last Updated: 2025-03-19T18:29:22.749Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N) Vendors: nearform Products: fast-jwt Problem Types: CWE-345, CWE-290 Description: fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt library does not properly validate the iss claim based on the RFC 7519. The iss (issuer) claim validation within the fast-jwt library permits an array of strings as a valid iss value. This design flaw enables a potential attack where a malicious actor crafts a JWT with an iss claim structured as ['https://attacker-domain/', 'https://valid-
attack where a malicious actor crafts a JWT with an iss claim structured as ['https://attacker-domain/', 'https://valid-iss']. Due to the permissive validation, the JWT will be deemed valid. Furthermore, if the application relies on external libraries like get-jwks that do not independently validate the iss claim, the attacker can leverage this vulnerability to forge a JWT that will be accepted by the victim application. Essentially, the attacker can insert their own domain into the iss array, alongside the legitimate issuer, and bypass the intended security checks. This issue is fixed in 5.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nearform/fast
sue is fixed in 5.0.6. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/nearform/fast-jwt/security/advisories/GHSA-gm45-q3v2-6cf8 - https://github.com/nearform/fast-jwt/commit/cc26b1d473f900446ad846f8f0b10eb1c0adcbdd - https://datatracker.ietf.org/doc/html/rfc7519#page-9
CVE ID: CVE-2025-30145 State: PUBLISHED Published: 2025-06-10T14:58:48.408Z Last Updated: 2025-06-10T15:16:31.100Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: geoserver Products: geoserver Problem Types: CWE-835 Description: GeoServer is an open source server that allows users to share and edit geospatial data. Malicious Jiffle scripts can be executed by GeoServer, either as a rendering transformation in WMS dynamic styles or as a WPS process, that can enter an infinite loop to trigger denial of service. This vulnerability is fixed in 2.27.0, 2.26.3, and 2.25.7. This vulnerability can be mitigated by disabling WMS dynamic styling and the Jiffle process. Ad
7.0, 2.26.3, and 2.25.7. This vulnerability can be mitigated by disabling WMS dynamic styling and the Jiffle process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/geoserver/geoserver/security/advisories/GHSA-gr67-pwcv-76gf - https://github.com/geosolutions-it/jai-ext/pull/307 - https://osgeo-org.atlassian.net/browse/GEOS-11778
CVE ID: CVE-2025-30147 State: PUBLISHED Published: 2025-05-07T18:27:41.736Z Last Updated: 2025-05-07T20:04:15.702Z Vendors: hyperledger Products: besu-native Problem Types: CWE-325 Description: Besu Native contains scripts and tooling that is used to build and package the native libraries used by the Ethereum client Hyperledger Besu. Besu 24.7.1 through 25.2.2, corresponding to besu-native versions 0.9.0 through 1.2.1, have a potential consensus bug for the precompiles ALTBN128_ADD (0x06), ALTBN128_MUL (0x07), and ALTBN128_PAIRING (0x08). These precompiles were reimplemented in besu-native using gnark-crypto's bn254 implementation, as the former implementation used a library which was no lon
d in besu-native using gnark-crypto's bn254 implementation, as the former implementation used a library which was no longer maintained and not sufficiently performant. The new gnark implementation was initially added in version 0.9.0 of besu-native but was not utilized by Besu until version 0.9.2 in Besu 24.7.1. The issue is that there are EC points which may be crafted which are in the correct subgroup but are not on the curve and the besu-native gnark implementation was relying on subgroup checks to perform point-on-curve checks as well. The version of gnark-crypto used at the time did not do this check when performing subgroup checks. The result is that it was possible for Besu to give an
t the time did not do this check when performing subgroup checks. The result is that it was possible for Besu to give an incorrect result and fall out of consensus when executing one of these precompiles against a specially crafted input point. Additionally, homogenous Besu-only networks can potentially enshrine invalid state which would be incorrect and difficult to process with patched versions of besu which handle these calls correctly. The underlying defect has been patched in besu-native release 1.3.0. The fixed version of Besu is version 25.3.0. As a workaround for versions of Besu with the problem, the native precompile for altbn128 may be disabled in favor of the pure-java implementa
rsions of Besu with the problem, the native precompile for altbn128 may be disabled in favor of the pure-java implementation. The pure java implementation is significantly slower, but does not have this consensus issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/hyperledger/besu-native/security/advisories/GHSA-jcp8-gh74-97hq - https://github.com/hyperledger/besu/blob/main/besu/src/main/java/org/hyperledger/besu/cli/options/NativeLibraryOptions.java#L31-L38
CVE ID: CVE-2025-30148 State: PUBLISHED Published: 2025-04-10T13:02:22.415Z Last Updated: 2025-04-10T13:34:14.930Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N) Vendors: silverstripe Products: silverstripe-framework Problem Types: CWE-79 Description: Silverstripe Framework is a PHP framework which powers the Silverstripe CMS. Prior to 5.3.23, bad actor with access to edit content in the CMS could send a specifically crafted encoded payload to the server, which could be used to inject a JavaScript payload on the front end of the site. The payload would be sanitized on the client-side, but server-side sanitization doesn't catch it. The server-side sanitization logic
ould be sanitized on the client-side, but server-side sanitization doesn't catch it. The server-side sanitization logic has been updated to sanitize against this attack. This vulnerability is fixed in 5.3.23. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/silverstripe/silverstripe-framework/security/advisories/GHSA-rhx4-hvx9-j387 - https://github.com/silverstripe/silverstripe-framework/commit/e99cfd62d160d145a76fcf9631e6b11226e42358 - https://www.silverstripe.org/download/security-releases/cve-2025-30148
CVE ID: CVE-2025-30149 State: PUBLISHED Published: 2025-03-31T16:07:11.417Z Last Updated: 2025-03-31T18:04:29.366Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:N) Vendors: openemr Products: openemr Problem Types: CWE-79 Description: OpenEMR is a free and open source electronic health records and medical practice management application. OpenEMR allows reflected cross-site scripting (XSS) in the AJAX Script interface\super\layout_listitems_ajax.php via the target parameter. This vulnerability is fixed in 7.0.3. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7 - https://github.com
nrichment: References: - https://github.com/openemr/openemr/security/advisories/GHSA-fwfv-8583-6rr7 - https://github.com/openemr/openemr/commit/6cb70595f65decfbdd03e70b49acc414e03744b8
CVE ID: CVE-2025-30150 State: PUBLISHED Published: 2025-04-08T13:46:44.823Z Last Updated: 2025-04-08T18:46:21.570Z Vendors: shopware Products: shopware Problem Types: CWE-204 Description: Shopware 6 is an open commerce platform based on Symfony Framework and Vue. Through the store-api it is possible as a attacker to check if a specific e-mail address has an account in the shop. Using the store-api endpoint /store-api/account/recovery-password you get the response, which indicates clearly that there is no account for this customer. In contrast you get a success response if the account was found. This vulnerability is fixed in Shopware 6.6.10.3 or 6.5.8.17. For older versions of 6.4, correspon
he account was found. This vulnerability is fixed in Shopware 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shopware/shopware/security/advisories/GHSA-hh7j-6x3q-f52h
CVE ID: CVE-2025-30151 State: PUBLISHED Published: 2025-04-08T13:46:30.629Z Last Updated: 2025-04-08T18:47:54.011Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: shopware Products: shopware Problem Types: CWE-20 Description: Shopware is an open commerce platform. It's possible to pass long passwords that leads to Denial Of Service via forms in Storefront forms or Store-API. This vulnerability is fixed in 6.6.10.3 or 6.5.8.17. For older versions of 6.4, corresponding security measures are also available via a plugin. For the full range of functions, we recommend updating to the latest Shopware version. Additional Analyst Notes: - CISA ADP Vulnrichment: Referen
ctions, we recommend updating to the latest Shopware version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shopware/shopware/security/advisories/GHSA-cgfj-hj93-rmh2