Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7566 State: PUBLISHED Published: 2025-07-14T03:02:05.368Z Last Updated: 2025-07-14T17:47:00.444Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: n/a Products: jshERP Problem Types: CWE-22 Description: A vulnerability has been found in jshERP up to 3.5 and classified as critical. This vulnerability affects the function exportExcelByParam of the file /src/main/java/com/jsh/erp/controller/SystemConfigController.java. The manipulation of the argument Title leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respo
has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316264 - https://vuldb.com/?ctiid.316264 - https://vuldb.com/?submit.606784 - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250630-01.md - https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250630-01.md#steps-to-reproduce
CVE ID: CVE-2025-7567 State: PUBLISHED Published: 2025-07-14T03:14:05.401Z Last Updated: 2025-07-14T17:34:55.240Z Severity: N/A (CVSS 5 AV:N/AC:L/Au:N/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: n/a Products: ShopXO Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in ShopXO up to 6.5.0 and classified as problematic. This issue affects some unknown processing of the file header.html. The manipulation of the argument lang/system_type leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316265 - https://vuldb.com/?ct
d. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316265 - https://vuldb.com/?ctiid.316265 - https://vuldb.com/?submit.607201 - https://vuldb.com/?submit.607165 - https://github.com/gongfuxiang/shopxo/issues/89
CVE ID: CVE-2025-7568 State: PUBLISHED Published: 2025-07-14T03:32:04.956Z Last Updated: 2025-07-14T16:56:15.708Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: qianfox Products: FoxCMS Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in qianfox FoxCMS up to 1.2.5. It has been classified as critical. Affected is the function batchCope of the file app/admin/controller/Video.php. The manipulation of the argument ids leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
blic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316266 - https://vuldb.com/?ctiid.316266 - https://vuldb.com/?submit.603778 - https://github.com/beauty12345678/CVE/blob/main/foxcms_sql.md
CVE ID: CVE-2025-7569 State: PUBLISHED Published: 2025-07-14T03:44:04.965Z Last Updated: 2025-07-14T13:44:06.061Z Severity: N/A (CVSS 4 AV:N/AC:L/Au:S/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Bigotry Products: OneBase Problem Types: CWE-79, CWE-94 Description: A vulnerability was found in Bigotry OneBase up to 1.3.6. It has been declared as problematic. Affected by this vulnerability is the function parse_args of the file /tpl/think_exception.tpl. The manipulation of the argument args leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any w
sclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316267 - https://vuldb.com/?ctiid.316267 - https://vuldb.com/?submit.607128 - https://github.com/Hebing123/cve/issues/87
CVE ID: CVE-2025-7570 State: PUBLISHED Published: 2025-07-14T04:02:05.003Z Last Updated: 2025-07-14T13:42:03.821Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: HiPER 840G Problem Types: CWE-120, CWE-119 Description: A vulnerability was found in UTT HiPER 840G up to 3.1.1-190328. It has been rated as critical. Affected by this issue is some unknown functionality of the file /goform/aspRemoteApConfTempSend. The manipulation of the argument remoteSrcTemp leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond i
been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316268 - https://vuldb.com/?ctiid.316268 - https://vuldb.com/?submit.607746 - https://github.com/d2pq/cve/blob/main/616/7.md - https://github.com/d2pq/cve/blob/main/616/7.md#poc
CVE ID: CVE-2025-7571 State: PUBLISHED Published: 2025-07-14T04:14:05.759Z Last Updated: 2025-07-14T13:27:11.348Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: UTT Products: HiPER 840G Problem Types: CWE-120, CWE-119 Description: A vulnerability classified as critical has been found in UTT HiPER 840G up to 3.1.1-190328. This affects an unknown part of the file /goform/aspApBasicConfigUrcp. The manipulation of the argument Username leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional An
blic and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316269 - https://vuldb.com/?ctiid.316269 - https://vuldb.com/?submit.607747 - https://github.com/d2pq/cve/blob/main/616/6.md - https://github.com/d2pq/cve/blob/main/616/6.md#poc
CVE ID: CVE-2025-7572 State: PUBLISHED Published: 2025-07-14T04:32:06.275Z Last Updated: 2025-07-14T13:20:49.491Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: LB-LINK Products: BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P, BL-WR9000 Problem Types: CWE-200, CWE-284 Description: A vulnerability classified as critical was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This vulnerability affects the function bs_GetHostInfo in the library libblinkapi.so of the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack can be initiated remotely.
the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316270 - https://vuldb.com/?ctiid.316270 - https://vuldb.com/?submit.608009 - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Information_Exposure_Vulnerabilities_in_Various_Blink_Router_Models.md - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Information_Exposure_Vulnerabilities_in_Various_Blink_Router_Models.md#poc
CVE ID: CVE-2025-7573 State: PUBLISHED Published: 2025-07-14T04:44:05.217Z Last Updated: 2025-07-14T14:00:44.215Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: LB-LINK Products: BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P, BL-WR9000 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. This issue affects the function bs_GetManPwd in the library libblinkapi.so of the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack may be initiated rem
.so of the file /cgi-bin/lighttpd.cgi. The manipulation leads to information disclosure. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316271 - https://vuldb.com/?ctiid.316271 - https://vuldb.com/?submit.608010 - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Web_Interface_Login_Credential_Disclosure_Risk_in_Various_Blink_Router_Models.md - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Web_Interface_Login_Credential_Disclosure_Risk_in_Various_Blink_Router
s://github.com/waiwai24/0101/blob/main/CVEs/Blink/Web_Interface_Login_Credential_Disclosure_Risk_in_Various_Blink_Router_Models.md#poc
CVE ID: CVE-2025-7574 State: PUBLISHED Published: 2025-07-14T05:02:05.631Z Last Updated: 2025-07-14T13:59:10.244Z Severity: N/A (CVSS 10 AV:N/AC:L/Au:N/C:C/I:C/A:C/E:POC/RL:W/RC:UR) Vendors: LB-LINK Products: BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P, BL-WR9000 Problem Types: CWE-287 Description: A vulnerability, which was classified as critical, was found in LB-LINK BL-AC1900, BL-AC2100_AZ3, BL-AC3600, BL-AX1800, BL-AX5400P and BL-WR9000 up to 20250702. Affected is the function reboot/restore of the file /cgi-bin/lighttpd.cgi of the component Web Interface. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been
. The manipulation leads to improper authentication. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316272 - https://vuldb.com/?ctiid.316272 - https://vuldb.com/?submit.608018 - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_
/github.com/waiwai24/0101/blob/main/CVEs/Blink/Privilege_Control_Defect_in_Blink_Router_Web_Interface_Permits_Arbitrary_Sensitive_Operation_Execution.md#poc
CVE ID: CVE-2025-7575 State: PUBLISHED Published: 2025-07-14T05:14:06.413Z Last Updated: 2025-07-14T13:58:08.605Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: Zavy86 Products: WikiDocs Problem Types: CWE-22 Description: A vulnerability has been found in Zavy86 WikiDocs up to 1.0.77 and classified as critical. Affected by this vulnerability is the function image_drop_upload_ajax/image_delete_ajax of the file submit.php. The manipulation leads to path traversal. The attack can be launched remotely. Upgrading to version 1.0.78 is able to address this issue. The identifier of the patch is 98ea9ee4a2052c4327f89d2f7688cc1b5749450d. It is recommended to upgrade the a
this issue. The identifier of the patch is 98ea9ee4a2052c4327f89d2f7688cc1b5749450d. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316273 - https://vuldb.com/?ctiid.316273 - https://vuldb.com/?submit.609096 - https://github.com/Zavy86/WikiDocs/pull/258 - https://github.com/Zavy86/WikiDocs/commit/98ea9ee4a2052c4327f89d2f7688cc1b5749450d - https://github.com/Zavy86/WikiDocs/releases/tag/1.0.78
CVE ID: CVE-2025-7576 State: PUBLISHED Published: 2025-07-14T05:32:04.781Z Last Updated: 2025-07-14T13:39:46.398Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Teledyne Products: FLIR FB-Series O, FLIR FH-Series ID Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16 and classified as critical. Affected by this issue is some unknown functionality of the file /priv/production/production.html of the component Production Tools. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendo
s controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316274 - https://vuldb.com/?ctiid.316274 - https://vuldb.com/?submit.609549 - https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md - https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Production_html_Management_Backend_Unauthorized_Access.md#poc
CVE ID: CVE-2025-7577 State: PUBLISHED Published: 2025-07-14T05:44:05.263Z Last Updated: 2025-07-14T13:15:20.684Z Severity: LOW (CVSS 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:R) Vendors: Teledyne Products: FLIR FB-Series O, FLIR FH-Series ID Problem Types: CWE-259, CWE-255 Description: A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been classified as problematic. This affects an unknown part. The manipulation leads to use of hard-coded password. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public an
of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316275 - https://vuldb.com/?ctiid.316275 - https://vuldb.com/?submit.609550 - https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Root_User_with_Hardcoded_Weak_Password.md - https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Root_User_with_Hardcoded_Weak_Password.md#poc
CVE ID: CVE-2025-7578 State: PUBLISHED Published: 2025-07-14T06:02:05.427Z Last Updated: 2025-07-14T13:12:51.876Z Severity: MEDIUM (CVSS 5 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R) Vendors: Teledyne Products: FLIR FB-Series O, FLIR FH-Series ID Problem Types: CWE-77, CWE-74 Description: A vulnerability was found in Teledyne FLIR FB-Series O and FLIR FH-Series ID 1.3.2.16. It has been declared as critical. This vulnerability affects the function sendCommand of the file runcmd.sh. The manipulation of the argument cmd leads to command injection. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The resea
n be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The researcher highlights, that "[a]lthough this functionality is currently disabled due to server CGI configuration errors, it is essentially a 'time bomb' waiting to be activated". The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316276 - https://vuldb.com/?ctiid.316276 - https://vuldb.com/?submit.609551 - https://github.com/waiwai24/0101/blob/main/CVEs/FLIR/Command_Injection_Vulnerability_in_Developer_Backdoor_Page.md
CVE ID: CVE-2025-7579 State: PUBLISHED Published: 2025-07-14T06:14:06.008Z Last Updated: 2025-07-14T13:08:00.410Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L/E:P/RL:X/RC:R) Vendors: n/a Products: chinese-poetry Problem Types: CWE-1333, CWE-400 Description: A vulnerability was found in chinese-poetry 0.1. It has been rated as problematic. This issue affects some unknown processing of the file rank/server.js. The manipulation leads to inefficient regular expression complexity. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.31627
the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316277 - https://vuldb.com/?ctiid.316277 - https://vuldb.com/?submit.609704 - https://github.com/chinese-poetry/chinese-poetry/issues/396 - https://github.com/chinese-poetry/chinese-poetry/issues/396#issue-3204562392
CVE ID: CVE-2025-7580 State: PUBLISHED Published: 2025-07-14T06:32:05.955Z Last Updated: 2025-07-14T13:04:17.428Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in code-projects Voting System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/positions_row.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?i
sed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316279 - https://vuldb.com/?ctiid.316279 - https://vuldb.com/?submit.615028 - https://github.com/i-Corner/cve/issues/7 - https://code-projects.org/
CVE ID: CVE-2025-7581 State: PUBLISHED Published: 2025-07-14T06:44:05.617Z Last Updated: 2025-07-14T13:00:41.541Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. Affected by this issue is some unknown functionality of the file /admin/positions_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://
been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316280 - https://vuldb.com/?ctiid.316280 - https://vuldb.com/?submit.615029 - https://github.com/i-Corner/cve/issues/8 - https://code-projects.org/
CVE ID: CVE-2025-7582 State: PUBLISHED Published: 2025-07-14T07:02:06.863Z Last Updated: 2025-07-14T16:49:32.482Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in PHPGurukul Online Fire Reporting System 1.2. This affects an unknown part of the file /admin/assigned-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
e exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316281 - https://vuldb.com/?ctiid.316281 - https://vuldb.com/?submit.615037 - https://github.com/f1rstb100d/myCVE/issues/130 - https://phpgurukul.com/
CVE ID: CVE-2025-7583 State: PUBLISHED Published: 2025-07-14T07:14:06.498Z Last Updated: 2025-07-14T16:44:42.278Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This vulnerability affects unknown code of the file /admin/all-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - ht
it has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316282 - https://vuldb.com/?ctiid.316282 - https://vuldb.com/?submit.615038 - https://github.com/f1rstb100d/myCVE/issues/131 - https://phpgurukul.com/
CVE ID: CVE-2025-7584 State: PUBLISHED Published: 2025-07-14T07:32:07.148Z Last Updated: 2025-07-14T16:40:32.911Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2 and classified as critical. This issue affects some unknown processing of the file /admin/add-team.php. The manipulation of the argument teammember leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316283 - https://vuldb.com/?ctiid.316283 - https://vuldb.com/?submit.615039 - https://github.com/f1rstb100d/myCVE/issues/132 - https://phpgurukul.com/
CVE ID: CVE-2025-7585 State: PUBLISHED Published: 2025-07-14T07:44:06.390Z Last Updated: 2025-07-14T15:42:16.310Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. Affected is an unknown function of the file /admin/manage-site.php. The manipulation of the argument webtitle leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References:
exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316284 - https://vuldb.com/?ctiid.316284 - https://vuldb.com/?submit.615040 - https://github.com/f1rstb100d/myCVE/issues/133 - https://phpgurukul.com/
CVE ID: CVE-2025-7586 State: PUBLISHED Published: 2025-07-14T08:02:06.975Z Last Updated: 2025-07-14T15:22:29.586Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC500 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC500 2.0.1.9(1307). It has been declared as critical. Affected by this vulnerability is the function formSetAPCfg of the file /goform/setWtpData. The manipulation of the argument radio_2g_1 leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316285 - https://vuldb.com/?ctiid.316285 - https://vuldb.com/?submit.615169 - https://github.com/panda666-888/vuls/blob/main/tenda/ac500/formSetAPCfg.md - https://github.com/panda666-888/vuls/blob/main/tenda/ac500/formSetAPCfg.md#poc - https://www.tenda.com.cn/