Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-45240 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:27:09.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: foxcms v1.2.5 was discovered to contain a SQL injection vulnerability via the executeCommand method in DataBackup.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gitee.com/qianfox/foxcms - https://gist.github.com/chao112122/648033972709fb50b3c89363cd64a9a4
CVE ID: CVE-2025-45242 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T17:23:56.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rhymix v2.1.22 was discovered to contain an arbitrary file deletion vulnerability via the procFileAdminEditImage method in /file/file.admin.controller.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://rhymix.com - https://github.com/rhymix/rhymix - https://gist.github.com/chao112122/536a55fece5f578b90cee2c841eecdce
CVE ID: CVE-2025-45250 State: PUBLISHED Published: 2025-05-06T00:00:00.000Z Last Updated: 2025-05-06T20:29:21.295Z Vendors: n/a Products: n/a Problem Types: n/a Description: MrDoc v0.95 and before is vulnerable to Server-Side Request Forgery (SSRF) in the validate_url function of the app_doc/utils.py file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/zmister2016/MrDoc - https://github.com/Anike-x/CVE-2025-45250
CVE ID: CVE-2025-45313 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:29:12.339Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /tasks endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the title parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://hortusfox-web.com - https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45313/CVE-2025-45313.md
CVE ID: CVE-2025-45314 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:26:56.114Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /Calendar endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the add function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/danielbrendel/hortusfox-web - http://hortusfox-web.com - https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45314/CVE-2025-45314.md
CVE ID: CVE-2025-45315 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:23:30.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the /controller/admin.php endpoint of hortusfox-web v4.4 allows attackers to execute arbitrary JavaScript in the context of a user's browser via a crafted payload injected into the email parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/danielbrendel/hortusfox-web - http://hortusfox-web.com - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/controller/admin.php#L192 - https://github.c
nielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/controller/admin.php#L192 - https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45315/CVE-2025-45315.md
CVE ID: CVE-2025-45316 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:28:00.065Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the TextBlockModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/modules/TextBlockModule.php#L15 - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/modules/TextBloc
#L15 - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/modules/TextBlockModule.php#L201 - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/models/ChatMsgModel.php#L47 - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/views/chat.php#L66 - https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45316/CVE-2025-45316.md
CVE ID: CVE-2025-45317 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:25:26.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: A zip slip vulnerability in the /modules/ImportModule.php component of hortusfox-web v4.4 allows attackers to execute arbitrary code via a crafted archive. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/danielbrendel/hortusfox-web/blob/8ab851101a62d8eb311235c118eeeb32a9b36978/app/modules/ImportModule.php#L28 - https://github.com/chrisWalker11/Cves/blob/main/CVE-2025-45317/CVE-2025-45317.md
CVE ID: CVE-2025-45320 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-07T13:45:54.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Directory Listing Vulnerability was found in the /osms/Requester/ directory of the Kashipara Online Service Management Portal V1.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/Directory%20Listing_Requester.pdf
CVE ID: CVE-2025-45321 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T16:06:34.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in /osms/Requester/Requesterchangepass.php via the parameter: rPassword. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/SQL%20Injection-Requesterchangepass.pdf
CVE ID: CVE-2025-45322 State: PUBLISHED Published: 2025-05-05T00:00:00.000Z Last Updated: 2025-05-05T16:04:37.287Z Vendors: n/a Products: n/a Problem Types: n/a Description: kashipara Online Service Management Portal V1.0 is vulnerable to SQL Injection in osms/Requester/CheckStatus.php via the checkid parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/0xBhushan/Writeups/blob/main/CVE/Kashipara/Online%20Service%20Management%20Portal/SQL%20Injection-CheckStatus.pdf
CVE ID: CVE-2025-45326 State: PUBLISHED Published: 2025-09-23T00:00:00.000Z Last Updated: 2025-09-24T18:39:53.919Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in PocketVJ CP PocketVJ-CP-v3 pvj 3.9.1 allows remote attackers to execute arbitrary code via the submit_size.php component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/magdesign/PocketVJ-CP-v3/releases/tag/release - https://gist.github.com/mamdouhalrekabi-ops/3e230eb973101aa6ac7003427a723e29
CVE ID: CVE-2025-45331 State: PUBLISHED Published: 2025-06-20T00:00:00.000Z Last Updated: 2025-06-24T15:29:25.265Z Vendors: n/a Products: n/a Problem Types: n/a Description: brplot v420.69.1 contains a Null Pointer Dereference (NPD) vulnerability in the br_dagens_handle_once function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/branc116/brplot/commit/b90e93a0e0d514d48f38d1584496130fa5fe4fe4 - https://gist.github.com/QiuYitai/9dd6db6e9dfc03868b9c886b801502ac
CVE ID: CVE-2025-45332 State: PUBLISHED Published: 2025-06-25T00:00:00.000Z Last Updated: 2025-06-25T18:31:12.476Z Vendors: n/a Products: n/a Problem Types: n/a Description: vkoskiv c-ray 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the parse_mtllib function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/vkoskiv/c-ray/issues/119 - https://gist.github.com/QiuYitai/6ebfa07510828a9464ba7fb948255ed5
CVE ID: CVE-2025-45333 State: PUBLISHED Published: 2025-06-25T00:00:00.000Z Last Updated: 2025-06-30T20:20:52.582Z Vendors: n/a Products: n/a Problem Types: n/a Description: berkeley-abc abc 1.1 contains a Null Pointer Dereference (NPD) vulnerability in the Abc_NtkCecFraigPart function of its data processing module, leading to unpredictable program behavior, causing segmentation faults, and program crashes. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/berkeley-abc/abc/pull/383 - https://gist.github.com/QiuYitai/eb49750fe58e39ce685cfd87a41eacb9
CVE ID: CVE-2025-45343 State: PUBLISHED Published: 2025-05-28T00:00:00.000Z Last Updated: 2025-05-28T15:44:49.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Tenda W18E v.2.0 v.16.01.0.11 allows an attacker to execute arbitrary code via the editing functionality of the account module in the goform/setmodules route. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.tenda.com.cn/ - http://w18e.com - https://gist.github.com/isstabber/b363d47966965e5c0a8ec26d445e090b
CVE ID: CVE-2025-45346 State: PUBLISHED Published: 2025-07-29T00:00:00.000Z Last Updated: 2025-07-29T20:04:18.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL Injection vulnerability in Bacula-web before v.9.7.1 allows a remote attacker to execute arbitrary code via a crafted HTTP GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/bacula-web/bacula-web/releases/tag/v9.7.1 - https://github.com/bacula-web/bacula-web/commit/ad5d94809f17994a61496ecfec9cd3a16ac14a5f
CVE ID: CVE-2025-45375 State: PUBLISHED Published: 2025-10-07T19:00:28.539Z Last Updated: 2025-10-07T19:24:41.603Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2025, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2024, PowerProtect Data Domain with Data Domain Operating System (DD OS) LTS2023 Problem Types: CWE-121 Description: Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 rele
Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0, LTS2024 release versions 7.13.1.0 through 7.13.1.30, LTS 2023 release versions 7.10.1.0 through 7.10.1.60, contain a Stack-based Buffer Overflow vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000376224/dsa-2025-333-security-update-for-dell-powerprotect-data-domain-multiple-vulnerabilities
CVE ID: CVE-2025-45376 State: PUBLISHED Published: 2025-09-29T20:13:36.928Z Last Updated: 2025-10-01T03:55:53.569Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H) Vendors: Dell Products: Dell Repository Manager (DRM) Problem Types: CWE-280 Description: Dell Repository Manager (DRM), versions 3.4.7 and 3.4.8, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000375461/dsa-2025-373-security-update-for-dell-
DP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000375461/dsa-2025-373-security-update-for-dell-repository-manager-vulnerability
CVE ID: CVE-2025-45378 State: PUBLISHED Published: 2025-11-05T16:23:15.673Z Last Updated: 2025-11-06T04:55:36.592Z Severity: CRITICAL (CVSS 9.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-78 Description: Dell CloudLink, versions 8.0 through 8.1.2, contain vulnerability on restricted shell. A Privileged user with known password can break into command shell of CloudLink server and gain access of shell and escalate privilege, gain unauthorized access of system. If ssh is enabled with web credentials of server, attack is possible through network with known privileged user/password. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
ssible through network with known privileged user/password. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities
CVE ID: CVE-2025-45379 State: PUBLISHED Published: 2025-11-05T16:31:57.457Z Last Updated: 2025-11-06T04:55:38.394Z Severity: HIGH (CVSS 8.4 CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: CloudLink Problem Types: CWE-78 Description: Dell CloudLink, versions prior to 8.2, contain a vulnerability where a privileged user with known password can run command injection from console to gain shell access of system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000384363/dsa-2025-374-security-update-for-dell-cloudlink-multiple-security-vulnerabilities
CVE ID: CVE-2025-45387 State: PUBLISHED Published: 2025-06-02T00:00:00.000Z Last Updated: 2025-06-02T20:33:09.293Z Vendors: n/a Products: n/a Problem Types: n/a Description: osTicket prior to v1.17.6 and v1.18.2 are vulnerable to Broken Access Control Vulnerability in /scp/ajax.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/osTicket/osTicket - https://github.com/osTicket/osTicket/pull/6802/commits/ab6672faa0991de305d4b90a3faa2e3cebdd23c8 - https://github.com/UmerAdeemCheema/CVE-Security-Research/blob/main/OSTicket/Unauthorized%20Access%20to%20Ajax%20Functions.md
CVE ID: CVE-2025-45388 State: PUBLISHED Published: 2025-05-07T00:00:00.000Z Last Updated: 2025-05-09T13:32:10.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wagtail CMS 6.4.1 is vulnerable to a Stored Cross-Site Scripting (XSS) in the document upload functionality. Attackers can inject malicious code inside a PDF file. When a user clicks the document in the CMS interface, the payload executes. NOTE: this is disputed by the Supplier because "It has been well documented that when serving uploaded files using a method outside of Wagtail (which admittedly is the default), it requires additional configuration from the developer, because Wagtail cannot control how these are served
e default), it requires additional configuration from the developer, because Wagtail cannot control how these are served. ... For example, if a Wagtail instance is configured to upload files into AWS S3, Wagtail cannot control the permissions on how they're served, nor any headers used when serving them (a limitation of S3)." Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/echoBRT/Wagtail-CMS-XSS/ - https://github.com/wagtail/wagtail/wiki/Security-team - https://github.com/wagtail/wagtail/discussions/12617 - https://docs.wagtail.org/en/stable/deployment/under_the_hood.html#documents - https://github.com/wagtail/wagtail/pull/12672
CVE ID: CVE-2025-45406 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-29T12:40:49.130Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in CodeIgniter4 v4.6.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the debugbar_time parameter. NOTE: this is disputed by the Supplier because attackers cannot influence the value of debugbar_time, and because debugbar-related data is automatically escaped by the CodeIgniter Parser class. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2020-15943 - https://github.com/ad
st Notes: - CISA ADP Vulnrichment: References: - https://nvd.nist.gov/vuln/detail/CVE-2020-15943 - https://github.com/advisories/GHSA-7h5r-54mm-w4pq - https://www.exploit-db.com/exploits/50556 - https://medium.com/@talktoshweta0/when-debugging-bites-back-exposing-a-persistent-xss-in-codeigniter4-c9caf804a190
CVE ID: CVE-2025-45424 State: PUBLISHED Published: 2025-07-02T00:00:00.000Z Last Updated: 2025-07-02T18:12:44.517Z Vendors: n/a Products: n/a Problem Types: n/a Description: Incorrect access control in Xinference before v1.4.0 allows attackers to access the Web GUI without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/honysyang/Xinference/blob/main/Xinference_Web/Xinference_Web_EN.docx - https://github.com/honysyang/Xinference/tree/main/Xinference_Web
CVE ID: CVE-2025-45427 State: PUBLISHED Published: 2025-04-23T00:00:00.000Z Last Updated: 2025-04-23T15:18:49.042Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda AC9 v1.0 with firmware V15.03.05.14_multi, the security parameter of /goform/WifiBasicSet has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiBasicSet-security.md
CVE ID: CVE-2025-45428 State: PUBLISHED Published: 2025-04-23T00:00:00.000Z Last Updated: 2025-04-23T15:27:31.015Z Vendors: n/a Products: n/a Problem Types: n/a Description: In Tenda ac9 v1.0 with firmware V15.03.05.14_multi, the rebootTime parameter of /goform/SetSysAutoRebbotCfg has a stack overflow vulnerability, which can lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/SetSysAutoRebbotCfg-rebootTime.md
CVE ID: CVE-2025-45429 State: PUBLISHED Published: 2025-04-23T00:00:00.000Z Last Updated: 2025-04-23T15:30:33.643Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the Tenda ac9 v1.0 router with firmware V15.03.05.14_multi, there is a stack overflow vulnerability in /goform/WifiWpsStart, which may lead to remote arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/shuqi233/loophole/blob/main/Tenda%20AC9/WifiWpsStart-index.md
CVE ID: CVE-2025-45466 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T15:31:59.738Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unitree Go1 <= Go1_2022_05_11 is vulnerale to Incorrect Access Control due to authentication credentials being hardcoded in plaintext. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.unitree.com/cn/go1 - https://github.com/zgsnj123/CVE-2025-45466
CVE ID: CVE-2025-45467 State: PUBLISHED Published: 2025-07-25T00:00:00.000Z Last Updated: 2025-07-25T20:19:40.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unitree Go1 <= Go1_2022_05_11 is vulnerable to Insecure Permissions as the firmware update functionality (via Wi-Fi/Ethernet) implements an insecure verification mechanism that solely relies on MD5 checksums for firmware integrity validation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.unitree.com/cn/go1 - https://github.com/zgsnj123/CVE-2025-45467/tree/main
CVE ID: CVE-2025-45468 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-22T18:14:34.817Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in fc-stable-diffusion-plus v1.0.18 allows attackers to escalate privileges and compromise the customer cloud account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zolaer9527/fda954ea6ab9a34b3d3de35e7131e3e1
CVE ID: CVE-2025-45471 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-22T18:28:02.225Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in measure-cold-start v1.4.1 allows attackers to escalate privileges and compromise the customer cloud account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zolaer9527/549d5f466359829a3f1aaafebe7ecc3f - https://github.com/lumigo-io/SAR-measure-cold-start/issues/32
CVE ID: CVE-2025-45472 State: PUBLISHED Published: 2025-05-22T00:00:00.000Z Last Updated: 2025-05-23T15:56:22.088Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure permissions in autodeploy-layer v1.2.0 allows attackers to escalate privileges and compromise the customer cloud account. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/zolaer9527/9a703e9dc575bf1889b275caf7121578
CVE ID: CVE-2025-45474 State: PUBLISHED Published: 2025-05-29T00:00:00.000Z Last Updated: 2025-05-29T15:54:17.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: maccms10 v2025.1000.4047 is vulnerable to Server-side request forgery (SSRF) in Email Settings. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/ptnnp4eema601rvz
CVE ID: CVE-2025-45475 State: PUBLISHED Published: 2025-05-27T00:00:00.000Z Last Updated: 2025-05-29T18:20:58.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: maccms10 v2025.1000.4047 is vulnerable to Server-Side request forgery (SSRF) in Friend Link Management. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.yuque.com/morysummer/vx41bz/dzidfm8vn2h5k1lb
CVE ID: CVE-2025-45479 State: PUBLISHED Published: 2025-07-07T00:00:00.000Z Last Updated: 2025-07-08T17:37:12.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insufficient security mechanisms for created containers in educoder challenges v1.0 allow attackers to execute arbitrary code via injecting crafted content into a container. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.educoder.net/ - https://www.educoder.net/shixuns/fb7qhjgz/challenges - https://github.com/YX-hueimie/CVE-Issues/blob/main/CVE-2025-45479.md
CVE ID: CVE-2025-45487 State: PUBLISHED Published: 2025-05-06T00:00:00.000Z Last Updated: 2025-05-06T20:08:00.621Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_InternetConnection/CI_InternetConnection.pdf - https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_InternetConnection/CI_InternetConnection.py
CVE ID: CVE-2025-45488 State: PUBLISHED Published: 2025-05-06T00:00:00.000Z Last Updated: 2025-05-06T20:10:21.030Z Vendors: n/a Products: n/a Problem Types: n/a Description: Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_mailex/CI_ddnsStatus_DynDNS_mailex.pdf - https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_mailex/CI_ddnsStatus_DynDNS_mailex.py