Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-7544 State: PUBLISHED Published: 2025-07-13T21:32:07.187Z Last Updated: 2025-07-15T19:53:10.386Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: AC1206 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda AC1206 15.03.06.23. It has been rated as critical. This issue affects the function formSetMacFilterCfg of the file /goform/setMacFilterCfg. The manipulation of the argument deviceList leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?
osed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316241 - https://vuldb.com/?ctiid.316241 - https://vuldb.com/?submit.614089 - https://github.com/panda666-888/vuls/blob/main/tenda/ac1206/formSetMacFilterCfg.md - https://github.com/panda666-888/vuls/blob/main/tenda/ac1206/formSetMacFilterCfg.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7545 State: PUBLISHED Published: 2025-07-13T21:44:08.027Z Last Updated: 2025-07-15T19:53:03.699Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: GNU Products: Binutils Problem Types: CWE-122, CWE-119 Description: A vulnerability classified as problematic was found in GNU Binutils 2.45. Affected by this vulnerability is the function copy_section of the file binutils/objcopy.c. The manipulation leads to heap-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix t
nd may be used. The patch is named 08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316243 - https://vuldb.com/?ctiid.316243 - https://vuldb.com/?submit.614355 - https://sourceware.org/bugzilla/show_bug.cgi?id=33049 - https://sourceware.org/bugzilla/show_bug.cgi?id=33049#c1 - https://sourceware.org/bugzilla/attachment.cgi?id=16117 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=08c3cbe5926e4d355b5cb70bbec2b1eeb40c2944 - https://www.gnu.org/
CVE ID: CVE-2025-7546 State: PUBLISHED Published: 2025-07-13T22:02:07.589Z Last Updated: 2025-07-14T16:00:55.446Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C) Vendors: GNU Products: Binutils Problem Types: CWE-787, CWE-119 Description: A vulnerability, which was classified as problematic, has been found in GNU Binutils 2.45. Affected by this issue is the function bfd_elf_set_group_contents of the file bfd/elf.c. The manipulation leads to out-of-bounds write. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recom
disclosed to the public and may be used. The name of the patch is 41461010eb7c79fee7a9d5f6209accdaac66cc6b. It is recommended to apply a patch to fix this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316244 - https://vuldb.com/?ctiid.316244 - https://vuldb.com/?submit.614375 - https://sourceware.org/bugzilla/show_bug.cgi?id=33050 - https://sourceware.org/bugzilla/show_bug.cgi?id=33050#c2 - https://sourceware.org/bugzilla/attachment.cgi?id=16118 - https://sourceware.org/git/gitweb.cgi?p=binutils-gdb.git;h=41461010eb7c79fee7a9d5f6209accdaac66cc6b - https://www.gnu.org/
CVE ID: CVE-2025-7547 State: PUBLISHED Published: 2025-07-13T22:14:06.140Z Last Updated: 2025-07-14T15:59:24.427Z Severity: N/A (CVSS 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: Campcodes Products: Online Movie Theater Seat Reservation System Problem Types: CWE-434, CWE-284 Description: A vulnerability, which was classified as critical, was found in Campcodes Online Movie Theater Seat Reservation System 1.0. This affects the function save_movie of the file /admin/admin_class.php. The manipulation of the argument cover leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst No
ble to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316245 - https://vuldb.com/?ctiid.316245 - https://vuldb.com/?submit.614466 - https://github.com/N1n3b9S/cve/issues/1 - https://www.campcodes.com/
CVE ID: CVE-2025-7548 State: PUBLISHED Published: 2025-07-13T22:32:07.492Z Last Updated: 2025-07-14T15:56:48.926Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-121, CWE-119 Description: A vulnerability has been found in Tenda FH1201 1.2.0.14(408) and classified as critical. This vulnerability affects the function formSafeEmailFilter of the file /goform/SafeEmailFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316246 - https://vuldb.com/?ctiid.316246 - https://vuldb.com/?submit.614658 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/formSafeEmailFilter.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/formSafeEmailFilter.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7549 State: PUBLISHED Published: 2025-07-13T22:44:06.676Z Last Updated: 2025-07-14T13:55:07.574Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda FH1201 1.2.0.14(408) and classified as critical. This issue affects the function frmL7ProtForm of the file /goform/L7Prot. The manipulation of the argument page leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316247 - https://vul
may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316247 - https://vuldb.com/?ctiid.316247 - https://vuldb.com/?submit.614973 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/frmL7ProtForm.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/frmL7ProtForm.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7550 State: PUBLISHED Published: 2025-07-13T23:02:07.618Z Last Updated: 2025-07-14T13:52:25.344Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been classified as critical. Affected is the function fromGstDhcpSetSer of the file /goform/GstDhcpSetSer. The manipulation of the argument dips leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id
ed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316248 - https://vuldb.com/?ctiid.316248 - https://vuldb.com/?submit.614974 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromGstDhcpSetSer.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromGstDhcpSetSer.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7551 State: PUBLISHED Published: 2025-07-13T23:14:07.247Z Last Updated: 2025-07-14T13:46:07.393Z Severity: N/A (CVSS 9 AV:N/AC:L/Au:S/C:C/I:C/A:C/E:POC/RL:ND/RC:UR) Vendors: Tenda Products: FH1201 Problem Types: CWE-121, CWE-119 Description: A vulnerability was found in Tenda FH1201 1.2.0.14(408). It has been declared as critical. Affected by this vulnerability is the function fromPptpUserAdd of the file /goform/PPTPDClient. The manipulation of the argument modino/username leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - htt
t has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316249 - https://vuldb.com/?ctiid.316249 - https://vuldb.com/?submit.614975 - https://vuldb.com/?submit.614976 - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md - https://github.com/panda666-888/vuls/blob/main/tenda/fh1201/fromPptpUserAdd_modino.md#poc - https://www.tenda.com.cn/
CVE ID: CVE-2025-7552 State: PUBLISHED Published: 2025-07-13T23:32:15.706Z Last Updated: 2025-07-14T13:40:54.187Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:ND/RL:OF/RC:C) Vendors: Dromara Products: Northstar Problem Types: CWE-284, CWE-266 Description: A vulnerability was found in Dromara Northstar up to 7.3.5. It has been rated as critical. Affected by this issue is the function preHandle of the file northstar-main/src/main/java/org/dromara/northstar/web/interceptor/AuthorizationInterceptor.java of the component Path Handler. The manipulation of the argument Request leads to improper access controls. The attack may be launched remotely. Upgrading to version 7.3.6 is able to addre
uest leads to improper access controls. The attack may be launched remotely. Upgrading to version 7.3.6 is able to address this issue. The patch is identified as 8d521bbf531de59b09b8629a9cbf667870ad2541. It is recommended to upgrade the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316250 - https://vuldb.com/?ctiid.316250 - https://gitee.com/dromara/northstar/issues/ICCQ4E - https://gitee.com/dromara/northstar/issues/ICCQ4E#note_42855013_link - https://gitee.com/dromara/northstar/commit/8d521bbf531de59b09b8629a9cbf667870ad2541 - https://gitee.com/dromara/northstar/releases/tag/v7.3.6
CVE ID: CVE-2025-7553 State: PUBLISHED Published: 2025-07-13T23:44:05.634Z Last Updated: 2025-07-14T14:13:31.426Z Severity: N/A (CVSS 5.8 AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: D-Link Products: DIR-818LW Problem Types: CWE-78, CWE-77 Description: A vulnerability classified as critical has been found in D-Link DIR-818LW up to 20191215. This affects an unknown part of the component System Time Page. The manipulation of the argument NTP Server leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additiona
blic and may be used. This vulnerability only affects products that are no longer supported by the maintainer. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316251 - https://vuldb.com/?ctiid.316251 - https://vuldb.com/?submit.614928 - https://www.dlink.com/
CVE ID: CVE-2025-7554 State: PUBLISHED Published: 2025-07-14T00:02:06.094Z Last Updated: 2025-07-14T14:13:49.641Z Severity: N/A (CVSS 3.3 AV:N/AC:L/Au:M/C:N/I:P/A:N/E:POC/RL:ND/RC:UR) Vendors: Sapido Products: RB-1802 Problem Types: CWE-79, CWE-94 Description: A vulnerability classified as problematic was found in Sapido RB-1802 1.0.32. This vulnerability affects unknown code of the file urlfilter.asp of the component URL Filtering Page. The manipulation of the argument URL address leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com
closed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316252 - https://vuldb.com/?ctiid.316252 - https://vuldb.com/?submit.614901
CVE ID: CVE-2025-7555 State: PUBLISHED Published: 2025-07-14T00:14:05.281Z Last Updated: 2025-07-14T14:10:56.639Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, has been found in code-projects Voting System 1.0. This issue affects some unknown processing of the file /admin/voters_add.php. The manipulation of the argument firstname/lastname leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https
has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316253 - https://vuldb.com/?ctiid.316253 - https://vuldb.com/?submit.615021 - https://github.com/i-Corner/cve/issues/3 - https://code-projects.org/
CVE ID: CVE-2025-7556 State: PUBLISHED Published: 2025-07-14T00:32:05.882Z Last Updated: 2025-07-14T14:10:29.588Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability, which was classified as critical, was found in code-projects Voting System 1.0. Affected is an unknown function of the file /admin/voters_edit.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316254
he public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316254 - https://vuldb.com/?ctiid.316254 - https://vuldb.com/?submit.615022 - https://github.com/i-Corner/cve/issues/4 - https://code-projects.org/
CVE ID: CVE-2025-7557 State: PUBLISHED Published: 2025-07-14T00:44:06.333Z Last Updated: 2025-07-14T14:07:51.102Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability has been found in code-projects Voting System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/voters_row.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316255 - https://vuldb.com/?ctiid.316255 - https://vuldb.com/?submit.615023 - https://github.com/i-Corner/cve/issues/5 - https://code-projects.org/
CVE ID: CVE-2025-7558 State: PUBLISHED Published: 2025-07-14T01:03:41.498Z Last Updated: 2025-07-15T19:52:30.457Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: code-projects Products: Voting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in code-projects Voting System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/positions_add.php. The manipulation of the argument description leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb
disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316256 - https://vuldb.com/?ctiid.316256 - https://vuldb.com/?submit.615024 - https://github.com/i-Corner/cve/issues/6 - https://code-projects.org/
CVE ID: CVE-2025-7559 State: PUBLISHED Published: 2025-07-14T01:14:06.730Z Last Updated: 2025-07-15T19:52:24.458Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been classified as critical. This affects an unknown part of the file /admin/bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichm
k remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316257 - https://vuldb.com/?ctiid.316257 - https://vuldb.com/?submit.615032 - https://github.com/f1rstb100d/myCVE/issues/125 - https://phpgurukul.com/
CVE ID: CVE-2025-7560 State: PUBLISHED Published: 2025-07-14T01:32:06.490Z Last Updated: 2025-07-15T19:52:18.605Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file /admin/workin-progress-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Re
ely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316258 - https://vuldb.com/?ctiid.316258 - https://vuldb.com/?submit.615033 - https://github.com/f1rstb100d/myCVE/issues/126 - https://phpgurukul.com/
CVE ID: CVE-2025-7561 State: PUBLISHED Published: 2025-07-14T01:44:07.073Z Last Updated: 2025-07-15T19:52:12.028Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been rated as critical. This issue affects some unknown processing of the file /admin/team-ontheway-requests.php. The manipulation of the argument teamid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: Refe
y. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316259 - https://vuldb.com/?ctiid.316259 - https://vuldb.com/?submit.615034 - https://github.com/f1rstb100d/myCVE/issues/127 - https://phpgurukul.com/
CVE ID: CVE-2025-7562 State: PUBLISHED Published: 2025-07-14T02:02:06.857Z Last Updated: 2025-07-14T15:56:00.336Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical has been found in PHPGurukul Online Fire Reporting System 1.2. Affected is an unknown function of the file /admin/new-requests.php. The manipulation of the argument teamid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https:
as been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316260 - https://vuldb.com/?ctiid.316260 - https://vuldb.com/?submit.615035 - https://github.com/f1rstb100d/myCVE/issues/128 - https://phpgurukul.com/
CVE ID: CVE-2025-7563 State: PUBLISHED Published: 2025-07-14T02:14:06.586Z Last Updated: 2025-07-14T15:55:28.258Z Severity: N/A (CVSS 6.5 AV:N/AC:L/Au:S/C:P/I:P/A:P/E:POC/RL:ND/RC:UR) Vendors: PHPGurukul Products: Online Fire Reporting System Problem Types: CWE-89, CWE-74 Description: A vulnerability classified as critical was found in PHPGurukul Online Fire Reporting System 1.2. Affected by this vulnerability is an unknown functionality of the file /admin/completed-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: R
tely. The exploit has been disclosed to the public and may be used. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316261 - https://vuldb.com/?ctiid.316261 - https://vuldb.com/?submit.615036 - https://github.com/f1rstb100d/myCVE/issues/129 - https://phpgurukul.com/
CVE ID: CVE-2025-7564 State: PUBLISHED Published: 2025-07-14T02:32:05.381Z Last Updated: 2025-07-14T14:47:58.385Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R) Vendors: LB-LINK Products: BL-AC3600 Problem Types: CWE-798, CWE-259 Description: A vulnerability, which was classified as critical, has been found in LB-LINK BL-AC3600 1.0.22. Affected by this issue is some unknown functionality of the file /etc/shadow. The manipulation with the input root:blinkadmin leads to hard-coded credentials. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure
ack. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316262 - https://vuldb.com/?ctiid.316262 - https://vuldb.com/?submit.605630 - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Hardcoded_Credentials_in_BL-AC3600_Routers.md - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Hardcoded_Credentials_in_BL-AC3600_Routers.md#poc
CVE ID: CVE-2025-7565 State: PUBLISHED Published: 2025-07-14T02:44:05.555Z Last Updated: 2025-07-14T14:01:09.770Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:W/RC:R) Vendors: LB-LINK Products: BL-AC3600 Problem Types: CWE-200, CWE-284 Description: A vulnerability, which was classified as critical, was found in LB-LINK BL-AC3600 up to 1.0.22. This affects the function geteasycfg of the file /cgi-bin/lighttpd.cgi of the component Web Management Interface. The manipulation of the argument Password leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contact
le to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.316263 - https://vuldb.com/?ctiid.316263 - https://vuldb.com/?submit.605632 - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Plaintext_Password_Leakage_in_the_Web_Management_Interface_of_BL-AC3600_Routers.md - https://github.com/waiwai24/0101/blob/main/CVEs/Blink/Plaintext_Password_Leakage_in_the_Web_Management_Interface_of_BL-AC3600_Routers.md#poc