Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-34125 State: PUBLISHED Published: 2025-07-16T21:09:59.215Z Last Updated: 2025-11-21T19:15:26.371Z Vendors: D-Link Products: DSP-W110A1 Problem Types: CWE-78 Description: An unauthenticated command injection vulnerability exists in the cookie handling process of the lighttpd web server on D-Link DSP-W110A1 firmware version 1.05B01. This occurs when specially crafted cookie values are processed, allowing remote attackers to execute arbitrary commands on the underlying Linux operating system. Successful exploitation enables full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20160125171424/https://github.com/darka
nalyst Notes: - CISA ADP Vulnrichment: References: - https://web.archive.org/web/20160125171424/https://github.com/darkarnium/secpub/tree/master/D-Link/DSP-W110 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dspw110_cookie_noauth_exec.rb - https://www.vulncheck.com/advisories/dlink-dspw110a1-cookie-command-injection - https://www.exploit-db.com/exploits/37628
CVE ID: CVE-2025-34126 State: PUBLISHED Published: 2025-07-16T21:10:13.388Z Last Updated: 2025-07-17T15:41:29.991Z Vendors: RIPS Technologies Products: RIPS Scanner Problem Types: CWE-22 Description: A path traversal vulnerability exists in RIPS Scanner version 0.54. The vulnerability allows remote attackers to read arbitrary files on the system with the privileges of the web server by sending crafted HTTP GET requests to the 'windows/code.php' script with a manipulated 'file' parameter. This can lead to disclosure of sensitive information. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html - https:
ADP Vulnrichment: References: - https://codesec.blogspot.com/2015/03/rips-scanner-v-054-local-file-include.html - https://www.exploit-db.com/exploits/18660 - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/rips_traversal.rb - https://rips-scanner.sourceforge.net/ - https://www.vulncheck.com/advisories/rips-scanner-path-traversal
CVE ID: CVE-2025-34127 State: PUBLISHED Published: 2025-07-16T21:10:22.494Z Last Updated: 2025-07-17T14:56:20.018Z Vendors: Achat Software Products: Achat Chat Server Problem Types: CWE-121, CWE-94 Description: A stack-based buffer overflow exists in Achat v0.150 in its default configuration. By sending a specially crafted message to the UDP port 9256, an attacker can overwrite the structured exception handler (SEH) due to insufficient bounds checking on user-supplied input leading to remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb - https://
tps://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/achat_bof.rb - https://www.vulncheck.com/advisories/achat-seh-buffer-overflow - https://www.exploit-db.com/exploits/36056
CVE ID: CVE-2025-34128 State: PUBLISHED Published: 2025-07-16T21:10:31.205Z Last Updated: 2025-07-17T13:45:07.513Z Vendors: X360Soft Products: X360 VideoPlayer ActiveX Control Problem Types: CWE-120, CWE-94 Description: A buffer overflow vulnerability exists in the X360 VideoPlayer ActiveX control (VideoPlayer.ocx) version 2.6 when handling overly long arguments to the ConvertFile() method. An attacker can exploit this vulnerability by supplying crafted input to cause memory corruption and execute arbitrary code within the context of the current process. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modul
Notes: - CISA ADP Vulnrichment: References: - https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/x360_video_player_set_text_bof.rb - https://rh0dev.github.io/blog/2015/fun-with-info-leaks/ - https://www.exploit-db.com/exploits/35948 - https://www.fortiguard.com/encyclopedia/ips/40167/x360-videoplayer-activex-control-buffer-overflow - https://www.vulncheck.com/advisories/x360-videoplayer-activex-control-buffer-overflow - https://www.exploit-db.com/exploits/36100
CVE ID: CVE-2025-34129 State: PUBLISHED Published: 2025-07-16T21:26:32.446Z Last Updated: 2025-07-22T14:10:50.946Z Vendors: Merit LILIN Products: DVR Firmware Problem Types: CWE-78, CWE-20 Description: A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 due to insufficient sanitization of the FTP and NTP Server fields in the service configuration. An attacker with access to the configuration interface can upload a malicious XML file with injected shell commands in these fields. Upon subsequent configuration syncs, these commands are executed with elevated privileges. This vulnerability was exploited in the wild by t
iguration syncs, these commands are executed with elevated privileges. This vulnerability was exploited in the wild by the Moobot botnets. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/ - https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf - https://www.vulncheck.com/advisories/lilin-dvr-multiple-vulnerabilities
CVE ID: CVE-2025-34130 State: PUBLISHED Published: 2025-07-16T21:26:42.449Z Last Updated: 2025-07-17T13:41:31.907Z Vendors: Merit LILIN Products: DVR Firmware Problem Types: CWE-306, CWE-200 Description: An unauthenticated arbitrary file read exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the /z/zbin/net_html.cgi endpoint. This vulnerability allows attackers to read sensitive configuration files, such as /zconf/service.xml, which can then be used to facilitate further attacks including command injection. The vulnerability has been exploited in the wild in conjunction with other issues by botnets like FBot and Moobot. Additional Analyst Note
has been exploited in the wild in conjunction with other issues by botnets like FBot and Moobot. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/ - https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf - https://www.vulncheck.com/advisories/lilin-dvr-multiple-vulnerabilities
CVE ID: CVE-2025-34132 State: PUBLISHED Published: 2025-07-16T21:26:51.852Z Last Updated: 2025-10-28T13:48:22.290Z Vendors: Merit LILIN Products: DVR Firmware Problem Types: CWE-78, CWE-20 Description: A command injection vulnerability exists in LILIN Digital Video Recorder (DVR) devices prior to firmware version 2.0b60_20200207 via the Server field in the NTPUpdate configuration. The web service at /z/zbin/dvr_box fails to properly sanitize input, allowing remote attackers to inject and execute arbitrary commands as root by supplying specially crafted XML data to the DVRPOST interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.netlab.360.com/multiple-botn
ST interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blog.netlab.360.com/multiple-botnets-are-spreading-using-lilin-dvr-0-day/ - https://www.meritlilin.com/assets/uploads/support/file/M00158-TW.pdf - https://www.vulncheck.com/advisories/lilin-dvr-multiple-vulnerabilities - https://ducklingstudio.blog.fc2.com/blog-entry-400.html
CVE ID: CVE-2025-34133 State: PUBLISHED Published: 2025-10-27T15:13:06.704Z Last Updated: 2025-10-27T15:32:02.819Z Vendors: Cloud Solutions SAS Products: Wimi Teamwork Problem Types: CWE-352 Description: Wimi Teamwork versions prior to 7.38.17 contains a cross-site request forgery (CSRF) vulnerability in its API. The API accepts any authenticated request that contains a JSON field named 'csrf_token' without validating the field’s value; only the presence of the field is checked. An attacker can craft a cross-site request that causes a logged-in victim’s browser to submit a JSON POST containing an arbitrary or empty 'csrf_token', and the API will execute the request with the victim’s privileg
JSON POST containing an arbitrary or empty 'csrf_token', and the API will execute the request with the victim’s privileges. Successful exploitation can allow an attacker to perform privileged actions as the victim potentially resulting in account takeover, privilege escalation, or service disruption. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.wimi-teamwork.com/ - https://www.wimi-teamwork.com/product-news/release-7-38/ - https://www.vulncheck.com/advisories/wimi-teamwork-csrf
CVE ID: CVE-2025-34134 State: PUBLISHED Published: 2025-10-30T21:41:58.188Z Last Updated: 2025-11-17T18:21:50.474Z Vendors: Nagios Products: XI Problem Types: CWE-78 Description: Nagios XI versions prior to 2024R1.4.2 contain a remote code execution vulnerability in the Business Process Intelligence (BPI) component. Insufficient validation and sanitization of administrator-controlled BPI configuration parameters (notably bpi_logfile and bpi_configfile) allow an authenticated administrative user to cause the product to create or overwrite files within the webroot and subsequently edit them via the BPI configuration editor. When such files carry executable extensions and are served by the web
ently edit them via the BPI configuration editor. When such files carry executable extensions and are served by the web application, arbitrary code may be executed in the context of the web application user. Successful exploitation results in arbitrary command execution with the privileges of the Nagios XI web application user and can be leveraged to gain further control of the underlying host operating system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-rce-via-business-process-intelligence-bpi
CVE ID: CVE-2025-34135 State: PUBLISHED Published: 2025-10-30T21:39:22.649Z Last Updated: 2025-11-17T18:21:50.638Z Vendors: Nagios Products: XI Problem Types: CWE-732 Description: Nagios XI versions prior to 2024R1.4.2 configure some systemd unit files with permission sets that were too permissive. In particular, the nagios.service unit had executable permissions that were not required. Overly permissive permissions on service unit files can broaden local attack surface by enabling unintended execution behaviors or facilitating abuse of service operations when combined with other weaknesses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/secu
other weaknesses. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.nagios.com/products/security/#nagios-xi - https://www.nagios.com/changelog/nagios-xi/ - https://www.vulncheck.com/advisories/nagios-xi-overly-permissive-permissions-on-systemd-unit-files
CVE ID: CVE-2025-34136 State: PUBLISHED Published: 2025-07-25T15:49:23.837Z Last Updated: 2025-11-19T01:28:56.047Z Vendors: Commvault Products: Commvault Problem Types: CWE-89 Description: An SQL injection vulnerability exists in Commvault 11.32.0 - 11.32.93, 11.36.0 - 11.36.51, and 11.38.0 - 11.38.19 Web Server component that allows a remote, unauthenticated attacker to perform SQL Injection. The vulnerability impacts systems where the CommServe and Web Server roles are installed. Other Commvault components deployed in the same environment are not affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_04_2.ht
yst Notes: - CISA ADP Vulnrichment: References: - https://documentation.commvault.com/securityadvisories/CV_2025_04_2.html - https://www.vulncheck.com/advisories/commvault-commserve-web-server-unauth-sqli
CVE ID: CVE-2025-34138 State: PUBLISHED Published: 2025-07-25T15:54:47.306Z Last Updated: 2025-11-19T01:28:44.703Z Vendors: Sitecore Products: Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), Managed Cloud Problem Types: CWE-94 Description: A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow remote code execution or unauthorized access to information. This vulnerability affects all Experience Platform topologies (XM, XP, XC) from 9.2 Initial Release through 10.4 Initial Release. PaaS and containerized solutions are similarly affected. Additional Analyst Notes: - CISA ADP
ough 10.4 Initial Release. PaaS and containerized solutions are similarly affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003743 - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003734 - https://www.vulncheck.com/advisories/sitecore-xm-xp-xc-managed-cloud-rce
CVE ID: CVE-2025-34139 State: PUBLISHED Published: 2025-07-25T15:54:25.297Z Last Updated: 2025-11-19T01:28:37.079Z Vendors: Sitecore Products: Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), Managed Cloud Problem Types: CWE-522 Description: A vulnerability exists in Sitecore Experience Manager (XM), Experience Platform (XP), Experience Commerce (XC), and Managed Cloud that could allow an unauthenticated attacker to read arbitrary files. This vulnerability affects all Experience Platform topologies (XM, XP, XC) from 8.0 Initial Release through 10.4 Initial Release and later. This issue affects Content Management (CM) and standalone instances. PaaS and containerize
.4 Initial Release and later. This issue affects Content Management (CM) and standalone instances. PaaS and containerized solutions are also affected. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003650 - https://support.sitecore.com/kb?id=kb_article_view&sysparm_article=KB1003661 - https://www.vulncheck.com/advisories/sitecore-xm-xp-xc-managed-cloud-arbitrary-file-read
CVE ID: CVE-2025-34140 State: PUBLISHED Published: 2025-07-22T12:34:31.324Z Last Updated: 2025-11-04T22:24:27.678Z Vendors: ETQ Products: Reliance CG (legacy), Reliance NXG (SaaS) Problem Types: CWE-639 Description: An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific URI suffix to certain API endpoints, an unauthenticated attacker can bypass access control checks and retrieve limited sensitive resources. The root cause was a misconfiguration in API authorization logic, which has since been corrected in SE.2025.1 and 2025.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.com/product-overvi
2025.1 and 2025.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.com/product-overview/ - https://www.etq.com/blog/etq-reliance-security-update/ - https://www.vulncheck.com/advisories/etq-reliance-cg-nxg-api-authorization-bypass-via-localized-text-uri-suffix
CVE ID: CVE-2025-34141 State: PUBLISHED Published: 2025-07-22T12:35:57.509Z Last Updated: 2025-11-04T22:20:40.905Z Vendors: ETQ Products: Reliance CG (legacy) Problem Types: CWE-79, CWE-116 Description: A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.c
e been disabled in version SE.2025.1. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.com/product-overview/ - https://www.etq.com/blog/etq-reliance-security-update/ - https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/ - https://www.vulncheck.com/advisories/etq-reliance-cg-reflected-xss-in-sqlconverterservlet
CVE ID: CVE-2025-34142 State: PUBLISHED Published: 2025-07-22T12:31:58.875Z Last Updated: 2025-11-04T22:24:04.974Z Vendors: ETQ Products: Reliance CG (legacy) Problem Types: CWE-611 Description: An XML External Entity (XXE) injection vulnerability exists in ETQ Reliance on the CG (legacy) platform within the `/resources/sessions/sso` endpoint. The SAML authentication handler processes XML input without disabling external entity resolution, allowing crafted SAML responses to invoke external entity references. This could enable attackers to retrieve sensitive files or perform server-side request forgery (SSRF). The issue was addressed by disabling external entity processing for the affected XM
server-side request forgery (SSRF). The issue was addressed by disabling external entity processing for the affected XML parser in versions SE.2025.1 and 2025.1.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.com/product-overview/ - https://www.etq.com/blog/etq-reliance-security-update/ - https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/ - https://www.vulncheck.com/advisories/etq-reliance-cg-xxe-injection-in-sso-saml-handler-copy
CVE ID: CVE-2025-34143 State: PUBLISHED Published: 2025-07-22T12:31:35.570Z Last Updated: 2025-11-04T22:24:54.919Z Vendors: ETQ Products: Reliance CG (legacy) Problem Types: CWE-288, CWE-269, CWE-78 Description: An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing s
hieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.etq.com/product-overview/ - https://www.etq.com/blog/etq-reliance-security-update/ - https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/ - https://www.vulncheck.com/advisories/etq-reliance-cg-authentication-bypass-via-trailing-space-rce
CVE ID: CVE-2025-34146 State: PUBLISHED Published: 2025-07-31T14:59:35.716Z Last Updated: 2025-07-31T20:06:52.349Z Vendors: nyariv Products: sandboxjs Problem Types: CWE-1321 Description: A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service (DoS) condition or, under certain conditions, escape the sandboxed environment intended to restrict code execution. The vulnerability stems from insufficient prototype access checks in the sandbox’s executor logic, particularly in the handling of JavaScript function objects returned. Add
access checks in the sandbox’s executor logic, particularly in the handling of JavaScript function objects returned. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Hagrid29/9df27829a491080f923c4f6b8518d7e3 - https://github.com/nyariv/SandboxJS/issues/31 - https://www.npmjs.com/package/@nyariv/sandboxjs - https://www.vulncheck.com/advisories/nyariv-sandboxjs-prototype-pollution-sandbox-escape-dos
CVE ID: CVE-2025-34147 State: PUBLISHED Published: 2025-08-04T17:34:59.434Z Last Updated: 2025-11-04T22:19:56.540Z Vendors: Shenzhen Aitemi E Commerce Co. Ltd. Products: M300 Wi-Fi Repeater Problem Types: CWE-78 Description: An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in Extender mode via its captive portal, the extap2g SSID field is inserted unescaped into a reboot-time shell script. This allows remote attackers within Wi-Fi range to inject arbitrary shell commands that execute as root during device reboot, leading to full system compromise. Additional Analyst Notes: - CISA ADP Vul
s that execute as root during device reboot, leading to full system compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root/ - https://www.aliexpress.us/item/3256806767641280.html - https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-ssid
CVE ID: CVE-2025-34148 State: PUBLISHED Published: 2025-08-07T16:45:26.006Z Last Updated: 2025-11-20T21:11:24.300Z Vendors: Shenzhen Aitemi E Commerce Co. Ltd. Products: M300 Wi-Fi Repeater Problem Types: CWE-78 Description: An unauthenticated OS command injection vulnerability exists in the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02). When configuring the device in WISP mode, the 'ssid' parameter is passed unsanitized to system-level scripts. This allows remote attackers within Wi-Fi range to inject arbitrary shell commands that execute as root, resulting in full device compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/202
full device compromise. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-two/ - https://www.aliexpress.us/item/3256806767641280.html - https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-wisp-ssid
CVE ID: CVE-2025-34149 State: PUBLISHED Published: 2025-08-07T16:45:18.731Z Last Updated: 2025-11-21T00:46:31.904Z Vendors: Shenzhen Aitemi E Commerce Co. Ltd. Products: M300 Wi-Fi Repeater Problem Types: CWE-78 Description: A command injection vulnerability affects the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) during WPA2 configuration. The 'key' parameter is interpreted directly by the system shell, enabling attackers to execute arbitrary commands as root. Exploitation requires no authentication and can be triggered during wireless setup. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-tw
t Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-two/ - https://www.aliexpress.us/item/3256806767641280.html - https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-os-command-injection-via-wpa2-key
CVE ID: CVE-2025-34150 State: PUBLISHED Published: 2025-08-07T16:45:11.991Z Last Updated: 2025-11-21T00:46:57.915Z Vendors: Shenzhen Aitemi E Commerce Co. Ltd. Products: M300 Wi-Fi Repeater Problem Types: CWE-78 Description: The PPPoE configuration interface of the Shenzhen Aitemi M300 Wi-Fi Repeater (hardware model MT02) is vulnerable to command injection via the 'user' parameter. Input is processed unsafely during network setup, allowing attackers to execute arbitrary system commands with root privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-two/ - https://www.aliexpress.us/item/32568067676412
tps://chocapikk.com/posts/2025/when-a-wifi-name-gives-you-root-part-two/ - https://www.aliexpress.us/item/3256806767641280.html - https://www.vulncheck.com/advisories/shenzhen-aitemi-m300-wifi-repeater-pppoe-username-command-injection