Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-50616 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:19:07.925Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046f984 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_advanced_set in the payload, which can cause the program to crash and lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/9
CVE ID: CVE-2025-50617 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:22:21.872Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_0046ed68 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wps_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/10
CVE ID: CVE-2025-50635 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-14T13:37:01.869Z Vendors: n/a Products: n/a Problem Types: n/a Description: A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Chinesexilinyu/Netis-WF2780-cgitest.cgi-Vulnerability/tree/main/1
CVE ID: CVE-2025-50641 State: PUBLISHED Published: 2025-07-01T00:00:00.000Z Last Updated: 2025-07-01T15:53:39.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the addWifiMacFilter function via the parameter deviceId. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_addWifiMacFilter_deviceId_overflow/detail.md
CVE ID: CVE-2025-50674 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-26T14:19:15.557Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the changePassword method in file /usr/share/php/openmediavault/system/user.inc in OpenMediaVault 7.4.17 allowing local authenticated attackers to escalate privileges to root. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://openmediavault.com - https://gist.github.com/xbz0n/4b98e9291ddd5bb5e6232609e36b2082 - https://xbz0n.sh/blog/CVE-2025-50674
CVE ID: CVE-2025-50675 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T14:19:04.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: GPMAW 14, a bioinformatics software, has a critical vulnerability related to insecure file permissions in its installation directory. The directory is accessible with full read, write, and execute permissions for all users, allowing unprivileged users to manipulate files within the directory, including executable files like GPMAW3.exe, Fragment.exe, and the uninstaller GPsetup64_17028.exe. An attacker with user-level access can exploit this misconfiguration by replacing or modifying the uninstaller (GPsetup64_17028.exe)
ith user-level access can exploit this misconfiguration by replacing or modifying the uninstaller (GPsetup64_17028.exe) with a malicious version. While the application itself runs in the user's context, the uninstaller is typically executed with administrative privileges when an administrator attempts to uninstall the software. By exploiting this flaw, an attacker could gain administrative privileges and execute arbitrary code in the context of the admin, resulting in privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.gpmaw.com/html/downloads.html - https://github.com/LukeSec/CVE-2025-50675-GPMAW-Permissions/tree/main
CVE ID: CVE-2025-50688 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T20:02:00.472Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in TwistedWeb (version 14.0.0) due to improper input sanitization in the file upload functionality. An attacker can exploit this vulnerability by sending a specially crafted HTTP PUT request to upload a malicious file (e.g., a reverse shell script). Once uploaded, the attacker can trigger the execution of arbitrary commands on the target system, allowing for remote code execution. This could lead to escalation of privileges depending on the privileges of the web server process. Th
te code execution. This could lead to escalation of privileges depending on the privileges of the web server process. The attack does not require physical access and can be conducted remotely, posing a significant risk to the confidentiality and integrity of the system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://twisted.org/documents/14.0.0/index.html - https://medium.com/@Justinsecure/chained-rce-on-twistedweb-14-0-0-via-command-injection-and-unauthenticated-put-1aa657995b4e
CVE ID: CVE-2025-50690 State: PUBLISHED Published: 2025-08-13T00:00:00.000Z Last Updated: 2025-08-13T20:13:44.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference.org) versions prior to 2025-05-17 (commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491). The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a specially formed URL with malicious JavaScript code, which is then reflected back and executed in the victim's browser. This flaw allows an attacker to execute arbitrary JavaScript in the context of the victim's session, pote
tim's browser. This flaw allows an attacker to execute arbitrary JavaScript in the context of the victim's session, potentially leading to session hijacking, phishing attacks, data theft, or redirection to malicious sites. The issue is exposed on publicly accessible pages, making it exploitable by an unauthenticated attacker. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/OSGeo/spatialreference.org - https://medium.com/@Justinsecure/cracking-open-a-reflected-xss-in-spatialreference-org-fcc42175ae6b
CVE ID: CVE-2025-50691 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-22T17:42:47.447Z Vendors: n/a Products: n/a Problem Types: n/a Description: MCSManager 10.5.3 daemon process runs as a root account by default, and its sensitive data (including tokens and terminal content) is stored in the data directory, readable by all users. Other users on the system can read the daemon's key and use it to log in, leading to privilege escalation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/MCSManager/MCSManager/pull/1596 - https://github.com/bddjr/bddjr/discussions/9
CVE ID: CVE-2025-50692 State: PUBLISHED Published: 2025-08-07T00:00:00.000Z Last Updated: 2025-08-08T18:40:43.359Z Vendors: n/a Products: n/a Problem Types: n/a Description: FoxCMS <=v1.2.5 is vulnerable to Code Execution in admin/template_file/editFile.html. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://reference1.example.com/index.php/admin/template_file/editFile.html - https://gist.github.com/cyb3res3c/ceacf7d560d2c8cd5ffd158abf0bfba9
CVE ID: CVE-2025-50693 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T17:35:26.631Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Insecure Direct Object Reference (IDOR) in odms/request-details.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/blackm4c/cve/blob/master/phpgurukul/odms/idor/README.md
CVE ID: CVE-2025-50695 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T17:36:28.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in /admin/view-booking-detail.php and /admin/invoice-generating.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/blackm4c/cve/tree/master/phpgurukul/odms/1.stored_xss
CVE ID: CVE-2025-50699 State: PUBLISHED Published: 2025-06-24T00:00:00.000Z Last Updated: 2025-06-24T17:37:38.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Online DJ Booking Management System 2.0 is vulnerable to Cross Site Scripting (XSS) in odms/admin/view-user-queries.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/blackm4c/cve/tree/master/phpgurukul/odms/2.stored_xss
CVE ID: CVE-2025-50706 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T15:27:23.244Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in thinkphp v.5.1 allows a remote attacker to execute arbitrary code via the routecheck function Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://xinyisleep.github.io/2024-04-24/Thinkphp5.1%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB-CNVD-2024-29981 - https://xinyisleep.github.io/CVE-2025-50706.md
CVE ID: CVE-2025-50707 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T15:28:14.721Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in thinkphp3 v.3.2.5 allows a remote attacker to execute arbitrary code via the index.php component Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://xinyisleep.github.io/2024-07-15/Thinkphp3.%E6%96%87%E4%BB%B6%E5%8C%85%E5%90%AB-CNVD-2024-39045 - https://xinyisleep.github.io/CVE-2025-50707.md
CVE ID: CVE-2025-50708 State: PUBLISHED Published: 2025-07-18T00:00:00.000Z Last Updated: 2025-09-23T15:48:04.742Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Perplexity AI GPT-4 v.2.51.0 allows a remote attacker to obtain sensitive information via the token component in the shared chat URL Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mano257200/perplexity/blob/main/README.md - https://github.com/mano257200/Perplexity-AI-GPT-4-v.2.51.0/blob/main/README.md
CVE ID: CVE-2025-50709 State: PUBLISHED Published: 2025-09-17T00:00:00.000Z Last Updated: 2025-09-17T14:32:30.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in Perplexity AI GPT-4 allows a remote attacker to obtain sensitive information via a GET parameter Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/mano257200/perplexity/blob/main/README.md - https://github.com/mano257200/Perplexity-AI/blob/main/README.md
CVE ID: CVE-2025-50722 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-08-25T19:05:56.141Z Vendors: n/a Products: n/a Problem Types: n/a Description: Insecure Permissions vulnerability in sparkshop v.1.1.7 allows a remote attacker to execute arbitrary code via the Common.php component Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/147536951/Qiany1/blob/main/SparkShop.pdf
CVE ID: CVE-2025-50733 State: PUBLISHED Published: 2025-08-22T00:00:00.000Z Last Updated: 2025-08-26T14:08:56.968Z Vendors: n/a Products: n/a Problem Types: n/a Description: NextChat contains a cross-site scripting (XSS) vulnerability in the HTMLPreview component of artifacts.tsx that allows attackers to execute arbitrary JavaScript code when HTML content is rendered in the AI chat interface. The vulnerability occurs because user-influenced HTML from AI responses is rendered in an iframe with 'allow-scripts' sandbox permission without proper sanitization. This can be exploited through specifically crafted prompts that cause the AI to generate malicious HTML/JavaScript code. When a user views
ted through specifically crafted prompts that cause the AI to generate malicious HTML/JavaScript code. When a user views the HTML preview, the injected JavaScript executes in the user's browser context, potentially allowing attackers to exfiltrate sensitive information (including API keys stored in localStorage), perform actions on behalf of the user, and steal session data. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://hackmd.io/@fai1424/BkgqMnNxgl - https://github.com/fai1424/Vulnerability-Research/blob/main/CVE-2025-50733/README.md
CVE ID: CVE-2025-50735 State: PUBLISHED Published: 2025-11-03T00:00:00.000Z Last Updated: 2025-11-03T20:11:16.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in NextChat thru 2.16.0 due to the WebDAV proxy failing to canonicalize or reject dot path segments in its catch-all route, allowing attackers to gain sensitive information via authenticated or anonymous WebDAV endpoints. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/ChatGPTNextWeb/NextChat/blob/main/app/api/webdav/%5B...path%5D/route.ts - https://github.com/ChatGPTNextWeb/NextChat/blob/main/app/utils/cloud/webdav.ts - https://github.com/fai1424/Vuln
te.ts - https://github.com/ChatGPTNextWeb/NextChat/blob/main/app/utils/cloud/webdav.ts - https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50735
CVE ID: CVE-2025-50736 State: PUBLISHED Published: 2025-10-30T00:00:00.000Z Last Updated: 2025-11-04T15:46:51.400Z Vendors: n/a Products: n/a Problem Types: n/a Description: An open redirect vulnerability exists in Byaidu PDFMathTranslate v1.9.9 that allows attackers to craft URLs that cause the application to redirect users to arbitrary external websites via the file parameter to the /gradio_api endpoint. This vulnerability could be exploited for phishing attacks or to bypass security filters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pdf2zh.com/ - https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50736
CVE ID: CVE-2025-50738 State: PUBLISHED Published: 2025-07-29T00:00:00.000Z Last Updated: 2025-08-22T15:36:04.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Memos application, up to version v0.24.3, allows for the embedding of markdown images with arbitrary URLs. When a user views a memo containing such an image, their browser automatically fetches the image URL without explicit user consent or interaction beyond viewing the memo. This can be exploited by an attacker to disclose the viewing user's IP address, browser User-Agent string, and potentially other request-specific information to the attacker-controlled server, leading to information disclosure and user tracking
ther request-specific information to the attacker-controlled server, leading to information disclosure and user tracking. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/usememos/memos - https://github.com/usememos/memos/issues/4707#issuecomment-2898504237 - https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50738
CVE ID: CVE-2025-50739 State: PUBLISHED Published: 2025-10-30T00:00:00.000Z Last Updated: 2025-11-04T15:45:10.590Z Vendors: n/a Products: n/a Problem Types: n/a Description: iib0011 omni-tools v0.4.0 is vulnerable to remote code execution via unsafe JSON deserialization. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://omnitools.app/json/stringify - https://github.com/fai1424/Vulnerability-Research/tree/main/CVE-2025-50739
CVE ID: CVE-2025-50740 State: PUBLISHED Published: 2025-08-06T00:00:00.000Z Last Updated: 2025-08-07T14:05:46.977Z Vendors: n/a Products: n/a Problem Types: n/a Description: AutoConnect 1.4.2, an Arduino library, is vulnerable to a cross site scripting (xss) vulnerability. The AutoConnect web interface /_ac/config allows HTML/JS code to be executed via a crafted network SSID. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Hieromon/AutoConnect/issues/632 - https://github.com/AbhijithAJ/AutoConnect_IoT_Lib_vulnerability/blob/main/Report.pdf
CVE ID: CVE-2025-50753 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-08-27T14:27:22.388Z Vendors: n/a Products: n/a Problem Types: n/a Description: Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is supposed to be used from restricted shell to show files and directories. By providing " /bin/sh" (quotes included) to the argument of this command will drop a root shell. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://mitrastar.com - http://gpt-2741gnac-n2.com - https://gist.github.com/geraldog/2d07fdedbbb79d822e9df4b75f882a63
CVE ID: CVE-2025-50754 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T14:21:42.137Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unisite CMS version 5.0 contains a stored Cross-Site Scripting (XSS) vulnerability in the "Report" functionality. A malicious script submitted by an attacker is rendered in the admin panel when viewed by an administrator. This allows attackers to hijack the admin session and, by leveraging the template editor, upload and execute a PHP web shell on the server, leading to full remote code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/furk4nyildiz/CVE-2025-50754-PoC
CVE ID: CVE-2025-50755 State: PUBLISHED Published: 2025-09-02T00:00:00.000Z Last Updated: 2025-09-02T19:33:59.467Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_cmd function via the command parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WN535K3/set_sys_cmd/readme.md
CVE ID: CVE-2025-50756 State: PUBLISHED Published: 2025-07-14T00:00:00.000Z Last Updated: 2025-07-16T18:38:02.032Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the newpass parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WN535K3/set_sys_adm_newpass/readme.md
CVE ID: CVE-2025-50757 State: PUBLISHED Published: 2025-09-02T00:00:00.000Z Last Updated: 2025-09-02T19:34:44.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Wavlink WN535K3 20191010 was found to contain a command injection vulnerability in the set_sys_adm function via the username parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Summermu/VulnForIoT/tree/main/Wavlink_WN535K3/set_sys_adm_username/readme.md
CVE ID: CVE-2025-50777 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T19:25:51.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: The firmware of the AZIOT 2MP Full HD Smart Wi-Fi CCTV Home Security Camera (version V1.00.02) contains an Incorrect Access Control vulnerability that allows local attackers to gain root shell access. Once accessed, the device exposes critical data including Wi-Fi credentials and ONVIF service credentials stored in plaintext, enabling further compromise of the network and connected systems. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://aziot.com - https://github.com/veereshgadige/aziot-cctv-cve-
nalyst Notes: - CISA ADP Vulnrichment: References: - http://aziot.com - https://github.com/veereshgadige/aziot-cctv-cve-2025-50777
CVE ID: CVE-2025-50817 State: PUBLISHED Published: 2025-08-14T00:00:00.000Z Last Updated: 2025-09-26T19:50:47.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability in the Python-Future 1.0.0 module allows for arbitrary code execution via the unintended import of a file named test.py. When the module is loaded, it automatically imports test.py, if present in the same directory or in the sys.path. This behavior can be exploited by an attacker who has the ability to write files to the server, allowing the execution of arbitrary code. NOTE: Multiple third parties have disputed this issue and stated that it is not a security flaw in python-future and is a documented feat
ird parties have disputed this issue and stated that it is not a security flaw in python-future and is a documented feature of Python’s import system in the handling of sys.path. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pypi.org/project/future/ - https://github.com/PythonCharmers/python-future - https://medium.com/@abcd_68700/cve-2025-50817-python-future-module-arbitrary-code-execution-via-unintended-import-of-test-py-f0818ea93cf4 - https://gist.github.com/fried/d2108a4932f3a22712dfc04598b5b8ce
CVE ID: CVE-2025-50819 State: PUBLISHED Published: 2025-07-15T00:00:00.000Z Last Updated: 2025-07-15T15:37:09.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in beiyuouo arxiv-daily thru 2025-05-06 (commit fad168770b0e68aef3e5acfa16bb2e7a7765d687) when parsing the the topic.yml file in the generation logic in daily_arxiv.py. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/amooryx/arxiv-daily/security/advisories/GHSA-xqg6-5wfv-4855 - https://github.com/beiyuouo/arxiv-daily
CVE ID: CVE-2025-50847 State: PUBLISHED Published: 2025-07-31T00:00:00.000Z Last Updated: 2025-07-31T19:51:08.514Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross Site Request Forgery (CSRF) vulnerability in CS Cart 4.18.3, allows attackers to add products to a user's comparison list via a crafted HTTP request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://cs.com - https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50847.md
CVE ID: CVE-2025-50848 State: PUBLISHED Published: 2025-07-31T00:00:00.000Z Last Updated: 2025-07-31T19:58:25.756Z Vendors: n/a Products: n/a Problem Types: n/a Description: A file upload vulnerability was discovered in CS Cart 4.18.3, allows attackers to execute arbitrary code. CS Cart 4.18.3 allows unrestricted upload of HTML files, which are rendered directly in the browser when accessed. This allows an attacker to upload a crafted HTML file containing malicious content, such as a fake login form for credential harvesting or scripts for Cross-Site Scripting (XSS) attacks. Since the content is served from a trusted domain, it significantly increases the likelihood of successful phishing or
. Since the content is served from a trusted domain, it significantly increases the likelihood of successful phishing or script execution against other users. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://cs.com - https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50848.md