Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-50260 State: PUBLISHED Published: 2025-07-03T00:00:00.000Z Last Updated: 2025-07-03T14:38:39.813Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetFirewallCfg function via the firewallEn parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_SetFirewallCfg_firewallEn_overflow/detail.md
CVE ID: CVE-2025-50262 State: PUBLISHED Published: 2025-07-03T00:00:00.000Z Last Updated: 2025-07-03T14:41:12.681Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the formSetQosBand function via the list parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_SetNetControlList_list_overflow/detail.md
CVE ID: CVE-2025-50263 State: PUBLISHED Published: 2025-07-03T00:00:00.000Z Last Updated: 2025-07-03T13:47:41.724Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC6 v15.03.05.16_multi is vulnerable to Buffer Overflow in the fromSetRouteStatic function via the list parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/faqiadegege/IoTVuln/blob/main/tendaAC6_SetStaticRouteCfg_list_overflow/detail.md
CVE ID: CVE-2025-50270 State: PUBLISHED Published: 2025-07-31T00:00:00.000Z Last Updated: 2025-07-31T19:45:40.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/fesiong/anqicms/issues/80 - https://gist.github.com/Baotong-Wu/1988181a78a797204a75d399af284f7c
CVE ID: CVE-2025-50286 State: PUBLISHED Published: 2025-08-06T00:00:00.000Z Last Updated: 2025-08-07T04:20:30.841Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability in Grav CMS v1.7.48 allows an authenticated admin to upload a malicious plugin via the /admin/tools/direct-install interface. Once uploaded, the plugin is automatically extracted and loaded, allowing arbitrary PHP code execution and reverse shell access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/binneko/CVE-2025-50286
CVE ID: CVE-2025-50340 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-15T18:27:59.855Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Insecure Direct Object Reference (IDOR) vulnerability was discovered in SOGo Webmail thru 5.6.0, allowing an authenticated user to send emails on behalf of other users by manipulating a user-controlled identifier in the email-sending request. The server fails to verify whether the authenticated user is authorized to use the specified sender identity, resulting in unauthorized message delivery as another user. This can lead to impersonation, phishing, or unauthorized communication within the system. NOTE: this is dispu
her user. This can lead to impersonation, phishing, or unauthorized communication within the system. NOTE: this is disputed by the Supplier because the only effective way to prevent this sender spoofing is on the SMTP server, not within a client such as SOGo. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sogo.nu/ - https://github.com/millad7/SOGo_web_mail-vulnerability-CVE-2025-50340 - https://www.mail-archive.com/users%40sogo.nu/msg34098.html - https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1110604
CVE ID: CVE-2025-50341 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T13:49:26.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Boolean-based SQL injection vulnerability was discovered in Axelor 5.2.4 via the _domain parameter. An attacker can manipulate the SQL query logic and determine true/false conditions, potentially leading to data exposure or further exploitation. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://axelor.com - https://github.com/millad7/Axelor-vulnerability-CVE-2025-50341
CVE ID: CVE-2025-50348 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T17:56:48.950Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-class-pic.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-3.md
CVE ID: CVE-2025-50349 State: PUBLISHED Published: 2025-06-23T00:00:00.000Z Last Updated: 2025-06-24T17:57:37.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Pre-School Enrollment System Project V1.0 is vulnerable to Directory Traversal in update-teacher-pic.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-4.md
CVE ID: CVE-2025-50350 State: PUBLISHED Published: 2025-06-26T00:00:00.000Z Last Updated: 2025-06-26T19:04:25.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-2.md
CVE ID: CVE-2025-50363 State: PUBLISHED Published: 2025-11-03T00:00:00.000Z Last Updated: 2025-11-03T18:33:15.550Z Vendors: n/a Products: n/a Problem Types: n/a Description: Phpgurukul Maid Hiring Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in /maid-hiring.php va the name field. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1h3ll/BXSS_CVE - https://github.com/Adar5h16/My-CVE/blob/main/CVE-2025-50363-Exploit.md
CVE ID: CVE-2025-50367 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T20:03:39.702Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored blind XSS vulnerability exists in the Contact Page of the Phpgurukul Medical Card Generation System 1.0 mcgs/contact.php. The name field fails to properly sanitize user input, allowing an attacker to inject malicious JavaScript. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1h3ll/CVEs/blob/main/BXSS-Medicalcard_Generations_System.md
CVE ID: CVE-2025-50369 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T20:04:31.127Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Manage Card functionality (/mcgs/admin/manage-card.php) of PHPGurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authorized admin to delete medical card records by sending a simple GET request without verifying the origin of the request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1h3ll/CVEs/blob/main/CSRF-MANAGECARD_Medicalcard_Generations_System.md
CVE ID: CVE-2025-50370 State: PUBLISHED Published: 2025-06-27T00:00:00.000Z Last Updated: 2025-06-27T20:05:20.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) vulnerability exists in the Inquiry Management functionality /mcgs/admin/readenq.php of the Phpgurukul Medical Card Generation System 1.0. The vulnerable endpoint allows an authenticated admin to delete inquiry records via a simple GET request, without requiring a CSRF token or validating the origin of the request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/1h3ll/CVEs/blob/main/CSRF-ReadEnquiry_Medicalcard_Generations_System.md
CVE ID: CVE-2025-50383 State: PUBLISHED Published: 2025-08-25T00:00:00.000Z Last Updated: 2025-09-22T15:30:45.057Z Vendors: n/a Products: n/a Problem Types: n/a Description: alextselegidis Easy!Appointments v1.5.1 was discovered to contain a SQL injection vulnerability via the order_by parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://easyappointments.org/ - http://alextselegidis.com - https://github.com/Abdullah4eb/CVE-2025-50383
CVE ID: CVE-2025-50404 State: PUBLISHED Published: 2025-07-01T00:00:00.000Z Last Updated: 2025-07-08T15:42:43.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Integer Overflow. The websReadEvent function incorrectly uses the int type when processing the "command" field of the http header, causing the array to cross the boundary and overwrite other fields in the array. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intelbras.com/en - https://github.com/feiwuxingxie/cve/blob/main/Intelbras/vul01/01.md
CVE ID: CVE-2025-50405 State: PUBLISHED Published: 2025-07-01T00:00:00.000Z Last Updated: 2025-07-01T18:23:19.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: Intelbras RX1500 Router v2.2.17 and before is vulnerable to Incorrect Access Control in the FirmwareUpload function and GetFirmwareValidation function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.intelbras.com/en - https://github.com/feiwuxingxie/cve/blob/main/Intelbras/vul02/02.md
CVE ID: CVE-2025-50420 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-05T16:47:17.021Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in the pdfseparate utility of freedesktop poppler v25.04.0 allows attackers to cause an infinite recursion via supplying a crafted PDF file. This can lead to a Denial of Service (DoS). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://freedesktop.com - http://poppler.com - https://github.com/Landw-hub/CVE-2025-50420
CVE ID: CVE-2025-50422 State: PUBLISHED Published: 2025-08-04T00:00:00.000Z Last Updated: 2025-08-26T18:48:32.769Z Severity: LOW (CVSS 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: cairographics Products: Cairo Problem Types: CWE-617 Description: Cairo through 1.18.4, as used in Poppler through 25.08.0, has an "unscaled->face == NULL" assertion failure for _cairo_ft_unscaled_font_fini in cairo-ft-font.c. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Landw-hub/CVE-2025-50422 - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1591 - https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621 - https://gitlab.freedesktop.org/poppler/
/issues/1591 - https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/621 - https://gitlab.freedesktop.org/poppler/poppler/-/issues/1591#note_3045081
CVE ID: CVE-2025-50428 State: PUBLISHED Published: 2025-08-27T00:00:00.000Z Last Updated: 2025-08-29T18:25:35.824Z Vendors: n/a Products: n/a Problem Types: n/a Description: In RaspAP raspap-webgui 3.3.2 and earlier, a command injection vulnerability exists in the includes/hostapd.php script. The vulnerability is due to improper sanitizing of user input passed via the interface parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/RaspAP/raspap-webgui/pull/1833 - https://blog.smarttecs.com/posts/2025-004-cve-2025-50428/
CVE ID: CVE-2025-50434 State: PUBLISHED Published: 2025-08-19T00:00:00.000Z Last Updated: 2025-09-09T17:18:18.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: A security issue has been identified in Appian Enterprise Business Process Management version 25.3. The vulnerability is related to incorrect access control, which under certain conditions could allow unauthorized access to information. NOTE: this has been disputed because the CVE Record information does not originate from the Supplier, and the report lacks specificity about why a problem exists, how the behavior could be reproduced, and whether any action could be taken to resolve the problem. Additional Analyst Notes:
e behavior could be reproduced, and whether any action could be taken to resolve the problem. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Exploit097/11f87812186012efa3ffd9d1fec152ed
CVE ID: CVE-2025-50454 State: PUBLISHED Published: 2025-08-05T00:00:00.000Z Last Updated: 2025-08-05T20:04:24.314Z Vendors: n/a Products: n/a Problem Types: n/a Description: An Authentication Bypass vulnerability in Blue Access' Cobalt X1 thru 02.000.187 allows an unauthorized attacker to log into the application as an administrator without valid credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://blueaccesstech.com/collections/software/products/cobalt-x1-software - https://snakemacready.github.io/cve/2025/08/01/CVE-2025-50454.html
CVE ID: CVE-2025-50460 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-01T17:22:46.516Z Vendors: n/a Products: n/a Problem Types: n/a Description: A remote code execution (RCE) vulnerability exists in the ms-swift project version 3.3.0 due to unsafe deserialization in tests/run.py using yaml.load() from the PyYAML library (versions = 5.3.1). If an attacker can control the content of the YAML configuration file passed to the --run_config parameter, arbitrary code can be executed during deserialization. This can lead to full system compromise. The vulnerability is triggered when a malicious YAML file is loaded, allowing the execution of arbitrary Python commands such
ulnerability is triggered when a malicious YAML file is loaded, allowing the execution of arbitrary Python commands such as os.system(). It is recommended to upgrade PyYAML to version 5.4 or higher, and to use yaml.safe_load() to mitigate the issue. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/modelscope/ms-swift - https://github.com/modelscope/ms-swift/blob/main/tests/run.py#L420 - https://github.com/advisories/GHSA-6757-jp84-gxfx - https://github.com/Anchor0221/CVE-2025-50460
CVE ID: CVE-2025-50461 State: PUBLISHED Published: 2025-08-19T00:00:00.000Z Last Updated: 2025-08-19T19:44:17.392Z Vendors: n/a Products: n/a Problem Types: n/a Description: A deserialization vulnerability exists in Volcengine's verl 3.0.0, specifically in the scripts/model_merger.py script when using the "fsdp" backend. The script calls torch.load() with weights_only=False on user-supplied .pt files, allowing attackers to execute arbitrary code if a maliciously crafted model file is loaded. An attacker can exploit this by convincing a victim to download and place a malicious model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execu
us model file in a local directory with a specific filename pattern. This vulnerability may lead to arbitrary code execution with the privileges of the user running the script. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://pytorch.org/docs/stable/generated/torch.load.html - https://github.com/volcengine/verl - https://github.com/volcengine/verl/blob/main/scripts/model_merger.py#L152 - https://github.com/pytorch/pytorch/blob/main/SECURITY.md#loading-untrusted-data - https://github.com/Anchor0221/CVE-2025-50461
CVE ID: CVE-2025-50464 State: PUBLISHED Published: 2025-07-30T00:00:00.000Z Last Updated: 2025-07-30T19:30:50.586Z Vendors: n/a Products: n/a Problem Types: n/a Description: A buffer overflow vulnerability exists in the upload.cgi module of the iptime NAS firmware v1.5.04. The vulnerability arises due to the unsafe use of the strcpy function to copy attacker-controlled data from the CONTENT_TYPE HTTP header into a fixed-size stack buffer (v8, allocated 8 bytes) without bounds checking. Since this operation occurs before authentication logic is executed, the vulnerability is exploitable pre-authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lafdrew.github
exploitable pre-authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lafdrew.github.io/2025/04/25/Buffer-Overflow-in-upload-cgi-of-iptime-nas-1-5-04/ - https://github.com/lafdrew/IOT/blob/main/iptime_nas_1.5.04/Buffer-Overflow-in-upload-cgi-of-iptime-nas-1-5-04.md
CVE ID: CVE-2025-50465 State: PUBLISHED Published: 2025-08-08T00:00:00.000Z Last Updated: 2025-08-08T19:04:06.734Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The testPlatform parameter can be used to build a SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/Collec
a/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3515 - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3517 - https://gist.github.com/javadk/c23cc3276f3fb5587b0f4345d7a71a7f
CVE ID: CVE-2025-50466 State: PUBLISHED Published: 2025-08-08T00:00:00.000Z Last Updated: 2025-08-08T18:57:40.047Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AC:L/AV:N/A:N/C:H/I:L/PR:L/S:U/UI:N) Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The entityType parameter can be used to build a SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/Collecti
blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3521 - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3522 - https://gist.github.com/javadk/aa7b5eb6f0fca2fbc334129b7572c7c6
CVE ID: CVE-2025-50467 State: PUBLISHED Published: 2025-08-08T00:00:00.000Z Last Updated: 2025-08-08T19:03:31.545Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the TestDefinitionDAO interface. The supportedDataTypeParam parameter can be used to build a SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3527 - https://github.com/open-metadata/OpenMet
service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3527 - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L3528 - https://gist.github.com/javadk/ed0d38e4578405672f154e289036a705
CVE ID: CVE-2025-50468 State: PUBLISHED Published: 2025-08-08T00:00:00.000Z Last Updated: 2025-08-08T19:02:34.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: OpenMetadata <=1.4.4 is vulnerable to SQL Injection. An attacker can extract information from the database in function listCount in the DocStoreDAO interface. The entityType parameters can be used to build a SQL query. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L4411 - https://github.com/open-metadata/OpenMetadata/blob/4b9145
java/org/openmetadata/service/jdbi3/CollectionDAO.java#L4411 - https://github.com/open-metadata/OpenMetadata/blob/4b9145a9da7ed95b7f868ab9f351e3d759af47d7/openmetadata-service/src/main/java/org/openmetadata/service/jdbi3/CollectionDAO.java#L4412 - https://gist.github.com/javadk/0be29d2bb5a971bc09f3410659c83308
CVE ID: CVE-2025-50472 State: PUBLISHED Published: 2025-08-01T00:00:00.000Z Last Updated: 2025-08-01T17:17:49.928Z Vendors: n/a Products: n/a Problem Types: n/a Description: The modelscope/ms-swift library thru 2.6.1 is vulnerable to arbitrary code execution through deserialization of untrusted data within the `load_model_meta()` function of the `ModelFileSystemCache()` class. Attackers can execute arbitrary code and commands by crafting a malicious serialized `.mdl` payload, exploiting the use of `pickle.load()` on data from potentially untrusted sources. This vulnerability allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a norm
y allows for remote code execution (RCE) by deceiving victims into loading a seemingly harmless checkpoint during a normal training process, thereby enabling attackers to execute arbitrary code on the targeted machine. Note that the payload file is a hidden file, making it difficult for the victim to detect tampering. More importantly, during the model training process, after the `.mdl` file is loaded and executes arbitrary code, the normal training process remains unaffected'meaning the user remains unaware of the arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/modelscope/ms-swift/blob/ab38bff0387a86fd9f068246c326ee7b0d5ed139/swi
ADP Vulnrichment: References: - https://github.com/modelscope/ms-swift/blob/ab38bff0387a86fd9f068246c326ee7b0d5ed139/swift/hub/utils/caching.py#L141 - https://github.com/xhjy2020/CVE-2025-50472
CVE ID: CVE-2025-50475 State: PUBLISHED Published: 2025-07-31T00:00:00.000Z Last Updated: 2025-07-31T17:16:23.909Z Vendors: n/a Products: n/a Problem Types: n/a Description: An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralization of special elements used in an OS command within the network configuration handler, enabling remote code execution with the highest privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.goo
xecution with the highest privileges. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1ZmZHzJKU-nrhFXd9w94aiGXYYYldtmni/view?usp=sharing - https://pastebin.com/raw/0U6F55G5 - https://pastebin.com/ic8hkC5V
CVE ID: CVE-2025-50477 State: PUBLISHED Published: 2025-07-23T00:00:00.000Z Last Updated: 2025-07-23T19:55:46.719Z Vendors: n/a Products: n/a Problem Types: n/a Description: A URL redirection in lbry-desktop v0.53.9 allows attackers to redirect victim users to attacker-controlled pages. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/Suuuuuzy/a3df9e88a41f9641c37e6d663f9b539c - https://drive.google.com/file/d/1HLxOWDSq6DHeZTVNcY0Tgkcd_eWTqYAS/view - https://suuuuuzy.github.io/mostly-harmless/lbry_poc/index.html
CVE ID: CVE-2025-50481 State: PUBLISHED Published: 2025-07-23T00:00:00.000Z Last Updated: 2025-07-23T17:18:41.834Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in the component /blog/blogpost/add of Mezzanine CMS v6.1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into a blog post. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/stephenmcd/mezzanine - https://github.com/kevinpdicks/Mezzanine-CMS-6.1.0-XSS