Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
ervice or arbitrary code execution in affected environments. The vulnerability affects versions up to and including 5.0.0-beta.19, and no official fix has been released to date. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/node-cube/cube/issues/153 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57348
CVE ID: CVE-2025-57349 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-09-29T17:59:15.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: The messageformat package, an implementation of the Unicode MessageFormat 2 specification for JavaScript, is vulnerable to prototype pollution due to improper handling of message key paths in versions prior to 2.3.0. The flaw arises when processing nested message keys containing special characters (e.g., __proto__ ), which can lead to unintended modification of the JavaScript Object prototype. This vulnerability may allow a remote attacker to inject properties into the global object prototype via specially crafted messag
erability may allow a remote attacker to inject properties into the global object prototype via specially crafted message input, potentially causing denial of service or other undefined behaviors in applications using the affected component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/messageformat/messageformat/issues/452
CVE ID: CVE-2025-57350 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-09-24T19:15:08.267Z Vendors: n/a Products: n/a Problem Types: n/a Description: The csvtojson package, a tool for converting CSV data to JSON with customizable parsing capabilities, contains a prototype pollution vulnerability in versions prior to 2.0.10. This issue arises due to insufficient sanitization of nested header names during the parsing process in the parser_jsonarray component. When processing CSV input containing specially crafted header fields that reference prototype chains (e.g., using __proto__ syntax), the application may unintentionally modify properties of the base Object prototyp
chains (e.g., using __proto__ syntax), the application may unintentionally modify properties of the base Object prototype. This vulnerability can lead to denial of service conditions or unexpected behavior in applications relying on unmodified prototype chains, particularly when untrusted CSV data is processed. The flaw does not require user interaction beyond providing a maliciously constructed CSV file. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Keyang/node-csvtojson/issues/498 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57350
CVE ID: CVE-2025-57351 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-09-25T18:53:03.622Z Vendors: n/a Products: n/a Problem Types: n/a Description: A prototype pollution vulnerability exists in the ts-fns package versions prior to 13.0.7, where insufficient validation of user-provided keys in the assign function allows attackers to manipulate the Object.prototype chain. By leveraging this flaw, adversaries may inject arbitrary properties into the global object's prototype, potentially leading to application crashes, unexpected code execution behaviors, or bypasses of security-critical validation logic dependent on prototype integrity. The vulnerability stems from im
ors, or bypasses of security-critical validation logic dependent on prototype integrity. The vulnerability stems from improper handling of deep property assignment operations within the library's public API functions. This issue remains unaddressed in the latest available version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/tangshuang/ts-fns/issues/36 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57351
CVE ID: CVE-2025-57352 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-09-25T18:25:21.651Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in the 'min-document' package prior to version 2.19.0, stemming from improper handling of namespace operations in the removeAttributeNS method. By processing malicious input involving the __proto__ property, an attacker can manipulate the prototype chain of JavaScript objects, leading to denial of service or arbitrary code execution. This issue arises from insufficient validation of attribute namespace removal operations, allowing unintended modification of critical object prototypes. The vulnerabi
of attribute namespace removal operations, allowing unintended modification of critical object prototypes. The vulnerability remains unaddressed in the latest available version. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/Raynos/min-document/issues/54 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57352
CVE ID: CVE-2025-57353 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-11-05T18:32:07.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Runtime components of messageformat package for Node.js before 3.0.2 contain a prototype pollution vulnerability. Due to insufficient validation of nested message keys during the processing of message data, an attacker can manipulate the prototype chain of JavaScript objects by providing specially crafted input. This can result in the injection of arbitrary properties into the Object.prototype, potentially leading to denial of service conditions or unexpected application behavior. The vulnerability allows attackers t
ntially leading to denial of service conditions or unexpected application behavior. The vulnerability allows attackers to alter the prototype of base objects, impacting all subsequent object instances throughout the application's lifecycle. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/messageformat/messageformat/issues/453 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57353 - https://github.com/messageformat/messageformat/pull/464 - https://github.com/messageformat/messageformat/commit/82cd10b40e3f922f990bbcf88a6d14b70c0a3ce0 - https://github.com/messageformat/messageformat/issues/453#issuecomment-3466959449
CVE ID: CVE-2025-57354 State: PUBLISHED Published: 2025-09-24T00:00:00.000Z Last Updated: 2025-09-25T18:27:33.481Z Vendors: n/a Products: n/a Problem Types: n/a Description: A vulnerability exists in the 'counterpart' library for Node.js and the browser due to insufficient sanitization of user-controlled input in translation key processing. The affected versions prior to 0.18.6 allow attackers to manipulate the library's translation functionality by supplying maliciously crafted keys containing prototype chain elements (e.g., __proto__ ), leading to prototype pollution. This weakness enables adversaries to inject arbitrary properties into the JavaScript Object prototype through the first par
s weakness enables adversaries to inject arbitrary properties into the JavaScript Object prototype through the first parameter of the translate method when combined with specific separator configurations, potentially resulting in denial-of-service conditions or remote code execution in vulnerable applications. The issue arises from the library's failure to properly validate or neutralize special characters in translation key inputs before processing. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/martinandert/counterpart/issues/54 - https://github.com/VulnSageAgent/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57354
CVE ID: CVE-2025-57389 State: PUBLISHED Published: 2025-10-01T00:00:00.000Z Last Updated: 2025-10-17T15:28:36.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: A reflected cross-site scripting (XSS) vulnerability in the /admin/system/packages endpoint of Luci OpenWRT v18.06.2 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. This vulnerability was fixed in OpenWRT v19.07.0. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/openwrt/luci/blob/20b3600d4d64bf60588cf4975c7a62104411870e/modules/luci-mod-admin-full/luasrc/view/admin_system/packages.htm#L73 - https://github.com/amalcew/CVE-2025-5
104411870e/modules/luci-mod-admin-full/luasrc/view/admin_system/packages.htm#L73 - https://github.com/amalcew/CVE-2025-57389
CVE ID: CVE-2025-57392 State: PUBLISHED Published: 2025-09-10T00:00:00.000Z Last Updated: 2025-09-10T19:13:13.443Z Vendors: n/a Products: n/a Problem Types: n/a Description: BenimPOS Masaustu 3.0.x is affected by insecure file permissions. The application installation directory grants Everyone and BUILTIN\Users groups FILE_ALL_ACCESS, allowing local users to replace or modify .exe and .dll files. This may lead to privilege escalation or arbitrary code execution upon launch by another user or elevated context. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/meisterlos/BenimPOS-POC - https://github.com/meisterlos/CVE-2025-57392
CVE ID: CVE-2025-57393 State: PUBLISHED Published: 2025-10-01T00:00:00.000Z Last Updated: 2025-10-01T18:11:31.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) in Kissflow Work Platform Kissflow Application Versions 7337 Account v2.0 to v4.2vallows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://kissflow.com - https://github.com/ShadowByte1/CVE-Reports/blob/main/CVE-2025-57393.md
CVE ID: CVE-2025-57396 State: PUBLISHED Published: 2025-09-19T00:00:00.000Z Last Updated: 2025-09-19T20:17:08.121Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tandoor Recipes 2.0.0-alpha-1, fixed in 2.0.0-alpha-2, is vulnerable to privilege escalation. This is due to the rework of the API, which resulted in the User Profile API Endpoint containing two boolean values indicating whether a user is staff or administrative. Consequently, any user can escalate their privileges to the highest level. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://m10x.de/posts/2025/08/continuous-checks-are-important-privilege-escalation-in-tandoor-recipes/
CVE ID: CVE-2025-57407 State: PUBLISHED Published: 2025-09-23T00:00:00.000Z Last Updated: 2025-09-24T14:19:10.375Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability in the Admin Log Viewer of S-Cart <=10.0.3 allows a remote authenticated attacker to inject arbitrary web script or HTML via a crafted User-Agent header. The script is executed in an administrator's browser when they view the security log page, which could lead to session hijacking or other malicious actions. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/A
ment: References: - https://github.com/s-cart/core/blob/7c9aa42761be5fd0131c61dbe2b5323beb96d5dd/src/Admin/Controllers/AdminLogController.php - https://github.com/gp247net/core/releases/tag/1.1.24
CVE ID: CVE-2025-57423 State: PUBLISHED Published: 2025-10-03T00:00:00.000Z Last Updated: 2025-10-28T20:34:25.531Z Vendors: n/a Products: n/a Problem Types: n/a Description: A SQL injection vulnerability was discovered in the /articles endpoint of MyClub 0.5, affecting the query parameters Content, GroupName, PersonName, lastUpdate, pool, and title. Due to insufficient input sanitisation, an unauthenticated remote attacker could inject arbitrary SQL commands via a crafted GET request, potentially leading to information disclosure or manipulation of the database. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jebissey/MyClub/issues/2 - https://github.com/j
Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jebissey/MyClub/issues/2 - https://github.com/jebissey/MyClub/commit/f067bb63ac7df153e95565529d99ac35de2c347e - https://github.com/jebissey/MyClub/commit/5741f39cf02215d3d01bf98f6133ac53d27e1556 - https://aardwolfsecurity.com/cve-2025-57423-critical-sql-injection-in-myclub/
CVE ID: CVE-2025-57424 State: PUBLISHED Published: 2025-09-29T00:00:00.000Z Last Updated: 2025-09-29T19:05:53.307Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) vulnerability exists in the MyCourts v3 application within the LTA number profile field. An attacker can insert arbitrary JavaScript into their profile, which executes in the browser of any user viewing it, including administrators. Due to the absence of the HttpOnly flag on the session cookie, this flaw could be exploited to capture session tokens and hijack user sessions, enabling elevated access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aardwolfsecuri
sions, enabling elevated access. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://aardwolfsecurity.com/cve-2025-57424-stored-xss-vulnerability-in-mycourts/
CVE ID: CVE-2025-57425 State: PUBLISHED Published: 2025-08-26T00:00:00.000Z Last Updated: 2025-08-27T16:01:58.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Stored Cross-Site Scripting (XSS) vulnerability in SourceCodester FAQ Management System 1.0 allows an authenticated attacker to inject malicious JavaScript into the 'question' and 'answer' fields via the update-faq.php endpoint. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://gist.github.com/progprnv/10110b20469e4ae02aa1c9bfe130f5e9
CVE ID: CVE-2025-57428 State: PUBLISHED Published: 2025-09-29T00:00:00.000Z Last Updated: 2025-10-28T20:26:26.761Z Vendors: n/a Products: n/a Problem Types: n/a Description: Default credentials in Each Italy Wireless Mini Router WIRELESS-N 300M v28K.MiniRouter.20190211 allows attackers to gain access to the debug shell exposed via Telnet on Port 23 and execute hardware-level flash and register manipulation commands. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://imgur.com/a/X9DNOBj - https://github.com/5ulfur/CVE-2025-57428
CVE ID: CVE-2025-57430 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-23T18:13:35.324Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.creacast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57430
CVE ID: CVE-2025-57431 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:36:19.061Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sound4.com - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57431
CVE ID: CVE-2025-57432 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-23T18:13:29.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackmagicdesign.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2
ferences: - https://www.blackmagicdesign.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432
CVE ID: CVE-2025-57433 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-23T18:13:40.814Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability. By sending a crafted POST request to a specific endpoint (/cwi/ajax_request/get_data.php), an authenticated attacker (even with a low-privileged account like guest) can retrieve the hashed passwords for the admin, manager, and guest accounts. This significantly weakens the system's security posture, as these hashes could be cracked offline, granting attackers administrative access to the device. Additional Analyst Notes: - CIS
hashes could be cracked offline, granting attackers administrative access to the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2wcom.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57433
CVE ID: CVE-2025-57434 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:29:10.145Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.creacast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57434
CVE ID: CVE-2025-57437 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:49:40.482Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream platform, stream key, and streaming URL - Audio/video configuration This data can be used to hijack live streams or perform network reconnaissance. Additional Analyst Notes: - CISA ADP Vulnrichment: Reference
d to hijack live streams or perform network reconnaissance. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackmagicdesign.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57437
CVE ID: CVE-2025-57438 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:46:09.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifying requests. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.2wcom.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57438
CVE ID: CVE-2025-57439 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:59:57.367Z Vendors: n/a Products: n/a Problem Types: n/a Description: Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An authenticated attacker can inject arbitrary Lua code into the configuration, which is then executed on the server. This allows full system compromise, including reverse shell execution or arbitrary command execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://www.creacast.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57439
CVE ID: CVE-2025-57440 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-10-28T20:09:54.728Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blackmagic ATEM Mini Pro 2.7 exposes an undocumented Telnet service on TCP port 9993, which accepts unauthenticated plaintext commands for controlling streaming, recording, formatting storage devices, and system reboot. This interface, referred to as the "ATEM Ethernet Protocol 1.0", provides complete device control without requiring credentials or encryption. An attacker on the same network (or with remote access to the exposed port) can exploit this interface to execute arbitrary streaming commands, erase disks, or
h remote access to the exposed port) can exploit this interface to execute arbitrary streaming commands, erase disks, or shut down the device - effectively gaining full remote control. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackmagicdesign.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57440
CVE ID: CVE-2025-57441 State: PUBLISHED Published: 2025-09-22T00:00:00.000Z Last Updated: 2025-09-22T17:41:16.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Blackmagic ATEM Mini Pro 2.7 exposes sensitive device and stream configuration information via an unauthenticated Telnet service on port 9990. Upon connection, the attacker can access a protocol preamble that leaks the video mode, routing configuration, input/output labels, device model, and even internal identifiers such as the unique ID. This can be used for reconnaissance and planning further attacks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackmagicdesign.com/ - https://githu
acks. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.blackmagicdesign.com/ - https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57441
CVE ID: CVE-2025-57443 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:25:13.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: FrostWire 6.14.0-build-326 for macOS contains permissive entitlements (allow-dyld-environment-variables, disable-library-validation) that allow unprivileged local attackers to inject code into the FrostWire process via the DYLD_INSERT_LIBRARIES environment variable. This allows escalated privileges to arbitrary TCC-approved directories. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/SwayZGl1tZyyy/vulnerability-research/tree/main/CVE-2025-57443
CVE ID: CVE-2025-57444 State: PUBLISHED Published: 2025-10-01T00:00:00.000Z Last Updated: 2025-10-01T19:43:10.090Z Vendors: n/a Products: n/a Problem Types: n/a Description: An authenticated cross-site scripting (XSS) vulnerability in the Administrative interface of Radware AlteonOS Web UI Management v33.0.4.50 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Description parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://binqqer.com/posts/CVE-2025-57444/
CVE ID: CVE-2025-57446 State: PUBLISHED Published: 2025-09-25T00:00:00.000Z Last Updated: 2025-09-26T20:01:21.881Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue in O-RAN Near Realtime RIC ric-plt-submgr in the J-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the Subscription Manager API component. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://lf-o-ran-sc.atlassian.net/browse/RIC-1073 - https://github.com/ting1197/vulnerability-research/tree/main/CVE-2025-57446