deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-33193
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper validation of integrity. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-354
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33193; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33193
CVE: CVE-2025-33194
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause improper processing of input data. A successful exploit of this vulnerability might lead to information disclosure or denial of service.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-180
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33194; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33194
CVE: CVE-2025-33195
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause unexpected memory buffer operations. A successful exploit of this vulnerability might lead to data tampering, denial of service, or escalation of privileges.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-119
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33195; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33195
CVE: CVE-2025-33196
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-226
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33196; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33196
CVE: CVE-2025-33197
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a NULL pointer dereference. A successful exploit of this vulnerability might lead to denial of service.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-476
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33197; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33197
CVE: CVE-2025-33198
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 3.3 (LOW)
CWE: CWE-226
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33198; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33198
CVE: CVE-2025-33199
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause incorrect control flow behavior. A successful exploit of this vulnerability might lead to data tampering.
CVSS Score: 3.2 (LOW)
CWE: CWE-670
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33199; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33199
CVE: CVE-2025-33200
Published: 2025-11-25
Description: NVIDIA DGX Spark GB10 contains a vulnerability in SROOT firmware, where an attacker could cause a resource to be reused. A successful exploit of this vulnerability might lead to information disclosure.
CVSS Score: 2.3 (LOW)
CWE: CWE-226
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33200; https://nvidia.custhelp.com/app/answers/detail/a_id/5720; https://www.cve.org/CVERecord?id=CVE-2025-33200
CVE: CVE-2025-33203
Published: 2025-11-25
Description: NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service.
CVSS Score: 7.6 (HIGH)
CWE: CWE-918
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33203; https://nvidia.custhelp.com/app/answers/detail/a_id/5726; https://www.cve.org/CVERecord?id=CVE-2025-33203
CVE: CVE-2025-33204
Published: 2025-11-25
Description: NVIDIA NeMo Framework for all platforms contains a vulnerability in the NLP and LLM components, where malicious data created by an attacker could cause code injection. A successful exploit of this vulnerability may lead to code execution, escalation of privileges, information disclosure, and data tampering.
CVSS Score: 7.8 (HIGH)
CWE: CWE-94
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33204; https://nvidia.custhelp.com/app/answers/detail/a_id/5729; https://www.cve.org/CVERecord?id=CVE-2025-33204
CVE: CVE-2025-33205
Published: 2025-11-25
Description: NVIDIA NeMo framework contains a vulnerability in a predefined variable, where an attacker could cause inclusion of functionality from an untrusted control sphere by use of a predefined variable. A successful exploit of this vulnerability may lead to code execution.
CVSS Score: 7.3 (HIGH)
CWE: CWE-829
References: https://nvd.nist.gov/vuln/detail/CVE-2025-33205; https://nvidia.custhelp.com/app/answers/detail/a_id/5729; https://www.cve.org/CVERecord?id=CVE-2025-33205
CVE: CVE-2025-64062
Published: 2025-11-25
Description: The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated session. By manipulating the email parameter to an arbitrary value (e.g., otheruser@user.com), an attacker can assume the session and gain full access to the target user's data and privileges. Also, if the email parameter is left blank, the application defaults to the first user in the list, who is typically the application administrator, resulting in an immediate Privilege Escalation to the highest level.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64062.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-64066
Published: 2025-11-25
Description: Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to implement any authorization checks, allowing unauthenticated attackers to perform POST requests to register new user accounts in the application's local database. This bypasses the intended security architecture, which relies on an external Identity Provider for initial user registration and assumes that internal user creation is an administrative-only function. This vector can also be chained with other vulnerabilities for privilege escalation and complete compromise of application. This specific request can be used to also enumerate already registered user accounts, aiding in social engineering or further targeted attacks.
CVSS Score: 8.6 (HIGH)
CWE: CWE-284
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64066.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-65084
Published: 2025-11-25
Description: An Out-of-Bounds Write vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.207 and prior that could allow an attacker to disclose information or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01
CVE: CVE-2025-65085
Published: 2025-11-25
Description: A Heap-based Buffer Overflow vulnerability is present in Ashlar-Vellum Cobalt, Xenon, Argon, Lithium, and Cobalt Share versions 12.6.1204.207 and prior that could allow an attacker to disclose information or execute arbitrary code.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-01
CVE: CVE-2025-34350
Published: 2025-11-25
Description: UnForm Server versions < 10.1.15 contain an unauthenticated arbitrary file read and SMB coercion vulnerability in the Doc Flow feature’s 'arc' endpoint. The Doc Flow module uses the 'arc' handler to retrieve and render pages or resources specified by the user-supplied 'pp' parameter, but it does so without enforcing authentication or restricting path inputs. As a result, an unauthenticated remote attacker can supply local filesystem paths to read arbitrary files accessible to the service account. On Windows deployments, providing a UNC path can also coerce the server into initiating outbound SMB authentication, potentially exposing NTLM credentials for offline cracking or relay. This issue may lead to sensitive information disclosure and, in some environments, enable further lateral movement.
CWE: CWE-22, CWE-918
References: https://unform.com/download/uf101_readme.txt; https://www.vulncheck.com/advisories/unform-server-doc-flow-unauthenticated-file-read
CVE: CVE-2025-61167
Published: 2025-11-25
Description: SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: http://pmb.com; http://sigb.com; https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2
CVE: CVE-2025-61168
Published: 2025-11-25
Description: An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: http://pmb.com; http://sigb.com; https://forge.sigb.net/projects/pmb/wiki/Changelog_801#S%C3%A9curit%C3%A9-2
CVE: CVE-2025-64063
Published: 2025-11-25
Description: Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit this flaw by sending direct HTTP requests to administrative endpoints, bypassing the UI restrictions. This allows the attacker to manipulate data outside their assigned scope, including: Unauthorized Account modification, modifying/deleting arbitrary user accounts and changing passwords by sending a direct request to the user management API endpoint; Confidential Data Access, accessing and downloading sensitive organizational documents via a direct request to the document retrieval API; Privilege escalation, This vulnerability can lead to complete compromise of data integrity and confidentiality, and Privilege Escalation by manipulating core system functions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-285
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64063.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-64064
Published: 2025-11-25
Description: Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROFILE_ID. Because of weak access controls any low level user can use this API and change their permission to Administrator by using PP_SECURITY_PROFILE_ID=2 inside body of request and escalate privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64064.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-64065
Published: 2025-11-25
Description: The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user impersonation feature is vulnerable to a access control failure. This flaw allows any authenticated low-privileged user to execute a direct PATCH request, enabling them to impersonate any other arbitrary user, including application Administrators. This is due to a Broken Function Level Authorization failure (the function doesn't check the caller's privilege) compounded by an Insecure Design that permits a session switch without requiring the target user's password or an administrative token and only needs email of user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64065.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-64067
Published: 2025-11-25
Description: Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement sufficient server-side validation to confirm that the requesting user is authorized to access the requested object or dataset. This vulnerability can be exploited in two ways: Direct ID manipulation and IDOR, by changing an ID parameter (e.g., user_id, project_id) in the request, an attacker can access the object and data belonging to another user; and filter Omission, by omitting the filtering parameter entirely, an attacker can cause the endpoint to return an entire unfiltered dataset of all stored records for all users. This flaw leads to the unauthorized exposure of sensitive personal and organizational information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/n3k7ar91/Vulnerabilites/blob/main/Primakon/CVE-2025-64067.md; https://www.primakon.com/rjesenja/primakon-pcm/
CVE: CVE-2025-65960
Published: 2025-11-25
Description: Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, back end users with precise control over the contents of template closures can execute arbitrary PHP functions that do not have required parameters. This issue has been patched in versions 4.13.57, 5.3.42, and 5.6.5. A workaround for this issue involves manually patching the Contao\Template::once() method.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-351
References: https://contao.org/en/security-advisories/remote-code-execution-in-template-closures; https://github.com/contao/contao/security/advisories/GHSA-98vj-mm79-v77r
CVE: CVE-2025-65961
Published: 2025-11-25
Description: Contao is an Open Source CMS. From version 4.0.0 to before 4.13.57, before 5.3.42, and before 5.6.5, it is possible to inject code into the template output that will be executed in the browser in the front end and back end. This issue has been patched in versions 4.13.57, 5.3.42, and 5.6.5. A workaround for this issue involves not using the affected templates or patch them manually.
CVSS Score: 3.3 (LOW)
CWE: CWE-87, CWE-79
References: https://contao.org/en/security-advisories/cross-site-scripting-in-templates; https://github.com/contao/contao/security/advisories/GHSA-68q5-78xp-cwwc
CVE: CVE-2025-12816
Published: 2025-11-25
Description: An interpretation-conflict (CWE-436) vulnerability in node-forge versions 1.3.1 and earlier enables unauthenticated attackers to craft ASN.1 structures to desynchronize schema validations, yielding a semantic divergence that may bypass downstream cryptographic verifications and security decisions.
CVSS Score: 8.6 (HIGH)
CWE: CWE-436
References: https://github.com/digitalbazaar/forge; https://github.com/digitalbazaar/forge/pull/1124; https://github.com/digitalbazaar/forge/security/advisories/GHSA-5gfm-wpxj-wjgq
CVE: CVE-2025-51742
Published: 2025-11-25
Description: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /material/getMaterialEnableSerialNumberList endpoint passes the search query parameter directly to parseObject(), introducing a Fastjson deserialization vulnerability that can lead to RCE via JDBC payloads.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.hackpax.top/jsh-erp/; https://gist.github.com/Paxsizy/a40334ffa7f05c42bf0348833f830108; https://gitee.com/jishenghua
CVE: CVE-2025-65647
Published: 2025-11-25
Description: Insecure Direct Object Reference (IDOR) in the Track order function in PHPGURUKUL Online Shopping Portal 2.1 allows information disclosure via the oid parameter.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-639
References: https://github.com/SachuuZ/CVE/tree/main/CVE-2025-65647; https://phpgurukul.com/
CVE: CVE-2025-65965
Published: 2025-11-25
Description: Grype is a vulnerability scanner for container images and filesystems. A credential disclosure vulnerability was found in Grype, affecting versions 0.68.0 through 0.104.0. If registry credentials are defined and the output of grype is written using the --file or --output json=<file> option, the registry credentials will be included unsanitized in the output file. This issue has been patched in version 0.104.1. Users running affected versions of grype can work around this vulnerability by redirecting stdout to a file instead of using the --file or --output options.
CWE: CWE-212
References: https://github.com/anchore/grype/commit/39f7fa17af2739cafe9b27176d4a68f7c05f21c1; https://github.com/anchore/grype/pull/3068; https://github.com/anchore/grype/security/advisories/GHSA-6gxw-85q2-q646
CVE: CVE-2025-66016
Published: 2025-11-25
Description: CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. Prior to version 0.6.3, there is a missing check in the ZK proof that enables an attack in which single malicious signer can reconstruct full private key. This issue has been patched in version 0.6.3, for full mitigation it is recommended to upgrade to cggmp24 version 0.7.0-alpha.2 as it contains more security checks.
CWE: CWE-345
References: https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-m95p-425x-x889; https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained
CVE: CVE-2025-66017
Published: 2025-11-25
Description: CGGMP24 is a state-of-art ECDSA TSS protocol that supports 1-round signing (requires 3 preprocessing rounds), identifiable abort, and a key refresh protocol. In versions 0.6.3 and prior of cggmp21 and version 0.7.0-alpha.1 of cggmp24, presignatures can be used in the way that significantly reduces security. cggmp24 version 0.7.0-alpha.2 release contains API changes that make it impossible to use presignatures in contexts in which it reduces security.
CWE: CWE-327
References: https://github.com/LFDT-Lockness/cggmp21/security/advisories/GHSA-8frv-q972-9rq5; https://www.dfns.co/article/cggmp21-vulnerabilities-patched-and-explained
CVE: CVE-2025-9624
Published: 2025-11-25
Description: A vulnerability in OpenSearch allows attackers to cause Denial of Service (DoS) by submitting complex query_string inputs.



This issue affects all OpenSearch versions between 3.0.0 and < 3.3.0 and OpenSearch < 2.19.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-674
References: https://fluidattacks.com/advisories/chick; https://github.com/opensearch-project/OpenSearch/releases/tag/2.19.4; https://github.com/opensearch-project/OpenSearch/releases/tag/3.3.0
CVE: CVE-2025-51741
Published: 2025-11-25
Description: An issue was discovered in Veal98 Echo Open-Source Community System 2.2 thru 2.3 allowing an unauthenticated attacker to cause the server to send email verification messages to arbitrary users via the /sendEmailCodeForResetPwd endpoint potentially causing a denial of service to the server or the downstream users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: http://echo.com; https://gist.github.com/Paxsizy/9d92e8746778cf0926705d89b4f3618c; https://github.com/Veal98/Echo
CVE: CVE-2025-51743
Published: 2025-11-25
Description: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /materialCategory/addMaterialCategory endpoint is vulnerable to fastjson deserialization attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.hackpax.top/jsh-erp2/; https://gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9; https://gitee.com/jishenghua
CVE: CVE-2025-51744
Published: 2025-11-25
Description: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /user/addUser endpoint is vulnerable to fastjson deserialization attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.hackpax.top/jsh-erp3/; https://gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9; https://gitee.com/jishenghua
CVE: CVE-2025-51745
Published: 2025-11-25
Description: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /role/addcan endpoint is vulnerable to fastjson deserialization attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.hackpax.top/jsh-erp4/; https://gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9; https://gitee.com/jishenghua
CVE: CVE-2025-51746
Published: 2025-11-25
Description: An issue was discovered in jishenghua JSH_ERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://blog.hackpax.top/jsh-erp5/; https://gist.github.com/Paxsizy/cd1557aeba8093a8650601c4dbffb6f9; https://gitee.com/jishenghua
CVE: CVE-2025-58360
Published: 2025-11-25
Description: GeoServer is an open source server that allows users to share and edit geospatial data. From version 2.26.0 to before 2.26.2 and before 2.25.6, an XML External Entity (XXE) vulnerability was identified. The application accepts XML input through a specific endpoint /geoserver/wms operation GetMap. However, this input is not sufficiently sanitized or restricted, allowing an attacker to define external entities within the XML request. This issue has been patched in GeoServer 2.25.6, GeoServer 2.26.3, and GeoServer 2.27.0.
CVSS Score: 8.2 (HIGH)
CWE: CWE-611
References: https://github.com/geoserver/geoserver/security/advisories/GHSA-fjf5-xgmq-5525; https://osgeo-org.atlassian.net/browse/GEOS-11682; https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-58360
CVE: CVE-2025-21621
Published: 2025-11-25
Description: GeoServer is an open source server that allows users to share and edit geospatial data. Prior to version 2.25.0, a reflected cross-site scripting (XSS) vulnerability exists in the WMS GetFeatureInfo HTML output format that enables a remote attacker to execute arbitrary JavaScript code in a victim's browser through specially crafted SLD_BODY parameters. This issue has been patched in version 2.25.0.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/geoserver/geoserver/commit/dc9ff1c726dd73c884437a123b4ad72b19383c7d; https://github.com/geoserver/geoserver/pull/7406; https://github.com/geoserver/geoserver/security/advisories/GHSA-w66h-j855-qr72
CVE: CVE-2025-62703
Published: 2025-11-25
Description: Fugue is a unified interface for distributed computing that lets users execute Python, Pandas, and SQL code on Spark, Dask, and Ray with minimal rewrites. In version 0.9.2 and prior, there is a remote code execution vulnerability by pickle deserialization via FlaskRPCServer. The Fugue framework implements an RPC server system for distributed computing operations. In the core functionality of the RPC server implementation, I found that the _decode() function in fugue/rpc/flask.py directly uses cloudpickle.loads() to deserialize data without any sanitization. This creates a remote code execution vulnerability when malicious pickle data is processed by the RPC server. The vulnerability exists in the RPC communication mechanism where the client can send arbitrary serialized Python objects that will be deserialized on the server side, allowing attackers to execute arbitrary code on the victim's machine. This issue has been patched via commit 6f25326.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502
References: https://github.com/fugue-project/fugue/commit/6f25326779fd1f528198098d6287c5a863176fc0; https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6; https://github.com/fugue-project/fugue/security/advisories/GHSA-xv5p-fjw5-vrj6
CVE: CVE-2025-63735
Published: 2025-11-25
Description: A reflected Cross site scripting (XSS) vulnerability in Ruckus Unleashed 200.13.6.1.319 via the name parameter to the the captive-portal endpoint selfguestpass/guestAccessSubmit.jsp.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/huthx/CVE-2025-63735-Ruckus-Unleashed-Reflected-XSS; https://www.ruckusnetworks.com/products/network-control-and-management/controller-less/