deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-56124
Published: 2025-12-11
Description: OS Command Injection vulnerability in Ruijie X60 PRO X60_10212014RG-X60 PRO V1.00/V2.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://1drv.ms/f/c/12406a392c92914b/EqOEJce7qVtBlzpFonUkSfYBz09eegk6KowUdpDNexgUvw?e=qfwDKh; https://1drv.ms/t/c/12406a392c92914b/EWnUygFXeTVNigjp81gJ3LQBJ-hCSb_Yq4gGIMxlan7uJg?e=emOIoc; https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56124.md
CVE: CVE-2025-56127
Published: 2025-12-11
Description: OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the get_wanobj in file /usr/lib/lua/luci/controller/admin/common.lua.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://1drv.ms/f/c/12406a392c92914b/Evvem8Mw6SlNh-ZJpY_9SAsBq2iDi88TFdFdA1Am3PdfCQ?e=YeLYxb; https://1drv.ms/t/c/12406a392c92914b/EQkKqI8NW45AgBgScwGNiPABEK0YLvNQFgNtqLaWAhCPVw?e=cLDW5t; https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56127.md
CVE: CVE-2025-56129
Published: 2025-12-11
Description: OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_diagnosis in file /usr/lib/lua/luci/controller/admin/diagnosis.lua.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://1drv.ms/f/c/12406a392c92914b/EqEQemupso9DldgG-EcUI8IBLpEWP_S-f6vpeUtYztYYCg?e=gX4A10; https://1drv.ms/t/c/12406a392c92914b/EaJ2e_mzgltOiHqb4t8xIvgBoT2CYEP0nrhZd7IYlCHSPQ?e=miUrrL; https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56129.md
CVE: CVE-2025-56130
Published: 2025-12-11
Description: OS Command Injection vulnerability in Ruijie RG-S1930 S1930SWITCH_3.0(1)B11P230 allowing attackers to execute arbitrary commands via a crafted POST request to the module_update in file /usr/local/lua/dev_config/ace_sw.lua.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://1drv.ms/f/c/12406a392c92914b/EpWU9cQdd5RNszcYlTj2cGsBfiClkCwF0zCsLNYer2VIZA?e=ANIgPM; https://github.com/flegoity/Ruijie-Multiple-Devices-Vulnerability-Reports-for-CVE/blob/main/CVE-2025-56130.md
CVE: CVE-2024-42197
Published: 2025-12-11
Description: HCL Workload Scheduler stores user credentials in plain text which can be read by a local user.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-256
References: https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0127448
CVE: CVE-2025-12532
Published: 2025-12-11
Description: Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
CVE: CVE-2025-13148
Published: 2025-12-11
Description: IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow could an authenticated user to change the password of another user without prior knowledge of that password.
CVSS Score: 8.1 (HIGH)
CWE: CWE-620
References: https://www.ibm.com/support/pages/node/7254434
CVE: CVE-2025-13211
Published: 2025-12-11
Description: IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to cause a denial of service in the email service due to improper control of interaction frequency.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-799
References: https://www.ibm.com/support/pages/node/7254434
CVE: CVE-2025-13214
Published: 2025-12-11
Description: IBM Aspera Orchestrator 4.0.0 through 4.1.0 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify, or delete information in the back-end database.
CVSS Score: 7.6 (HIGH)
CWE: CWE-89
References: https://www.ibm.com/support/pages/node/7254434
CVE: CVE-2025-13481
Published: 2025-12-11
Description: IBM Aspera Orchestrator 4.0.0 through 4.1.0 could allow an authenticated user to execute arbitrary commands with elevated privileges on the system due to improper validation of user supplied input.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://www.ibm.com/support/pages/node/7254434
CVE: CVE-2025-14535
Published: 2025-12-11
Description: A vulnerability was identified in UTT 进取 512W up to 3.1.7.7-171114. Affected is the function strcpy of the file /goform/formConfigFastDirectionW. The manipulation of the argument ssid leads to buffer overflow. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-119, CWE-120
References: https://github.com/maximdevere/CVE2/issues/7; https://vuldb.com/?ctiid.335874; https://vuldb.com/?id.335874
CVE: CVE-2025-14536
Published: 2025-12-11
Description: A security flaw has been discovered in code-projects Class and Exam Timetable Management 1.0. Affected by this vulnerability is an unknown functionality of the file /index.php of the component Login. The manipulation of the argument username/password results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/woshilaiyi/cve/issues/11; https://github.com/woshilaiyi/cve/issues/12
CVE: CVE-2025-36889
Published: 2025-12-11
Description: In onCreateTasks of CameraActivity.java, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-441
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36912
Published: 2025-12-11
Description: In cellular modem, there is a possible denial of service due to a logic error in the code. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.5 (MEDIUM)
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36916
Published: 2025-12-11
Description: In PrepareWorkloadBuffers of gxp_main_actor.cc, there is a possible double fetch due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36917
Published: 2025-12-11
Description: In SwDcpItg of up_L2commonPdcpSecurity.cpp, there is a possible denial of service due to an incorrect bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-120
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36918
Published: 2025-12-11
Description: In aoc_service_read_message of aoc_ipc_core.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36919
Published: 2025-12-11
Description: In aocc_read of aoc_channel_dev.c, there is a possible double free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36921
Published: 2025-12-11
Description: In ProtocolPsUnthrottleApn() of protocolpsadapter.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with baseband firmware compromise required. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-125
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36922
Published: 2025-12-11
Description: In bigo_map of bigo_iommu.c, there is a possible information disclosure  due to a use after free. This could lead to local escalation of privilege in the OS Kernel level with System execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-416
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36923
Published: 2025-12-11
Description: In NrmmDecoder::DecodeSORTransparentContext of cn_NrmmDecoder.cpp, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-122
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36924
Published: 2025-12-11
Description: In ss_DecodeLcsAssistDataReqMsg(void) of ss_LcsManagement.c, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 8.0 (HIGH)
CWE: CWE-120, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36925
Published: 2025-12-11
Description: In WAVES_send_data_to_dsp of libaoc_waves.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36927
Published: 2025-12-11
Description: In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36928
Published: 2025-12-11
Description: In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36929
Published: 2025-12-11
Description: In AreFencesRegistered of gxp_fence_manager.cc, there is a possible information leak due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36930
Published: 2025-12-11
Description: In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36931
Published: 2025-12-11
Description: In GetHostAddress of gxp_buffer.h, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36932
Published: 2025-12-11
Description: In tracepoint_msg_handler of cpm/google/lib/tracepoint/tracepoint_ipc.c, there is a possible memory overwrite due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-20
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36934
Published: 2025-12-11
Description: In bigo_worker_thread of private/google-modules/video/gchips/bigo.c, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.4 (HIGH)
CWE: CWE-362, CWE-416
References: https://source.android.com/security/bulletin/pixel/2025-12-01; https://project-zero.issues.chromium.org/issues/426567975
CVE: CVE-2025-36935
Published: 2025-12-11
Description: In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible memory corruption due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-457
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36936
Published: 2025-12-11
Description: In GetTachyonCommand of tachyon_server_common.h, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-190, CWE-190
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36937
Published: 2025-12-11
Description: In AudioDecoder::HandleProduceRequest of audio_decoder.cc, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787, CWE-787
References: https://source.android.com/security/bulletin/pixel/2025-12-01
CVE: CVE-2025-36938
Published: 2025-12-11
Description: In U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the code. This could lead to physical escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-693
References: https://source.android.com/security/bulletin/pixel/2025-12-01; https://source.android.com/docs/security/bulletin/pixel/2026/2026-03-01
CVE: CVE-2025-55183
Published: 2025-12-11
Description: An information leak vulnerability exists in specific configurations of React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. A specifically crafted HTTP request sent to a vulnerable Server Function may unsafely return the source code of any Server Function. Exploitation requires the existence of a Server Function which explicitly or implicitly exposes a stringified argument.
CVSS Score: 5.3 (MEDIUM)
References: https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components; https://www.facebook.com/security/advisories/cve-2025-55183
CVE: CVE-2025-55184
Published: 2025-12-11
Description: A pre-authentication denial of service vulnerability exists in React Server Components versions 19.0.0, 19.0.1 19.1.0, 19.1.1, 19.1.2, 19.2.0 and 19.2.1, including the following packages: react-server-dom-parcel, react-server-dom-turbopack, and react-server-dom-webpack. The vulnerable code unsafely deserializes payloads from HTTP requests to Server Function endpoints, which can cause an infinite loop that hangs the server process and may prevent future HTTP requests from being served.
CVSS Score: 7.5 (HIGH)
CWE: CWE-502
References: https://react.dev/blog/2025/12/11/denial-of-service-and-source-code-exposure-in-react-server-components; https://www.facebook.com/security/advisories/cve-2025-55184; https://github.com/KingHacker353/CVE-2025-55184
CVE: CVE-2025-13663
Published: 2025-12-11
Description: Under certain circumstances, the Quartus Prime Pro Installer for Windows does not check the permissions of the Quartus target installation directory if the target installation directory already exists.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-279
References: https://www.altera.com/security/security-advisory/asa-0001
CVE: CVE-2025-13664
Published: 2025-12-11
Description: A potential security vulnerability in Quartus® Prime Standard Edition Design Software may allow escalation of privilege.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-427
References: https://www.altera.com/security/security-advisory/asa-0002
CVE: CVE-2025-14293
Published: 2025-12-11
Description: The WP Job Portal plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.4.0 via the 'downloadCustomUploadedFile' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.3.9/modules/customfield/model.php#L908; https://plugins.trac.wordpress.org/browser/wp-job-portal/tags/2.4.1/modules/customfield/model.php#L908; https://www.wordfence.com/threat-intel/vulnerabilities/id/6dfcd264-39e3-44af-8e0e-5c35734524d0?source=cve
CVE: CVE-2025-14537
Published: 2025-12-11
Description: A weakness has been identified in code-projects Class and Exam Timetable Management 1.0. Affected by this issue is some unknown functionality of the file /preview7.php. This manipulation of the argument course_year_section/semester causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://code-projects.org/; https://github.com/woshilaiyi/cve/issues/13; https://github.com/woshilaiyi/cve/issues/14
CVE: CVE-2025-14538
Published: 2025-12-11
Description: A security vulnerability has been detected in yangshare warehouseManager 仓库管理系统 1.1.0. This affects the function addCustomer of the file CustomerManageHandler.java. Such manipulation of the argument Name leads to cross site scripting. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://gitee.com/yangshare/warehouseManager/issues/ID9NAU; https://vuldb.com/?ctiid.335877; https://vuldb.com/?id.335877
CVE: CVE-2025-55816
Published: 2025-12-11
Description: HotelDruid v3.0.7 and before is vulnerable to Cross Site Scripting (XSS) in the /modifica_app.php file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.hoteldruid.com/en/; https://www.partywave.site/show/research/cve-2025-55816-xss-and-raptx
CVE: CVE-2025-64702
Published: 2025-12-11
Description: quic-go is an implementation of the QUIC protocol in Go. Versions 0.56.0 and below are vulnerable to excessive memory allocation through quic-go's HTTP/3 client and server implementations by sending a QPACK-encoded HEADERS frame that decodes into a large header field section (many unique header names and/or large values). The implementation builds an http.Header (used on the http.Request and http.Response, respectively), while only enforcing limits on the size of the (QPACK-compressed) HEADERS frame, but not on the decoded header, leading to memory exhaustion. This issue is fixed in version 0.57.0.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://github.com/quic-go/quic-go/commit/5b2d2129f8315da41e01eff0a847ab38a34e83a8; https://github.com/quic-go/quic-go/security/advisories/GHSA-g754-hx8w-x2g6
CVE: CVE-2025-66429
Published: 2025-12-11
Description: An issue was discovered in cPanel 110 through 132. A directory traversal vulnerability within the Team Manager API allows for overwrite of an arbitrary file. This can allow for privilege escalation to the root user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://docs.cpanel.net/changelogs/126-change-log/; https://docs.cpanel.net/release-notes/release-notes/
CVE: CVE-2025-66584
Published: 2025-12-11
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-66585
Published: 2025-12-11
Description: In AzeoTech DAQFactory release 20.7 (Build 2555), a Use After Free vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03
CVE: CVE-2025-66586
Published: 2025-12-11
Description: In AzeoTech DAQFactory release 20.7 (Build 2555), an Access of Resource Using Incompatible Type vulnerability can be exploited to cause memory corruption while parsing specially crafted .ctl files. This could allow an attacker to execute code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-843
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03
CVE: CVE-2025-66587
Published: 2025-12-11
Description: Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE: CVE-2025-66588
Published: 2025-12-11
Description: In AzeoTech DAQFactory release 20.7 (Build 2555), an Access of Uninitialized Pointer vulnerability can be exploited by an attacker which can lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-824
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03
CVE: CVE-2025-66589
Published: 2025-12-11
Description: In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Read vulnerability can be exploited by an attacker to cause the program to read data past the end of an allocated buffer. This could allow an attacker to disclose information or cause a system crash.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03
CVE: CVE-2025-66590
Published: 2025-12-11
Description: In AzeoTech DAQFactory release 20.7 (Build 2555), an Out-of-bounds Write vulnerability can be exploited by an attacker to cause the program to write data past the end of an allocated memory buffer. This can lead to arbitrary code execution or a system crash.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-345-03
CVE: CVE-2024-58286
Published: 2025-12-11
Description: dizqueTV 1.5.3 contains a remote code execution vulnerability that allows attackers to inject arbitrary commands through the FFMPEG Executable Path settings. Attackers can modify the executable path with shell commands to read system files like /etc/passwd by exploiting improper input validation.
CWE: CWE-78
References: https://github.com/vexorian/dizquetv; https://www.exploit-db.com/exploits/52079; https://www.vulncheck.com/advisories/dizquetv-remote-code-execution-via-ffmpeg-executable-path
CVE: CVE-2024-58287
Published: 2025-12-11
Description: reNgine 2.2.0 contains a command injection vulnerability in the nmap_cmd parameter of scan engine configuration that allows authenticated attackers to execute arbitrary commands. Attackers can modify the nmap_cmd parameter with malicious base64-encoded payloads to achieve remote code execution during scan engine configuration.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/yogeshojha/rengine; https://rengine.wiki/; https://www.exploit-db.com/exploits/52081