deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59827
Published: 2025-09-24
Description: Flag Forge is a Capture The Flag (CTF) platform. In version 2.1.0, the /api/admin/assign-badge endpoint lacks proper access control, allowing any authenticated user to assign high-privilege badges (e.g., Staff) to themselves. This could lead to privilege escalation and impersonation of administrative roles. This issue has been patched in version 2.2.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-7944-xvv7-cv79
CVE: CVE-2025-59833
Published: 2025-09-24
Description: Flag Forge is a Capture The Flag (CTF) platform. In versions from 2.1.0 to before 2.3.0, the API endpoint GET /api/problems/:id returns challenge hints in plaintext within the question object, regardless of whether the user has unlocked them via point deduction. Users can view all hints for free, undermining the business logic of the platform and reducing the integrity of the challenge system. This issue has been patched in version 2.3.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://github.com/FlagForgeCTF/flagForge/security/advisories/GHSA-hm85-2j65-j8j2
CVE: CVE-2025-10894
Published: 2025-09-24
Description: Malicious code was inserted into the Nx (build system) package and several related plugins. The tampered package was published to the npm software registry, via a supply-chain attack. Affected versions contain code that scans the file system, collects credentials, and posts them to GitHub as a repo under user's accounts.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-506
References: https://access.redhat.com/security/cve/CVE-2025-10894; https://access.redhat.com/security/supply-chain-attacks-NPM-packages; https://bugzilla.redhat.com/show_bug.cgi?id=2396282
CVE: CVE-2025-54520
Published: 2025-09-24
Description: Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality.
CWE: CWE-1247
References: https://www.amd.com/en/resources/product-security/bulletin/AMD-SB-8018.html
CVE: CVE-2025-21056
Published: 2025-09-25
Description: Improper input validation in Retail Mode prior to version 5.59.4 allows self attackers to execute privileged commands on their own devices.
CVSS Score: 6.6 (MEDIUM)
References: https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=08
CVE: CVE-2025-10438
Published: 2025-09-25
Description: Path Traversal: 'dir/../../filename' vulnerability in Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog allows Path Traversal.This issue affects Yordam Katalog: before 21.7.
CVSS Score: 8.6 (HIGH)
CWE: CWE-27
References: https://www.usom.gov.tr/bildirim/tr-25-0296
CVE: CVE-2025-10940
Published: 2025-09-25
Description: A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layouts_save of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://vuldb.com/?ctiid.325810; https://vuldb.com/?id.325810; https://vuldb.com/?submit.651867
CVE: CVE-2025-10941
Published: 2025-09-25
Description: A vulnerability was determined in Topaz SERVCore Teller 2.14.0-RC2/2.14.1. Affected by this issue is some unknown functionality of the file SERVCoreTeller_2.0.40D.msi of the component Installer. Executing manipulation can lead to permission issues. The attack needs to be launched locally. You should upgrade the affected component. The vendor explains, that "this vulnerability was detected at the beginning of 2025, it was remediated because the latest published version of the installer no longer uses "nssm," which is responsible for this vulnerability".
CVSS Score: 7.8 (HIGH)
CWE: CWE-266, CWE-275
References: https://raw.githubusercontent.com/securityadvisories/Security-Advisories/refs/heads/main/Advisories/Blaze%20Information%20Security%20-%20Local%20Privilege%20Escalation%20via%20Insecure%20Directory%20Permissions%20in%20SERVCore%20Teller%20Installer.txt; https://vuldb.com/?ctiid.325811; https://vuldb.com/?id.325811
CVE: CVE-2025-10942
Published: 2025-09-25
Description: A vulnerability was identified in H3C Magic B3 up to 100R002. This affects the function AddMacList/EditMacList of the file /goform/aspForm. The manipulation of the argument param leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/lin-3-start/lin-cve/blob/main/H3C%2BMagic%2BB3/H3C%20routers%20Buffer%20overflow.md; https://github.com/lin-3-start/lin-cve/blob/main/H3C%2BMagic%2BB3/H3C%20routers%20Buffer%20overflow.md#poc; https://vuldb.com/?ctiid.325812
CVE: CVE-2025-10943
Published: 2025-09-25
Description: A security flaw has been discovered in MikeCen WeChat-Face-Recognition up to 6e3f72bf8547d80b59e330f1137e4aa505f492c1. This vulnerability affects the function valid of the file wx.php. The manipulation of the argument echostr results in cross site scripting. The attack can be launched remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/MikeCen/WeChat-Face-Recognition/blob/master/wx.php#L25; https://vuldb.com/?ctiid.325813; https://vuldb.com/?id.325813
CVE: CVE-2025-10957
Published: 2025-09-25
Description: This vulnerability exists in the Syrotech SY-GPON-2010-WADONT router due to improper access control in its FTP service. A remote attacker could exploit this vulnerability by establishing an FTP connection using default credentials, potentially gaining unauthorized access to configuration files, user credentials, or other sensitive information stored on the targeted device.
CWE: CWE-284
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0223
CVE: CVE-2025-40698
Published: 2025-09-25
Description: SQL injection vulnerability in Prevengos v2.44 by Nedatec Consulting. This vulnerability allows an attacker to retrieve, create, update, and delete databases by sending a POST request using the parameters “mpsCentroin”, “mpsEmpresa”, “mpsProyecto”, and “mpsContrata” in “/servicios/autorizaciones.asmx/mfsRecuperarListado”.
CWE: CWE-89
References: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-prevengos-nedatec-consulting
CVE: CVE-2025-10449
Published: 2025-09-25
Description: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Saysis Computer Systems Trade Ltd. Co. Saysis Web Portal allows Path Traversal.This issue affects Saysis Web Portal: from 3.1.9 & 3.2.0 before 3.2.1.
CVSS Score: 8.6 (HIGH)
CWE: CWE-22
References: https://www.usom.gov.tr/bildirim/tr-25-0297
CVE: CVE-2025-10944
Published: 2025-09-25
Description: A weakness has been identified in yi-ge get-header-ip up to 589b23d0eb0043c310a6a13ce4bbe2505d0d0b15. This issue affects the function ip of the file ip.php. This manipulation of the argument callback causes cross site scripting. The attack may be initiated remotely. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/yi-ge/get-header-ip/blob/master/ip.php#L32; https://vuldb.com/?ctiid.325814; https://vuldb.com/?id.325814
CVE: CVE-2025-10945
Published: 2025-09-25
Description: A security vulnerability has been detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. Impacted is an unknown function of the file d.php. Such manipulation of the argument hm leads to cross site scripting. The attack may be launched remotely. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/nuz007/smsboom/blob/main/d.php#L25; https://vuldb.com/?ctiid.325815; https://vuldb.com/?id.325815
CVE: CVE-2025-10946
Published: 2025-09-25
Description: A vulnerability was detected in nuz007 smsboom up to 01b2f35bbbc23f3e0f60f38ca0e3d1b286f8d674. The affected element is an unknown function of the file dy.php. Performing manipulation of the argument hm results in cross site scripting. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/nuz007/smsboom/blob/main/dy.php#L20; https://vuldb.com/?ctiid.325816; https://vuldb.com/?id.325816
CVE: CVE-2025-10947
Published: 2025-09-25
Description: A flaw has been found in Sistemas Pleno Gestão de Locação up to 2025.7.x. The impacted element is an unknown function of the file /api/areacliente/pessoa/validarCpf of the component CPF Handler. Executing a manipulation of the argument pes_cpf can lead to authorization bypass. The attack can be executed remotely. The exploit has been published and may be used. Upgrading to version 2025.8.0 is sufficient to resolve this issue. It is advisable to upgrade the affected component.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-285, CWE-639
References: https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main; https://github.com/lfparizzi/CVE-Sistemas_Pleno/tree/main?tab=readme-ov-file#-proofs; https://vuldb.com/?ctiid.325817
CVE: CVE-2025-10467
Published: 2025-09-25
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in PROLIZ Computer Software Hardware Service Trade Ltd. Co. OBS (Student Affairs Information System) allows Stored XSS.This issue affects OBS (Student Affairs Information System): before v25.0401.
CVSS Score: 8.9 (HIGH)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0298
CVE: CVE-2025-10540
Published: 2025-09-25
Description: iMonitor EAM 9.6394 transmits communication between the EAM client agent and the EAM server, as well as between the EAM monitor management software and the server, in plaintext without authentication or encryption. An attacker with network access can intercept sensitive information (such as credentials, keylogger data, and personally identifiable information) and tamper with traffic. This allows both unauthorized disclosure and modification of data, including issuing arbitrary commands to client agents.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-319
References: https://r.sec-consult.com/imonitor; http://seclists.org/fulldisclosure/2025/Sep/72
CVE: CVE-2025-10948
Published: 2025-09-25
Description: A vulnerability has been found in MikroTik RouterOS 7. This affects the function parse_json_element of the file /rest/ip/address/print of the component libjson.so. The manipulation leads to buffer overflow. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 7.20.1 and 7.21beta2 mitigates this issue. You should upgrade the affected component. The vendor replied: "Our bug tracker reports that your issue has been fixed. This means that we plan to release a RouterOS update with this fix. Make sure to upgrade to the next release when it comes out."
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc; https://github.com/a2ure123/libjson-unicode-buffer-overflow-poc#technical-proof-of-concept; https://vuldb.com/?ctiid.325818
CVE: CVE-2025-26278
Published: 2025-09-25
Description: A prototype pollution in the lib.set function of dref v0.1.2 allows attackers to cause a Denial of Service (DoS) via supplying a crafted payload.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1321
References: https://gist.github.com/tariqhawis/ad92d5e683f3a5d83e0629955ff42ad7; https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-26278
CVE: CVE-2025-27261
Published: 2025-09-25
Description: Ericsson Indoor Connect 8855 contains an SQL injection vulnerability which if exploited can result in unauthorized disclosure or modification of data.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25
CVE: CVE-2025-57317
Published: 2025-09-25
Description: apidoc-core is the core parser library to generate apidoc result following the apidoc-spec. A Prototype Pollution vulnerability in the preProcess function of apidoc-core versions thru 0.15.0 allows attackers to inject properties on Object.prototype via supplying a crafted payload, causing denial of service (DoS) as the minimum consequence.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/OrangeShieldInfos/PoCs/tree/main/JavaScript/prototype-pollution/CVE-2025-57317; https://github.com/VulnSageAgent/PoCs/blob/main/JavaScript/prototype-pollution/apidoc-core%400.15.0/index.js
CVE: CVE-2025-59422
Published: 2025-09-25
Description: Dify is an open-source LLM app development platform. In version 1.8.1, a broken access control vulnerability on the /console/api/apps/<APP_ID>chat-messages?conversation_id=<CONVERSATION_ID>&limit=10 endpoint allows users in the same workspace to read chat messages of other users. A regular user is able to read the query data and the filename of the admins and probably other users chats, if they know the conversation_id. This impacts the confidentiality of chats. This issue has been patched in version 1.9.0.
CVSS Score: 3.1 (LOW)
CWE: CWE-284
References: https://github.com/langgenius/dify/commit/b2d8a7eaf[PII_REDACTED]34e[PII_REDACTED]ab4f354; https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894; https://github.com/langgenius/dify/security/advisories/GHSA-jg5j-c9pq-w894
CVE: CVE-2025-59426
Published: 2025-09-25
Description: Lobe Chat is an open-source artificial intelligence chat framework. Prior to version 1.130.1, the project's OIDC redirect handling logic constructs the host and protocol of the final redirect URL based on the X-Forwarded-Host or Host headers and the X-Forwarded-Proto value. In deployments where a reverse proxy forwards client-supplied X-Forwarded-* headers to the origin as-is, or where the origin trusts them without validation, an attacker can inject an arbitrary host and trigger an open redirect that sends users to a malicious domain. This issue has been patched in version 1.130.1.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/lobehub/lobe-chat/blob/aa841a3879c[PII_REDACTED]5182ad62aa0dbd74edc/src/app/(backend)/oidc/consent/route.ts#L113-L127; https://github.com/lobehub/lobe-chat/commit/70f52a3c1fadbd41a9db0e699d1e44d9965de445; https://github.com/lobehub/lobe-chat/security/advisories/GHSA-xph5-278p-26qx
CVE: CVE-2025-59831
Published: 2025-09-25
Description: git-commiters is a Node.js function module providing committers stats for their git repository. Prior to version 0.1.2, there is a command injection vulnerability in git-commiters. This vulnerability manifests with the library's primary exported API: gitCommiters(options, callback) which allows specifying options such as cwd for current working directory and revisionRange as a revision pointer, such as HEAD. However, the library does not sanitize for user input or practice secure process execution API to separate commands from their arguments and as such, uncontrolled user input is concatenated into command execution. This issue has been patched in version 0.1.2.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78, CWE-77
References: https://github.com/snowyu/git-commiters.js/commit/7f0abfedbf506e3a61ac875d91324a8dbe756e84; https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6; https://github.com/snowyu/git-commiters.js/security/advisories/GHSA-g38c-wxjf-xrh6
CVE: CVE-2025-59834
Published: 2025-09-25
Description: ADB MCP Server is a MCP (Model Context Protocol) server for interacting with Android devices through ADB. In versions 0.1.0 and prior, the MCP Server is written in a way that is vulnerable to command injection vulnerability attacks as part of some of its MCP Server tool definition and implementation. This issue has been patched via commit 041729c.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-77, CWE-78, CWE-77
References: https://github.com/srmorete/adb-mcp/blob/master/src/index.ts#L334-L355; https://github.com/srmorete/adb-mcp/commit/041729c0b25432df3199ff71b3163a307cf4c28c; https://github.com/srmorete/adb-mcp/security/advisories/GHSA-54j7-grvr-9xwg
CVE: CVE-2025-59839
Published: 2025-09-25
Description: The EmbedVideo Extension is a MediaWiki extension which adds a parser function called #ev and various parser tags for embedding video clips from various video sharing services. In versions 4.0.0 and prior, the EmbedVideo extension allows adding arbitrary attributes to an HTML element, allowing for stored XSS through wikitext. This issue has been patched via commit 4e075d3.
CVSS Score: 8.6 (HIGH)
CWE: CWE-79
References: https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/ext.embedVideo.videolink.js#L5-L20; https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/blob/440fb331a84b2050f4cc084c1d31d58a1d1c202d/resources/modules/iframe.js#L139-L155; https://github.com/StarCitizenWiki/mediawiki-extensions-EmbedVideo/commit/4e075d3dc9a15a3ee53f449a684d5ab847e52f01
CVE: CVE-2025-5494
Published: 2025-09-25
Description: ZohoCorp ManageEngine Endpoint Central was impacted by an improper privilege management issue in the agent setup.

This issue affects Endpoint Central: through 11.4.2500.25, through 11.4.2508.13.
CVSS Score: 3.9 (LOW)
CWE: CWE-269
References: https://www.manageengine.com/products/desktop-central/privilege-escalation-endpointcentral-agent.html
CVE: CVE-2020-36851
Published: 2025-09-25
Description: Rob -- W / cors-anywhere instances configured as an open proxy allow unauthenticated external users to induce the server to make HTTP requests to arbitrary targets (SSRF). Because the proxy forwards requests and headers, an attacker can reach internal-only endpoints and link-local metadata services, retrieve instance role credentials or other sensitive metadata, and interact with internal APIs and services that are not intended to be internet-facing. The vulnerability is exploitable by sending crafted requests to the proxy with the target resource encoded in the URL; many cors-anywhere deployments forward arbitrary methods and headers (including PUT), which can permit exploitation of IMDSv2 workflows as well as access to internal management APIs. Successful exploitation can result in theft of cloud credentials, unauthorized access to internal services, remote code execution or privilege escalation (depending on reachable backends), data exfiltration, and full compromise of cloud resources. Mitigation includes: restricting the proxy to trusted origins or authentication, whitelisting allowed target hosts, preventing access to link-local and internal IP ranges, removing support for unsafe HTTP methods/headers, enabling cloud provider mitigations, and deploying network-level protections.
CWE: CWE-918, CWE-942
References: https://github.com/Rob--W/cors-anywhere/issues/152; https://github.com/Rob--W/cors-anywhere/issues/521; https://github.com/Rob--W/cors-anywhere/issues/78
CVE: CVE-2025-10541
Published: 2025-09-25
Description: iMonitor EAM 9.6394 installs a system service (eamusbsrv64.exe) that runs with NT AUTHORITY\SYSTEM privileges. This service includes an insecure update mechanism that automatically loads files placed in the C:\sysupdate\ directory during startup. Because any local user can create and write to this directory, an attacker can place malicious DLLs or executables in it. Upon service restart, the files are moved to the application’s installation path and executed with SYSTEM privileges, leading to privilege escalation.
CVSS Score: 7.8 (HIGH)
CWE: CWE-732
References: https://r.sec-consult.com/imonitor; http://seclists.org/fulldisclosure/2025/Sep/72; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/
CVE: CVE-2025-10542
Published: 2025-09-25
Description: iMonitor EAM 9.6394 ships with default administrative credentials that are also displayed within the management client’s connection dialog. If the administrator does not change these defaults, a remote attacker can authenticate to the EAM server and gain full control over monitored agents and data. This enables reading highly sensitive telemetry (including keylogger output) and issuing arbitrary actions to all connected clients.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392
References: https://r.sec-consult.com/imonitor; http://seclists.org/fulldisclosure/2025/Sep/72; https://sec-consult.com/vulnerability-lab/advisory/multiple-vulnerabilities-in-imonitorsoft-eam/
CVE: CVE-2025-10949
Published: 2025-09-25
Description: A vulnerability was found in Changsha Developer Technology iView Editor up to 1.1.1. This impacts an unknown function of the component Markdown Handler. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/duckpigdog/CVE/blob/main/iView%20Editor%20XSS.docx; https://vuldb.com/?ctiid.325819; https://vuldb.com/?id.325819
CVE: CVE-2025-10950
Published: 2025-09-25
Description: A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function log_handler of the file ml_logger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-20, CWE-502
References: https://github.com/geyang/ml-logger/issues/72; https://vuldb.com/?ctiid.325820; https://vuldb.com/?id.325820
CVE: CVE-2025-10951
Published: 2025-09-25
Description: A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function log_handler of the file ml_logger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
CVSS Score: 7.3 (HIGH)
CWE: CWE-22
References: https://github.com/geyang/ml-logger/issues/73; https://vuldb.com/?ctiid.325821; https://vuldb.com/?id.325821
CVE: CVE-2025-27262
Published: 2025-09-25
Description: Ericsson Indoor Connect 8855 contains a command injection vulnerability which if exploited can result in an escalation of privileges.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://www.ericsson.com/en/about-us/security/psirt/e2025-09-25