deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-52887
Published: 2025-06-26
Description: cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected. This leads to potential exhaustion of system memory and results in a server crash or unresponsiveness. Version 0.22.0 contains a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/yhirose/cpp-httplib/commit/28dcf379e82a2cdb544d812696a7fd46067eb7f9; https://github.com/yhirose/cpp-httplib/security/advisories/GHSA-xjhg-gf59-p92h
CVE: CVE-2025-52900
Published: 2025-06-26
Description: File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The file access permissions for files uploaded to or created from File Browser are never explicitly set by the application. The same is true for the database used by File Browser. On standard servers using File Browser prior to version 2.33.7 where the umask configuration has not been hardened before, this makes all the stated files readable by any operating system account. Version 2.33.7 fixes the issue.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-276
References: https://github.com/filebrowser/filebrowser/commit/ca86f[PII_REDACTED]65c0f81629c0934ce02574d76; https://github.com/filebrowser/filebrowser/security/advisories/GHSA-jj2r-455p-5gvf
CVE: CVE-2025-52902
Published: 2025-06-26
Description: File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. The Markdown preview function of File Browser prior to v2.33.7 is vulnerable to Stored Cross-Site-Scripting (XSS). Any JavaScript code that is part of a Markdown file uploaded by a user will be executed by the browser. Version 2.33.7 contains a fix for the issue.
CVSS Score: 7.6 (HIGH)
CWE: CWE-79, CWE-80
References: https://github.com/filebrowser/filebrowser/commit/f19943a42e8e092e811dffbe9f4623dac36f1f0d; https://github.com/filebrowser/filebrowser/security/advisories/GHSA-4wx8-5gm2-2j97
CVE: CVE-2025-53002
Published: 2025-06-26
Description: LLaMA-Factory is a tuning library for large language models. A remote code execution vulnerability was discovered in LLaMA-Factory versions up to and including 0.9.3 during the LLaMA-Factory training process. This vulnerability arises because the `vhead_file` is loaded without proper safeguards, allowing malicious attackers to execute arbitrary malicious code on the host system simply by passing a malicious `Checkpoint path` parameter through the `WebUI` interface. The attack is stealthy, as the victim remains unaware of the exploitation. The root cause is that the `vhead_file` argument is loaded without the secure parameter `weights_only=True`. Version 0.9.4 contains a fix for the issue.
CVSS Score: 8.3 (HIGH)
CWE: CWE-94, CWE-502
References: https://drive.google.com/file/d/1AddKm2mllsXfuvL4Tvbn_WJdjEOYXx4y/view?usp=sharing; https://github.com/hiyouga/LLaMA-Factory/commit/bb7bf51554d4ba8432333c35a5e3b52705955ede; https://github.com/hiyouga/LLaMA-Factory/security/advisories/GHSA-xj56-p8mm-qmxj
CVE: CVE-2025-53007
Published: 2025-06-26
Description: arduino-esp32 provides an Arduino core for the ESP32. Versions prior to 3.3.0-RC1 and 3.2.1 contain a HTTP Response Splitting vulnerability. The `sendHeader` function takes arbitrary input for the HTTP header name and value, concatenates them into an HTTP header line, and appends this to the outgoing HTTP response headers. There is no validation or sanitization of the `name` or `value` parameters before they are included in the HTTP response. If an attacker can control the input to `sendHeader` (either directly or indirectly), they could inject carriage return (`\r`) or line feed (`\n`) characters into either the header name or value. This could allow the attacker to inject additional headers, manipulate the structure of the HTTP response, potentially inject an entire new HTTP response (HTTP Response Splitting), and/or ause header confusion or other HTTP protocol attacks. Versions 3.3.0-RC1 and 3.2.1 contain a fix for the issue.
CWE: CWE-113
References: https://github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp#L504-L521; https://github.com/espressif/arduino-esp32/blob/9e61fa7e4bce59c05cb17c15b11b53b9bafca077/libraries/WebServer/src/WebServer.cpp#L577-L582; https://github.com/espressif/arduino-esp32/commit/21640ac82a1bb5efa8cf0b3841be1ac80add6785
CVE: CVE-2025-6696
Published: 2025-06-26
Description: A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been classified as problematic. Affected is an unknown function of the file /html/atendido/Cadastro_Atendido.php of the component Cadastro de Atendio. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2025-22615. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README3.md; https://vuldb.com/?ctiid.313962; https://vuldb.com/?id.313962
CVE: CVE-2025-6697
Published: 2025-06-26
Description: A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /html/matPat/adicionar_tipoEntrada.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README5.md; https://vuldb.com/?ctiid.313963; https://vuldb.com/?id.313963
CVE: CVE-2025-6698
Published: 2025-06-26
Description: A vulnerability was found in LabRedesCefetRJ WeGIA 3.4.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /html/matPat/adicionar_tipoSaida.php of the component Adicionar tipo. The manipulation of the argument Insira o novo tipo leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README6.md; https://vuldb.com/?ctiid.313964; https://vuldb.com/?id.313964
CVE: CVE-2025-34042
Published: 2025-06-26
Description: An authenticated command injection vulnerability exists in the Beward N100 IP Camera firmware version M2.1.6.04C014 via the ServerName and TimeZone parameters in the servetest CGI page. An attacker with access to the web interface can inject arbitrary system commands into these parameters, which are unsafely embedded into backend system calls without proper input sanitization. Successful exploitation results in remote code execution with root privileges. Exploitation evidence was observed by the Shadowserver Foundation on 2024-12-02 UTC.
CWE: CWE-78
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://packetstorm.news/files/id/151531; https://s4e.io/tools/beward-n100-h264-vga-ip-camera-arbitrary-file-disclosure
CVE: CVE-2025-34043
Published: 2025-06-26
Description: A remote command injection vulnerability exists in Vacron Network Video Recorder (NVR) devices v1.4 due to improper input sanitization in the board.cgi script. The vulnerability allows unauthenticated attackers to pass arbitrary commands to the underlying operating system via crafted HTTP requests. These commands are executed with the privileges of the web server process, enabling remote code execution and potential full device compromise. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.
CWE: CWE-20, CWE-78
References: https://ssd-disclosure.com/ssd-advisory-vacron-nvr-remote-command-execution/; https://vulncheck.com/advisories/vacron-nvr-remote-command-execution; https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=30386
CVE: CVE-2025-34044
Published: 2025-06-26
Description: A remote command injection vulnerability exists in the confirm.php interface of the WIFISKY 7-layer Flow Control Router via a specially-crafted HTTP GET request to the t parameter. Insufficient input validation allows unauthenticated attackers to execute arbitrary OS commands. Exploitation evidence was observed by the Shadowserver Foundation on 2025-01-25 UTC.
CWE: CWE-78
References: http://www.szwifisky.com/; https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/other/wifisky7-rce.yaml; https://s4e.io/tools/wifisky-7-layer-flow-control-router-remote-code-execution
CVE: CVE-2025-34045
Published: 2025-06-26
Description: A path traversal vulnerability exists in WeiPHP 5.0, an open source WeChat public account platform development framework by Shenzhen Yuanmengyun Technology Co., Ltd. The flaw occurs in the picUrl parameter of the /public/index.php/material/Material/_download_imgage endpoint, where insufficient input validation allows unauthenticated remote attackers to perform directory traversal via crafted POST requests. This enables arbitrary file read on the server, potentially exposing sensitive information such as configuration files and source code. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22, CWE-22
References: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2020/CNVD-2020-68596.yaml; https://vulncheck.com/advisories/weiphp-path-traversal-file-read; https://www.cnvd.org.cn/flaw/show/CNVD-2020-68596
CVE: CVE-2025-34046
Published: 2025-06-26
Description: An unauthenticated file upload vulnerability exists in the Fanwei E-Office <= v9.4 web management interface. The vulnerability affects the /general/index/UploadFile.php endpoint, which improperly validates uploaded files when invoked with certain parameters (uploadType=eoffice_logo or uploadType=theme). An attacker can exploit this flaw by sending a crafted HTTP POST request to upload arbitrary files without requiring authentication. Successful exploitation could enable remote code execution on the affected server, leading to complete compromise of the web application and potentially the underlying system. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CWE: CWE-434
References: https://github.com/M0ge/CNVD-2021-49104-Fanwei-Eoffice-fileupload/blob/main/eoffice_fileupload.py; https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2021/CNVD-2021-49104.yaml; https://vulncheck.com/advisories/fanwei-eoffice-file-upload
CVE: CVE-2025-34047
Published: 2025-06-26
Description: A path traversal vulnerability exists in the Leadsec SSL VPN (formerly Lenovo NetGuard), allowing unauthenticated attackers to read arbitrary files on the underlying system via the ostype parameter in the /vpn/user/download/client endpoint. This flaw arises from insufficient input sanitation, enabling traversal sequences to escape the intended directory and access sensitive files. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-05 UTC.
CWE: CWE-20, CWE-22
References: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cnvd/2021/CNVD-2021-64035.yaml; https://vulncheck.com/advisories/leadsec-vpn-path-traversal-file-read; https://www.cnvd.org.cn/flaw/show/CNVD-2021-64035
CVE: CVE-2025-34048
Published: 2025-06-26
Description: A path traversal vulnerability exists in the web management interface of D-Link DSL-2730U, DSL-2750U, and DSL-2750E ADSL routers with firmware versions IN_1.02, SEA_1.04, and SEA_1.07. The vulnerability is due to insufficient input validation on the getpage parameter within the /cgi-bin/webproc CGI script. This flaw allows an unauthenticated remote attacker to perform path traversal attacks by supplying crafted requests, enabling arbitrary file read on the affected device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.
CWE: CWE-22
References: https://github.com/threat9/routersploit/blob/master/routersploit/modules/exploits/routers/dlink/dsl_2730_2750_path_traversal.py; https://vulncheck.com/advisories/dlink-dsl-routers-path-traversal-file-read; https://www.dlink.com
CVE: CVE-2025-34049
Published: 2025-06-26
Description: An OS command injection vulnerability exists in the OptiLink ONT1GEW GPON router firmware version V2.1.11_X101 Build 1127.190306 and earlier. The router’s web management interface fails to properly sanitize user input in the target_addr parameter of the formTracert and formPing administrative endpoints. An authenticated attacker can inject arbitrary operating system commands, which are executed with root privileges, leading to remote code execution. Successful exploitation enables full compromise of the device. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-04 UTC.
CWE: CWE-78
References: https://optilinknetwork.com/; https://packetstorm.news/files/id/162993; https://vulncheck.com/advisories/optilink-ont1gew-router-rce
CVE: CVE-2025-36034
Published: 2025-06-26
Description: IBM InfoSphere DataStage Flow Designer in IBM InfoSphere Information Server 11.7 discloses sensitive user information in API requests in clear text that could be intercepted using man in the middle techniques.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-319
References: https://www.ibm.com/support/pages/node/7237604
CVE: CVE-2025-44141
Published: 2025-06-26
Description: A Cross-Site Scripting (XSS) vulnerability exists in the node creation form of Backdrop CMS 1.30.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://backdrop.com; https://scandalous-author-611.notion.site/CVE-2025-44141-21d29577f39e802480a2efab13e66c61
CVE: CVE-2025-50350
Published: 2025-06-26
Description: PHPGurukul Pre-School Enrollment System Project v1.0 is vulnerable to Directory Traversal in manage-classes.php.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/baixiaobi/Pre-School-/blob/main/directory%20traversal%20vulnerability-2.md
CVE: CVE-2025-51671
Published: 2025-06-26
Description: A SQL injection vulnerability was discovered in the PHPGurukul Dairy Farm Shop Management System 1.3. The vulnerability allows remote attackers to execute arbitrary SQL code via the category and categorycode parameters in a POST request to the manage-categories.php file.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/rtnthakur/CVE/blob/main/PHPGurukul/Dairy-Farm-Shop-Management-System/SQL/SQL_injection_edit-category.md
CVE: CVE-2025-6699
Published: 2025-06-26
Description: A vulnerability classified as problematic has been found in LabRedesCefetRJ WeGIA 3.4.0. This affects an unknown part of the file /html/funcionario/cadastro_funcionario.php of the component Cadastro de Funcionário. The manipulation of the argument Nome/Sobrenome leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This is a different issue than CVE-2025-23030. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README7.md; https://vuldb.com/?ctiid.313965; https://vuldb.com/?id.313965
CVE: CVE-2025-6700
Published: 2025-06-26
Description: A vulnerability classified as problematic was found in Xuxueli xxl-sso 1.1.0. This vulnerability affects unknown code of the file /xxl-sso-server/login. The manipulation of the argument errorMsg leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79, CWE-94, CWE-79
References: https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-01/report.md; https://vuldb.com/?ctiid.313966; https://vuldb.com/?id.313966
CVE: CVE-2025-6701
Published: 2025-06-26
Description: A vulnerability, which was classified as problematic, has been found in Xuxueli xxl-sso 1.1.0. This issue affects some unknown processing of the file /xxl-sso-server/doLogin. The manipulation of the argument redirect_url leads to open redirect. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250616-02.md; https://vuldb.com/?ctiid.313967; https://vuldb.com/?id.313967
CVE: CVE-2025-6702
Published: 2025-06-26
Description: A vulnerability, which was classified as problematic, was found in linlinjava litemall 1.8.0. Affected is an unknown function of the file /wx/comment/post. The manipulation of the argument adminComment leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-266, CWE-285, CWE-863
References: https://ctf-n0el4kls.notion.site/Litemall-Mass-Assignment-Vulnerability-in-wx-comment-post-21441990f447808b86d1cb15e37ecae9?source=copy_link; https://vuldb.com/?ctiid.313968; https://vuldb.com/?id.313968
CVE: CVE-2024-52928
Published: 2025-06-26
Description: Arc before 1.26.1 on Windows has a bypass issue in the site settings that allows websites (with previously granted permissions) to add new permissions when the user clicks anywhere on the website.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-284
References: https://arc.net/security/bulletins#windows-site-settings-bypass-cve-2024-52928; https://thebrowser.company
CVE: CVE-2025-30131
Published: 2025-06-26
Description: An issue was discovered on IROAD Dashcam FX2 devices. An unauthenticated file upload endpoint can be leveraged to execute arbitrary commands by uploading a CGI-based webshell. Once a file is uploaded, the attacker can execute commands with root privileges, gaining full control over the dashcam. Additionally, by uploading a netcat (nc) binary, the attacker can establish a reverse shell, maintaining persistent remote and privileged access to the device. This allows complete device takeover.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://github.com/geo-chen/IROAD?tab=readme-ov-file#finding-11---cve-2025-30131-unrestricted-webshell; https://www.iroadau.com.au/downloads/
CVE: CVE-2025-52477
Published: 2025-06-26
Description: Octo-STS is a GitHub App that acts like a Security Token Service (STS) for the GitHub API. Octo-STS versions before v0.5.3 are vulnerable to unauthenticated SSRF by abusing fields in OpenID Connect tokens. Malicious tokens were shown to trigger internal network requests which could reflect error logs with sensitive information. Upgrade to v0.5.3 to resolve this issue. This version includes patch sets to sanitize input and redact logging.
CVSS Score: 8.6 (HIGH)
CWE: CWE-918
References: https://github.com/octo-sts/app/commit/0f177fde54f9318e33f0bba6abaea9463a7c3afd; https://github.com/octo-sts/app/commit/b3976e39bd8c8c217c0670747d34a4499043da92; https://github.com/octo-sts/app/security/advisories/GHSA-h3qp-hwvr-9xcq
CVE: CVE-2025-49603
Published: 2025-06-26
Description: Northern.tech Mender Server before 3.7.11 and 4.x before 4.0.1 has Incorrect Access Control.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://mender.io/blog/cve-2025-49603-improper-access-control-of-device-groups-in-mender-server; https://northern.tech
CVE: CVE-2025-53013
Published: 2025-06-26
Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is offline. While the user gains access to the local system, Single Sign-On (SSO) fails due to the network being down and the inability to issue tokens (due to a failure to unlock the Hello key). The core issue lies in an incorrect assumption within the `acquire_token_by_hello_for_business_key` function: it was expected to return a `TPMFail` error for an invalid Hello key when offline, but instead, a preceding nonce request resulted in a `RequestFailed` error, leading the system to erroneously transition to an offline success state without validating the Hello key unlock. This impacts systems using Himmelblau for authentication when operating in an offline state with Hello PIN authentication enabled. Rocky Linux 8 (and variants) are not affected by this vulnerability. The problem is resolved in Himmelblau version 0.9.17. A workaround is available for users who cannot immediately upgrade. Disabling Hello PIN authentication by setting `enable_hello = false` in `/etc/himmelblau/himmelblau.conf` will mitigate the vulnerability.
CVSS Score: 5.2 (MEDIUM)
CWE: CWE-287
References: https://github.com/himmelblau-idm/himmelblau/commit/64b03739f1d5ee472b1cff3ed20ed9af1c65a6f8; https://github.com/himmelblau-idm/himmelblau/commit/78477d684df710d57c10091c87b92665cfac98ae; https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-j93j-pwm6-p97j
CVE: CVE-2025-52903
Published: 2025-06-26
Description: File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In version 2.32.0, the Command Execution feature of File Browser only allows the execution of shell command which have been predefined on a user-specific allowlist. Many tools allow the execution of arbitrary different commands, rendering this limitation void. The concrete impact depends on the commands being granted to the attacker, but the large number of standard commands allowing the execution of subcommands makes it likely that every user having the `Execute commands` permissions can exploit this vulnerability. Everyone who can exploit it will have full code execution rights with the uid of the server process. Until this issue is fixed, the maintainers recommend to completely disable `Execute commands` for all accounts. Since the command execution is an inherently dangerous feature that is not used by all deployments, it should be possible to completely disable it in the application's configuration. As a defense-in-depth measure, organizations not requiring command execution should operate the Filebrowser from a distroless container image. A patch version has been pushed to disable the feature for all existent installations, and making it opt-in. A warning has been added to the documentation and is printed on the console if the feature is enabled. Due to the project being in maintenance-only mode, the bug has not been fixed. The fix is tracked on pull request 5199.
CVSS Score: 8.0 (HIGH)
CWE: CWE-77
References: https://github.com/GoogleContainerTools/distroless; https://github.com/filebrowser/filebrowser/issues/5199; https://github.com/filebrowser/filebrowser/security/advisories/GHSA-3q2w-42mv-cph4