deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-7145
Published: 2025-07-07
Description: ThreatSonar Anti-Ransomware developed by TeamT5 has an OS Command Injection vulnerability, allowing remote attackers with product platform intermediate privileges to inject arbitrary OS commands and execute them on the server, thereby gaining administrative access to the remote host.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://www.twcert.org.tw/en/cp-139-10232-f99c0-2.html; https://www.twcert.org.tw/tw/cp-132-10231-a15c8-1.html
CVE: CVE-2025-7110
Published: 2025-07-07
Description: A vulnerability, which was classified as problematic, was found in Portabilis i-Educar 2.9.0. This affects an unknown part of the file /intranet/educar_escola_lst.php of the component School Module. The manipulation of the argument Escola leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README12.md; https://vuldb.com/?ctiid.315021; https://vuldb.com/?id.315021
CVE: CVE-2025-24508
Published: 2025-07-07
Description: Extraction of Account Connectivity Credentials (ACCs) from the IT Management Agent secure storage
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-522
References: https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/35904
CVE: CVE-2025-48501
Published: 2025-07-07
Description: An OS command injection issue exists in Nimesa Backup and Recovery v2.3 and v2.4. If this vulnerability is exploited, an arbitrary OS commands may be executed on the server where the product is running.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c; https://jvn.jp/en/jp/JVN88251376/
CVE: CVE-2025-53473
Published: 2025-07-07
Description: Server-side request forgery (SSRF) vulnerability exists n multiple versions of Nimesa Backup and Recovery, If this vulnerability is exploited, unintended requests may be sent to internal servers.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://aws.amazon.com/marketplace/seller-profile?id=08fb48d1-5d60-4feb-93c6-c0c219278a2c; https://jvn.jp/en/jp/JVN88251376/
CVE: CVE-2025-7111
Published: 2025-07-07
Description: A vulnerability has been found in Portabilis i-Educar 2.9.0 and classified as problematic. This vulnerability affects unknown code of the file /intranet/educar_curso_det.php?cod_curso=ID of the component Course Module. The manipulation of the argument Curso leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README13.md; https://vuldb.com/?ctiid.315022; https://vuldb.com/?id.315022
CVE: CVE-2025-7112
Published: 2025-07-07
Description: A vulnerability was found in Portabilis i-Educar 2.9.0 and classified as problematic. This issue affects some unknown processing of the file /intranet/educar_funcao_det.php?cod_funcao=COD&ref_cod_instituicao=COD of the component Function Management Module. The manipulation of the argument Função leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README14.md; https://vuldb.com/?ctiid.315023; https://vuldb.com/?id.315023
CVE: CVE-2025-7113
Published: 2025-07-07
Description: A vulnerability was found in Portabilis i-Educar 2.9.0. It has been classified as problematic. Affected is an unknown function of the file /module/ComponenteCurricular/edit?id=ID of the component Curricular Components Module. The manipulation of the argument Nome leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README15.md; https://vuldb.com/?ctiid.315024; https://vuldb.com/?id.315024
CVE: CVE-2025-7114
Published: 2025-07-07
Description: A vulnerability was found in SimStudioAI sim up to 37786d371e17d35e0764e1b5cd519d873d90d97b. It has been declared as critical. Affected by this vulnerability is the function POST of the file apps/sim/app/api/files/upload/route.ts of the component Session Handler. The manipulation of the argument Request leads to missing authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-306, CWE-434
References: https://github.com/vri-report/reports/issues/3; https://vuldb.com/?ctiid.315025; https://vuldb.com/?id.315025
CVE: CVE-2025-7115
Published: 2025-07-07
Description: A vulnerability was found in rowboatlabs rowboat up to 8096eaf63b5a0732edd8f812bee05b78e214ee97. It has been rated as critical. Affected by this issue is the function PUT of the file apps/rowboat/app/api/uploads/[fileId]/route.ts of the component Session Handler. The manipulation of the argument params leads to missing authentication. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. It is expected that this issue will be fixed in the near future.
CVSS Score: 7.3 (HIGH)
CWE: CWE-287, CWE-306
References: https://github.com/rowboatlabs/rowboat/issues/166; https://github.com/rowboatlabs/rowboat/issues/166#issuecomment[PII_REDACTED]; https://vuldb.com/?ctiid.315026
CVE: CVE-2025-41672
Published: 2025-07-07
Description: A remote unauthenticated attacker may use default certificates to generate JWT Tokens and gain full access to the tool and all connected devices.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-1188
References: https://cert.vde.com/en/advisories/VDE-2025-057; https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2025/vde-2025-057.json
CVE: CVE-2025-7116
Published: 2025-07-07
Description: A vulnerability classified as critical has been found in UTT 进取 750W up to 3.2.2-191225. This affects an unknown part of the file /goform/Fast_wireless_conf. The manipulation of the argument ssid leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/d2pq/cve/blob/main/616/10.md; https://github.com/d2pq/cve/blob/main/616/10.md#poc; https://vuldb.com/?ctiid.315027
CVE: CVE-2025-7117
Published: 2025-07-07
Description: A vulnerability classified as critical was found in UTT HiPER 840G up to 3.1.1-190328. This vulnerability affects unknown code of the file /goform/websWhiteList. The manipulation of the argument addHostFilter leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/d2pq/cve/blob/main/616/9.md; https://github.com/d2pq/cve/blob/main/616/9.md#poc; https://vuldb.com/?ctiid.315028
CVE: CVE-2025-7118
Published: 2025-07-07
Description: A vulnerability, which was classified as critical, has been found in UTT HiPER 840G up to 3.1.1-190328. This issue affects some unknown processing of the file /goform/formPictureUrl. The manipulation of the argument importpictureurl leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/d2pq/cve/blob/main/616/8.md; https://github.com/d2pq/cve/blob/main/616/8.md#poc; https://vuldb.com/?ctiid.315029
CVE: CVE-2025-7119
Published: 2025-07-07
Description: A vulnerability has been found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /users/index.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ez-lbz/poc/issues/42; https://vuldb.com/?ctiid.315031; https://vuldb.com/?id.315031
CVE: CVE-2025-3920
Published: 2025-07-07
Description: A vulnerability was identified in SUR-FBD CMMS where hard-coded credentials were found within a compiled DLL file. These credentials correspond to a built-in administrative account of the software. An attacker with local access to the system or the application's installation directory could extract these credentials, potentially leading to a complete compromise of the application's administrative functions. This issue was fixed in version 2025.03.27 of the SUR-FBD CMMS software.
CWE: CWE-259
References: https://cert.pl/en/posts/2025/07/CVE-2025-3920/
CVE: CVE-2025-7120
Published: 2025-07-07
Description: A vulnerability was found in Campcodes Complaint Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /users/check_availability.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ez-lbz/poc/issues/43; https://vuldb.com/?ctiid.315032; https://vuldb.com/?id.315032
CVE: CVE-2025-7121
Published: 2025-07-07
Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been classified as critical. This affects an unknown part of the file /users/complaint-details.php. The manipulation of the argument cid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/ez-lbz/poc/issues/44; https://vuldb.com/?ctiid.315033; https://vuldb.com/?id.315033
CVE: CVE-2024-43334
Published: 2025-07-07
Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gavias Zilom zilom allows Reflected XSS.This issue affects Zilom: from n/a through < 1.4.5.
CVSS Score: 7.1 (HIGH)
CWE: CWE-79
References: https://patchstack.com/database/Wordpress/Theme/zilom/vulnerability/wordpress-zilom-theme-1-2-1-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve
CVE: CVE-2025-3044
Published: 2025-07-07
Description: A vulnerability in the ArxivReader class of the run-llama/llama_index repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from being processed for AI model training. The issue is resolved in version 0.12.28.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-440
References: https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e; https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6; https://huntr.com/bounties/80182c3a-876f-422f-8bac-38267e0345d6
CVE: CVE-2025-3046
Published: 2025-07-07
Description: A vulnerability in the `ObsidianReader` class of the run-llama/llama_index repository, versions 0.12.23 to 0.12.28, allows for arbitrary file read through symbolic links. The `ObsidianReader` fails to resolve symlinks to their real paths and does not validate whether the resolved paths lie within the intended directory. This flaw enables attackers to place symlinks pointing to files outside the vault directory, which are then processed as valid Markdown files, potentially exposing sensitive information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://github.com/run-llama/llama_index/commit/0008041e8dde8e519621388e5d6f558bde6ef42e; https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904da; https://huntr.com/bounties/90a1f1b2-bb82-4d66-9fc1-856ed5f904da
CVE: CVE-2025-3225
Published: 2025-07-07
Description: An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llama_index repository, specifically affecting version v0.12.21. This vulnerability allows an attacker to supply a malicious Sitemap XML, leading to a Denial of Service (DoS) by exhausting system memory and potentially causing a system crash. The issue is resolved in version v0.12.29.
CVSS Score: 7.5 (HIGH)
CWE: CWE-776
References: https://github.com/run-llama/llama_index/commit/4f6ee062b19212106a2632af9c9521fc7f0a3584; https://huntr.com/bounties/e33c0699-e9a2-49aa-837b[PII_REDACTED]a2
CVE: CVE-2025-3262
Published: 2025-07-07
Description: A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the huggingface/transformers repository, specifically in version 4.49.0. The vulnerability is due to inefficient regular expression complexity in the `SETTING_RE` variable within the `transformers/commands/chat.py` file. The regex contains repetition groups and non-optimized quantifiers, leading to exponential backtracking when processing 'almost matching' payloads. This can degrade application performance and potentially result in a denial-of-service (DoS) when handling specially crafted input strings. The issue is fixed in version 4.51.0.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1333
References: https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76; https://huntr.com/bounties/ecf5ccc4-39e7-4fb3-b547-14a41d31a184; https://huntr.com/bounties/ecf5ccc4-39e7-4fb3-b547-14a41d31a184
CVE: CVE-2025-3263
Published: 2025-07-07
Description: A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_configuration_file()` function within the `transformers.configuration_utils` module. The affected version is 4.49.0, and the issue is resolved in version 4.51.0. The vulnerability arises from the use of a regular expression pattern `config\.(.*)\.json` that can be exploited to cause excessive CPU consumption through crafted input strings, leading to catastrophic backtracking. This can result in model serving disruption, resource exhaustion, and increased latency in applications using the library.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76; https://huntr.com/bounties/c7a69150-54f8-4e81-8094-791e7a2a0f29
CVE: CVE-2025-3264
Published: 2025-07-07
Description: A Regular Expression Denial of Service (ReDoS) vulnerability was discovered in the Hugging Face Transformers library, specifically in the `get_imports()` function within `dynamic_module_utils.py`. This vulnerability affects versions 4.49.0 and is fixed in version 4.51.0. The issue arises from a regular expression pattern `\s*try\s*:.*?except.*?:` used to filter out try/except blocks from Python code, which can be exploited to cause excessive CPU consumption through crafted input strings due to catastrophic backtracking. This vulnerability can lead to remote code loading disruption, resource exhaustion in model serving, supply chain attack vectors, and development pipeline disruption.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-1333
References: https://github.com/huggingface/transformers/commit/0720e206c6ba28887e4d60ef60a6a089f6c1cc76; https://huntr.com/bounties/3c6f7822-9992-476d-8cf0-b0b1623427df
CVE: CVE-2025-3466
Published: 2025-07-07
Description: langgenius/dify versions 1.1.0 to 1.1.2 are vulnerable to unsanitized input in the code node, allowing execution of arbitrary code with full root permissions. The vulnerability arises from the ability to override global functions in JavaScript, such as parseInt, before sandbox security restrictions are imposed. This can lead to unauthorized access to secret keys, internal network servers, and lateral movement within dify.ai. The issue is resolved in version 1.1.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-1100
References: https://github.com/langgenius/dify/commit/1be0d26c1feb4bcbbdd2b4ae4eeb25874aadaddb; https://huntr.com/bounties/f8dc17a3-5536-4944-a[PII_REDACTED]3cd2d
CVE: CVE-2025-3467
Published: 2025-07-07
Description: An XSS vulnerability exists in langgenius/dify versions prior to 1.1.3, specifically affecting Firefox browsers. This vulnerability allows an attacker to obtain the administrator's token by sending a payload in the published chat. When the administrator views the conversation content through the monitoring/log function using Firefox, the XSS vulnerability is triggered, potentially exposing sensitive token information to the attacker.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/langgenius/dify/commit/72deb3bed0b0d5d98d7cf44b525cc44bb278f6a7; https://huntr.com/bounties/21723441-7b55-425c-abc4-b1331a713591
CVE: CVE-2025-3626
Published: 2025-07-07
Description: A remote attacker with administrator account can gain full control of the device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') while uploading a config file via webUI.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-78
References: https://certvde.com/en/advisories/VDE-2025-030
CVE: CVE-2025-3705
Published: 2025-07-07
Description: A physical attacker with no privileges can gain full control of the affected device due to improper neutralization of special elements used in an OS Command ('OS Command Injection') when loading a config file from a USB drive.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-78
References: https://certvde.com/en/advisories/VDE-2025-030
CVE: CVE-2025-3777
Published: 2025-07-07
Description: Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the `image_utils.py` file. The vulnerability arises from insecure URL validation using the `startswith()` method, which can be bypassed through URL username injection. This allows attackers to craft URLs that appear to be from YouTube but resolve to malicious domains, potentially leading to phishing attacks, malware distribution, or data exfiltration. The issue is fixed in version 4.52.1.
CVSS Score: 3.5 (LOW)
CWE: CWE-20
References: https://github.com/huggingface/transformers/commit/4dda5f71b35fb70cf602187eef84bb17a50b9082; https://huntr.com/bounties/ccba0730-9248-4853-b7ff-5c20e6364f09
CVE: CVE-2025-4779
Published: 2025-07-07
Description: lunary-ai/lunary versions prior to 1.9.24 are vulnerable to stored cross-site scripting (XSS). An unauthenticated attacker can inject malicious JavaScript into the `v1/runs/ingest` endpoint by adding an empty `citations` field, triggering a code path where `dangerouslySetInnerHTML` is used to render attacker-controlled text. This vulnerability allows the execution of arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking, data theft, or other malicious actions.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/lunary-ai/lunary/commit/18750294a76ff6c0f3f1b6af4ac1a23399836b16; https://huntr.com/bounties/c603b64e-5171-4eed-8983-a7f656ce2c4d
CVE: CVE-2025-5472
Published: 2025-07-07
Description: The JSONReader in run-llama/llama_index versions 0.12.28 is vulnerable to a stack overflow due to uncontrolled recursive JSON parsing. This vulnerability allows attackers to trigger a Denial of Service (DoS) by submitting deeply nested JSON structures, leading to a RecursionError and crashing applications. The root cause is the unsafe recursive traversal design and lack of depth validation, which makes the JSONReader susceptible to stack overflow when processing deeply nested JSON. This impacts the availability of services, making them unreliable and disrupting workflows. The issue is resolved in version 0.12.38.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-674
References: https://github.com/run-llama/llama_index/commit/c032843a02ce38fd8f284b2aa5a37fd1c17ae635; https://huntr.com/bounties/df187bda-7911-4823-a19a-e15b2c66b0d4
CVE: CVE-2025-6210
Published: 2025-07-07
Description: A vulnerability in the ObsidianReader class of the run-llama/llama_index repository, specifically in version 0.12.27, allows for hardlink-based path traversal. This flaw permits attackers to bypass path restrictions and access sensitive system files, such as /etc/passwd, by exploiting hardlinks. The vulnerability arises from inadequate handling of hardlinks in the load_data() method, where the security checks fail to differentiate between real files and hardlinks. This issue is resolved in version 0.5.2.
CVSS Score: 6.2 (MEDIUM)
CWE: CWE-22
References: https://github.com/run-llama/llama_index/commit/a86c96ae0e662492eeb471b658ae849a93f628ff; https://huntr.com/bounties/a654b322-a509-4448-a1f5-0f22850b4687
CVE: CVE-2025-6386
Published: 2025-07-07
Description: The parisneo/lollms repository is affected by a timing attack vulnerability in the `authenticate_user` function within the `lollms_authentication.py` file. This vulnerability allows attackers to enumerate valid usernames and guess passwords incrementally by analyzing response time differences. The affected version is the latest, and the issue is resolved in version 20.1. The vulnerability arises from the use of Python's default string equality operator for password comparison, which compares characters sequentially and exits on the first mismatch, leading to variable response times based on the number of matching initial characters.
CVSS Score: 7.5 (HIGH)
CWE: CWE-203
References: https://github.com/parisneo/lollms/commit/f78437f7b5aa39a78c6201912faf4e0645a38c48; https://huntr.com/bounties/6da05485-d219-4f18-9ffc-991053524b67
CVE: CVE-2025-7122
Published: 2025-07-07
Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /admin/index.php. The manipulation of the argument Username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/ez-lbz/poc/issues/45; https://vuldb.com/?ctiid.315034; https://vuldb.com/?id.315034
CVE: CVE-2025-7123
Published: 2025-07-07
Description: A vulnerability was found in Campcodes Complaint Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/complaint-details.php. The manipulation of the argument cid/uid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/y2xsec324/cve/issues/2; https://vuldb.com/?ctiid.315035; https://vuldb.com/?id.315035
CVE: CVE-2025-7124
Published: 2025-07-07
Description: A vulnerability classified as critical has been found in code-projects Online Note Sharing 1.0. Affected is an unknown function of the file /dashboard/userprofile.php of the component Profile Image Handler. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434
References: https://code-projects.org/; https://github.com/yihaofuweng/cve/issues/2; https://vuldb.com/?ctiid.315036