deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2013-10046
Published: 2025-08-01
Description: A local privilege escalation vulnerability exists in Agnitum Outpost Internet Security 8.1 that allows an unprivileged user to execute arbitrary code with SYSTEM privileges. The flaw resides in the acs.exe component, which exposes a named pipe that accepts unauthenticated commands. By exploiting a directory traversal weakness in the pipe protocol, an attacker can instruct the service to load a malicious DLL from a user-controlled location. The DLL is then executed in the context of the privileged service.
CWE: CWE-22, CWE-306
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/local/agnitum_outpost_acs.rb; https://www.exploit-db.com/exploits/27282; https://www.exploit-db.com/exploits/28335
CVE: CVE-2013-10047
Published: 2025-08-01
Description: An unrestricted file upload vulnerability exists in MiniWeb HTTP Server <= Build 300 that allows unauthenticated remote attackers to upload arbitrary files to the server’s filesystem. By abusing the upload handler and crafting a traversal path, an attacker can place a malicious .exe in system32, followed by a .mof file in the WMI directory. This triggers execution of the payload with SYSTEM privileges via the Windows Management Instrumentation service. The exploit is only viable on Windows versions prior to Vista.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/miniweb_upload_wbem.rb; https://sourceforge.net/projects/miniweb/; https://www.exploit-db.com/exploits/27607
CVE: CVE-2013-10048
Published: 2025-08-01
Description: An OS command injection vulnerability exists in various legacy D-Link routers—including DIR-300 rev B and DIR-600 (firmware ≤ 2.13 and ≤ 2.14b01, respectively)—due to improper input handling in the unauthenticated command.php endpoint. By sending specially crafted POST requests, a remote attacker can execute arbitrary shell commands with root privileges, allowing full takeover of the device. This includes launching services such as Telnet, exfiltrating credentials, modifying system configuration, and disrupting availability. The flaw stems from the lack of authentication and inadequate sanitation of the cmd parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_command_php_exec_noauth.rb; https://web.archive.org/web/[PII_REDACTED]1648/http://www.s3cur1ty.de/m1adv2013-003; https://www.exploit-db.com/exploits/24453
CVE: CVE-2013-10049
Published: 2025-08-01
Description: An OS command injection vulnerability exists in multiple Raidsonic NAS devices—specifically tested on IB-NAS5220 and IB-NAS4220—via the unauthenticated timeHandler.cgi endpoint exposed through the web interface. The CGI script fails to properly sanitize user-supplied input in the timeZone parameter of a POST request, allowing remote attackers to inject arbitrary shell commands.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/raidsonic_nas_ib5220_exec_noauth.rb; https://web.archive.org/web/[PII_REDACTED]4425/http://www.s3cur1ty.de/m1adv2013-010; https://www.exploit-db.com/exploits/24499
CVE: CVE-2013-10050
Published: 2025-08-01
Description: An OS command injection vulnerability exists in multiple D-Link routers—confirmed on DIR-300 rev A (v1.05) and DIR-615 rev D (v4.13)—via the authenticated tools_vct.xgi CGI endpoint. The web interface fails to properly sanitize user-supplied input in the pingIp parameter, allowing attackers with valid credentials to inject arbitrary shell commands. Exploitation enables full device compromise, including spawning a telnet daemon and establishing a root shell. The vulnerability is present in firmware versions that expose tools_vct.xgi and use the Mathopd/1.5p6 web server. No vendor patch is available, and affected models are end-of-life.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir300_exec_telnet.rb; https://web.archive.org/web/[PII_REDACTED]3110/http://www.s3cur1ty.de/m1adv2013-014; https://www.exploit-db.com/exploits/25024
CVE: CVE-2013-10051
Published: 2025-08-01
Description: A remote PHP code execution vulnerability exists in InstantCMS version 1.6 and earlier due to unsafe use of eval() within the search view handler. Specifically, user-supplied input passed via the look parameter is concatenated into a PHP expression and executed without proper sanitation. A remote attacker can exploit this flaw by sending a crafted HTTP GET request with a base64-encoded payload in the Cmd header, resulting in arbitrary PHP code execution within the context of the web server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-95
References: https://packetstorm.news/files/id/122176; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/instantcms_exec.rb; https://www.exploit-db.com/exploits/26622
CVE: CVE-2013-10053
Published: 2025-08-01
Description: A remote command execution vulnerability exists in ZPanel version 10.0.0.2 in its htpasswd module. When creating .htaccess files, the inHTUsername field is passed unsanitized to a system() call that invokes the system’s htpasswd binary. By injecting shell metacharacters into the username field, an authenticated attacker can execute arbitrary system commands. Exploitation requires a valid ZPanel account—such as one in the default Users, Resellers, or Administrators groups—but no elevated privileges.
CWE: CWE-78
References: https://github.com/zpanel/zpanelx; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/zpanel_username_exec.rb; https://web.archive.org/web/[PII_REDACTED]4355/http://forums.zpanelcp.com/showthread.php?27898-Serious-Remote-Execution-Exploit-in-Zpanel-10-0-0-2
CVE: CVE-2013-10055
Published: 2025-08-01
Description: An unauthenticated arbitrary file upload vulnerability exists in Havalite CMS version 1.1.7 (and possibly earlier) in the upload.php script. The application fails to enforce proper file extension validation and authentication checks, allowing remote attackers to upload malicious PHP files via a crafted multipart/form-data POST request. Once uploaded, the attacker can access the file directly under havalite/tmp/files/, resulting in remote code execution.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/havalite_upload_exec.rb; https://sourceforge.net/projects/havalite/; https://www.exploit-db.com/exploits/26243
CVE: CVE-2013-10057
Published: 2025-08-01
Description: A stack-based buffer overflow vulnerability exists in Synactis PDF In-The-Box ActiveX control (PDF_IN_1.ocx), specifically the ConnectToSynactis method. When a long string is passed to this method—intended to populate the ldCmdLine argument of a WinExec call—a strcpy operation overwrites a saved TRegistry class pointer on the stack. This allows remote attackers to execute arbitrary code in the context of the user by enticing them to visit a malicious webpage that instantiates the vulnerable ActiveX control. The vulnerability was discovered via its use in third-party software such as Logic Print 2013.
CWE: CWE-94, CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/synactis_connecttosynactis_bof.rb; https://www.exploit-db.com/exploits/25835; https://www.fortiguard.com/encyclopedia/ips/35840/synactis-pdf-in-the-box-connecttosynactic-buffer-overflow
CVE: CVE-2013-10058
Published: 2025-08-01
Description: An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint. The web interface fails to properly sanitize user-supplied input passed to the ping_size parameter during diagnostic operations. An attacker with valid credentials can inject arbitrary shell commands, enabling remote code execution.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/linksys_wrt160nv2_apply_exec.rb; https://web.archive.org/web/[PII_REDACTED]1242/http://www.s3cur1ty.de/m1adv2013-012; https://www.exploit-db.com/exploits/24478
CVE: CVE-2013-10059
Published: 2025-08-01
Description: An authenticated OS command injection vulnerability exists in various D-Link routers (tested on DIR-615H1 running firmware version 8.04) via the tools_vct.htm endpoint. The web interface fails to sanitize input passed from the ping_ipaddr parameter to the tools_vct.htm diagnostic interface, allowing attackers to inject arbitrary shell commands using backtick encapsulation. With default credentials, an attacker can exploit this blind injection vector to execute arbitrary commands.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir615_up_exec.rb; https://web.archive.org/web/[PII_REDACTED]2603/http://www.s3cur1ty.de/m1adv2013-008; https://www.exploit-db.com/exploits/24477
CVE: CVE-2013-10060
Published: 2025-08-01
Description: An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN2200B model) firmware versions 1.0.0.36 and prior via the pppoe.cgi endpoint. A remote attacker with valid credentials can execute arbitrary commands via crafted input to the pppoe_username parameter. This flaw allows full compromise of the device and may persist across reboots unless configuration is restored.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn2200b_pppoe_exec.rb; https://web.archive.org/web/[PII_REDACTED]3239/http://www.s3cur1ty.de/m1adv2013-015; https://www.exploit-db.com/exploits/24513
CVE: CVE-2013-10061
Published: 2025-08-01
Description: An authenticated OS command injection vulnerability exists in Netgear routers (tested on the DGN1000B model firmware versions 1.1.00.24 and 1.1.00.45) via the TimeToLive parameter in the setup.cgi endpoint. The vulnerability arises from improper input neutralization, enabling command injection through crafted POST requests. This flaw enables remote attackers to deploy payloads or manipulate system state post-authentication.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/netgear_dgn1000b_setup_exec.rb; https://web.archive.org/web/[PII_REDACTED]4318/http://www.s3cur1ty.de/m1adv2013-005; https://www.exploit-db.com/exploits/24464
CVE: CVE-2013-10062
Published: 2025-08-01
Description: A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.
CWE: CWE-22
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linksys_e1500_traversal.rb; https://web.archive.org/web/[PII_REDACTED]4015/http://www.s3cur1ty.de/m1adv2013-004; https://www.exploit-db.com/exploits/24475
CVE: CVE-2013-10063
Published: 2025-08-01
Description: A path traversal vulnerability exists in the Netgear SPH200D Skype phone firmware versions <= 1.0.4.80 in its embedded web server. Authenticated attackers can exploit crafted GET requests to access arbitrary files outside the web root by injecting traversal sequences. This can expose sensitive system files and configuration data.
CWE: CWE-22
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/netgear_sph200d_traversal.rb; https://web.archive.org/web/[PII_REDACTED]4706/http://www.s3cur1ty.de/m1adv2013-002; https://www.exploit-db.com/exploits/24441
CVE: CVE-2024-13978
Published: 2025-08-01
Description: A vulnerability was found in LibTIFF up to 4.7.0. It has been declared as problematic. Affected by this vulnerability is the function t2p_read_tiff_init of the file tools/tiff2pdf.c of the component fax2ps. The manipulation leads to null pointer dereference. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The patch is named 2ebfffb0e8836bfb1cd7d85c059cd285c59761a4. It is recommended to apply a patch to fix this issue.
CVSS Score: 2.5 (LOW)
CWE: CWE-404, CWE-476
References: http://www.libtiff.org/; https://gitlab.com/libtiff/libtiff/-/commit/2ebfffb0e8836bfb1cd7d85c059cd285c59761a4; https://gitlab.com/libtiff/libtiff/-/issues/649
CVE: CVE-2025-54131
Published: 2025-08-01
Description: Cursor is a code editor built for programming with AI. In versions below 1.3, an attacker can bypass the allow list in auto-run mode with a backtick (`) or $(cmd). If a user has swapped Cursor from its default settings (requiring approval for every terminal call) to an allowlist, an attacker can execute arbitrary command execution outside of the allowlist without user approval. An attacker can trigger this vulnerability if chained with indirect prompt injection. This is fixed in version 1.3.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-77
References: https://github.com/cursor/cursor/security/advisories/GHSA-534m-3w6r-8pqr
CVE: CVE-2025-54132
Published: 2025-08-01
Description: Cursor is a code editor built for programming with AI. In versions below 1.3, Mermaid (which is used to render diagrams) allows embedding images which then get rendered by Cursor in the chat box. An attacker can use this to exfiltrate sensitive information to a third-party attacker controlled server through an image fetch after successfully performing a prompt injection. A malicious model (or hallucination/backdoor) might also trigger this exploit at will. This issue requires prompt injection from malicious data (web, image upload, source code) in order to exploit. In that case, it can send sensitive information to an attacker-controlled external server. This is fixed in version 1.3.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-918
References: https://github.com/cursor/cursor/security/advisories/GHSA-43wj-mwcc-x93p
CVE: CVE-2025-54424
Published: 2025-08-01
Description: 1Panel is a web interface and MCP Server that manages websites, files, containers, databases, and LLMs on a Linux server. In versions 2.0.5 and below, the HTTPS protocol used for communication between the Core and Agent endpoints has incomplete certificate verification during certificate validation, leading to unauthorized interface access. Due to the presence of numerous command execution or high-privilege interfaces in 1Panel, this results in Remote Code Execution (RCE). This is fixed in version 2.0.6. The CVE has been translated from Simplified Chinese using GitHub Copilot.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77
References: https://github.com/1Panel-dev/1Panel/pull/9698/commits/[PII_REDACTED]f8d31ddaf7215d1c30ab8b4cdb0261; https://github.com/1Panel-dev/1Panel/releases/tag/v2.0.6; https://github.com/1Panel-dev/1Panel/security/advisories/GHSA-8j63-96wh-wh3j
CVE: CVE-2025-54792
Published: 2025-08-01
Description: LocalSend is an open-source app to securely share files and messages with nearby devices over local networks without needing an internet connection. In versions 1.16.1 and below, a critical Man-in-the-Middle (MitM) vulnerability in the software's discovery protocol allows an unauthenticated attacker on the same local network to impersonate legitimate devices, silently intercepting, reading, and modifying any file transfer. This can be used to steal sensitive data or inject malware, like ransomware, into files shared between trusted users. The attack is hardly detectable and easy to implement, posing a severe and immediate security risk. This issue was fixed in version 1.17.0.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-300, CWE-345
References: https://github.com/localsend/localsend/commit/e8635204ec782ded45bc7d698deb60f3c4105687; https://github.com/localsend/localsend/releases/tag/v1.17.0; https://github.com/localsend/localsend/security/advisories/GHSA-424h-5f6m-x63f
CVE: CVE-2025-54133
Published: 2025-08-02
Description: Cursor is a code editor built for programming with AI. In versions 1.17 through 1.2, there is a UI information disclosure vulnerability in Cursor's MCP (Model Context Protocol) deeplink handler, allowing attackers to execute 2-click arbitrary system commands through social engineering attacks. When users click malicious `cursor://anysphere.cursor-deeplink/mcp/install` links, the installation dialog does not show the arguments being passed to the command being run. If a user clicks a malicious deeplink, then examines the installation dialog and clicks through, the full command including the arguments will be executed on the machine. This is fixed in version 1.3.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78, CWE-200
References: https://github.com/cursor/cursor/security/advisories/GHSA-r22h-5wp2-2wfv
CVE: CVE-2025-54136
Published: 2025-08-02
Description: Cursor is a code editor built for programming with AI. In versions 1.2.4 and below, attackers can achieve remote and persistent code execution by modifying an already trusted MCP configuration file inside a shared GitHub repository or editing the file locally on the target's machine. Once a collaborator accepts a harmless MCP, the attacker can silently swap it for a malicious command (e.g., calc.exe) without triggering any warning or re-prompt. If an attacker has write permissions on a user's active branches of a source repository that contains existing MCP servers the user has previously approved, or allows an attacker has arbitrary file-write locally, the attacker can achieve arbitrary code execution. This is fixed in version 1.3.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: https://github.com/cursor/cursor/security/advisories/GHSA-24mc-g4xr-4395
CVE: CVE-2025-54386
Published: 2025-08-02
Description: Traefik is an HTTP reverse proxy and load balancer. In versions 2.11.27 and below, 3.0.0 through 3.4.4 and 3.5.0-rc1, a path traversal vulnerability was discovered in WASM Traefik’s plugin installation mechanism. By supplying a maliciously crafted ZIP archive containing file paths with ../ sequences, an attacker can overwrite arbitrary files on the system outside of the intended plugin directory. This can lead to remote code execution (RCE), privilege escalation, persistence, or denial of service. This is fixed in versions 2.11.28, 3.4.5 and 3.5.0.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-22, CWE-30
References: https://github.com/traefik/plugin-service/pull/71; https://github.com/traefik/plugin-service/pull/72; https://github.com/traefik/traefik/commit/5ef853a0c53068f69a6c229a5815a0dc6e0a8800
CVE: CVE-2025-54781
Published: 2025-08-02
Description: Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. When debugging is enabled for Himmelblau in version 1.0.0, the himmelblaud_tasks service leaks an Intune service access token to the system journal. This short-lived token can be used to detect the host's Intune compliance status, and may permit additional administrative operations for the Intune host device (though the API for these operations is undocumented). This is fixed in version 1.1.0. To workaround this issue, ensure that Himmelblau debugging is disabled.
CVSS Score: 2.8 (LOW)
CWE: CWE-532
References: https://github.com/himmelblau-idm/himmelblau/commit/2d512bded90ac6a54fcdf737b43ff5d9d4cdb59e; https://github.com/himmelblau-idm/himmelblau/releases/tag/1.1.0; https://github.com/himmelblau-idm/himmelblau/security/advisories/GHSA-78qg-vmrw-574w
CVE: CVE-2025-54782
Published: 2025-08-02
Description: Nest is a framework for building scalable Node.js server-side applications. In versions 0.2.0 and below, a critical Remote Code Execution (RCE) vulnerability was discovered in the @nestjs/devtools-integration package. When enabled, the package exposes a local development HTTP server with an API endpoint that uses an unsafe JavaScript sandbox (safe-eval-like implementation). Due to improper sandboxing and missing cross-origin protections, any malicious website visited by a developer can execute arbitrary code on their local machine. The package adds HTTP endpoints to a locally running NestJS development server. One of these endpoints, /inspector/graph/interact, accepts JSON input containing a code field and executes the provided code in a Node.js vm.runInNewContext sandbox. This is fixed in version 0.2.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-78, CWE-352
References: https://github.com/JLLeitschuh/nestjs-devtools-integration-rce-poc; https://github.com/JLLeitschuh/nestjs-typescript-starter-w-devtools-integration; https://github.com/nestjs/nest/security/advisories/GHSA-85cg-cmq5-qjm7
CVE: CVE-2025-54789
Published: 2025-08-02
Description: Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, the File Move functionality does not contain logic that prevents injection of arbitrary JavaScript, which can lead to Browser JS code execution in the context of the user’s session. This is fixed in version 0.16.10.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-80
References: https://github.com/humhub/cfiles/commit/f022bdd1cc54334a7a2a6f90a8168bb9583a2f00; https://github.com/humhub/cfiles/releases/tag/v0.16.10; https://github.com/humhub/cfiles/security/advisories/GHSA-cw2v-c62w-5r43
CVE: CVE-2025-54790
Published: 2025-08-02
Description: Files is a module for managing files inside spaces and user profiles. In versions 0.16.9 and below, Files does not have logic to prevent the exploitation of backend SQL queries without direct output, potentially allowing unauthorized data access. This is fixed in version 0.16.10.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-89
References: https://github.com/humhub/cfiles/pull/252; https://github.com/humhub/cfiles/releases/tag/v0.16.10; https://github.com/humhub/cfiles/security/advisories/GHSA-rfvq-g9rm-pgqj
CVE: CVE-2025-54796
Published: 2025-08-02
Description: Copyparty is a portable file server. Versions prior to 1.18.9, the filter parameter for the "Recent Uploads" page allows arbitrary RegExes. If this feature is enabled (which is the default), an attacker can craft a filter which deadlocks the server. This is fixed in version 1.18.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-833, CWE-1333
References: https://github.com/9001/copyparty/commit/09910ba80784c3980947d92f45db696398c0fd83; https://github.com/9001/copyparty/releases/tag/v1.18.9; https://github.com/9001/copyparty/security/advisories/GHSA-5662-2rj7-f2v6
CVE: CVE-2025-6076
Published: 2025-08-02
Description: Partner Software's Partner Software application and Partner Web application do not sanitize files uploaded on the "reports" tab, allowing an authenticated attacker to upload a malicious file and compromise the device. By default, the software runs as SYSTEM, heightening the severity of the vulnerability.
CVSS Score: 8.8 (HIGH)
References: https://partnersoftware.com/resources/software-release-info-4-32/; https://kb.cert.org/vuls/id/317469; https://www.kb.cert.org/vuls/id/317469
CVE: CVE-2025-6077
Published: 2025-08-02
Description: Partner Software's Partner Software Product and corresponding Partner Web application use the same default username and password for the administrator account across all versions.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1391
References: https://partnersoftware.com/resources/software-release-info-4-32/; https://kb.cert.org/vuls/id/317469; https://www.kb.cert.org/vuls/id/317469