deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-36885
Published: 2025-12-10
Description: Sony IPELA Network Camera 1.82.01 contains a stack buffer overflow vulnerability in the ftpclient.cgi endpoint that allows remote attackers to execute arbitrary code. Attackers can exploit the vulnerability by sending a crafted POST request with oversized data to the FTP client functionality, potentially causing remote code execution or denial of service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-787
References: https://pro.sony/en_NL/support-resources/snc-dh120/; https://pro.sony/en_NL/support-resources/snc-dh120/software/mpengb00000928; https://www.exploit-db.com/exploits/48842
CVE: CVE-2020-36886
Published: 2025-12-10
Description: SpinetiX Fusion Digital Signage 3.4.8 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that automatically submits a form to create a new admin user with full system privileges when a logged-in user visits the page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.exploit-db.com/exploits/48846; https://www.spinetix.com; https://www.spinetix.com/product/
CVE: CVE-2020-36887
Published: 2025-12-10
Description: SpinetiX Fusion Digital Signage 3.4.8 contains an unauthenticated information disclosure vulnerability in the database backup directory. Attackers can access the /content/files/backups/ endpoint to download sensitive backup files containing user credentials and system information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-312
References: https://www.exploit-db.com/exploits/48845; https://www.spinetix.com; https://www.vulncheck.com/advisories/spinetix-fusion-digital-signage-unauthenticated-database-backup-disclosure
CVE: CVE-2020-36888
Published: 2025-12-10
Description: SpinetiX Fusion Digital Signage 3.4.8 contains a username enumeration vulnerability in its login script that allows attackers to identify valid user accounts. Attackers can send crafted login requests with different usernames to distinguish between existing and non-existing accounts by analyzing the server's error responses.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-203
References: https://www.exploit-db.com/exploits/48847; https://www.spinetix.com; https://www.vulncheck.com/advisories/spinetix-fusion-digital-signage-username-enumeration-via-login-script
CVE: CVE-2020-36892
Published: 2025-12-10
Description: Eibiz i-Media Server Digital Signage 3.8.0 contains an unauthenticated privilege escalation vulnerability in the updateUser object that allows attackers to modify user roles. Attackers can exploit the /messagebroker/amf endpoint to elevate privileges and take over user accounts by manipulating role settings without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://www.eibiz.co.th; https://www.exploit-db.com/exploits/48774; https://www.vulncheck.com/advisories/eibiz-i-media-server-digital-signage-unauthenticated-privilege-escalation
CVE: CVE-2020-36893
Published: 2025-12-10
Description: Eibiz i-Media Server Digital Signage 3.8.0 contains a directory traversal vulnerability that allows unauthenticated remote attackers to access files outside the server's root directory. Attackers can exploit the 'oldfile' GET parameter to view sensitive configuration files like web.xml and system files such as win.ini.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: http://www.eibiz.co.th; https://www.exploit-db.com/exploits/48766; https://www.vulncheck.com/advisories/eibiz-i-media-server-digital-signage-directory-traversal-vulnerability
CVE: CVE-2020-36894
Published: 2025-12-10
Description: Eibiz i-Media Server Digital Signage 3.8.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to create admin users through AMF-encoded object manipulation. Attackers can send crafted serialized objects to the /messagebroker/amf endpoint to create administrative users without authentication, bypassing security controls.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://www.eibiz.co.th; https://www.exploit-db.com/exploits/48763; https://www.vulncheck.com/advisories/eibiz-i-media-server-digital-signage-unauthenticated-user-creation-vulnerability
CVE: CVE-2020-36895
Published: 2025-12-10
Description: EIBIZ i-Media Server Digital Signage 3.8.0 contains an unauthenticated configuration disclosure vulnerability that allows remote attackers to access sensitive configuration files via direct object reference. Attackers can retrieve the SiteConfig.properties file through an HTTP GET request, exposing administrative credentials, database connection details, and system configuration information.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://www.eibiz.co.th; https://www.exploit-db.com/exploits/48764; https://www.vulncheck.com/advisories/eibiz-i-media-server-digital-signage-unauthenticated-configuration-disclosure
CVE: CVE-2020-36896
Published: 2025-12-10
Description: QiHang Media Web Digital Signage 3.0.9 contains a cleartext credentials vulnerability that allows unauthenticated attackers to access administrative login information through an unprotected XML file. Attackers can retrieve hardcoded admin credentials by requesting the '/xml/User/User.xml' file, enabling direct authentication bypass.
CVSS Score: 7.5 (HIGH)
CWE: CWE-522
References: http://www.howfor.com; https://www.exploit-db.com/exploits/48748; https://www.vulncheck.com/advisories/qihang-media-web-digital-signage-cleartext-credentials-disclosure
CVE: CVE-2020-36897
Published: 2025-12-10
Description: QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated remote code execution vulnerability in the QH.aspx file that allows attackers to upload malicious ASPX scripts. Attackers can exploit the file upload functionality by using the 'remotePath' and 'fileToUpload' parameters to write and execute arbitrary system commands on the server.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://www.howfor.com; https://www.exploit-db.com/exploits/48751; https://www.vulncheck.com/advisories/qihang-media-web-digital-signage-unauthenticated-remote-code-execution
CVE: CVE-2020-36898
Published: 2025-12-10
Description: QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file deletion vulnerability in the QH.aspx endpoint that allows remote attackers to delete files without authentication. Attackers can exploit the 'data' parameter by sending a POST request with file paths to delete arbitrary files with web server permissions using directory traversal sequences.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: http://www.howfor.com; https://www.exploit-db.com/exploits/48749; https://www.vulncheck.com/advisories/qihang-media-web-digital-signage-unauthenticated-arbitrary-file-deletion
CVE: CVE-2020-36899
Published: 2025-12-10
Description: QiHang Media Web Digital Signage 3.0.9 contains an unauthenticated file disclosure vulnerability that allows remote attackers to access sensitive files through unverified 'filename' and 'path' parameters. Attackers can exploit the QH.aspx endpoint to read arbitrary files and directory contents without authentication by manipulating download and getAll actions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-530
References: http://www.howfor.com; https://www.exploit-db.com/exploits/48750; https://www.vulncheck.com/advisories/qihang-media-web-digital-signage-unauthenticated-arbitrary-file-disclosure
CVE: CVE-2020-36900
Published: 2025-12-10
Description: All-Dynamics Digital Signage System 2.0.2 contains a cross-site request forgery vulnerability that allows attackers to create administrative users without proper request validation. Attackers can craft a malicious web page that automatically submits forms to create a new user with global administrative privileges when a logged-in user visits the page.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: https://www.all-dynamics.de; https://www.exploit-db.com/exploits/48736; https://www.vulncheck.com/advisories/all-dynamics-digital-signage-system-cross-site-request-forgery-via-user-management
CVE: CVE-2020-36901
Published: 2025-12-10
Description: UBICOD Medivision Digital Signage 1.5.1 contains a cross-site request forgery vulnerability that allows attackers to create administrative user accounts without proper request validation. Attackers can craft a malicious web page that submits a form to the /query/user/itSet endpoint to add a new admin user with elevated privileges.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.medivision.co.kr; https://www.exploit-db.com/exploits/48694; https://www.vulncheck.com/advisories/ubicod-medivision-digital-signage-cross-site-request-forgery-via-user-management
CVE: CVE-2020-36902
Published: 2025-12-10
Description: UBICOD Medivision Digital Signage 1.5.1 contains an authorization bypass vulnerability that allows normal users to escalate privileges by manipulating the 'ft[grp]' parameter. Attackers can send a GET request to /html/user with 'ft[grp]' set to integer value '3' to gain super admin rights without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: http://www.medivision.co.kr; https://www.exploit-db.com/exploits/48684; https://www.vulncheck.com/advisories/ubicod-medivision-digital-signage-authorization-bypass-via-user-privileges
CVE: CVE-2023-53740
Published: 2025-12-10
Description: Screen SFT DAB 1.9.3 contains an authentication bypass vulnerability that allows attackers to change the admin password without providing the current credentials. Attackers can exploit the userManager.cgx endpoint by sending a crafted JSON request with a new MD5-hashed password to directly modify the admin account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://www.dbbroadcast.com; https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/; https://www.exploit-db.com/exploits/51458
CVE: CVE-2023-53741
Published: 2025-12-10
Description: Screen SFT DAB 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP address-bound session identifiers. Attackers can exploit the vulnerable API by intercepting and reusing established sessions to remove user accounts without proper authorization.
CVSS Score: 8.1 (HIGH)
CWE: CWE-384, CWE-384
References: https://www.dbbroadcast.com; https://www.dbbroadcast.com/products/radio/sft-dab-series-compact-air/; https://www.exploit-db.com/exploits/51457
CVE: CVE-2025-24857
Published: 2025-12-10
Description: Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.
CVSS Score: 7.6 (HIGH)
CWE: CWE-284
References: https://www.cisa.gov/news-events/ics-advisories/icsa-25-343-01
CVE: CVE-2025-62181
Published: 2025-12-10
Description: Pega Platform versions 7.1.0 through Infinity 25.1.0 are affected by a User Enumeration.  This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.  This only applies to deprecated basic-authentication feature and other more secure authentication mechanisms are recommended.  A fix is being provided in the 24.1.4, 24.2.4, and 25.1.1 patch releases.  Please note:  Basic credentials authentication service type is deprecated started in 24.2 version:  https://docs.pega.com/bundle/platform/page/platform/release-notes/security/whats-new-security-242.html.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-204
References: https://support.pega.com/support-doc/pega-security-advisory-j25-vulnerability-remediation-note
CVE: CVE-2025-65512
Published: 2025-12-10
Description: A Server-Side Request Forgery (SSRF) vulnerability was discovered in the webpage-to-markdown conversion feature of markdownify-mcp v0.0.2 and before. This vulnerability allows an attacker to bypass private IP restrictions through hostname-based bypass and HTTP redirect chains, enabling access to internal network services.
CVSS Score: 7.5 (HIGH)
CWE: CWE-918
References: https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-65512.md; https://thorn-pheasant-6d8.notion.site/markdownify-mcp-Report-2a03daf7b44180908ff4eea0c2915763; https://github.com/Team-Off-course/MCP-Server-Vuln-Analysis/blob/main/CVE-2025-65512.md
CVE: CVE-2025-65820
Published: 2025-12-10
Description: An issue was discovered in Meatmeet Android Mobile Application 1.1.2.0. An exported activity can be spawned with the mobile application which opens a hidden page. This page, which is not available through the normal flows of the application, contains several devices which can be added to your account, two of which have not been publicly released. As a result of this vulnerability, the attacker can gain insight into unreleased Meatmeet devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-information-disclosure-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Information-Disclosure.md
CVE: CVE-2025-65821
Published: 2025-12-10
Description: As UART download mode is still enabled on the ESP32 chip on which the firmware runs, an adversary can dump the flash from the device and retrieve sensitive information such as details about the current and previous Wi-Fi network from the NVS partition. Additionally, this allows the adversary to reflash the device with their own firmware which may contain malicious modifications.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1191
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-uart-download-mode-enabled-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/UART-Download-Mode-Enabled.md
CVE: CVE-2025-65822
Published: 2025-12-10
Description: The ESP32 system on a chip (SoC) that powers the Meatmeet Pro was found to have JTAG enabled. By leaving JTAG enabled on an ESP32 in a commercial product an attacker with physical access to the device can connect over this port and reflash the device's firmware with malicious code which will be executed upon running. As a result, the victim will lose access to the functionality of their device and the attack may gain unauthorized access to the victim's Wi-Fi network by re-connecting to the SSID defined in the NVS partition of the device.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-1191
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-jtag-enabled-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/JTAG-Enabled.md
CVE: CVE-2025-65823
Published: 2025-12-10
Description: The Meatmeet Pro was found to be shipped with hardcoded Wi-Fi credentials in the firmware, for the test network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located in close physical proximity to the device when it was first set up, they may be able to force the device to auto-connect to an attacker-controlled access point by setting the SSID and password to the same as which was found in the firmware file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-hardcoded-credentials-esp32-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Hardcoded-Credentials.md
CVE: CVE-2025-65824
Published: 2025-12-10
Description: An unauthenticated attacker within proximity of the Meatmeet device can perform an unauthorized Over The Air (OTA) firmware upgrade using Bluetooth Low Energy (BLE), resulting in the firmware on the device being overwritten with the attacker's code. As the device does not perform checks on upgrades, this results in Remote Code Execution (RCE) and the victim losing complete access to the Meatmeet.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-remote-code-execution-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Remote-Code-Execution.md
CVE: CVE-2025-65825
Published: 2025-12-10
Description: The firmware on the basestation of the Meatmeet is not encrypted. An adversary with physical access to the Meatmeet device can disassemble the device, connect over UART, and retrieve the firmware dump for analysis. Within the NVS partition they may discover the credentials of the current and previous Wi-Fi networks. This information could be used to gain unauthorized access to the victim's Wi-Fi network.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-flash-encryption-disabled-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Flash-Encryption-Disabled.md
CVE: CVE-2025-65826
Published: 2025-12-10
Description: The mobile application was found to contain stored credentials for the network it was developed on. If an attacker retrieved this, and found the physical location of the Wi-Fi network, they could gain unauthorized access to the Wi-Fi network of the vendor. Additionally, if an attacker were located in close physical proximity to the device when it was first set up, they may be able to force the device to auto-connect to an attacker-controlled access point by setting the SSID and password to the same as which was found in the firmware file.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-312
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-hardcoded-credentials-mobile-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Hardcoded-Credentials.md
CVE: CVE-2025-65827
Published: 2025-12-10
Description: The mobile application is configured to allow clear text traffic to all domains and communicates with an API server over HTTP. As a result, an adversary located "upstream" can intercept the traffic, inspect its contents, and modify the requests in transit. TThis may result in a total compromise of the user's account if the attacker intercepts a request with active authentication tokens or cracks the MD5 hash sent on login.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-319
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-clear-text-traffic-enabled-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Clear-Text-Traffic-Enabled.md
CVE: CVE-2025-65828
Published: 2025-12-10
Description: An unauthenticated attacker within proximity of the Meatmeet device can issue several commands over Bluetooth Low Energy (BLE) to these devices which would result in a Denial of Service. These commands include: shutdown, restart, clear config. Clear config would disassociate the current device from its user and would require re-configuration to re-enable the device. As a result, the end user would be unable to receive updates from the Meatmeet base station which communicates with the cloud services until the device had been fixed or turned back on.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-306
References: http://meatmeet.com; https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-denial-of-service-ble-md
CVE: CVE-2025-65829
Published: 2025-12-10
Description: The ESP32 system on a chip (SoC) that powers the Meatmeet basestation device was found to lack Secure Boot. The Secure Boot feature ensures that only authenticated software can execute on the device. The Secure Boot process forms a chain of trust by verifying all mutable software entities involved in the Application Startup Flow. As a result, an attacker with physical access to the device can flash modified firmware to the device, resulting in the execution of malicious code upon startup.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-94
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-secure-boot-disabled-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Device/Secure-Boot-Disabled.md
CVE: CVE-2025-65830
Published: 2025-12-10
Description: Due to a lack of certificate validation, all traffic from the mobile application can be intercepted. As a result, an adversary located "upstream" can decrypt the TLS traffic, inspect its contents, and modify the requests in transit. This may result in a total compromise of the user's account if the attacker intercepts a request with active authentication tokens or cracks the MD5 hash sent on login.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-295
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-lack-of-certificate-pinning-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Lack-of-Certificate-Pinning.md
CVE: CVE-2025-65831
Published: 2025-12-10
Description: The application uses an insecure hashing algorithm (MD5) to hash passwords. If an attacker obtained a copy of these hashes, either through exploiting cloud services, performing TLS downgrade attacks on the traffic from a mobile device, or through another means, they may be able to crack the hash in a reasonable amount of time and gain unauthorized access to the victim's account.
CVSS Score: 7.5 (HIGH)
CWE: CWE-327
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-lack-of-certificate-pinning-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Insecure-Algorithm.md
CVE: CVE-2025-65832
Published: 2025-12-10
Description: The mobile application insecurely handles information stored within memory. By performing a memory dump on the application after a user has logged out and terminated it, Wi-Fi credentials sent during the pairing process, JWTs used for authentication, and other sensitive details can be retrieved. As a result, an attacker with physical access to the device of a victim can retrieve this information and gain unauthorized access to their home Wi-Fi network and Meatmeet account.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-316
References: https://gist.github.com/dead1nfluence/4dffc239b4a460f41a03345fd8e5feb5#file-sensitive-information-stored-in-memory-md; https://github.com/dead1nfluence/Meatmeet-Pro-Vulnerabilities/blob/main/Mobile-Application/Sensitive%20Information-Stored-in-Memory.md
CVE: CVE-2025-65950
Published: 2025-12-10
Description: WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter sent from the user edit form. This issue is fixed in version 1.6.5.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://github.com/WBCE/WBCE_CMS/commit/96046178f4c80cf16f7c224054dec7fdadddda7e; https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.5; https://github.com/WBCE/WBCE_CMS/security/advisories/GHSA-934v-xhx9-j2f3
CVE: CVE-2025-67460
Published: 2025-12-10
Description: Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
CVSS Score: 7.8 (HIGH)
CWE: CWE-693
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25050
CVE: CVE-2025-67461
Published: 2025-12-10
Description: External control of file name or path in Zoom Rooms for macOS before version 6.6.0 may allow an authenticated user to conduct a disclosure of information via local access.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-73
References: https://www.zoom.com/en/trust/security-bulletin/zsb-25051