deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-69204
Published: 2025-12-30
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-12, in the WriteSVGImage function, using an int variable to store number_attributes caused an integer overflow. This, in turn, triggered a buffer overflow and caused a DoS attack. Version 7.1.2-12 fixes the issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-190
References: https://github.com/ImageMagick/ImageMagick/commit/2c08c[PII_REDACTED]153c9aa99a6b2dcb5f985681e; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-hrh7-j8q2-4qcw
CVE: CVE-2025-15258
Published: 2025-12-30
Description: A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Edimax confirms this issue: "The product mentioned, EDIMAX BR-6208AC V2, has reached its End of Life (EOL) status. It is no longer supported or maintained by Edimax, and it is no longer available for purchase in the market. Consequently, there will be no further firmware updates or patches for this device. We recommend users upgrade to newer models for better security." This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://tzh00203.notion.site/EDIMAX-BR-6208AC-V2_1-02-Open-Redirect-Vulnerability-in-Web-formALGSetup-handler-2d3b5c52018a80188e9ae30d3cc8c3d1?source=copy_link; https://vuldb.com/?ctiid.338648; https://vuldb.com/?id.338648
CVE: CVE-2025-15262
Published: 2025-12-30
Description: A security flaw has been discovered in BiggiDroid Simple PHP CMS 1.0. This impacts an unknown function of the file /admin/edit.php of the component Site Logo Handler. Performing a manipulation of the argument image results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://gitee.com/shanyaohei/black-yam/issues/IDGML9; https://vuldb.com/?ctiid.338656; https://vuldb.com/?id.338656
CVE: CVE-2025-56332
Published: 2025-12-30
Description: Authentication Bypass in fosrl/pangolin v1.6.2 and before allows attackers to access Pangolin resource via Insecure Default Configuration
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-1188
References: https://gist.github.com/mrdgef/ef6fa41d69c[PII_REDACTED]c163d7d7d75; https://github.com/fosrl/pangolin
CVE: CVE-2025-65409
Published: 2025-12-30
Description: A divide-by-zero in the encryption/decryption routines of GNU Recutils v1.9 allows attackers to cause a Denial of Service (DoS) via inputting an empty value as a password.
CVSS Score: 7.5 (HIGH)
CWE: CWE-369
References: http://ftp.gnu.org/gnu/recutils/; https://github.com/MAXEUR5/Vulnerability_Disclosures/blob/main/2025/CVE-2025-65409.md; https://lists.gnu.org/archive/html/bug-recutils/2025-10/msg00004.html
CVE: CVE-2025-65411
Published: 2025-12-30
Description: A NULL pointer dereference in the src/path.c component of GNU Unrtf v0.21.10 allows attackers to cause a Denial of Service (DoS) via injecting a crafted payload into the search_path parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/MAXEUR5/Vulnerability_Disclosures/blob/main/2025/CVE-2025-65411.md; https://lists.gnu.org/archive/html/bug-unrtf/2025-11/msg00000.html; https://savannah.gnu.org/projects/unrtf/
CVE: CVE-2025-15263
Published: 2025-12-30
Description: A weakness has been identified in BiggiDroid Simple PHP CMS 1.0. Affected is an unknown function of the file /admin/login.php of the component Admin Login. Executing a manipulation of the argument Username can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://gitee.com/devilrunsun/mywork/issues/IDGMME; https://vuldb.com/?ctiid.338657; https://vuldb.com/?id.338657
CVE: CVE-2025-15264
Published: 2025-12-30
Description: A vulnerability was determined in FeehiCMS up to 2.1.1. Impacted is an unknown function of the file frontend/web/timthumb.php of the component TimThumb. Executing manipulation of the argument src can lead to server-side request forgery. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-918
References: https://vuldb.com/?ctiid.338663; https://vuldb.com/?id.338663; https://vuldb.com/?submit.718278
CVE: CVE-2025-66824
Published: 2025-12-30
Description: A Stored Cross-Site Scripting (XSS) vulnerability exists in the Meeting location field of the Create/Edit Conference functionality in TrueConf Server v5.5.2.10813. The injected payload is stored via the meeting_room parameter and executed when users visit the Conference Info page, allowing attackers to achieve full Account Takeover (ATO). This issue is caused by improper sanitization of user-supplied input in the meeting_room field.
CVSS Score: 8.7 (HIGH)
CWE: CWE-79
References: https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66824/README.md; https://trueconf.com; https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66824/README.md
CVE: CVE-2025-66834
Published: 2025-12-30
Description: A CSV Formula Injection vulnerability in TrueConf Server v5.5.2.10813 allows a normal user to inject malicious spreadsheet formulas into exported chat logs via crafted Display Name.
CVSS Score: 7.3 (HIGH)
CWE: CWE-1236
References: https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66834/README.md; https://trueconf.com; https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66834/README.md
CVE: CVE-2025-66835
Published: 2025-12-30
Description: TrueConf Client 8.5.2 is vulnerable to DLL hijacking via crafted wfapi.dll allowing local attackers to execute arbitrary code within the user's context.
CVSS Score: 7.1 (HIGH)
CWE: CWE-427
References: http://trueconf.com; https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66835/README.md; https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66835/README.md
CVE: CVE-2025-69256
Published: 2025-12-30
Description: The Serverless Framework is a framework for using AWS Lambda and other managed cloud services to build applications. Starting in version 4.29.0 and prior to version 4.29.3, a command injection vulnerability exists in the Serverless Framework's built-in MCP server package (@serverless/mcp). This vulnerability only affects users of the experimental MCP server feature (serverless mcp), which represents less than 0.1% of Serverless Framework users. The core Serverless Framework CLI and deployment functionality are not affected. The vulnerability is caused by the unsanitized use of input parameters within a call to `child_process.exec`, enabling an attacker to inject arbitrary system commands. Successful exploitation can lead to remote code execution under the server process's privileges. The server constructs and executes shell commands using unvalidated user input directly within command-line strings. This introduces the possibility of shell metacharacter injection (`|`, `>`, `&&`, etc.). Version 4.29.3 fixes the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-77
References: https://github.com/serverless/serverless/blob/6213453da7df375aaf12fb3522ab8870488fc59a/packages/mcp/src/tools/list-projects.js#L68; https://github.com/serverless/serverless/commit/681ca039550c7169369f98780c6301a00f2dc4c4; https://github.com/serverless/serverless/releases/tag/sf-core%404.29.3
CVE: CVE-2025-15353
Published: 2025-12-30
Description: A vulnerability was detected in itsourcecode Society Management System 1.0. Impacted is the function edit_admin_query of the file /admin/edit_admin_query.php. Performing manipulation of the argument Username results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/BUPT2025201/CVE/issues/4; https://itsourcecode.com/; https://vuldb.com/?ctiid.338740
CVE: CVE-2025-15354
Published: 2025-12-30
Description: A flaw has been found in itsourcecode Society Management System 1.0. The affected element is an unknown function of the file /admin/add_admin.php. Executing manipulation of the argument Username can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/BUPT2025201/CVE/issues/2; https://itsourcecode.com/; https://vuldb.com/?ctiid.338741
CVE: CVE-2025-50343
Published: 2025-12-30
Description: An issue was discovered in matio 1.5.28. A heap-based memory corruption can occur in Mat_VarCreateStruct() when the nfields value does not match the actual number of strings in the fields array. This leads to out-of-bounds reads and invalid memory frees during cleanup, potentially causing a segmentation fault or heap corruption.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-122
References: https://github.com/tbeu/matio/issues/275; https://github.com/zakkanijia/POC/blob/main/matio/CVE-2025-50343/matio.md; https://github.com/tbeu/matio/issues/275
CVE: CVE-2025-66823
Published: 2025-12-30
Description: An HTML Injection vulnerability in TrueConf server 5.5.2.10813 in the conference description field allows an attacker to inject arbitrary HTML in the Create/Edit conference functionality. The payload will be triggered when the victim opens the Conference Info page ([conference url]/info).
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66823/README.md; https://trueconf.com; https://github.com/x00nullbit/CVE-References/blob/main/CVE-2025-66823/README.md
CVE: CVE-2025-69210
Published: 2025-12-30
Description: FacturaScripts is open-source enterprise resource planning and accounting software. Prior to version 2025.7, a stored cross-site scripting (XSS) vulnerability exists in the product file upload functionality. Authenticated users can upload crafted XML files containing executable JavaScript. These files are later rendered by the application without sufficient sanitization or content-type enforcement, allowing arbitrary JavaScript execution when the file is accessed. Because product files uploaded by regular users are visible to administrative users, this vulnerability can be leveraged to execute malicious JavaScript in an administrator’s browser session. Version 2025.7 fixes the issue.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://facturascripts.com/publicaciones/ya-disponible-facturascripts-2025-7; https://github.com/NeoRazorX/facturascripts/releases/tag/v2025.7; https://github.com/NeoRazorX/facturascripts/security/advisories/GHSA-2267-xqcf-gw2m
CVE: CVE-2025-69257
Published: 2025-12-30
Description: theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.1.1, the application loads custom Python rules and configuration files from user-writable locations (e.g., `~/.config/theshit/`) without validating ownership or permissions when executed with elevated privileges. If the tool is invoked with `sudo` or otherwise runs with an effective UID of root, it continues to trust configuration files originating from the unprivileged user's environment. This allows a local attacker to inject arbitrary Python code via a malicious rule or configuration file, which is then executed with root privileges. Any system where this tool is executed with elevated privileges is affected. In environments where the tool is permitted to run via `sudo` without a password (`NOPASSWD`), a local unprivileged user can escalate privileges to root without additional interaction. The issue has been fixed in version 0.1.1. The patch introduces strict ownership and permission checks for all configuration files and custom rules. The application now enforces that rules are only loaded if they are owned by the effective user executing the tool. When executed with elevated privileges (`EUID=0`), the application refuses to load any files that are not owned by root or that are writable by non-root users. When executed as a non-root user, it similarly refuses to load rules owned by other users. This prevents both vertical and horizontal privilege escalation via execution of untrusted code. If upgrading is not possible, users should avoid executing the application with `sudo` or as the root user. As a temporary mitigation, ensure that directories containing custom rules and configuration files are owned by root and are not writable by non-root users. Administrators may also audit existing custom rules before running the tool with elevated privileges.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-269, CWE-284, CWE-829
References: https://github.com/AsfhtgkDavid/theshit/commit/8e0b565e7876a83b0e1cfbacb8af39dadfdcc500; https://github.com/AsfhtgkDavid/theshit/security/advisories/GHSA-95qg-89c2-w5hj
CVE: CVE-2025-69261
Published: 2025-12-30
Description: WasmEdge is a WebAssembly runtime. Prior to version 0.16.0-alpha.3, a multiplication in `WasmEdge/include/runtime/instance/memory.h` can wrap, causing `checkAccessBound()` to incorrectly allow the access. This leads to a segmentation fault. Version 0.16.0-alpha.3 contains a patch for the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/WasmEdge/WasmEdge/commit/37cc9fa19bd23edbbdaa9252059b17f191fa4d17; https://github.com/WasmEdge/WasmEdge/security/advisories/GHSA-89fm-8mr7-gg4m
CVE: CVE-2025-14986
Published: 2025-12-30
Description: When frontend.enableExecuteMultiOperation is enabled, the server can apply namespace-scoped validation and feature gates for the embedded StartWorkflowExecutionRequest using its Namespace field rather than the outer, authorized ExecuteMultiOperationRequest.Namespace. This allows a caller authorized for one namespace to bypass that namespace's limits/policies by setting the embedded start request's namespace to a different namespace. The workflow is still created in the outer (authorized) namespace; only validation/gating is performed under the wrong namespace context.
This issue affects Temporal: from 1.24.0 through 1.29.1. Fixed in 1.27.4, 1.28.2, 1.29.2.
CWE: CWE-863
References: https://github.com/temporalio/temporal/releases/tag/v1.27.4; https://github.com/temporalio/temporal/releases/tag/v1.28.2; https://github.com/temporalio/temporal/releases/tag/v1.29.2
CVE: CVE-2025-14987
Published: 2025-12-30
Description: When system.enableCrossNamespaceCommands is enabled (on by default), the Temporal server permits certain workflow task commands (e.g. StartChildWorkflowExecution, SignalExternalWorkflowExecution, RequestCancelExternalWorkflowExecution) to target a different namespace than the namespace authorized at the gRPC boundary. The frontend authorizes RespondWorkflowTaskCompleted based on the outer request namespace, but the history service later resolves and executes the command using the namespace embedded in command attributes without authorizing the caller for that target namespace. This can allow a worker authorized for one namespace to create, signal, or cancel workflows in another namespace.
This issue affects Temporal: through 1.29.1. Fixed in 1.27.4, 1.28.2, 1.29.2.
CWE: CWE-863
References: https://github.com/temporalio/temporal/releases/tag/v1.27.4; https://github.com/temporalio/temporal/releases/tag/v1.28.2; https://github.com/temporalio/temporal/releases/tag/v1.29.2
CVE: CVE-2025-15356
Published: 2025-12-30
Description: A vulnerability has been found in Tenda AC20 up to 16.03.08.12. The impacted element is the function sscanf of the file /goform/PowerSaveSet. The manipulation of the argument powerSavingEn/time/powerSaveDelay/ledCloseType leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120, CWE-120
References: https://github.com/xyh4ck/iot_poc/blob/main/Tenda%20AC20_Buffer_Overflow/Tenda%20AC20_Buffer_Overflow.md#poc; https://github.com/xyh4ck/iot_poc/tree/main/Tenda%20AC20_Buffer_Overflow; https://vuldb.com/?ctiid.338742
CVE: CVE-2025-15357
Published: 2025-12-30
Description: A vulnerability was found in D-Link DI-7400G+ 19.12.25A1. This affects an unknown function of the file /msp_info.htm?flag=cmd. The manipulation of the argument cmd results in command injection. The attack can be launched remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-77, CWE-77
References: https://github.com/xyh4ck/iot_poc/tree/main/D-Link_DI_7400G%2B_Command_Injection; https://vuldb.com/?ctiid.338743; https://vuldb.com/?id.338743
CVE: CVE-2025-61594
Published: 2025-12-30
Description: URI is a module providing classes to handle Uniform Resource Identifiers. In versions 0.12.4 and earlier (bundled in Ruby 3.2 series) 0.13.2 and earlier (bundled in Ruby 3.3 series), 1.0.3 and earlier (bundled in Ruby 3.4 series), when using the + operator to combine URIs, sensitive information like passwords from the original URI can be leaked, violating RFC3986 and making applications vulnerable to credential exposure. This is a a bypass for the fix to CVE-2025-27221 that can expose user credentials. This issue has been fixed in versions 0.12.5, 0.13.3 and 1.0.4.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-212
References: https://github.com/advisories/GHSA-22h5-pq3x-2gf2; https://github.com/ruby/uri/security/advisories/GHSA-j4pr-3wm6-xx2r; https://hackerone.com/reports/2957667
CVE: CVE-2025-66723
Published: 2025-12-30
Description: inMusic Brands Engine DJ before 4.3.4 suffers from Insecure Permissions due to exposed HTTP service in the Remote Library, which allows attackers to access all files and network paths.
CVSS Score: 7.5 (HIGH)
CWE: CWE-732
References: https://github.com/audiopump/cve-2025-66723; https://www.inmusicbrands.com/
CVE: CVE-2025-15360
Published: 2025-12-30
Description: A vulnerability was determined in newbee-mall-plus 2.0.0. This impacts the function Upload of the file src/main/java/ltd/newbee/mall/controller/common/UploadController.java of the component Product Information Edit Page. This manipulation of the argument File causes unrestricted upload. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://github.com/zyhzheng500-maker/cve/blob/main/%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md; https://vuldb.com/?ctiid.338744; https://vuldb.com/?id.338744
CVE: CVE-2022-50691
Published: 2025-12-30
Description: MiniDVBLinux 5.4 contains a remote command execution vulnerability that allows unauthenticated attackers to execute arbitrary commands as root through the 'command' GET parameter. Attackers can exploit the /tpl/commands.sh endpoint by sending malicious command values to gain root-level system access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78, CWE-78
References: https://packetstormsecurity.com/files/168749/; https://www.vulncheck.com/advisories/minidvblinux-remote-root-command-execution-via-commandssh; https://www.zeroscience.mk/en/vulnerabilities/ZSL-2022-5718.php
CVE: CVE-2022-50692
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain an insufficient session expiration vulnerability that allows attackers to reuse old session credentials. Attackers can exploit weak session management to potentially hijack active user sessions and gain unauthorized access to the application.
CVSS Score: 7.5 (HIGH)
CWE: CWE-613
References: https://cxsecurity.com/issue/WLB[PII_REDACTED]; https://exchange.xforce.ibmcloud.com/vulnerabilities/247956; https://packetstormsecurity.com/files/170251/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Insufficient-Session-Expiration.html
CVE: CVE-2022-50694
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an SQL injection vulnerability in the 'username' POST parameter of index.php that allows attackers to manipulate database queries. Attackers can inject arbitrary SQL code through the username parameter to bypass authentication and potentially access unauthorized database information.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247947; https://packetstormsecurity.com/files/170254/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-username-SQL-Injection.html; https://www.sound4.com/
CVE: CVE-2022-50695
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains a network vulnerability that allows unauthenticated attackers to send ICMP signals to arbitrary hosts through network command scripts. Attackers can abuse ping.php, traceroute.php, and dns.php to generate network flooding attacks targeting external hosts.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247948; https://packetstormsecurity.com/files/170255/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-ICMP-Flood-Attack.html; https://www.sound4.com/
CVE: CVE-2022-50696
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x and below contain hardcoded credentials embedded in server binaries that cannot be modified through normal device operations. Attackers can leverage these static credentials to gain unauthorized access to the device across Linux and Windows distributions without requiring user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247949; https://packetstormsecurity.com/files/170256/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Hardcoded-Credentials.html; https://www.sound4.com/
CVE: CVE-2022-50787
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco versions 2.x contains an unauthenticated stored cross-site scripting vulnerability in the username parameter that allows attackers to inject malicious scripts. Attackers can exploit the unvalidated username input to execute arbitrary HTML and JavaScript code in victim browser sessions without authentication.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247920; https://packetstormsecurity.com/files/170258/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Persistent-Cross-Site-Scripting.html; https://www.sound4.com/
CVE: CVE-2022-50788
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive log files. Attackers can directly browse the /log directory to retrieve system and sensitive information without authentication.
CVSS Score: 7.5 (HIGH)
CWE: CWE-548
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247921; https://packetstormsecurity.com/files/170259/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-Information-Disclosure.html; https://www.sound4.com/
CVE: CVE-2022-50789
Published: 2025-12-30
Description: SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains a command injection vulnerability that allows local authenticated users to create malicious files in the /tmp directory with .dns.pid extension. Unauthenticated attackers can execute the malicious commands by making a single HTTP POST request to the vulnerable dns.php script, which triggers command execution and then deletes the file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-78
References: https://exchange.xforce.ibmcloud.com/vulnerabilities/247922; https://packetstormsecurity.com/files/170260/SOUND4-IMPACT-FIRST-PULSE-Eco-2.x-dns.php-Command-Injection.html; https://www.sound4.com/