deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-10036
Published: 2025-08-08
Description: Project Pier 0.8.8 and earlier contains an unauthenticated arbitrary file upload vulnerability in tools/upload_file.php. The upload handler fails to validate the file type or enforce authentication, allowing remote attackers to upload malicious PHP files directly into a web-accessible directory. The uploaded file is stored with a predictable suffix and can be executed by requesting its URL, resulting in remote code execution.
CWE: CWE-434
References: https://packetstorm.news/files/id/117070; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/projectpier_upload_exec.rb; https://web.archive.org/web/[PII_REDACTED]0432/http://www.projectpier.org/
CVE: CVE-2012-10041
Published: 2025-08-08
Description: WAN Emulator v2.3 contains two unauthenticated command execution vulnerabilities. The result.php script calls shell_exec() with unsanitized input from the pc POST parameter, allowing remote attackers to execute arbitrary commands as the www-data user. The system also includes a SUID-root binary named dosu, which is vulnerable to command injection via its first argument. An attacker can exploit both flaws in sequence to achieve full remote code execution and escalate privileges to root.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/wanem_exec.rb; https://sourceforge.net/projects/wanem/; https://www.exploit-db.com/exploits/21190
CVE: CVE-2012-10042
Published: 2025-08-08
Description: Sflog! CMS 1.0 contains an authenticated arbitrary file upload vulnerability in the blog management interface. The application ships with default credentials (admin:secret) and allows authenticated users to upload files via manage.php. The upload mechanism fails to validate file types, enabling attackers to upload a PHP backdoor into a web-accessible directory (blogs/download/uploads/). Once uploaded, the file can be executed remotely, resulting in full remote code execution.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/sflog_upload_exec.rb; https://sourceforge.net/projects/sflog/; https://www.exploit-db.com/exploits/19626
CVE: CVE-2012-10043
Published: 2025-08-08
Description: A stack-based buffer overflow vulnerability exists in ActFax Server version 4.32, specifically in the "Import Users from File" functionality of the client interface. The application fails to properly validate the length of tab-delimited fields in .exp files, leading to unsafe usage of strcpy() during CSV parsing. An attacker can exploit this vulnerability by crafting a malicious .exp file and importing it using the default character set "ECMA-94 / Latin 1 (ISO 8859)". Successful exploitation may result in arbitrary code execution, leading to full system compromise. User interaction is required to trigger the vulnerability.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/actfax_import_users_bof.rb; https://web.archive.org/web/[PII_REDACTED]2809/http://www.pwnag3.com/2012/08/actfax-local-privilege-escalation.html; https://www.actfax.com/
CVE: CVE-2012-10044
Published: 2025-08-08
Description: MobileCartly version 1.0 contains an arbitrary file creation vulnerability in the savepage.php script. The application fails to perform authentication or authorization checks before invoking file_put_contents() on attacker-controlled input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP GET requests to savepage.php, specifying both the filename and content. This allows arbitrary file creation within the pages/ directory or any writable path on the server, allowing remote code execution.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/mobilecartly_upload_exec.rb; https://web.archive.org/web/[PII_REDACTED]1957/http://mobilecartly.com/; https://www.exploit-db.com/exploits/20422
CVE: CVE-2012-10045
Published: 2025-08-08
Description: XODA version 0.4.5 contains an unauthenticated file upload vulnerability that allows remote attackers to execute arbitrary PHP code on the server. The flaw resides in the upload functionality, which fails to properly validate or restrict uploaded file types. By crafting a multipart/form-data POST request, an attacker can upload a .php file directly into the web-accessible files/ directory and trigger its execution via a subsequent GET request.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/xoda_file_upload.rb; https://sourceforge.net/projects/xoda/; https://www.exploit-db.com/exploits/20703
CVE: CVE-2012-10046
Published: 2025-08-08
Description: The E-Mail Security Virtual Appliance (ESVA) (tested on version ESVA_2057) contains an unauthenticated command injection vulnerability in the learn-msg.cgi script. The CGI handler fails to sanitize user-supplied input passed via the id parameter, allowing attackers to inject arbitrary shell commands. Exploitation requires no authentication and results in full command execution on the underlying system.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/esva_exec.rb; https://sourceforge.net/projects/esva-project/; https://www.exploit-db.com/exploits/20551
CVE: CVE-2012-10047
Published: 2025-08-08
Description: Cyclope Employee Surveillance Solution versions 6.x is vulnerable to a SQL injection flaw in its login mechanism. The username parameter in the auth-login POST request is not properly sanitized, allowing attackers to inject arbitrary SQL statements. This can be leveraged to write and execute a malicious PHP file on disk, resulting in remote code execution under the SYSTEM user context.
CWE: CWE-89
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/cyclope_ess_sqli.rb; https://www.cyclope-series.com/; https://www.exploit-db.com/exploits/20393
CVE: CVE-2012-10048
Published: 2025-08-08
Description: Zenoss Core 3.x contains a command injection vulnerability in the showDaemonXMLConfig endpoint. The daemon parameter is passed directly to a Popen() call in ZenossInfo.py without proper sanitation, allowing authenticated users to execute arbitrary commands on the server as the zenoss user.
CWE: CWE-22
References: http://web.archive.org/web/[PII_REDACTED]0334/https://itsecuritysolutions.org/2012-07-30-zenoss-3.2.1-multiple-security-vulnerabilities/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/zenoss_showdaemonxmlconfig_exec.rb; https://sourceforge.net/projects/zenoss/
CVE: CVE-2012-10049
Published: 2025-08-08
Description: WebPageTest version 2.6 and earlier contains an arbitrary file upload vulnerability in the resultimage.php script. The application fails to validate or sanitize user-supplied input before saving uploaded files to a publicly accessible directory. This flaw allows remote attackers to upload and execute arbitrary PHP code, resulting in full remote code execution under the web server context.
CWE: CWE-434
References: https://github.com/catchpoint/WebPageTest; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/webpagetest_upload_exec.rb; https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=26148
CVE: CVE-2012-10050
Published: 2025-08-08
Description: CuteFlow version 2.11.2 and earlier contains an arbitrary file upload vulnerability in the restart_circulation_values_write.php script. The application fails to validate or restrict uploaded file types, allowing unauthenticated attackers to upload arbitrary PHP files to the upload/___1/ directory. These files are then accessible via the web server, enabling remote code execution.
CWE: CWE-434
References: http://web.archive.org/web/[PII_REDACTED]4637/https://itsecuritysolutions.org/2012-07-01-CuteFlow-2.11.2-multiple-security-vulnerabilities/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/cuteflow_upload_exec.rb; https://sourceforge.net/projects/cuteflow/
CVE: CVE-2012-10051
Published: 2025-08-08
Description: Photodex ProShow Producer version 5.0.3256 contains a stack-based buffer overflow vulnerability in the handling of plugin load list files. When a specially crafted load file is placed in the installation directory, the application fails to properly validate its contents, leading to a buffer overflow when the file is parsed during startup. Exploitation requires local access to place the file and user interaction to launch the application.
CWE: CWE-121
References: https://archive.org/details/PhotodexProShowProducer7.0.3514Keymaker_20180127; https://erinkrespan.com/what-happened-to-photodex-proshow-producer/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/proshow_load_bof.rb
CVE: CVE-2012-10052
Published: 2025-08-08
Description: EGallery version 1.2 contains an unauthenticated arbitrary file upload vulnerability in the uploadify.php script. The application fails to validate file types or enforce authentication, allowing remote attackers to upload malicious PHP files directly into the web-accessible egallery/ directory. This results in full remote code execution under the web server context.
CWE: CWE-434
References: http://web.archive.org/web/[PII_REDACTED]3244/http://www.opensyscom.fr/Actualites/egallery-arbitrary-file-upload-vulnerability.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/egallery_upload_exec.rb; https://sourceforge.net/projects/e-gallery/
CVE: CVE-2012-10053
Published: 2025-08-08
Description: Simple Web Server 2.2 rc2 contains a stack-based buffer overflow vulnerability in its handling of the Connection HTTP header. When a remote attacker sends an overly long string in this header, the server uses vsprintf() without proper bounds checking, leading to a buffer overflow on the stack. This flaw allows remote attackers to execute arbitrary code with the privileges of the web server process. The vulnerability is triggered before authentication.
CWE: CWE-121
References: http://ghostinthelab.wordpress.com/2012/07/19/simplewebserver-2-2-rc2-remote-buffer-overflow-exploit/; http://www.pmx.it/software/sws.asp; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/sws_connection_bof.rb
CVE: CVE-2025-4796
Published: 2025-08-08
Description: The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the 'Eventin\Speaker\Api\SpeakerController::update_item' function. This makes it possible for unauthenticated attackers with contributor-level and above permissions to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://plugins.trac.wordpress.org/browser/wp-event-solution/tags/4.0.28/core/speaker/Api/SpeakerController.php#L419; https://plugins.trac.wordpress.org/changeset/3336972/wp-event-solution/trunk/core/speaker/Api/SpeakerController.php#file0; https://www.wordfence.com/threat-intel/vulnerabilities/id/9e0d441d-1da5-45e7-8a14-ce178099c0cc?source=cve
CVE: CVE-2025-8735
Published: 2025-08-08
Description: A vulnerability classified as problematic was found in GNU cflow up to 1.8. Affected by this vulnerability is the function yylex of the file c.c of the component Lexer. The manipulation leads to null pointer dereference. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.3 (LOW)
CWE: CWE-404, CWE-476
References: https://drive.google.com/file/d/1Q_rDQSEl3cBu6SUbfqr9pV9cHgvKcXFI/view?usp=drive_link; https://lists.gnu.org/archive/html/bug-cflow/2025-07/msg00000.html; https://vuldb.com/?ctiid.319231
CVE: CVE-2025-8736
Published: 2025-08-08
Description: A vulnerability, which was classified as critical, has been found in GNU cflow up to 1.8. Affected by this issue is the function yylex of the file c.c of the component Lexer. The manipulation leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-119, CWE-120
References: https://drive.google.com/file/d/17lkJ5bSiQZoXLTg3bK-rGBt3kahN9Xse/view?usp=drive_link; https://lists.gnu.org/archive/html/bug-cflow/2025-07/msg00001.html; https://vuldb.com/?ctiid.319232
CVE: CVE-2025-8737
Published: 2025-08-08
Description: A vulnerability, which was classified as problematic, was found in zlt2000 microservices-platform up to 6.0.0. This affects the function onLogoutSuccess of the file src/main/java/com/central/oauth/handler/OauthLogoutSuccessHandler.java. The manipulation of the argument redirect_url leads to open redirect. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-601
References: https://github.com/zlt2000/microservices-platform/issues/78; https://github.com/zlt2000/microservices-platform/issues/78#issue[PII_REDACTED]; https://vuldb.com/?ctiid.319233
CVE: CVE-2025-8738
Published: 2025-08-08
Description: A vulnerability has been found in zlt2000 microservices-platform up to 6.0.0 and classified as problematic. This vulnerability affects unknown code of the file /actuator of the component Spring Actuator Interface. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200, CWE-284
References: https://github.com/zlt2000/microservices-platform/issues/79; https://github.com/zlt2000/microservices-platform/issues/79#issue[PII_REDACTED]; https://vuldb.com/?ctiid.319234
CVE: CVE-2025-55188
Published: 2025-08-08
Description: 7-Zip before 25.01 does not always properly handle symbolic links during extraction.
CVSS Score: 3.6 (LOW)
CWE: CWE-59
References: https://github.com/ip7z/7zip/compare/25.00...25.01; https://github.com/ip7z/7zip/releases/tag/25.01; https://github.com/lunbun/CVE-2025-55188/
CVE: CVE-2025-8739
Published: 2025-08-08
Description: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /admin/tags/save. The manipulation of the argument tagName leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352, CWE-862
References: https://github.com/ZHENFENG13/My-Blog/issues/145; https://vuldb.com/?ctiid.319235; https://vuldb.com/?id.319235
CVE: CVE-2025-8740
Published: 2025-08-08
Description: A vulnerability was found in zhenfeng13 My-Blog up to 1.0.0. It has been classified as problematic. Affected is an unknown function of the file /admin/categories/save of the component Category Handler. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/ZHENFENG13/My-Blog/issues/146; https://github.com/ZHENFENG13/My-Blog/issues/146#issue[PII_REDACTED]; https://vuldb.com/?ctiid.319236
CVE: CVE-2025-8741
Published: 2025-08-08
Description: A vulnerability was found in macrozheng mall up to 1.0.3. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/login. The manipulation leads to cleartext transmission of sensitive information. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-310, CWE-319
References: https://github.com/N1n3b9S/cve/issues/10; https://github.com/N1n3b9S/cve/issues/10#issue[PII_REDACTED]; https://vuldb.com/?ctiid.319237
CVE: CVE-2025-8742
Published: 2025-08-08
Description: A vulnerability was found in macrozheng mall 1.0.3. It has been rated as problematic. Affected by this issue is some unknown functionality of the component Admin Login. The manipulation leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-307, CWE-799
References: https://github.com/N1n3b9S/cve/issues/12; https://vuldb.com/?ctiid.319238; https://vuldb.com/?id.319238
CVE: CVE-2025-8743
Published: 2025-08-08
Description: A vulnerability classified as problematic has been found in Scada-LTS up to 2.7.8.1. This affects an unknown part of the file /data_source_edit.shtm of the component Virtual Data Source Property Handler. The manipulation of the argument Name leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/CVE-2025-8743.md; https://github.com/marcelomulder/CVE/blob/main/Scada-LTS/Cross-Site_Scripting_(XSS)_Stored_endpoint_data_source_edit.shtm_parameter_name.md#poc; https://vuldb.com/?ctiid.319239
CVE: CVE-2025-46709
Published: 2025-08-09
Description: Possible memory leak or kernel exceptions caused by reading kernel heap data after free or NULL pointer dereference kernel exception.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2025-6573
Published: 2025-08-09
Description: Kernel software installed and running inside an untrusted/rich execution environment (REE) could leak information from the trusted execution environment (TEE).
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-280
References: https://www.imaginationtech.com/gpu-driver-vulnerabilities/
CVE: CVE-2025-8744
Published: 2025-08-09
Description: A vulnerability classified as critical was found in CesiumLab Web up to 4.0. This vulnerability affects unknown code of the file /lodmodels/. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://vuldb.com/?ctiid.319240; https://vuldb.com/?id.319240; https://vuldb.com/?submit.616911
CVE: CVE-2025-54417
Published: 2025-08-09
Description: Craft is a platform for creating digital experiences. Versions 4.13.8 through 4.16.2 and 5.5.8 through 5.8.3 contain a vulnerability that can bypass CVE-2025-23209: "Craft CMS has a potential RCE with a compromised security key". To exploit this vulnerability, the project must meet these requirements: have a compromised security key and create an arbitrary file in Craft's /storage/backups folder. With those criteria in place, attackers could create a specific, malicious request to the /updater/restore-db endpoint and execute CLI commands remotely. This issue is fixed in versions 4.16.3 and 5.8.4.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: https://github.com/craftcms/cms/commit/a19d46be78a9ca1ea474012a10e97bed0d787f57; https://github.com/craftcms/cms/security/advisories/GHSA-2vcf-qxv3-2mgw
CVE: CVE-2025-54888
Published: 2025-08-09
Description: Fedify is a TypeScript library for building federated server apps powered by ActivityPub. In versions below 1.3.20, 1.4.0-dev.585 through 1.4.12, 1.5.0-dev.636 through 1.5.4, 1.6.0-dev.754 through 1.6.7, 1.7.0-pr.251.885 through 1.7.8 and 1.8.0-dev.909 through 1.8.4, an authentication bypass vulnerability allows any unauthenticated attacker to impersonate any ActivityPub actor by sending forged activities signed with their own keys. Activities are processed before verifying the signing key belongs to the claimed actor, enabling complete actor impersonation across all Fedify instances. This is fixed in versions 1.3.20, 1.4.13, 1.5.5, 1.6.8, 1.7.9 and 1.8.5.
CWE: CWE-287, CWE-863
References: https://github.com/fedify-dev/fedify/commit/14a2f8c6d2c3cbc00c3170a86ad3b7b8555c6847; https://github.com/fedify-dev/fedify/security/advisories/GHSA-6jcc-xgcr-q3h4
CVE: CVE-2025-54996
Published: 2025-08-09
Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, accounts with access to highly-privileged identity entity systems in root namespaces were able to increase their scope directly to the root policy. While the identity system allowed adding arbitrary policies, which in turn could contain capability grants on arbitrary paths, the root policy was restricted to manual generation using unseal or recovery key shares. The global root policy was not accessible from child namespaces. This issue is fixed in version 2.3.2. To workaround this vulnerability, use of denied_parameters in any policy which has access to the affected identity endpoints (on identity entities) may be sufficient to prohibit this type of attack.
CVSS Score: 7.2 (HIGH)
CWE: CWE-269
References: https://github.com/openbao/openbao/pull/1627; https://github.com/openbao/openbao/releases/tag/v2.3.2; https://github.com/openbao/openbao/security/advisories/GHSA-vf84-mxrq-crqc
CVE: CVE-2025-55152
Published: 2025-08-09
Description: oak is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. In versions 17.1.5 and below, it's possible to significantly slow down an oak server with specially crafted values of the x-forwarded-proto or x-forwarded-for headers.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-400, CWE-1333
References: https://github.com/oakserver/oak/commit/b60e60330ef227707c4dc13ef0ea36192d894f44; https://github.com/oakserver/oak/security/advisories/GHSA-r3v7-pc4g-7xp9
CVE: CVE-2025-54997
Published: 2025-08-09
Description: OpenBao exists to provide a software solution to manage, store, and distribute sensitive data including secrets, certificates, and keys. In versions 2.3.1 and below, some OpenBao deployments intentionally limit privileged API operators from executing system code or making network connections. However, these operators can bypass both restrictions through the audit subsystem by manipulating log prefixes. This allows unauthorized code execution and network access that violates the intended security model. This issue is fixed in version 2.3.2. To workaround, users can block access to sys/audit/* endpoints using explicit deny policies, but root operators cannot be restricted this way.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://discuss.hashicorp.com/t/hcsec-2025-14-privileged-vault-operator-may-execute-code-on-the-underlying-host/76033; https://github.com/openbao/openbao/pull/1634; https://github.com/openbao/openbao/releases/tag/v2.3.2