deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-66025
Published: 2025-11-26
Description: Caido is a web security auditing toolkit. Prior to version 0.53.0, the Markdown renderer used in Caido’s Findings page improperly handled user-supplied Markdown, allowing attacker-controlled links to be rendered without confirmation. When a user opened a finding generated through the scanner, or other plugins, clicking these injected links could redirect the Caido application to an attacker-controlled domain, enabling phishing style attacks. This issue has been patched in version 0.53.0.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-74
References: https://github.com/caido/caido/security/advisories/GHSA-cf52-h5mw-gmc2
CVE: CVE-2025-66026
Published: 2025-11-26
Description: REDAXO is a PHP-based CMS. Prior to version 5.20.1, a reflected Cross-Site Scripting (XSS) vulnerability exists in the Mediapool view where the request parameter args[types] is rendered into an info banner without HTML-escaping. This allows arbitrary JavaScript execution in the backend context when an authenticated user visits a crafted link while logged in. This issue has been patched in version 5.20.1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/redaxo/redaxo/commit/[PII_REDACTED]2cf03e344ab04067a365e6b6ee66aa; https://github.com/redaxo/redaxo/security/advisories/GHSA-x6vr-q3vf-vqgq; https://github.com/redaxo/redaxo/security/advisories/GHSA-x6vr-q3vf-vqgq
CVE: CVE-2025-64983
Published: 2025-11-26
Description: Smart Video Doorbell firmware versions prior to 2.01.078 contain an active debug code vulnerability that allows an attacker to connect via Telnet and gain access to the device.
CVSS Score: 8.0 (HIGH)
CWE: CWE-489
References: https://jvn.jp/en/jp/JVN67185535; https://www.switch-bot.com/products/switchbot-video-doorbell?srsltid=AfmBOooGEZArqUag9p59qB8ti2fDP0vCOzxX33NGlpJ8yDlZnzC3vJ_f
CVE: CVE-2025-12061
Published: 2025-11-26
Description: The TAX SERVICE Electronic HDM WordPress plugin before 1.2.1 does not authorization and CSRF checks in an AJAX action, allowing unauthenticated users to import and execute arbitrary SQL statements
CVSS Score: 8.6 (HIGH)
CWE: CWE-352, CWE-862
References: https://wpscan.com/vulnerability/1015dd69-faa5-4008-8884-f497ff980ed3/
CVE: CVE-2025-55174
Published: 2025-11-26
Description: In KDE Skanpage before 25.08.0, an attempt at file overwrite can result in the contents of the new file at the beginning followed by the partial contents of the old file at the end, because of use of QIODevice::ReadWrite instead of QODevice::WriteOnly.
CVSS Score: 3.2 (LOW)
CWE: CWE-684
References: https://github.com/KDE/skanpage/tags; https://invent.kde.org/utilities/skanpage/-/commit/de3ad2941054a26920e022dc7c4a3dc16c065b5a; https://kde.org/info/security/advisory-20250811-1.txt
CVE: CVE-2025-59820
Published: 2025-11-26
Description: In KDE Krita before 5.2.13, loading a manipulated TGA file could result in a heap-based buffer overflow in plugins/impex/tga/kis_tga_import.cpp (aka KisTgaImport). Control flow proceeds even when a number of pixels becomes negative.
CVSS Score: 6.7 (MEDIUM)
CWE: CWE-1284
References: https://invent.kde.org/graphics/krita/; https://invent.kde.org/graphics/krita/-/commit/6d3651ac4df88efb68e013d21061de9846e83fe8; https://kde.org/info/security/advisory-20250929-1.txt
CVE: CVE-2025-9557
Published: 2025-11-26
Description: ‭An out-of-bound write can lead to an arbitrary code execution. Even on devices with some form of memory protection, this can still lead to‬ ‭a crash and a resultant denial of service.‬
CVSS Score: 7.6 (HIGH)
CWE: CWE-120
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-r3j3-c5v7-2ppf
CVE: CVE-2025-9558
Published: 2025-11-26
Description: There is a potential OOB Write vulnerability in the gen_prov_start function in pb_adv.c. The full length of the received data is copied into the link.rx.buf receiver buffer without any validation on the data size.
CVSS Score: 7.6 (HIGH)
CWE: CWE-120
References: https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-8wvr-688x-68vr
CVE: CVE-2025-13735
Published: 2025-11-26
Description: Out-of-bounds Read vulnerability in ASR1903、ASR3901 in ASR Lapwing_Linux on Linux (nr_fw modules). This vulnerability is associated with program files Code/nr_fw/DLP/src/NrCgi.C.

This issue affects Lapwing_Linux: before 2025/11/26.
CVSS Score: 7.4 (HIGH)
CWE: CWE-125
References: https://www.asrmicro.com/en/goods/psirt?cid=41
CVE: CVE-2025-59390
Published: 2025-11-26
Description: Apache Druid’s Kerberos authenticator uses a weak fallback secret when the `druid.auth.authenticator.kerberos.cookieSignatureSecret` configuration is not explicitly set. In this case, the secret is generated using `ThreadLocalRandom`,
 which is not a crypto-graphically secure random number generator. This 
may allow an attacker to predict or brute force the secret used to sign 
authentication cookies, potentially enabling token forgery or 
authentication bypass. Additionally, each process generates its own 
fallback secret, resulting in inconsistent secrets across nodes. This 
causes authentication failures in distributed or multi-broker 
deployments, effectively leading to a incorrectly configured clusters. Users are 
advised to configure a strong `druid.auth.authenticator.kerberos.cookieSignatureSecret`



This issue affects Apache Druid: through 34.0.0.

Users are recommended to upgrade to version 35.0.0, which fixes the issue making it mandatory to set `druid.auth.authenticator.kerberos.cookieSignatureSecret` when using the Kerberos authenticator. Services will fail to come up if the secret is not set.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-338
References: https://lists.apache.org/thread/jwjltllnntgj1sb9wzsjmvwm9f8rlhg8; http://www.openwall.com/lists/oss-security/2025/11/26/1
CVE: CVE-2025-62728
Published: 2025-11-26
Description: SQL injection vulnerability in Hive Metastore Server (HMS) when processing delete column statistics requests via the Thrift APIs. The vulnerability is only exploitable by trusted/authorized users/applications that are allowed to call directly the Thrift APIs. In most real-world deployments, HMS is accessible to only a handful of applications (e.g., Hiveserver2) thus the vulnerability is not exploitable. Moreover, the vulnerable code cannot be reached when metastore.try.direct.sql property is set to false.

This issue affects Apache Hive: from 4.1.0 before 4.2.0.

Users are recommended to upgrade to version 4.2.0, which fixes the issue. Users who cannot upgrade directly are encouraged to set metastore.try.direct.sql property to false if the HMS Thrift APIs are exposed to general public.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://lists.apache.org/thread/yj65dd8dmzgy8p3nv8zy33v8knzg9o7g; http://www.openwall.com/lists/oss-security/2025/11/26/3
CVE: CVE-2025-13674
Published: 2025-11-26
Description: BPv7 dissector crash in Wireshark 4.6.0 allows denial of service
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-824
References: https://gitlab.com/wireshark/wireshark/-/issues/20770; https://www.wireshark.org/security/wnpa-sec-2025-05.html
CVE: CVE-2025-9163
Published: 2025-11-26
Description: The Houzez theme for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.1.6 due to insufficient input sanitization and output escaping in the houzez_property_img_upload() and houzez_property_attachment_upload() functions. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]32-Changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/e0e177f3-fb24-4dd5-80d5-19b113d5f527?source=cve
CVE: CVE-2025-9191
Published: 2025-11-26
Description: The Houzez theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.1.6 via deserialization of untrusted input in saved-search-item.php. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-502
References: https://favethemes.zendesk.com/hc/en-us/articles/[PII_REDACTED]32-Changelog; https://www.wordfence.com/threat-intel/vulnerabilities/id/b1c450d9-42d8-40f5-84fc-1bc0c8cfcf9b?source=cve
CVE: CVE-2025-13601
Published: 2025-11-26
Description: A heap-based buffer overflow problem was found in glib through an incorrect calculation of buffer size in the g_escape_uri_string() function. If the string to escape contains a very large number of unacceptable characters (which would need escaping), the calculation of the length of the escaped string could overflow, leading to a potential write off the end of the newly allocated string.
CVSS Score: 7.7 (HIGH)
CWE: CWE-190
References: https://access.redhat.com/errata/RHSA-2026:0936; https://access.redhat.com/errata/RHSA-2026:0975; https://access.redhat.com/errata/RHSA-2026:0991
CVE: CVE-2025-3747
Published: 2025-11-26
Description: Rejected reason: This CVE ID was duplicated of CVE-2025-32801
CVE: CVE-2025-45311
Published: 2025-11-26
Description: Insecure permissions in fail2ban-client v0.11.2 allows attackers with limited sudo privileges to perform arbitrary operations as root. NOTE: this is disputed by multiple parties because the action for a triggered rule can legitimately be an arbitrary operation as root. Thus, the software is behaving in accordance with its intended privilege model.
CVSS Score: 8.8 (HIGH)
CWE: CWE-266
References: https://gist.github.com/R-Security/1c707a08f9c7f9a91d9d84b5010aaed2; https://github.com/fail2ban/fail2ban/issues/4110; https://packetstorm.news/files/id/189989
CVE: CVE-2025-46174
Published: 2025-11-26
Description: Ruoyi v4.8.0 vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the resetPwd Method of SysUserController.java.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-284
References: https://gist.github.com/Han-tj/29543ce0dae8cbb3bcbedca3390844a9; https://gitee.com/y_project/RuoYi/commit/ea4af7a8cf54393b11d3d286e0aaeb3df8a9aaef; https://gitee.com/y_project/RuoYi/issues/IC1JZR
CVE: CVE-2025-50399
Published: 2025-11-26
Description: FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/1; https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/1
CVE: CVE-2025-50402
Published: 2025-11-26
Description: FAST FAC1200R F400_FAC1200R_Q is vulnerable to Buffer Overflow in the function sub_80435780 via the parameter string fac_password.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120
References: https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/2; https://github.com/sezangel/IOT-vul/tree/main/FAST/FAC1200R/2
CVE: CVE-2025-56396
Published: 2025-11-26
Description: An issue was discovered in Ruoyi 4.8.1 allowing attackers to gain escalated privileges due to the owning department having higher rights than the active user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://gist.github.com/Han-tj/22cfd18fa9f116bb886e8e56782f6865; https://gitee.com/y_project/RuoYi/issues/ICJ865
CVE: CVE-2025-62354
Published: 2025-11-26
Description: Improper neutralization of special elements used in an OS command ('command injection') in Cursor allows an unauthorized attacker to execute commands that are outside of those specified in the allowlist, resulting in arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://hiddenlayer.com/sai_security_advisor/2025-11-cursor/
CVE: CVE-2025-46175
Published: 2025-11-26
Description: Ruoyi v4.8.0 is vulnerable to Incorrect Access Control. There is a missing checkUserDataScope permission check in the authRole method of SysUserController.java.
CVSS Score: 7.5 (HIGH)
CWE: CWE-862, CWE-284
References: https://gist.github.com/Han-tj/74d2ed84ede1909da55090fed410d288; https://gitee.com/y_project/RuoYi/commit/f935b2782f4237cdbcc13bdce76703e82c42f4fe; https://gitee.com/y_project/RuoYi/issues/IC1FS0
CVE: CVE-2025-63938
Published: 2025-11-26
Description: Tinyproxy through 1.11.2 contains an integer overflow vulnerability in the strip_return_port() function within src/reqs.c.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-190
References: https://github.com/rayinaw/my-hub/blob/main/CVE-2025-63938/DISCLOSURE.md; https://github.com/tinyproxy/tinyproxy/commit/3c0fde94981b025271ffa1788ae425257841bf5a; https://github.com/tinyproxy/tinyproxy/issues/586
CVE: CVE-2025-65235
Published: 2025-11-26
Description: OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 was discovered to contain a SQL injection vulnerability via the ID parameter in the getSubUsersByProvider function.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://eslam3kl.gitbook.io; https://eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65235-ussd-gw-sql-injection-subusers; https://github.com/eslam3kl
CVE: CVE-2025-65236
Published: 2025-11-26
Description: OpenCode Systems USSD Gateway OC Release: 5 was discovered to contain a SQL injection vulnerability via the Session ID parameter in the /occontrolpanel/index.php endpoint.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://eslam3kl.gitbook.io; https://eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65236-ussd-gateway-sql-injection-sessions; https://github.com/eslam3kl
CVE: CVE-2025-65237
Published: 2025-11-26
Description: A reflected cross-site scripted (XSS) vulnerability in OpenCode Systems USSD Gateway OC Release: 5 allows attackers to execute arbitrary JavaScript in the context of a user's browser via injecting a crafted payload.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://eslam3kl.gitbook.io; https://eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65237-ussd-gateway-reflected-cross-site-scripting; https://github.com/eslam3kl
CVE: CVE-2025-65238
Published: 2025-11-26
Description: Incorrect access control in the getSubUsersByProvider function of OpenCode Systems USSD Gateway OC Release: 5 Version 6.13.11 allows attackers with low-level privileges to dump user records and access sensitive information.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: https://eslam3kl.gitbook.io; https://eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65238-ussd-gateway-broken-access-control-sessions; https://github.com/eslam3kl
CVE: CVE-2025-65239
Published: 2025-11-26
Description: Incorrect access control in the /aux1/ocussd/trace endpoint of OpenCode Systems USSD Gateway OC Release:5, version 6.13.11 allows attackers with low-level privileges to read server logs.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: https://eslam3kl.gitbook.io; https://eslam3kl.gitbook.io/blog/web-application-findings/cve-2025-65239-ussd-gateway-broken-access-control-logs; https://github.com/eslam3kl
CVE: CVE-2025-11461
Published: 2025-11-26
Description: Multiple SQL Injections in Frappe CRM Dashboard Controller due to unsafe concatenation of user-controlled parameters into dynamic SQL statements.
This issue affects Frappe CRM: 1.53.1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: https://fluidattacks.com/advisories/oz; https://github.com/frappe/crm; https://github.com/frappe/crm/pull/1339
CVE: CVE-2025-13084
Published: 2025-11-26
Description: The users endpoint in the groov View API returns a list of all users and
 associated metadata including their API keys. This endpoint requires an
 Editor role to access and will display API keys for all users, 
including Administrators.
CVSS Score: 7.6 (HIGH)
CWE: CWE-1230
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-04.json; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-04; https://www.opto22.com/support/resources-tools/knowledgebase/kb91325
CVE: CVE-2025-20373
Published: 2025-11-26
Description: In Splunk Add-on for Palo Alto Networks versions below 2.0.2, the add-on exposes client secrets in plain text in the _internal index during the addition of new “Data Security Accounts“. The vulnerability would require either local access to the log files or administrative access to internal indexes, which by default only the admin role receives. Review roles and capabilities on your instance and restrict internal index access to administrator-level roles. See [Define roles on the Splunk platform with capabilities](https://docs.splunk.com/Documentation/Splunk/latest/Security/Rolesandcapabilities) in the Splunk documentation for more information.
CVSS Score: 2.7 (LOW)
CWE: CWE-532
References: https://advisory.splunk.com/advisories/SVD-2025-1105
CVE: CVE-2025-2486
Published: 2025-11-26
Description: The Ubuntu edk2 UEFI firmware packages accidentally allowed the UEFI Shell to be accessed in Secure Boot environments, possibly allowing bypass of Secure Boot constraints. Versions 2024.05-2ubuntu0.3 and 2024.02-2ubuntu0.3 disable the Shell. Some previous versions inserted a secure-boot-based decision to continue running inside the Shell itself, which is believed to be sufficient to enforce Secure Boot restrictions. This is an additional repair on top of the incomplete fix for CVE-2023-48733.
CVSS Score: 8.8 (HIGH)
CWE: CWE-489
References: https://bugs.launchpad.net/ubuntu/+source/edk2/+bug/2101797
CVE: CVE-2025-55469
Published: 2025-11-26
Description: Incorrect access control in youlai-boot v2.21.1 allows attackers to escalate privileges and access the Administrator backend.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-863, CWE-284
References: https://gist.github.com/old6ma/d6e19c9efbe28431f4c27c063cc9cbb8; https://gitee.com/youlaiorg/youlai-boot; https://gitee.com/youlaiorg/youlai-boot/issues/ICFCOK
CVE: CVE-2025-55471
Published: 2025-11-26
Description: Incorrect access control in the getUserFormData function of youlai-boot v2.21.1 allows attackers to access sensitive information for other users.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284, CWE-862
References: https://gist.github.com/old6ma/08d83e5aa7d47e7ff18b23337ccd1f1d; https://gitee.com/youlaiorg/youlai-boot; https://gitee.com/youlaiorg/youlai-boot/issues/ICFBW8
CVE: CVE-2025-64126
Published: 2025-11-26
Description: An OS command injection vulnerability exists due to improper input 
validation. The application accepts a parameter directly from user input
 without verifying it is a valid IP address or filtering potentially 
malicious characters. This could allow an unauthenticated attacker to 
inject arbitrary commands.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json; https://wiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03
CVE: CVE-2025-64127
Published: 2025-11-26
Description: An OS command injection vulnerability exists due to insufficient 
sanitization of user-supplied input. The application accepts parameters 
that are later incorporated into OS commands without adequate 
validation. This could allow an unauthenticated attacker to execute 
arbitrary commands remotely.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json; https://wiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03
CVE: CVE-2025-64128
Published: 2025-11-26
Description: An OS command injection vulnerability exists due to incomplete 
validation of user-supplied input. Validation fails to enforce 
sufficient formatting rules, which could permit attackers to append 
arbitrary data. This could allow an unauthenticated attacker to inject 
arbitrary commands.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-78
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json; https://wiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03
CVE: CVE-2025-64129
Published: 2025-11-26
Description: Zenitel TCIV-3+ is vulnerable to an out-of-bounds write 
vulnerability, which could allow a remote attacker to crash the device.
CVSS Score: 7.6 (HIGH)
CWE: CWE-787
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json; https://wiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03
CVE: CVE-2025-64130
Published: 2025-11-26
Description: Zenitel TCIV-3+ is vulnerable to a reflected cross-site scripting 
vulnerability, which could allow a remote attacker to execute arbitrary 
JavaScript on the victim's browser.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-79
References: https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2025/icsa-25-329-03.json; https://wiki.zenitel.com/wiki/Downloads#Station_and_Device_Firmware_Package_.28VS-IS.29; https://www.cisa.gov/news-events/ics-advisories/icsa-25-329-03
CVE: CVE-2021-4472
Published: 2025-11-26
Description: The mistral-dashboard plugin for openstack has a local file inclusion vulnerability through the 'Create Workbook' feature that may result in disclosure of arbitrary local files content.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-73
References: https://access.redhat.com/security/cve/CVE-2021-4472; https://bugs.launchpad.net/horizon/+bug/1931558; https://bugzilla.redhat.com/show_bug.cgi?id=2417321
CVE: CVE-2025-26155
Published: 2025-11-26
Description: NCP Secure Enterprise Client 13.18 and NCP Secure Entry Windows Client 13.19 have an Untrusted Search Path vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-426
References: https://pentest.axians.de/viewer.html?file=cve-2025-26155/CVE-axians-eng.pdf; https://www.ncp-e.com/
CVE: CVE-2025-65669
Published: 2025-11-26
Description: An issue was discovered in classroomio 0.1.13. Student accounts are able to delete courses from the Explore page without any authorization or authentication checks, bypassing the expected admin-only deletion restriction.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-862
References: http://classroomio.com; https://github.com/Rivek619/CVE-2025-65669; https://github.com/classroomio/classroomio
CVE: CVE-2025-65672
Published: 2025-11-26
Description: Insecure Direct Object Reference (IDOR) in classroomio 0.1.13 allows unauthorized share and invite access to course settings.
CVSS Score: 7.5 (HIGH)
CWE: CWE-639
References: http://classroomio.com; https://github.com/Rivek619/CVE-2025-65672; https://github.com/classroomio/classroomio
CVE: CVE-2025-65675
Published: 2025-11-26
Description: Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG profile pictures.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://classroomio.com; https://github.com/Rivek619/CVE-2025-65675; https://github.com/classroomio/classroomio
CVE: CVE-2025-65676
Published: 2025-11-26
Description: Stored Cross site scripting (XSS) vulnerability in Classroomio LMS 0.1.13 allows authenticated attackers to execute arbitrary code via crafted SVG cover images.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79, CWE-79
References: http://classroomio.com; https://github.com/Rivek619/CVE-2025-65676; https://github.com/classroomio/classroomio
CVE: CVE-2025-65681
Published: 2025-11-26
Description: An issue was discovered in Overhang.IO (tutor-open-edx) (overhangio/tutor) 20.0.2 allowing local unauthorized attackers to gain access to sensitive information due to the absence of proper cache-control HTTP headers and client-side session checks.
CVSS Score: 3.3 (LOW)
CWE: CWE-384, CWE-524
References: https://docs.tutor.edly.io; https://github.com/Rivek619/CVE-2025-65681; https://github.com/overhangio/tutor