deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59797
Published: 2025-09-22
Description: Profession Fit 5.0.99 Build 44910 allows authorization bypass via a direct request for /api/challenges/{id} and also URLs for eversports, the user-management page, and the plane page.
CVSS Score: 5.8 (MEDIUM)
CWE: CWE-425
References: https://github.com/Henkel-CyberVM/CVEs/blob/main/CVE-2025-59797/README.md; https://www.profession-fit.de
CVE: CVE-2025-10800
Published: 2025-09-22
Description: A weakness has been identified in itsourcecode Online Discussion Forum 1.0. The impacted element is an unknown function of the file /index.php. Executing manipulation of the argument email/password can lead to sql injection. The attack can be executed remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/JunGu-W/cve/issues/14; https://github.com/JunGu-W/cve/issues/15; https://itsourcecode.com/
CVE: CVE-2025-10801
Published: 2025-09-22
Description: A security vulnerability has been detected in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown function of the file /admin/edit_tax.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/YunyiLiu31/sql-injection-vulnerability; https://vuldb.com/?ctiid.325158; https://vuldb.com/?id.325158
CVE: CVE-2025-51006
Published: 2025-09-22
Description: Within tcpreplay's tcprewrite, a double free vulnerability has been identified in the dlt_linuxsll2_cleanup() function in plugins/dlt_linuxsll2/linuxsll2.c. This vulnerability is triggered when tcpedit_dlt_cleanup() indirectly invokes the cleanup routine multiple times on the same memory region. By supplying a specifically crafted pcap file to the tcprewrite binary, a local attacker can exploit this flaw to cause a Denial of Service (DoS) via memory corruption.
CVSS Score: 7.8 (HIGH)
CWE: CWE-415
References: https://github.com/appneta/tcpreplay/issues/926; https://github.com/sy460129/CVE-2025-51006
CVE: CVE-2025-56074
Published: 2025-09-22
Description: A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://github.com/baixiaobi/Park/blob/main/foreigner-bwdates-reports-details.php%20SQL%20Injection.md; https://github.com/baixiaobi/Park/blob/main/foreigner-bwdates-reports-details.php%20SQL%20Injection.md
CVE: CVE-2025-56075
Published: 2025-09-22
Description: A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-89
References: https://github.com/baixiaobi/Park/blob/main/normal-bwdates-reports-details.php%20SQL%20%20Injection.md
CVE: CVE-2025-10802
Published: 2025-09-22
Description: A flaw has been found in code-projects Online Bidding System 1.0. Affected is an unknown function of the file /administrator/remove.php. This manipulation of the argument ID causes sql injection. It is possible to initiate the attack remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/peri0d/my_cve/blob/main/ONLINE-BIDDING-SYSTEM-Project-V1.0-remove.php-SQL-injection.md; https://vuldb.com/?ctiid.325160
CVE: CVE-2025-10803
Published: 2025-09-22
Description: A vulnerability has been found in Tenda AC23 up to 16.03.07.52. Affected by this vulnerability is the function sscanf of the file /goform/SetPptpServerCfg of the component HTTP POST Request Handler. Such manipulation of the argument startIp leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/lin-3-start/lin-cve/blob/main/Tenda%20AC23-3/Tenda%20AC23%20Buffer%20overflow.md; https://vuldb.com/?ctiid.325161; https://vuldb.com/?id.325161
CVE: CVE-2025-9038
Published: 2025-09-22
Description: Improper Privilege Management vulnerability in GE Vernova S1 Agile Configuration Software on Windows allows Privilege Escalation.This issue affects S1 Agile Configuration Software: 3.1 and previous version.
CWE: CWE-269
References: https://www.gevernova.com/grid-solutions/sites/default/files/resources/products/support/ges-2025-001.pdf
CVE: CVE-2025-10804
Published: 2025-09-22
Description: A vulnerability was found in Campcodes Online Beauty Parlor Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/add-customer.php. Performing manipulation of the argument mobilenum results in sql injection. The attack can be initiated remotely. The exploit has been made public and could be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20add-customer.php.md; https://vuldb.com/?ctiid.325162; https://vuldb.com/?id.325162
CVE: CVE-2025-10805
Published: 2025-09-22
Description: A vulnerability was determined in Campcodes Online Beauty Parlor Management System 1.0. This affects an unknown part of the file /admin/add-services.php. Executing manipulation of the argument sername can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20add-services.php.md; https://vuldb.com/?ctiid.325163; https://vuldb.com/?id.325163
CVE: CVE-2025-35041
Published: 2025-09-22
Description: Airship AI Acropolis allows unlimited MFA attempts for 15 minutes after a user has logged in with valid credentials. A remote attacker with valid credentials could brute-force the 6-digit MFA code. Fixed in 10.2.35, 11.0.21, and 11.1.9.
CVSS Score: 7.5 (HIGH)
CWE: CWE-307
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-265-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35041
CVE: CVE-2025-35042
Published: 2025-09-22
Description: Airship AI Acropolis includes a default administrative account that uses the same credentials on every installation. Instances of Airship AI that do not change this account password are vulnerable to a remote attacker logging in and gaining the privileges of this account. Fixed in 10.2.35, 11.0.21, and 11.1.9.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1392
References: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/IT/white/2025/va-25-265-01.json; https://www.cve.org/CVERecord?id=CVE-2025-35042
CVE: CVE-2025-36037
Published: 2025-09-22
Description: IBM webMethods Integration 10.15 and 11.1 

is vulnerable to server-side request forgery (SSRF). This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-918
References: https://www.ibm.com/support/pages/node/7245758
CVE: CVE-2025-36202
Published: 2025-09-22
Description: IBM webMethods Integration 10.15 and 11.1 could allow an authenticated user with required execute Services to execute commands on the system due to the improper validation of format string strings passed as an argument from an external source.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: https://www.ibm.com/support/pages/node/7245720
CVE: CVE-2025-57430
Published: 2025-09-22
Description: Creacast Creabox Manager 4.4.4 exposes sensitive configuration data via a publicly accessible endpoint /get. When accessed, this endpoint returns internal configuration including the creacodec.lua file, which contains plaintext admin credentials.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.creacast.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57430; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57430
CVE: CVE-2025-57432
Published: 2025-09-22
Description: Blackmagic Web Presenter version 3.3 exposes a Telnet service on port 9977 that accepts unauthenticated commands. This service allows remote attackers to manipulate stream settings, including changing video modes and possibly altering device functionality. No credentials or authentication mechanisms are required to interact with the Telnet interface.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432; https://www.blackmagicdesign.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57432
CVE: CVE-2025-57433
Published: 2025-09-22
Description: The 2wcom IP-4c 2.15.5 device's web interface includes an information disclosure vulnerability. By sending a crafted POST request to a specific endpoint (/cwi/ajax_request/get_data.php), an authenticated attacker (even with a low-privileged account like guest) can retrieve the hashed passwords for the admin, manager, and guest accounts. This significantly weakens the system's security posture, as these hashes could be cracked offline, granting attackers administrative access to the device.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57433; https://www.2wcom.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57433
CVE: CVE-2025-57601
Published: 2025-09-22
Description: AiKaan Cloud Controller uses a single hardcoded SSH private key and the username `proxyuser` for remote terminal access to all managed IoT/edge devices. When an administrator initiates "Open Remote Terminal" from the AiKaan dashboard, the controller sends this same static private key to the target device. The device then uses it to establish a reverse SSH tunnel to a remote access server, enabling browser-based SSH access for the administrator. Because the same `proxyuser` account and SSH key are reused across all customer environments: - An attacker who obtains the key (e.g., by intercepting it in transit, extracting it from the remote access server, or from a compromised admin account) can impersonate any managed device. - They can establish unauthorized reverse SSH tunnels and interact with devices without the owner's consent. This is a design flaw in the authentication model: compromise of a single key compromises the trust boundary between the controller and devices.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve1-shared-ssh-key.md; https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve1-shared-ssh-key.md
CVE: CVE-2025-57602
Published: 2025-09-22
Description: Insufficient hardening of the proxyuser account in the AiKaan IoT management platform, combined with the use of a shared, hardcoded SSH private key, allows remote attackers to authenticate to the cloud controller, gain interactive shell access, and pivot into other connected IoT devices. This can lead to remote code execution, information disclosure, and privilege escalation across customer environments.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-798
References: https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve2-proxyuser-shell.md; https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve2-proxyuser-shell.md
CVE: CVE-2025-57605
Published: 2025-09-22
Description: Lack of server-side authorisation on department admin assignment APIs in AiKaan IoT Platform allows authenticated users to elevate their privileges by assigning themselves as admins of other departments. This results in unauthorized privilege escalation across the department
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: https://github.com/Shubhangborkar/aikaan-vulnerabilities/blob/main/cve5-department-switch.md
CVE: CVE-2025-57682
Published: 2025-09-22
Description: Directory Traversal vulnerability in Papermark 0.20.0 and prior allows authenticated attackers to retrieve arbitrary files from an S3 bucket through its CloudFront distribution via the "POST /api/file/s3/get-presigned-get-url-proxy" API
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: https://github.com/dos-m0nk3y/CVE/tree/main/CVE-2025-57682; https://github.com/mfts/papermark; https://papermark.com/
CVE: CVE-2025-10806
Published: 2025-09-22
Description: A vulnerability was identified in Campcodes Online Beauty Parlor Management System 1.0. This vulnerability affects unknown code of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20bwdates-reports-details.php%20.md; https://vuldb.com/?ctiid.325164; https://vuldb.com/?id.325164
CVE: CVE-2025-10807
Published: 2025-09-22
Description: A security flaw has been discovered in Campcodes Online Beauty Parlor Management System 1.0. This issue affects some unknown processing of the file /admin/edit-customer-detailed.php. The manipulation of the argument editid results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be exploited.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/fubxx/CVE/blob/main/Online%20Beauty%20Parlor%20Management%20System%20SQL%20Injection%20on%20edit-customer-detailed.php%20.md; https://vuldb.com/?ctiid.325165; https://vuldb.com/?id.325165
CVE: CVE-2025-43807
Published: 2025-09-22
Description: Stored cross-site scripting (XSS) vulnerability in the notifications widget in Liferay Portal 7.4.0 through 7.4.3.112, and Liferay DXP 2023.Q4.0 through 2023.Q4.8, 2023.Q3.1 through 2023.Q3.10, and 7.4 GA through update 92 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a publication’s “Name” text field.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-43807
CVE: CVE-2025-57431
Published: 2025-09-22
Description: The Sound4 PULSE-ECO AES67 1.22 web-based management interface is vulnerable to Remote Code Execution (RCE) via a malicious firmware update package. The update mechanism fails to validate the integrity of manual.sh, allowing an attacker to inject arbitrary commands by modifying this script and repackaging the firmware.
CVSS Score: 8.8 (HIGH)
CWE: CWE-494
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57431; https://www.sound4.com
CVE: CVE-2025-57434
Published: 2025-09-22
Description: Creacast Creabox Manager contains a critical authentication flaw that allows an attacker to bypass login validation. The system grants access when the username is creabox and the password begins with the string creacast, regardless of what follows.
CVSS Score: 8.8 (HIGH)
CWE: CWE-287, CWE-798
References: http://www.creacast.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57434
CVE: CVE-2025-59335
Published: 2025-09-22
Description: CubeCart is an ecommerce software solution. Prior to version 6.5.11, there is an absence of automatic session expiration following a user's password change. This oversight poses a security risk, as if a user forgets to log out from a location where they accessed their account, an unauthorized user can maintain access even after the password has been changed. Due to this bug, if an account has already been compromised, the legitimate user has no way to revoke the attacker’s access. The malicious actor retains full access to the account until their session naturally expires. This means the account remains insecure even after the password has been changed. This issue has been patched in version 6.5.11.
CVSS Score: 7.1 (HIGH)
CWE: CWE-613
References: https://github.com/cubecart/v6/commit/4bfaeb4485dd82255a108940a163af5ba4583b52; https://github.com/cubecart/v6/commit/62d9be8416aa6fd7343f8932d98c5b112b163e26; https://github.com/cubecart/v6/security/advisories/GHSA-4vwh-x8m2-fmvv
CVE: CVE-2025-59411
Published: 2025-09-22
Description: CubeCart is an ecommerce software solution. Prior to version 6.5.11, the contact form’s Enquiry field accepts raw HTML and that HTML is included verbatim in the email sent to the store admin. By submitting HTML in the Enquiry, the admin receives an email containing that HTML. This indicates user input is not being escaped or sanitized before being output in email (and possibly when re-rendering the form), leading to Cross-Site Scripting / HTML injection risk in email clients or admin UI. This issue has been patched in version 6.5.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cubecart/v6/commit/299065bd4a8836782ce92f70988c730f130756db; https://github.com/cubecart/v6/commit/48336c[PII_REDACTED]3a8c4106208c2d596f128047; https://github.com/cubecart/v6/security/advisories/GHSA-5hg3-m3q3-v2p4
CVE: CVE-2025-59412
Published: 2025-09-22
Description: CubeCart is an ecommerce software solution. Prior to version 6.5.11, a vulnerability exists in the product reviews feature where user-supplied input is not properly sanitized before being displayed. An attacker can submit HTML tags inside the review description field. Once the administrator approves the review, the injected HTML is rendered on the product page for all visitors. This could be used to redirect users to malicious websites or to display unwanted content. This issue has been patched in version 6.5.11.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/cubecart/v6/commit/1a0c0d8f6c9c141575eb5be07d04e7d49820005b; https://github.com/cubecart/v6/commit/7d4bf593304332fa1258d4f0b10dd7c9f6283a86; https://github.com/cubecart/v6/security/advisories/GHSA-qfrx-vvvp-h5m2
CVE: CVE-2025-59413
Published: 2025-09-22
Description: CubeCart is an ecommerce software solution. Prior to version 6.5.11, a logic flaw exists in the newsletter subscription endpoint that allows an attacker to unsubscribe any user without their consent. By changing the value of the force_unsubscribe parameter in the POST request to 1, an attacker can force the removal of any valid subscriber’s email address. This issue has been patched in version 6.5.11.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-862
References: https://github.com/cubecart/v6/commit/7fd1cd04f5d5c3ce1d[PII_REDACTED]f0ff6551de79; https://github.com/cubecart/v6/commit/db965fcfa260c4f17eb16f8c5494e5af4a8ac271; https://github.com/cubecart/v6/commit/dbc58cf1f7a6291f7add5893b56bff7920a29128
CVE: CVE-2025-10808
Published: 2025-09-22
Description: A weakness has been identified in Campcodes Farm Management System 1.0. Impacted is an unknown function of the file /uploadProduct.php. This manipulation of the argument Type causes sql injection. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/EvnYeung/cve/issues/1; https://vuldb.com/?ctiid.325166; https://vuldb.com/?id.325166
CVE: CVE-2025-10809
Published: 2025-09-22
Description: A security vulnerability has been detected in Campcodes Online Learning Management System 1.0. The affected element is an unknown function of the file /admin/department.php. Such manipulation of the argument d leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/luyisi-7/CVE/issues/2; https://vuldb.com/?ctiid.325167; https://vuldb.com/?id.325167
CVE: CVE-2025-43953
Published: 2025-09-22
Description: In 2wcom IP-4c 2.16, the web interface allows admin and manager users to execute arbitrary code as root via a ping or traceroute field on the TCP/IP screen.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://2wcom.com; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-43953
CVE: CVE-2025-55885
Published: 2025-09-22
Description: SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-89
References: http://alpes.com; http://ard.com; https://github.com/0xZeroSec/CVE-2025-55885
CVE: CVE-2025-55886
Published: 2025-09-22
Description: An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-693
References: https://github.com/0xZeroSec/CVE-2025-55886; https://services.ard.fr
CVE: CVE-2025-55888
Published: 2025-09-22
Description: Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered, allowing script execution in the context of users browsers. This flaw could lead to session hijacking, cookie theft, and other malicious actions.
CVSS Score: 7.3 (HIGH)
CWE: CWE-79
References: http://alpes.com; http://ard.com; https://github.com/0xZeroSec/CVE-2025-55888
CVE: CVE-2025-57437
Published: 2025-09-22
Description: The Blackmagic Web Presenter HD firmware version 3.3 exposes sensitive information via an unauthenticated Telnet service on port 9977. When connected, the service reveals extensive device configuration data including: - Model, version, and unique identifiers - Network settings including IP, MAC, DNS - Current stream platform, stream key, and streaming URL - Audio/video configuration This data can be used to hijack live streams or perform network reconnaissance.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-200
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57437; https://www.blackmagicdesign.com/
CVE: CVE-2025-57438
Published: 2025-09-22
Description: The 2wcom IP-4c 2.15.5 device suffers from a Broken Access Control vulnerability. Certain sensitive endpoints are intended to be accessible only after the admin explicitly grants access to a manager-level account. However, a manager-level user can bypass these controls by intercepting and modifying requests.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-284, CWE-285
References: https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57438; https://www.2wcom.com/
CVE: CVE-2025-57439
Published: 2025-09-22
Description: Creacast Creabox Manager 4.4.4 contains a critical Remote Code Execution vulnerability accessible via the edit.php endpoint. An authenticated attacker can inject arbitrary Lua code into the configuration, which is then executed on the server. This allows full system compromise, including reverse shell execution or arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94
References: http://www.creacast.com/; https://github.com/shiky8/my--cve-vulnerability-research/tree/main/CVE-2025-57439