deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-6082
Published: 2025-07-22
Description: The Birth Chart Compatibility plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 2.0. This is due to insufficient protection against directly accessing the plugin's index.php file, which causes an error exposing the full path. This makes it possible for unauthenticated attackers to retrieve the full path of the web application, which can be used to aid other attacks. The information displayed is not useful on its own, and requires another vulnerability to be present for damage to an affected website.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: https://plugins.svn.wordpress.org/birth-chart-compatibility/trunk/index.php; https://wordpress.org/plugins/birth-chart-compatibility/; https://www.wordfence.com/threat-intel/vulnerabilities/id/4607dca0-d3b7-4fca-8f89-a0a739bd7551?source=cve
CVE: CVE-2025-6187
Published: 2025-07-22
Description: The bSecure plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within its order_info REST endpoint in versions 1.3.7 through 1.7.9. The plugin registers the /webhook/v2/order_info/ route with a permission_callback that always returns true, effectively bypassing all authentication. This makes it possible for unauthenticated attackers who know any user’s email to obtain a valid login cookie and fully impersonate that account.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-862
References: https://plugins.trac.wordpress.org/browser/bsecure/tags/1.7.9/includes/class-bsecure-checkout.php; https://plugins.trac.wordpress.org/browser/bsecure/tags/1.7.9/includes/class-wc-bsecure.php; https://wordpress.org/plugins/bsecure/#developers
CVE: CVE-2025-6213
Published: 2025-07-22
Description: The Nginx Cache Purge Preload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 2.1.1 via the 'nppp_preload_cache_on_update' function. This is due to insufficient sanitization of the $_SERVER['HTTP_REFERERER'] parameter passed from the 'nppp_handle_fastcgi_cache_actions_admin_bar' function. This makes it possible for authenticated attackers, with Administrator-level access and above, to execute code on the server.
CVSS Score: 7.2 (HIGH)
CWE: CWE-94
References: https://github.com/psaux-it/nginx-fastcgi-cache-purge-and-preload; https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3332176%40fastcgi-cache-purge-and-preload-nginx&new=3332176%40fastcgi-cache-purge-and-preload-nginx&sfp_email=&sfph_mail=#file15; https://wordpress.org/plugins/fastcgi-cache-purge-and-preload-nginx/
CVE: CVE-2025-7427
Published: 2025-07-22
Description: Uncontrolled Search Path Element in Arm Development Studio before 2025 may allow an attacker to perform a DLL hijacking attack. Successful exploitation could lead to local arbitrary code execution in the context of the user running Arm Development Studio.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-427
References: https://developer.arm.com/documentation/110691
CVE: CVE-2025-7685
Published: 2025-07-22
Description: The Like & Share My Site plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.2. This is due to missing or incorrect nonce validation on the 'lsms_admin' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/like-share-my-site/trunk/lsms.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/5f126296-0a6e-4d47-8f1a-ce2aa097f21d?source=cve
CVE: CVE-2025-7687
Published: 2025-07-22
Description: The Latest Post Accordian Slider plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.3. This is due to missing or incorrect nonce validation on the 'lpaccordian' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-352
References: https://plugins.trac.wordpress.org/browser/latest-post-accordian-slider/trunk/lpaccordian.php; https://www.wordfence.com/threat-intel/vulnerabilities/id/04a2c05a-11bb-450e-9ce9[PII_REDACTED]73?source=cve
CVE: CVE-2025-7692
Published: 2025-07-22
Description: The Orion Login with SMS plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.5. This is due to the olws_handle_verify_phone() function not utilizing a strong enough OTP value, exposing the hash needed to generate the OTP value, and no restrictions on the number of attempts to submit the code. This makes it possible for unauthenticated attackers to log in as other users, including administrators, if they have access to their phone number.
CVSS Score: 8.1 (HIGH)
CWE: CWE-288
References: https://wordpress.org/plugins/orion-login-with-sms/; https://www.wordfence.com/threat-intel/vulnerabilities/id/31a47cbd-c19b-4ac3-87ed-2d4c5c0e9cb7?source=cve
CVE: CVE-2025-7899
Published: 2025-07-22
Description: The powermail extension for TYPO3 allows Insecure Direct Object Reference resulting in download of arbitrary files from the webserver. This issue affects powermail version 12.0.0 up to 12.5.2 and version 13.0.0
CWE: CWE-639
References: https://typo3.org/security/advisory/typo3-ext-sa-2025-009
CVE: CVE-2025-7900
Published: 2025-07-22
Description: The femanager extension for TYPO3 allows Insecure Direct Object Reference resulting in unauthorized modification of userdata. This issue affects femanager version 6.4.1 and below, 7.0.0 to 7.5.2 and 8.0.0 to 8.3.0
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://typo3.org/security/advisory/typo3-ext-sa-2025-010
CVE: CVE-2025-4284
Published: 2025-07-22
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Rolantis Information Technologies Agentis allows Reflected XSS, DOM-Based XSS.This issue affects Agentis: before 4.32.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0168
CVE: CVE-2025-4285
Published: 2025-07-22
Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Rolantis Information Technologies Agentis allows SQL Injection.This issue affects Agentis: before 4.32.
CVSS Score: 10.0 (CRITICAL)
CWE: CWE-89
References: https://www.usom.gov.tr/bildirim/tr-25-0168
CVE: CVE-2025-7705
Published: 2025-07-22
Description: : Active Debug Code vulnerability in ABB Switch Actuator 4 DU-83330, ABB Switch actuator, door/light 4 DU -83330-500.This issue affects Switch Actuator 4 DU-83330: All Versions; Switch actuator, door/light 4 DU -83330-500: All Versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-489
References: https://search.abb.com/library/Download.aspx?DocumentID=9AKK108471A4556&LanguageCode=en&DocumentPartId=pdf&Action=Launch&_gl=1*1sgofnl*_gcl_au*MjA0NTI4OTE1Mi4xNzUzMTgxNTA2*_ga*MTIxMTUxMzg5MS4xNzUzMTgxNTA3*_ga_46ZFBRSZNM*czE3NTMxODE1MDckbzEkZzEkdDE3NTMxODE2MDIkajYwJGwwJGgw
CVE: CVE-2025-34140
Published: 2025-07-22
Description: An authorization bypass vulnerability exists in ETQ Reliance (legacy CG and NXG SaaS platforms). By appending a specific URI suffix to certain API endpoints, an unauthenticated attacker can bypass access control checks and retrieve limited sensitive resources. The root cause was a misconfiguration in API authorization logic, which has since been corrected in SE.2025.1 and 2025.1.2.
CWE: CWE-639
References: https://www.etq.com/blog/etq-reliance-security-update/; https://www.etq.com/product-overview/; https://www.vulncheck.com/advisories/etq-reliance-cg-nxg-api-authorization-bypass-via-localized-text-uri-suffix
CVE: CVE-2025-34141
Published: 2025-07-22
Description: A reflected cross-site scripting (XSS) vulnerability exists in ETQ Reliance CG (legacy) platform within the `SQLConverterServlet` component. This vulnerability requires user interaction, such as clicking a crafted link, and may result in execution of unauthorized scripts in the user's context. The affected servlet was unnecessarily exposed to authenticated users and has since been disabled in version SE.2025.1.
CWE: CWE-79, CWE-116
References: https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/; https://www.etq.com/blog/etq-reliance-security-update/; https://www.etq.com/product-overview/
CVE: CVE-2025-34142
Published: 2025-07-22
Description: An XML External Entity (XXE) injection vulnerability exists in ETQ Reliance on the CG (legacy) platform within the `/resources/sessions/sso` endpoint. The SAML authentication handler processes XML input without disabling external entity resolution, allowing crafted SAML responses to invoke external entity references. This could enable attackers to retrieve sensitive files or perform server-side request forgery (SSRF). The issue was addressed by disabling external entity processing for the affected XML parser in versions SE.2025.1 and 2025.1.2.
CWE: CWE-611
References: https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/; https://www.etq.com/blog/etq-reliance-security-update/; https://www.etq.com/product-overview/
CVE: CVE-2025-34143
Published: 2025-07-22
Description: An authentication bypass vulnerability exists in ETQ Reliance on the CG (legacy) platform. The application allowed login as the privileged internal SYSTEM user by manipulating the username field. The SYSTEM account does not require a password, enabling attackers with network access to the login page to obtain elevated access. Once authenticated, an attacker could achieve remote code execution by modifying Jython scripts within the application. This issue was resolved by introducing stricter validation logic to exclude internal accounts from public authentication workflows in version MP-4583.
CWE: CWE-78, CWE-269, CWE-288
References: https://slcyber.io/assetnote-security-research-center/how-we-accidentally-discovered-a-remote-code-execution-vulnerability-in-etq-reliance/; https://www.etq.com/blog/etq-reliance-security-update/; https://www.etq.com/product-overview/
CVE: CVE-2015-10140
Published: 2025-07-22
Description: The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authenticated users, such as subscriber, to upload and delete arbitrary files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862, CWE-862
References: https://wpscan.com/vulnerability/9f0c926e-0609-4c89-a724-88e16bcfa82a
CVE: CVE-2025-4294
Published: 2025-07-22
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in HotelRunner B2B allows Cross-Site Scripting (XSS).This issue affects B2B: before 04.06.2025.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0169
CVE: CVE-2025-4295
Published: 2025-07-22
Description: Improper Validation of Certificate with Host Mismatch vulnerability in HotelRunner B2B allows HTTP Response Splitting.This issue affects B2B: before 04.06.2025.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-297
References: https://www.usom.gov.tr/bildirim/tr-25-0169
CVE: CVE-2025-51867
Published: 2025-07-22
Description: Insecure Direct Object Reference (IDOR) vulnerability in Deepfiction AI (deepfiction.ai) thru June 3, 2025, allowing attackers to chat with the LLM using other users' credits via sensitive information gained by the /browse/stories endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-639
References: https://github.com/Secsys-FDU/CVE-2025-51867
CVE: CVE-2025-8017
Published: 2025-07-22
Description: A vulnerability was found in Tenda AC7 15.03.06.44. It has been classified as critical. Affected is the function formSetMacFilterCfg of the file /goform/setMacFilterCfg of the component httpd. The manipulation of the argument deviceList leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/Thir0th/Thir0th-CVE/blob/main/Tenda_AC7%20V1.0_V15.03.06.44%20has%20a%20stack%20overflow%20vulnerability%20in%20parse_macfilter_rule.md; https://vuldb.com/?ctiid.317220; https://vuldb.com/?id.317220
CVE: CVE-2025-4878
Published: 2025-07-22
Description: A vulnerability was found in libssh, where an uninitialized variable exists under certain conditions in the privatekey_from_file() function. This flaw can be triggered if the file specified by the filename doesn't exist and may lead to possible signing failures or heap corruption.
CVSS Score: 3.6 (LOW)
CWE: CWE-416
References: https://access.redhat.com/security/cve/CVE-2025-4878; https://bugzilla.redhat.com/show_bug.cgi?id=2376184; https://git.libssh.org/projects/libssh.git/commit/?id=697650caa97eaf7623924c75f9fcfec6dd423cd1
CVE: CVE-2025-51858
Published: 2025-07-22
Description: Self Cross-Site Scripting (XSS) vulnerability in ChatPlayground.ai through 2025-05-24, allows attackers to execute arbitrary code and gain sensitive information via a crafted SVG file contents sent through the chat component.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51858
CVE: CVE-2025-51859
Published: 2025-07-22
Description: Stored Cross-Site Scripting (XSS) vulnerability in Chaindesk thru 2025-05-26 in its agent chat component. An attacker can achieve arbitrary client-side script execution by crafting an AI agent whose system prompt instructs the underlying Large Language Model (LLM) to embed malicious script payloads (e.g., SVG-based XSS) into its chat responses. When a user interacts with such a malicious agent or accesses a direct link to a conversation containing an XSS payload, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as JWT session tokens, potentially resulting in account hijacking.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51859
CVE: CVE-2025-51860
Published: 2025-07-22
Description: Stored Cross-Site Scripting (XSS) in TelegAI (telegai.com) 2025-05-26 in its chat component and character container component. An attacker can achieve arbitrary client-side script execution by crafting an AI Character with SVG XSS payloads in either description, greeting, example dialog, or system prompt(instructing the LLM to embed XSS payload in its chat response). When a user interacts with such a malicious AI Character or just browse its profile, the script executes in the user's browser. Successful exploitation can lead to the theft of sensitive information, such as session tokens, potentially resulting in account hijacking.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51860
CVE: CVE-2025-51862
Published: 2025-07-22
Description: Insecure Direct Object Reference (IDOR) vulnerability in TelegAI (telegai.com) thru 2025-05-26 in its chat component. An attacker can exploit this IDOR to tamper other users' conversation. Additionally, malicious contents and XSS payloads can be injected, leading to phishing attack, user spoofing and account hijacking via XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51862
CVE: CVE-2025-51863
Published: 2025-07-22
Description: Self Cross Site Scripting (XSS) vulnerability in ChatGPT Unli (ChatGPTUnli.com) thru 2025-05-26 allows attackers to execute arbitrary code via a crafted SVG file to the chat interface.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51863
CVE: CVE-2025-51864
Published: 2025-07-22
Description: A reflected cross-site scripting (XSS) vulnerability exists in AIBOX LLM chat (chat.aibox365.cn) through 2025-05-27, allowing attackers to hijack accounts through stolen JWT tokens.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/Secsys-FDU/CVE-2025-51864
CVE: CVE-2025-51865
Published: 2025-07-22
Description: Ai2 playground web service (playground.allenai.org) LLM chat through 2025-06-03 is vulnerable to Insecure Direct Object Reference (IDOR), allowing attackers to gain sensitvie information via enumerating thread keys in the URL.
CVSS Score: 8.8 (HIGH)
CWE: CWE-639
References: https://github.com/Secsys-FDU/CVE-2025-51865
CVE: CVE-2025-8015
Published: 2025-07-22
Description: The WP Shortcodes Plugin — Shortcodes Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an uploaded image's 'Title' and 'Slide link' fields in all versions up to, and including, 7.4.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-79
References: https://plugins.trac.wordpress.org/changeset/3328729/shortcodes-ultimate; https://research.cleantalk.org/cve-2025-8015/; https://www.wordfence.com/threat-intel/vulnerabilities/id/deba0a29-7fe5-4f94-bee6-9d01e023215e?source=cve
CVE: CVE-2025-8018
Published: 2025-07-22
Description: A vulnerability was found in code-projects Food Ordering Review System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/reservation_page.php. The manipulation of the argument reg_Id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/i-Corner/cve/issues/10; https://vuldb.com/?ctiid.317221
CVE: CVE-2025-35966
Published: 2025-07-22
Description: A null pointer dereference vulnerability exists in the CDB2SQLQUERY protocol buffer message handling of Bloomberg Comdb2 8.1. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2201; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2201
CVE: CVE-2025-36512
Published: 2025-07-22
Description: A denial of service vulnerability exists in the Bloomberg Comdb2 8.1 database when handling a distributed transaction heartbeat. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2200; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2200
CVE: CVE-2025-36520
Published: 2025-07-22
Description: A null pointer dereference vulnerability exists in the net_connectmsg Protocol Buffer Message functionality of Bloomberg Comdb2 8.1. A specially crafted network packets can lead to a denial of service. An attacker can send packets to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2197; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2197
CVE: CVE-2025-46354
Published: 2025-07-22
Description: A denial of service vulnerability exists in the Distributed Transaction Commit/Abort Operation functionality of Bloomberg Comdb2 8.1. A specially crafted network packet can lead to a denial of service. An attacker can send a malicious packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-617
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2198; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2198
CVE: CVE-2025-48498
Published: 2025-07-22
Description: A null pointer dereference vulnerability exists in the Distributed Transaction component of Bloomberg Comdb2 8.1 when processing a number of fields used for coordination. A specially crafted protocol buffer message can lead to a denial of service. An attacker can simply connect to a database instance over TCP and send the crafted message to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2199; https://talosintelligence.com/vulnerability_reports/TALOS-2025-2199
CVE: CVE-2025-51463
Published: 2025-07-22
Description: Path Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a crafted backup tar file submitted to the run_instruction API, which is extracted without path validation during restoration.
CVSS Score: 7.0 (HIGH)
CWE: CWE-22
References: https://github.com/aimhubio/aim; https://github.com/aimhubio/aim/pull/3327; https://www.gecko.security/blog/cve-2025-51463
CVE: CVE-2025-51480
Published: 2025-07-22
Description: Path Traversal vulnerability in onnx.external_data_helper.save_external_data in ONNX 1.17.0 allows attackers to overwrite arbitrary files by supplying crafted external_data.location paths containing traversal sequences, bypassing intended directory restrictions.
CVSS Score: 8.8 (HIGH)
CWE: CWE-22
References: https://github.com/advisories/GHSA-6rq9-53c3-f7vj; https://github.com/onnx/onnx; https://github.com/onnx/onnx/pull/6959
CVE: CVE-2025-5042
Published: 2025-07-22
Description: A maliciously crafted RFA file, when parsed through Autodesk Revit, can force an Out-of-Bounds Read vulnerability. A malicious actor can leverage this vulnerability to cause a crash, read sensitive data, or execute arbitrary code in the context of the current process.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://www.autodesk.com/products/autodesk-access/overview; https://www.autodesk.com/trust/security-advisories/adsk-sa-2025-0013
CVE: CVE-2025-7371
Published: 2025-07-22
Description: Okta On-Premises Provisioning (OPP) agents log certain user data during administrator-initiated password resets. This vulnerability allows an attacker with access to the local servers running OPP agents to retrieve user personal information and temporary passwords created during password reset. You are affected by this vulnerability if the following preconditions are met: Local server running OPP agent with versions >=2.2.1 and <= 2.3.0, and User account has had an administrator-initiated password reset while using the affected versions.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-532
References: https://help.okta.com/oie/en-us/content/topics/settings/version_histories/ver_history_opp_agent.htm
CVE: CVE-2025-8019
Published: 2025-07-22
Description: A vulnerability was found in Shenzhen Libituo Technology LBT-T300-T310 2.2.3.6. It has been rated as critical. Affected by this issue is the function sub_40B6F0 of the file at/appy.cgi. The manipulation of the argument wan_proto leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md; https://github.com/turing-wue/IoT-vul/blob/main/LBT-T300/README.md#payload; https://vuldb.com/?ctiid.317222