deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2012-10024
Published: 2025-08-05
Description: XBMC version 11, including builds up to the 2012-11-04 nightly release, contains a path traversal vulnerability in its embedded HTTP server. When accessed via HTTP Basic Authentication, the server fails to properly sanitize URI input, allowing authenticated users to request files outside the intended document root. An attacker can exploit this flaw to read arbitrary files from the host filesystem, including sensitive configuration or credential files.
CWE: CWE-22
References: https://github.com/xbmc/xbmc; https://github.com/xbmc/xbmc/commit/bdff099c024521941cb0956fe01d99ab52a65335; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/gather/xbmc_traversal.rb
CVE: CVE-2012-10025
Published: 2025-08-05
Description: The WordPress plugin Advanced Custom Fields (ACF) version 3.5.1 and below contains a remote file inclusion (RFI) vulnerability in core/actions/export.php. When the PHP configuration directive allow_url_include is enabled (default: Off), an unauthenticated attacker can exploit the acf_abspath POST parameter to include and execute arbitrary remote PHP code. This leads to remote code execution under the web server’s context, allowing full compromise of the host.
CWE: CWE-98
References: http://web.archive.org/web/[PII_REDACTED]5326/http://secunia.com:80/advisories/51037; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_advanced_custom_fields_exec.rb; https://wordpress.org/plugins/advanced-custom-fields/
CVE: CVE-2012-10026
Published: 2025-08-05
Description: The WordPress plugin Asset-Manager version 2.0 and below contains an unauthenticated arbitrary file upload vulnerability in upload.php. The endpoint fails to properly validate and restrict uploaded file types, allowing remote attackers to upload malicious PHP scripts to a predictable temporary directory. Once uploaded, the attacker can execute the file via a direct HTTP GET request, resulting in remote code execution under the web server’s context.
CWE: CWE-434
References: http://web.archive.org/web/[PII_REDACTED]4832/http://www.opensyscom.fr:80/Actualites/wordpress-plugins-asset-manager-shell-upload-vulnerability.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_asset_manager_upload_exec.rb; https://wordpress.org/plugins/asset-manager/
CVE: CVE-2012-10027
Published: 2025-08-05
Description: WP-Property plugin for WordPress through version 1.35.0 contains an unauthenticated file upload vulnerability in the third-party `uploadify.php` script. A remote attacker can upload arbitrary PHP files to a temporary directory without authentication, leading to remote code execution.
CWE: CWE-434
References: http://web.archive.org/web/[PII_REDACTED]5650/http://www.opensyscom.fr:80/Actualites/wordpress-plugins-wp-property-shell-upload-vulnerability.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/wp_property_upload_exec.rb; https://wordpress.org/plugins/wp-property/
CVE: CVE-2012-10028
Published: 2025-08-05
Description: Netwin SurgeFTP version 23c8 and prior contains a vulnerability in its web-based administrative console that allows authenticated users to execute arbitrary system commands via crafted POST requests to `surgeftpmgr.cgi`. This can lead to full remote code execution on the underlying system.
CWE: CWE-78
References: https://netwinsite.com/surgeftp/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/netwin_surgeftp_exec.rb; https://www.exploit-db.com/exploits/23522
CVE: CVE-2012-10029
Published: 2025-08-05
Description: Nagios XI Network Monitor prior to Graph Explorer component version 1.3 contains a command injection vulnerability in `visApi.php`. An authenticated user can inject system commands via unsanitized parameters such as `host`, resulting in remote code execution.
CWE: CWE-78
References: https://packetstorm.news/files/id/118705/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/nagios_graph_explorer.rb; https://www.exploit-db.com/exploits/23227
CVE: CVE-2012-10030
Published: 2025-08-05
Description: FreeFloat FTP Server contains multiple critical design flaws that allow unauthenticated remote attackers to upload arbitrary files to sensitive system directories. The server accepts empty credentials, defaults user access to the root of the C:\ drive, and imposes no restrictions on file type or destination path. These conditions enable attackers to upload executable payloads and .mof files to locations such as system32 and wbem\mof, where Windows Management Instrumentation (WMI) automatically processes and executes them. This results in remote code execution with SYSTEM-level privileges, without requiring user interaction.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306, CWE-434, CWE-732
References: https://archive.org/details/tucows_367516_Freefloat_FTP_Server; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freefloatftp_wbem.rb; https://www.exploit-db.com/exploits/23226
CVE: CVE-2012-10031
Published: 2025-08-05
Description: BlazeVideo HDTV Player Pro v6.6.0.3 is vulnerable to a stack-based buffer overflow due to improper handling of user-supplied input embedded in .plf playlist files. When parsing a crafted .plf file, the MediaPlayerCtrl.dll component invokes PathFindFileNameA() to extract a filename from a URL-like string. The returned value is then copied to a fixed-size stack buffer using an inline strcpy call without bounds checking. If the input exceeds the buffer size, this leads to a stack overflow and potential arbitrary code execution under the context of the user.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/blazedvd_hdtv_bof.rb; https://web.archive.org/web/[PII_REDACTED]2333/https://blazevideo.com/help_center/hdtv-help/Technical-Support.html; https://www.exploit-db.com/exploits/18693
CVE: CVE-2012-10032
Published: 2025-08-05
Description: Maxthon3 versions prior to 3.3 are vulnerable to cross context scripting (XCS) via the about:history page. The browser’s trusted zone improperly handles injected script content, allowing attackers to execute arbitrary JavaScript in a privileged context. This flaw enables modification of browser configuration and execution of arbitrary code through Maxthon’s exposed DOM APIs, including maxthon.program.Program.launch() and maxthon.io.writeDataURL(). Exploitation requires user interaction, typically by visiting a malicious webpage that triggers the injection.
CWE: CWE-79, CWE-94
References: http://blog.malerisch.net/2012/12/maxthon-cross-context-scripting-xcs-about-history-rce.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/maxthon_history_xcs.rb; https://www.exploit-db.com/exploits/23225
CVE: CVE-2012-10033
Published: 2025-08-05
Description: Narcissus is vulnerable to remote code execution via improper input handling in its image configuration workflow. Specifically, the backend.php script fails to sanitize the release parameter before passing it to the configure_image() function. This function invokes PHP’s passthru() with the unsanitized input, allowing attackers to inject arbitrary system commands. Exploitation occurs via a crafted POST request, resulting in command execution under the web server’s context.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/narcissus_backend_exec.rb; https://web.archive.org/web/[PII_REDACTED]2623/https://narcissus.angstrom-distribution.org/; https://www.exploit-db.com/exploits/22709
CVE: CVE-2012-10034
Published: 2025-08-05
Description: ClanSphere 2011.3 is vulnerable to a local file inclusion (LFI) flaw due to improper handling of the cs_lang cookie parameter. The application fails to sanitize user-supplied input, allowing attackers to traverse directories and read arbitrary files outside the web root. The vulnerability is further exacerbated by null byte injection (%00) to bypass file extension checks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-22
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/clansphere_traversal.rb; https://sourceforge.net/projects/clansphere/; https://www.exploit-db.com/exploits/22181
CVE: CVE-2012-10035
Published: 2025-08-05
Description: Turbo FTP Server versions 1.30.823 and 1.30.826 contain a buffer overflow vulnerability in the handling of the PORT command. By sending a specially crafted payload, an unauthenticated remote attacker can overwrite memory structures and execute arbitrary code with SYSTEM privileges.
CWE: CWE-120
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/turboftp_port.rb; https://www.exploit-db.com/exploits/22161; https://www.vulncheck.com/advisories/turbo-ftp-server-port-command-buffer-overflow
CVE: CVE-2013-10064
Published: 2025-08-05
Description: A stack-based buffer overflow vulnerability exists in ActFax Server version 5.01. The server's RAW protocol interface fails to safely process user-supplied data in @F506 fax header fields due to insecure usage of strcpy. Remote attackers can exploit this vulnerability by sending specially crafted @F506 fields, potentially leading to arbitrary code execution. Successful exploitation requires network access to TCP port 4559 and does not require authentication.
CWE: CWE-121
References: http://www.actfax.com/; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/misc/actfax_raw_server_bof.rb; https://web.archive.org/web/[PII_REDACTED]5755/http://www.pwnag3.com/2013/02/actfax-raw-server-exploit.html
CVE: CVE-2013-10065
Published: 2025-08-05
Description: A denial-of-service vulnerability exists in Sysax Multi-Server version 6.10 via its SSH daemon. A specially crafted SSH key exchange packet can trigger a crash in the service, resulting in loss of availability. The flaw is triggered during the handling of malformed key exchange data, including a non-standard byte (\x28) in place of the expected SSH protocol delimiter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-248
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/dos/windows/ssh/sysax_sshd_kexchange.rb; https://www.mattandreko.com/2013/04/08/sysax-multi-server-6.10-ssh-dos/; https://www.sysax.com/
CVE: CVE-2013-10066
Published: 2025-08-05
Description: An unauthenticated arbitrary file upload vulnerability exists in Kordil EDMS v2.2.60rc3. The application exposes an upload endpoint (users_add.php) that allows attackers to upload files to the /userpictures/ directory without authentication. This flaw enables remote code execution by uploading a PHP payload and invoking it via a direct HTTP request.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/kordil_edms_upload_exec.rb; https://sourceforge.net/projects/kordiledms/; https://www.exploit-db.com/exploits/24547
CVE: CVE-2013-10067
Published: 2025-08-05
Description: Glossword versions 1.8.8 through 1.8.12 contain an authenticated arbitrary file upload vulnerability. When deployed as a standalone application, the administrative interface (gw_admin.php) allows users with administrator privileges to upload files to the gw_temp/a/ directory. Due to insufficient validation of file type and path, attackers can upload and execute PHP payloads, resulting in remote code execution.
CWE: CWE-434
References: https://github.com/glosswordteam/Glossword; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/glossword_upload_exec.rb; https://sourceforge.net/projects/glossword/
CVE: CVE-2013-10068
Published: 2025-08-05
Description: Foxit Reader Plugin version 2.2.1.530, bundled with Foxit Reader 5.4.4.11281, contains a stack-based buffer overflow vulnerability in the npFoxitReaderPlugin.dll module. When a PDF file is loaded from a remote host, an overly long query string in the URL can overflow a buffer, allowing remote attackers to execute arbitrary code.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/browser/foxit_reader_plugin_url_bof.rb; https://www.exploit-db.com/exploits/23944; https://www.exploit-db.com/exploits/24502
CVE: CVE-2013-10069
Published: 2025-08-05
Description: The web interface of multiple D-Link routers, including DIR-600 rev B (≤2.14b01) and DIR-300 rev B (≤2.13), contains an unauthenticated OS command injection vulnerability in command.php, which improperly handles the cmd POST parameter. A remote attacker can exploit this flaw without authentication to spawn a Telnet service on a specified port, enabling persistent interactive shell access as root.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/dlink_dir_300_600_exec_noauth.rb; https://web.archive.org/web/[PII_REDACTED]4723/http://www.s3cur1ty.de/m1adv2013-003; https://www.exploit-db.com/exploits/24453
CVE: CVE-2013-10070
Published: 2025-08-05
Description: PHP-Charts v1.0 contains a PHP code execution vulnerability in wizard/url.php, where user-supplied GET parameter names are passed directly to eval() without sanitization. A remote attacker can exploit this flaw by crafting a request that injects arbitrary PHP code, resulting in command execution under the web server's context. The vulnerability allows unauthenticated attackers to execute system-level commands via base64-encoded payloads embedded in parameter names, leading to full compromise of the host system.
CWE: CWE-95
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/php_charts_exec.rb; https://web.archive.org/web/[PII_REDACTED]4844/http://php-charts.com/; https://www.exploit-db.com/exploits/24201
CVE: CVE-2014-125113
Published: 2025-08-05
Description: An unrestricted file upload vulnerability exists in Dell (acquired by Quest) KACE K1000 System Management Appliance version 5.0 - 5.3, 5.4 prior to 5.4.76849, and 5.5 prior to 5.5.90547 in the download_agent.php endpoint. An attacker can upload arbitrary PHP files to a temporary web-accessible directory, which are later executed through inclusion in backend code that loads files under attacker-controlled paths.
CWE: CWE-306, CWE-434
References: http://console-cowboys.blogspot.com/2014/03/the-curious-case-of-ninjamonkeypiratela.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/http/dell_kace_k1000_upload.rb; https://www.exploit-db.com/exploits/39693
CVE: CVE-2025-50592
Published: 2025-08-05
Description: Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://seacms.com; https://github.com/[PII_REDACTED]/CVE-2025-50592/issues/1; https://seacms.net/
CVE: CVE-2025-51541
Published: 2025-08-05
Description: A stored cross-site scripting (XSS) vulnerability exists in the Shopware 6 installation interface at /recovery/install/database-configuration/. The c_database_schema field fails to properly sanitize user-supplied input before rendering it in the browser, allowing an attacker to inject malicious JavaScript. This vulnerability can be exploited via a Cross-Site Request Forgery (CSRF) attack due to the absence of CSRF protections on the POST request. An unauthenticated remote attacker can craft a malicious web page that, when visited by a victim, stores the payload persistently in the installation configuration. As a result, the payload executes whenever any user subsequently accesses the vulnerable installation page, leading to persistent client-side code execution.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/anonx-hunter/a7ef32a01d7d888413b08bf8589fdd7e#file-cve-2025-51541-shopware-xss-md; https://www.dax-tokaido.com/recovery/install/database-configuration/; https://gist.github.com/anonx-hunter/a7ef32a01d7d888413b08bf8589fdd7e#file-cve-2025-51541-shopware-xss-md
CVE: CVE-2025-52078
Published: 2025-08-05
Description: File upload vulnerability in Writebot AI Content Generator SaaS React Template thru 4.0.0, allowing remote attackers to gain escalated privileges via a crafted POST request to the /file-upload endpoint.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-434
References: http://writebot.com; https://github.com/Yucaerin/Writebot; https://themeforest.net/item/writebot-ai-content-generator-saas-react-template/53331158?s_rank=9
CVE: CVE-2025-52237
Published: 2025-08-05
Description: An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-27
References: http://sscms.com; https://gist.github.com/CTRLCCT/c9b5aab78a179a2d92a41889a588c933
CVE: CVE-2025-53534
Published: 2025-08-05
Description: RatPanel is a server operation and maintenance management panel. In versions 2.3.19 through 2.5.5, when an attacker obtains the backend login path of RatPanel (including but not limited to weak default paths, brute-force cracking, etc.), they can execute system commands or take over hosts managed by the panel without logging in. In addition to this remote code execution (RCE) vulnerability, the flawed code also leads to unauthorized access. RatPanel uses the CleanPath middleware provided by github.com/go-chi/chi package to clean URLs, but but the middleware does not process r.URL.Path, which can cause the paths to be misinterpreted. This is fixed in version 2.5.6.
CWE: CWE-305
References: https://github.com/tnborg/panel/commit/ed5c74c7534230ba685273504af4c1e1e3598ff1; https://github.com/tnborg/panel/releases/tag/v2.5.6; https://github.com/tnborg/panel/security/advisories/GHSA-fm3m-jrgm-5ppg
CVE: CVE-2025-8571
Published: 2025-08-05
Description: Concrete CMS 9 to 9.4.2 and versions below 8.5.21 are vulnerable to Reflected Cross-Site Scripting (XSS) in the Conversation Messages Dashboard Page. Unsanitized input could cause theft of session cookies or tokens, defacement of web content, redirection to malicious sites, and (if victim is an admin), the execution of unauthorized actions. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 4.8 with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N. Thanks  Fortbridge https://fortbridge.co.uk/  for performing a penetration test and vulnerability assessment on Concrete CMS and reporting this issue.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/943-release-notes; https://documentation.concretecms.org/developers/introduction/version-history/8521-release-notes; https://www.concretecms.org/download
CVE: CVE-2025-8573
Published: 2025-08-05
Description: Concrete CMS versions 9 through 9.4.2 are vulnerable to Stored XSS from Home Folder on Members Dashboard page.  Version 8 was not affected. A rogue admin could set up a malicious folder containing XSS to which users could be directed upon login. The Concrete CMS security team gave this vulnerability a CVSS v.4.0 score of 2.0 with vector CVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N. Thanks sealldev  (Noah Cooper) for reporting via HackerOne.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-20, CWE-79
References: https://documentation.concretecms.org/9-x/developers/introduction/version-history/943-release-notes; https://www.concretecms.org/download
CVE: CVE-2025-32430
Published: 2025-08-06
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In versions 4.2-milestone-3 through 16.4.7, 16.5.0-rc-1 through 16.10.5 and 17.0.0-rc-1 through 17.2.2, two templates contain reflected XSS vulnerabilities, allowing an attacker to execute malicious JavaScript code in the context of the victim's session by getting the victim to visit an attacker-controlled URL. This permits the attacker to perform arbitrary actions using the permissions of the victim. This issue is fixed in versions 16.4.8, 16.10.6 and 17.3.0-rc-1. To workaround the issue, manually patch the WAR with the same changes as the original patch.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/xwiki/xwiki-platform/commit/e5926a938cbecc8b1eaa48053d8d370cff107cb0; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-m9x4-w7p9-mxhx; https://jira.xwiki.org/browse/XWIKI-23096
CVE: CVE-2025-54124
Published: 2025-08-06
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 9.8-rc-1 through 16.4.6, 16.5.0-rc-1 through 16.10.4, and 17.0.0-rc-1 through 17.1.0, any user with editing rights can create an XClass with a database list property that references a password property. When adding an object of that XClass, the content of that password property is displayed. In practice, with a standard rights setup, this means that any user with an account on the wiki can access password hashes of all users, and possibly other password properties (with hashed or plain storage) that are on pages that the user can view. This issue is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-359
References: https://github.com/xwiki/xwiki-platform/commit/f2ca8649cba2ed[PII_REDACTED]bf5c7f801afa0b24; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-r38m-cgpg-qj69; https://jira.xwiki.org/browse/XWIKI-22811
CVE: CVE-2025-54125
Published: 2025-08-06
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. XWiki Platform Legacy Old Core and XWiki Platform Old Core versions 1.1 through 16.4.6, 16.5.0-rc-1 through 16.10.4 and 17.0.0-rc-1 through 17.1.0, the XML export of a page in XWiki that can be triggered by any user with view rights on a page by appending ?xpage=xml to the URL includes password and email properties stored on a document that aren't named password or email. This is fixed in versions 16.4.7, 16.10.5 and 17.2.0-rc-1. To work around this issue, the file templates/xml.vm in the deployed WAR can be deleted if the XML isn't needed. There isn't any feature in XWiki itself that depends on the XML export.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-359
References: https://github.com/xwiki/xwiki-platform/commit/742ee3482ef6c2bd4ad03d0de9cdd81d0e8f3d59; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-57q2-6cp4-9mq3; https://jira.xwiki.org/browse/XWIKI-22810
CVE: CVE-2025-54571
Published: 2025-08-06
Description: ModSecurity is an open source, cross platform web application firewall (WAF) engine for Apache, IIS and Nginx. In versions 2.9.11
and below, an attacker can override the HTTP response’s Content-Type, which could lead to several issues depending on the HTTP scenario. For example, we have demonstrated the potential for XSS and arbitrary script source code disclosure in the latest version of mod_security2. This issue is fixed in version 2.9.12.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-252, CWE-79
References: https://github.com/owasp-modsecurity/ModSecurity/commit/6d7e8eb18f2d7d368fb8e29516fcdeaeb8d349b8; https://github.com/owasp-modsecurity/ModSecurity/issues/2514; https://github.com/owasp-modsecurity/ModSecurity/security/advisories/GHSA-cg44-9m43-3f9v