deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-59734
Published: 2025-10-06
Description: It is possible to cause an use-after-free write in SANM decoding with a carefully crafted animation using subversion <2.

When a STOR chunk is present, a subsequent FOBJ chunk will be saved in ctx->stored_frame. Stored frames can later be referenced by FTCH chunks. For files using subversion < 2, the undecoded frame is stored, and decoded again when the FTCH chunks are parsed. However, in process_frame_obj if the frame has an invalid size, there’s an early return, with a value of 0. 

This causes the code in decode_frame to still store the raw frame buffer into ctx->stored_frame. Leaving ctx->has_dimensions set to false.

A subsequent chunk with type FTCH would call process_ftch and decode that frame obj again, adding to the top/left values and calling process_frame_obj again.
Given that we never set ctx->have_dimensions before, this time we set the dimensions, calling init_buffers, which can reallocate the buffer in ctx->stored_frame, freeing the previous one. However, the GetByteContext object gb still holds a reference to the old buffer.




Finally, when the code tries to decode the frame, codecs that accept a GetByteContext as a parameter will trigger a use-after-free read when using gb.

GetByteContext is only used for reading bytes, so at most one could read invalid data. There are no heap allocations between the free and when the object is accessed. However, upon returning to process_ftch, the code restores the original values for top/left in stored_frame, writing 4 bytes to the freed data at offset 6, potentially corrupting the allocator’s metadata.

This issue can be triggered just by probing whether a file has the sanm format.







We recommend upgrading to version 8.0 or beyond.
CWE: CWE-416
References: https://issuetracker.google.com/440183164
CVE: CVE-2025-0606
Published: 2025-10-06
Description: Authorization Bypass Through User-Controlled Key vulnerability in Logo Software Inc. Logo Cloud allows Forceful Browsing, Resource Leak Exposure.This issue affects Logo Cloud: before 0.67.
CVSS Score: 6.0 (MEDIUM)
CWE: CWE-639
References: https://www.usom.gov.tr/bildirim/tr-25-0318
CVE: CVE-2025-11328
Published: 2025-10-06
Description: A vulnerability was detected in Tenda AC18 15.03.05.19(6318). This issue affects some unknown processing of the file /goform/SetDDNSCfg. The manipulation of the argument ddnsEn results in stack-based buffer overflow. It is possible to launch the attack remotely. The exploit is now public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/noahze01/IoT-vulnerable/blob/main/Tenda/AC18/SetDDNSCfg.md; https://vuldb.com/?ctiid.327211; https://vuldb.com/?id.327211
CVE: CVE-2025-11329
Published: 2025-10-06
Description: A flaw has been found in code-projects Online Course Registration 1.0. Impacted is an unknown function of the file /admin/manage-students.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/yihaofuweng/cve/issues/46; https://vuldb.com/?ctiid.327212
CVE: CVE-2025-0607
Published: 2025-10-06
Description: Improper Encoding or Escaping of Output vulnerability in Logo Software Inc. Logo Cloud allows Phishing.This issue affects Logo Cloud: before 2.57.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-116
References: https://www.usom.gov.tr/bildirim/tr-25-0318
CVE: CVE-2025-0608
Published: 2025-10-06
Description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Logo Software Inc. Logo Cloud allows Phishing, Forceful Browsing.This issue affects Logo Cloud: before 2025.R6.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-601
References: https://www.usom.gov.tr/bildirim/tr-25-0318
CVE: CVE-2025-0609
Published: 2025-10-06
Description: Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Logo Software Inc. Logo Cloud allows Cross-Site Scripting (XSS).This issue affects Logo Cloud: before 1.18.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-79
References: https://www.usom.gov.tr/bildirim/tr-25-0318
CVE: CVE-2025-11330
Published: 2025-10-06
Description: A vulnerability has been found in PHPGurukul Beauty Parlour Management System 1.1. The affected element is an unknown function of the file /admin/sales-reports-detail.php. Such manipulation of the argument fromdate/todate leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/xiaoxinkaishi/cve/issues/6; https://github.com/xiaoxinkaishi/cve/issues/7; https://phpgurukul.com/
CVE: CVE-2025-11331
Published: 2025-10-06
Description: A vulnerability was found in IdeaCMS up to 1.8. The impacted element is an unknown function of the file app/common/logic/admin/Config.php of the component Website Name Handler. Performing manipulation of the argument 网站名称 results in command injection. The attack may be initiated remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://github.com/tiancesec/CVE/issues/4; https://vuldb.com/?ctiid.327214; https://vuldb.com/?id.327214
CVE: CVE-2025-11332
Published: 2025-10-06
Description: A vulnerability was determined in CmsEasy up to 7.7.7. This affects an unknown function in the library lib/inc/view.php of the component URL Handler. Executing a manipulation of the argument PHP_SELF can lead to cross site scripting. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/tiancesec/CVE/issues/5; https://vuldb.com/?ctiid.327215; https://vuldb.com/?id.327215
CVE: CVE-2025-11333
Published: 2025-10-06
Description: A vulnerability was identified in langleyfcu Online Banking System up to 57437e6400ce0ae240e692c24e6346b8d0c17d7a. This impacts an unknown function of the file /customer_add_action.php of the component Add Customer Page. The manipulation of the argument First Name leads to cross site scripting. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided.
CVSS Score: 2.4 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/mhszed/Report/blob/main/online-banking-system-mastercustomer_home.php%20xss1.docx; https://vuldb.com/?ctiid.327216; https://vuldb.com/?id.327216
CVE: CVE-2025-11334
Published: 2025-10-06
Description: A security flaw has been discovered in Campcodes Online Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://github.com/melody27/cve/issues/1; https://vuldb.com/?ctiid.327217; https://vuldb.com/?id.327217
CVE: CVE-2025-11335
Published: 2025-10-06
Description: A weakness has been identified in D-Link DI-7100G C1 up to 20250928. Affected by this vulnerability is the function sub_46409C of the file /msp_info.htm?flag=qos of the component jhttpd. This manipulation of the argument iface causes command injection. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be exploited.
CVSS Score: 4.7 (MEDIUM)
CWE: CWE-74, CWE-77
References: https://vuldb.com/?ctiid.327218; https://vuldb.com/?id.327218; https://vuldb.com/?submit.664597
CVE: CVE-2025-11336
Published: 2025-10-06
Description: A security vulnerability has been detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. Affected by this issue is some unknown functionality of the file /stAlarmConfigure/index.do/../../aloneReport/download.do;otherlogout.do. Such manipulation of the argument fileName leads to path traversal. The attack may be performed from remote. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/rookie1006/CVE/issues/1; https://vuldb.com/?ctiid.327219; https://vuldb.com/?id.327219
CVE: CVE-2025-11337
Published: 2025-10-06
Description: A vulnerability was detected in Four-Faith Water Conservancy Informatization Platform up to 2.2. This affects an unknown part of the file /aloneReport/index.do/../../aloneReport/download.do;othersusrlogout.do. Performing manipulation of the argument fileName results in path traversal. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/jiangfeng13/CVE/issues/1; https://vuldb.com/?ctiid.327220; https://vuldb.com/?id.327220
CVE: CVE-2025-61197
Published: 2025-10-06
Description: An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage
CVSS Score: 8.9 (HIGH)
CWE: CWE-602
References: https://github.com/giulioschiavone/Vulnerability-Research/tree/main/CVE-2025-61197; https://www.orban.com/
CVE: CVE-2025-61198
Published: 2025-10-06
Description: A stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - Optimod Trio - Optimod version 1.0.0.33 - System version 2.5.26, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/giulioschiavone/Vulnerability-Research/tree/main/CVE-2025-61198; https://www.orban.com/
CVE: CVE-2023-49886
Published: 2025-10-06
Description: IBM Standards Processing Engine 10.0.1.10 could allow a remote attacker to execute arbitrary code on the system, caused by an unsafe java deserialization. By sending specially crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502
References: https://www.ibm.com/support/pages/node/7247179
CVE: CVE-2025-49594
Published: 2025-10-06
Description: XWiki OIDC has various tools to manipulate OpenID Connect protocol in XWiki. Starting in version 2.17.1 and prior to version 2.18.2, anyone with VIEW access to a user profile can create a token for that user. If that XWiki instance is configured to allow token authentication, it allows authentication with any user (since users are very commonly viewable, at least to other registered users). Version 2.18.2 contains a patch. As a workaround, disable token access.
CWE: CWE-285
References: https://github.com/xwiki-contrib/oidc/commit/d90d717172283aaa96bb5bb44e357f910ae64adb; https://github.com/xwiki-contrib/oidc/security/advisories/GHSA-f2hf-pfrj-vrm7; https://jira.xwiki.org/browse/OIDC-240
CVE: CVE-2025-52472
Published: 2025-10-06
Description: XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting in version 4.3-milestone-1 and prior to versions 16.10.9, 17.4.2, and 17.5.0, the REST search URL is vulnerable to HQL injection via the `orderField` parameter. The specified value is added twice in the query, though, once in the field list for the select and once in the order clause, so it's not that easy to exploit. The part of the query between the two fields can be enclosed in single quotes to effectively remove them, but the query still needs to remain valid with the query two times in it. This has been patched in versions 17.5.0, 17.4.2, and 16.10.9. No known workarounds are available.
CWE: CWE-89
References: https://github.com/xwiki/xwiki-platform/commit/743ebf8696ffa55161ed2c5ecf26b09f69e6bcf1; https://github.com/xwiki/xwiki-platform/commit/a45eca2af772abb7324e56d7fd2df1ac937bc445; https://github.com/xwiki/xwiki-platform/security/advisories/GHSA-gprp-h92g-gc2h
CVE: CVE-2025-11338
Published: 2025-10-06
Description: A flaw has been found in D-Link DI-7100G C1 up to 20250928. This vulnerability affects the function sub_4C0990 of the file /webchat/login.cgi of the component jhttpd. Executing manipulation of the argument openid can lead to buffer overflow. It is possible to launch the attack remotely. The exploit has been published and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://vuldb.com/?ctiid.327221; https://vuldb.com/?id.327221; https://vuldb.com/?submit.664619
CVE: CVE-2025-59152
Published: 2025-10-06
Description: Litestar is an Asynchronous Server Gateway Interface (ASGI) framework. In version 2.17.0, rate limits can be completely bypassed by manipulating the X-Forwarded-For header. This renders IP-based rate limiting ineffective against determined attackers. Litestar's RateLimitMiddleware uses `cache_key_from_request()` to generate cache keys for rate limiting. When an X-Forwarded-For header is present, the middleware trusts it unconditionally and uses its value as part of the client identifier. Since clients can set arbitrary X-Forwarded-For values, each different spoofed IP creates a separate rate limit bucket. An attacker can rotate through different header values to avoid hitting any single bucket's limit. This affects any Litestar application using RateLimitMiddleware with default settings, which likely includes most applications that implement rate limiting. Version 2.18.0 contains a patch for the vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-807
References: https://github.com/litestar-org/litestar/blob/26f20ac6c52de2b4bf81161f7560c8bb4af6f382/litestar/middleware/rate_limit.py#L127; https://github.com/litestar-org/litestar/commit/42a89e043e50b515f8548a93954fe143f63cf9fb; https://github.com/litestar-org/litestar/security/advisories/GHSA-hm36-ffrh-c77c
CVE: CVE-2025-59159
Published: 2025-10-06
Description: SillyTavern is a locally installed user interface that allows users to interact with text generation large language models, image generation engines, and text-to-speech voice models. In versions prior to 1.13.4, the web user interface for SillyTavern is susceptible to DNS rebinding, allowing attackers to perform actions like install malicious extensions, read chats, inject arbitrary HTML for phishing attacks, etc. The vulnerability has been patched in the version 1.13.4 by introducing a server configuration setting that enables a validation of host names in inbound HTTP requests according to the provided list of allowed hosts: `hostWhitelist.enabled` in config.yaml file or `SILLYTAVERN_HOSTWHITELIST_ENABLED` environment variable. While the setting is disabled by default to honor a wide variety of existing user configurations and maintain backwards compatibility, existing and new users are encouraged to review their server configurations and apply necessary changes to their setup, especially if hosting over the local network while not using SSL.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-346, CWE-940
References: https://docs.sillytavern.app/administration/#security-checklist; https://docs.sillytavern.app/administration/config-yaml/#host-whitelisting; https://github.com/SillyTavern/SillyTavern/commit/d134abd50e4a416e3b[PII_REDACTED]3b0a23f38320
CVE: CVE-2025-61224
Published: 2025-10-06
Description: Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/MarioTesoro/vulnerability-research/tree/main/CVE-2025-61224; https://github.com/dokuwiki/dokuwiki/issues/4512
CVE: CVE-2025-61687
Published: 2025-10-06
Description: Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web shells on the server, potentially leading to Remote Code Execution (RCE). The system fails to validate file extensions, MIME types, or file content during uploads. As a result, malicious scripts such as Node.js-based web shells can be uploaded and stored persistently on the server. These shells expose HTTP endpoints capable of executing arbitrary commands if triggered. The uploaded shell does not automatically execute, but its presence allows future exploitation via administrator error or chained vulnerabilities. This presents a high-severity threat to system integrity and confidentiality. As of time of publication, no known patched versions are available.
CVSS Score: 8.3 (HIGH)
CWE: CWE-434
References: https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L1104-L1111; https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L170-L175; https://github.com/FlowiseAI/Flowise/blob/d29db16bfcf9a4be8febc3d19d52263e8c3d0055/packages/components/src/storageUtils.ts#L533-L541
CVE: CVE-2025-61765
Published: 2025-10-06
Description: python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which the attacker previously gained access to the message queue that the servers use for internal communications. When Socket.IO servers are configured to use a message queue backend such as Redis for inter-server communication, messages sent between the servers are encoded using the `pickle` Python module. When a server receives one of these messages through the message queue, it assumes it is trusted and immediately deserializes it. The vulnerability stems from deserialization of messages using Python's `pickle.loads()` function. Having previously obtained access to the message queue, the attacker can send a python-socketio server a crafted pickle payload that executes arbitrary code during deserialization via Python's `__reduce__` method. This vulnerability only affects deployments with a compromised message queue. The attack can lead to the attacker executing random code in the context of, and with the privileges of a Socket.IO server process. Single-server systems that do not use a message queue, and multi-server systems with a secure message queue are not vulnerable. In addition to making sure standard security practices are followed in the deployment of the message queue, users of the python-socketio package can upgrade to version 5.14.0 or newer, which remove the `pickle` module and use the much safer JSON encoding for inter-server messaging.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-502
References: https://github.com/miguelgrinberg/python-socketio/commit/53f6be094257ed81476b0e212c8cddd6d06ca39a; https://github.com/miguelgrinberg/python-socketio/security/advisories/GHSA-g8c6-8fjj-2r4m; https://www.bluerock.io/post/cve-2025-61765-bluerock-discovers-critical-rce-in-socket-io-ecosystem
CVE: CVE-2025-0038
Published: 2025-10-06
Description: In AMD Zynq UltraScale+ devices, the lack of address validation when executing CSU runtime services through the PMU Firmware can allow access to isolated or protected memory spaces resulting in the loss of integrity and confidentiality.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-1284
References: https://www.amd.com/en/resources/product-security/bulletin/amd-sb-8008.html
CVE: CVE-2025-10363
Published: 2025-10-06
Description: Deserialization of Untrusted Data vulnerability in Topal Solutions AG Topal Finanzbuchhaltung on Windows allows Remote Code Execution.This issue affects at least Topal Finanzbuchhaltung: 10.1.5.20 and is fixed in version 11.2.12.00
CWE: CWE-502
References: https://info.topal.ch/content/info/Topal_ReleaseNotes/de/version_v11_2_12_0.htm; https://labs.infoguard.ch/advisories/cve-2025-10363_topal_deserialization_unauth_rce/
CVE: CVE-2025-11339
Published: 2025-10-06
Description: A vulnerability has been found in D-Link DI-7100G C1 up to 20250928. This issue affects the function sub_4BD4F8 of the file /webchat/hi_block.asp of the component jhttpd. The manipulation of the argument popupId leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-120
References: https://vuldb.com/?ctiid.327222; https://vuldb.com/?id.327222; https://vuldb.com/?submit.664635
CVE: CVE-2025-11341
Published: 2025-10-06
Description: A security flaw has been discovered in Jinher OA up to 2.0. This affects an unknown function of the file /c6/Jhsoft.Web.module/eformaspx/WebDesign.aspx/?type=SystemUserInfo&style=1. Performing manipulation results in xml external entity reference. Remote exploitation of the attack is possible. The exploit has been released to the public and may be exploited.
CVSS Score: 7.3 (HIGH)
CWE: CWE-610, CWE-611, CWE-611
References: https://github.com/rookie1006/CVE/issues/2; https://vuldb.com/?ctiid.327226; https://vuldb.com/?id.327226
CVE: CVE-2025-36354
Published: 2025-10-06
Description: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 



could allow an unauthenticated user to execute arbitrary commands with lower user privileges on the system due to improper validation of user supplied input.
CVSS Score: 7.3 (HIGH)
CWE: CWE-78
References: https://www.ibm.com/support/pages/node/7247215
CVE: CVE-2025-36355
Published: 2025-10-06
Description: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 

could allow a locally authenticated user to execute malicious scripts from outside of its control sphere.
CVSS Score: 8.5 (HIGH)
CWE: CWE-829
References: https://www.ibm.com/support/pages/node/7247215
CVE: CVE-2025-36356
Published: 2025-10-06
Description: IBM Security Verify Access and IBM Security Verify Access Docker 10.0.0.0 through 10.0.9.0 and 11.0.0.0 through 11.0.1.0 could allow a locally authenticated user to escalate their privileges to root due to execution with more privileges than required.
CVSS Score: 9.3 (CRITICAL)
CWE: CWE-250
References: https://www.ibm.com/support/pages/node/7247215
CVE: CVE-2025-57247
Published: 2025-10-06
Description: The BATBToken smart contract (address 0xfbf[PII_REDACTED]c02f0dbbb74251d8ded1d63b7a2, Compiler Version v0.8.26+commit.8a97fa7a) contains incorrect access control implementation in whitelist management functions. The setColdWhiteList() and setSpecialAddress() functions in the base ERC20 contract are declared as public without proper access control modifiers, allowing any user to bypass transfer restrictions and manipulate special address settings. This enables unauthorized users to circumvent cold time transfer restrictions and potentially disrupt dividend distribution mechanisms, leading to privilege escalation and violation of the contract's intended tokenomics.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-284
References: https://bscscan.com/address/0xfbf[PII_REDACTED]c02f0dbbb74251d8ded1d63b7a2#code; https://github.com/RikkaLzw/CVE/blob/main/CVE_BATB-TOKEN.md