deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-54464
Published: 2025-08-13
Description: This vulnerability exists in ZKTeco WL20 due to storage of admin and user credentials without encryption in the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the unencrypted credentials stored in the firmware of targeted device.
CWE: CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172; https://www.zkteco.com/en/Security_Bulletinsibs/20
CVE: CVE-2025-54465
Published: 2025-08-13
Description: This vulnerability exists in ZKTeco WL20 due to hard-coded MQTT credentials and endpoints stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve the hard-coded MQTT credentials and endpoints from the targeted device.

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized access to the MQTT broker and manipulate the communications of the targeted device.
CWE: CWE-798
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172; https://www.zkteco.com/en/Security_Bulletinsibs/20
CVE: CVE-2025-55279
Published: 2025-08-13
Description: This vulnerability exists in ZKTeco WL20 due to hard-coded private key stored in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and analyzing the binary data to retrieve private key stored in the firmware of the targeted device.

Successful exploitation of this vulnerability could allow the attacker to perform unauthorized decryption of sensitive data and Man-in-the-Middle (MitM) attacks on the targeted device.
CWE: CWE-798
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172
CVE: CVE-2025-55280
Published: 2025-08-13
Description: This vulnerability exists in ZKTeco WL20 due to storage of Wi-Fi credentials, configuration data and system data in plaintext within the device firmware. An attacker with physical access could exploit this vulnerability by extracting the firmware and reverse engineer the binary data to access the plaintext sensitive data stored in the targeted device.  

Successful exploitation of this vulnerability could allow the attacker to gain unauthorized network access, retrieve and manipulate data on the targeted device.
CWE: CWE-312
References: https://www.cert-in.org.in/s2cMainServlet?pageid=PUBVLNOTES01&VLCODE=CIVN-2025-0172
CVE: CVE-2025-48989
Published: 2025-08-13
Description: Improper Resource Shutdown or Release vulnerability in Apache Tomcat made Tomcat vulnerable to the made you reset attack.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.9, from 10.1.0-M1 through 10.1.43 and from 9.0.0.M1 through 9.0.107. Older, EOL versions may also be affected.

Users are recommended to upgrade to one of versions 11.0.10, 10.1.44 or 9.0.108 which fix the issue.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://lists.apache.org/thread/9ydfg0xr0tchmglcprhxgwhj0hfwxlyf; http://www.openwall.com/lists/oss-security/2025/08/13/2; https://www.kb.cert.org/vuls/id/767506
CVE: CVE-2025-8671
Published: 2025-08-13
Description: A mismatch caused by client-triggered server-sent stream resets between HTTP/2 specifications and the internal architectures of some HTTP/2 implementations may result in excessive server resource consumption leading to denial-of-service (DoS).  By opening streams and then rapidly triggering the server to reset them—using malformed frames or flow control errors—an attacker can exploit incorrect stream accounting. Streams reset by the server are considered closed at the protocol level, even though backend processing continues. This allows a client to cause the server to handle an unbounded number of concurrent streams on a single connection. This CVE will be updated as affected product details are released.
CVSS Score: 7.5 (HIGH)
CWE: CWE-404
References: https://galbarnahum.com/made-you-reset; https://github.com/h2o/h2o/commit/4729b661e3c6654198d2cc62997e1af58bef4b80; https://github.com/h2o/h2o/security/advisories/GHSA-mrjm-qq9m-9mjq
CVE: CVE-2025-8907
Published: 2025-08-13
Description: A vulnerability was found in H3C M2 NAS V100R006. Affected by this vulnerability is an unknown functionality of the component Webserver Configuration. The manipulation leads to execution with unnecessary privileges. An attack has to be approached locally. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor explains: "[T]he device only has configuration files and does not actually have boa functionality. It is impossible to access or upload files anonymously to the device through boa services". This vulnerability only affects products that are no longer supported by the maintainer.
CVSS Score: 7.0 (HIGH)
CWE: CWE-250
References: https://vuldb.com/?ctiid.319861; https://vuldb.com/?id.319861; https://vuldb.com/?submit.624554
CVE: CVE-2025-8908
Published: 2025-08-13
Description: A vulnerability was determined in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.5.4. Affected by this issue is some unknown functionality of the file crm/WeiXinApp/yunzhijia/event.php. The manipulation of the argument openid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.6.5 is able to address this issue. It is recommended to upgrade the affected component. The vendor explains: "All SQL injection vectors were patched via parameterized queries and input sanitization in v8.6.5+."
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://github.com/jackyliu666/blob2/blob/main/README.md; https://github.com/jackyliu666/event/; https://vuldb.com/?ctiid.319862
CVE: CVE-2025-32451
Published: 2025-08-13
Description: A memory corruption vulnerability exists in Foxit Reader 2025.1.0.27937 due to the use of an uninitialized pointer. A specially crafted Javascript code inside a malicious PDF document can trigger this vulnerability, which can lead to memory corruption and result in arbitrary code execution. An attacker needs to trick the user into opening the malicious file to trigger this vulnerability. Exploitation is also possible if a user visits a specially crafted, malicious site if the browser plugin extension is enabled.
CVSS Score: 8.8 (HIGH)
CWE: CWE-824
References: https://talosintelligence.com/vulnerability_reports/TALOS-2025-2202; https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2202
CVE: CVE-2025-52386
Published: 2025-08-13
Description: CycloneDX Sunshine v0.9 is vulnerable to CSV Formula Injection via a crafted JSON file
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-1236
References: https://github.com/CycloneDX/Sunshine; https://github.com/VishalSreenivas/Formula-Injection-in-CycloneDX-Sunshine/blob/main/CVE-2025-52386.md; https://github.com/VishalSreenivas/Formula-Injection-in-CycloneDX-Sunshine/blob/main/payload.json
CVE: CVE-2025-52392
Published: 2025-08-13
Description: Soosyze CMS 2.0 allows brute-force login attacks via the /user/login endpoint due to missing rate-limiting and lockout mechanisms. An attacker can repeatedly submit login attempts without restrictions, potentially gaining unauthorized administrative access. This vulnerability corresponds to CWE-307: Improper Restriction of Excessive Authentication Attempts.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-307
References: https://beafn28.gitbook.io/beafn28/cve/brute-force-login-vulnerability-in-soosyze-cms-2.0-cve-2025-52392; https://github.com/soosyze/soosyze/issues/269; https://www.exploit-db.com/exploits/52416
CVE: CVE-2025-54074
Published: 2025-08-13
Description: Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.2.5 to 1.5.1, Cherry Studio is vulnerable to OS Command Injection during a connection with a malicious MCP server in HTTP Streamable mode. Attackers can setup a malicious MCP server with compatible OAuth authorization server endpoints and trick victims into connecting it, leading to OS command injection in vulnerable clients. This issue has been patched in version 1.5.2.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://github.com/CherryHQ/cherry-studio/commit/40f[PII_REDACTED]854826ff3572ef7372fb0acdc38; https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-8xr5-732g-84px
CVE: CVE-2025-54382
Published: 2025-08-13
Description: Cherry Studio is a desktop client that supports for multiple LLM providers. In version 1.5.1, a remote code execution (RCE) vulnerability exists in the Cherry Studio platform when connecting to streamableHttp MCP servers. The issue arises from the server’s implicit trust in the oauth auth redirection endpoints and failure to properly sanitize the URL. This issue has been patched in version 1.5.2.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-78
References: https://github.com/CherryHQ/cherry-studio/security/advisories/GHSA-gjp6-9cvg-8w93
CVE: CVE-2025-54791
Published: 2025-08-13
Description: OMERO.web provides a web based client and plugin infrastructure. Prior to version 5.29.2, if an error occurred when resetting a user's password using the Forgot Password option in OMERO.web, the error message displayed on the Web page can disclose information about the user. This issue has been patched in version 5.29.2. A workaround involves disabling the Forgot password option in OMERO.web using the omero.web.show_forgot_password configuration property.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209
References: https://github.com/ome/omero-web/commit/8aa2789e8f759c73f1517abe9a0abd44e86644ad; https://github.com/ome/omero-web/security/advisories/GHSA-gpmg-4x4g-mr5r
CVE: CVE-2025-55004
Published: 2025-08-13
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, ImageMagick is vulnerable to heap-buffer overflow read around the handling of images with separate alpha channels when performing image magnification in ReadOneMNGIMage. This can likely be used to leak subsequent memory contents into the output image. This issue has been patched in version 7.1.2-1.
CVSS Score: 7.6 (HIGH)
CWE: CWE-122
References: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw; https://goo.gle/bigsleep; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-cjc8-g9w8-chfw
CVE: CVE-2025-55005
Published: 2025-08-13
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to version 7.1.2-1, when preparing to transform from Log to sRGB colorspaces, the logmap construction fails to handle cases where the reference-black or reference-white value is larger than 1024. This leads to corrupting memory beyond the end of the allocated logmap buffer. This issue has been patched in version 7.1.2-1.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-122
References: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp; https://goo.gle/bigsleep; https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-v393-38qx-v8fp
CVE: CVE-2025-55154
Published: 2025-08-13
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, the magnified size calculations in ReadOneMNGIMage (in coders/png.c) are unsafe and can overflow, leading to memory corruption. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.
CVSS Score: 8.8 (HIGH)
CWE: CWE-190
References: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-qp29-wxp5-wh82; https://goo.gle/bigsleep; https://lists.debian.org/debian-lts-announce/2025/09/msg00012.html
CVE: CVE-2025-55160
Published: 2025-08-13
Description: ImageMagick is free and open-source software used for editing and manipulating digital images. Prior to versions 6.9.13-27 and 7.1.2-1, there is undefined behavior (function-type-mismatch) in splay tree cloning callback. This results in a deterministic abort under UBSan (DoS in sanitizer builds), with no crash in a non-sanitized build. This issue has been patched in versions 6.9.13-27 and 7.1.2-1.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-758
References: https://github.com/ImageMagick/ImageMagick/security/advisories/GHSA-6hgw-6x87-578x
CVE: CVE-2025-55668
Published: 2025-08-13
Description: Session Fixation vulnerability in Apache Tomcat via rewrite valve.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105.
Older, EOL versions may also be affected.

Users are recommended to upgrade to version 11.0.8, 10.1.42 or 9.0.106, which fix the issue.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-384
References: https://lists.apache.org/thread/v6bknr96rl7l1qxkl1c03v0qdvbbqs47; http://www.openwall.com/lists/oss-security/2025/08/13/3
CVE: CVE-2025-46405
Published: 2025-08-13
Description: When Network Access is configured on a BIG-IP APM virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate.

 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-121
References: https://my.f5.com/manage/s/article/K000151546
CVE: CVE-2025-48500
Published: 2025-08-13
Description: A missing file integrity check vulnerability exists on MacOS F5 VPN browser client installer that may allow a local, authenticated attacker with access to the local file system to replace it with a malicious package installer. 
Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.3 (HIGH)
CWE: CWE-353
References: https://my.f5.com/manage/s/article/K000151782
CVE: CVE-2025-50251
Published: 2025-08-13
Description: Server side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password recovery.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-918
References: https://packetstorm.news/files/id/190475/; https://www.exploit-db.com/exploits/52211
CVE: CVE-2025-50635
Published: 2025-08-13
Description: A null pointer dereference vulnerability was discovered in Netis WF2780 v2.2.35445. The vulnerability exists in the FUN_0048a728 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the CONTENT_LENGTH variable, causing the program to crash and potentially leading to a denial-of-service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/Chinesexilinyu/Netis-WF2780-cgitest.cgi-Vulnerability/tree/main/1
CVE: CVE-2025-50690
Published: 2025-08-13
Description: A Cross-Site Scripting (XSS) vulnerability exists in SpatialReference.org (OSGeo/spatialreference.org) versions prior to 2025-05-17 (commit 2120adfa17ddd535bd0f539e6c4988fa3a2cb491). The vulnerability is caused by improper handling of user input in the search query parameter. An attacker can craft a specially formed URL with malicious JavaScript code, which is then reflected back and executed in the victim's browser. This flaw allows an attacker to execute arbitrary JavaScript in the context of the victim's session, potentially leading to session hijacking, phishing attacks, data theft, or redirection to malicious sites. The issue is exposed on publicly accessible pages, making it exploitable by an unauthenticated attacker.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/OSGeo/spatialreference.org; https://medium.com/@Justinsecure/cracking-open-a-reflected-xss-in-spatialreference-org-fcc42175ae6b
CVE: CVE-2025-51691
Published: 2025-08-13
Description: Cross-Site Scripting (XSS) vulnerability found in MarkTwo commit e3a1d3f90cce4ea9c26efcbbf3a1cbfb9dcdb298 (May 2025) allows a remote attacker to execute arbitrary code via a crafted script input to the editor interface. The application does not properly sanitize user-supplied Markdown before rendering it. Successful exploitation could lead to session hijacking, credential theft, or arbitrary client-side code execution in the context of the victim's browser.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/0x72303074/CVE-Disclosures/tree/main/MarkTwo%20Markdown%20Editor/CVE-2025-51691; https://github.com/anthonygarvan/marktwo; https://marktwo.app/try-it-now
CVE: CVE-2025-52585
Published: 2025-08-13
Description: When a BIG-IP LTM Client SSL profile is configured on a virtual server with SSL Forward Proxy enabled and Anonymous Diffie-Hellman (ADH) ciphers enabled, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.

 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://my.f5.com/manage/s/article/K000141436
CVE: CVE-2025-53859
Published: 2025-08-13
Description: NGINX Open Source and NGINX Plus have a vulnerability in the ngx_mail_smtp_module that might allow an unauthenticated attacker to over-read NGINX SMTP authentication process memory; as a result, the server side may leak arbitrary bytes sent in a request to the authentication server. This issue happens during the NGINX SMTP authentication process and requires the attacker to make preparations against the target system to extract the leaked data. The issue affects NGINX only if (1) it is built with the ngx_mail_smtp_module, (2) the smtp_auth directive is configured with method "none," and (3) the authentication server returns the "Auth-Wait" response header.




Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 3.7 (LOW)
CWE: CWE-125
References: https://my.f5.com/manage/s/article/K000152786; http://www.openwall.com/lists/oss-security/2025/08/13/5
CVE: CVE-2025-54500
Published: 2025-08-13
Description: An HTTP/2 implementation flaw allows a denial-of-service (DoS) that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit (HTTP/2 MadeYouReset Attack). 

Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-770
References: https://my.f5.com/manage/s/article/K000152001; https://www.kb.cert.org/vuls/id/767506
CVE: CVE-2025-54809
Published: 2025-08-13
Description: F5 Access for Android before version 3.1.2 which uses HTTPS does not verify the remote endpoint identity.

 


Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.
CVSS Score: 7.4 (HIGH)
CWE: CWE-295
References: https://my.f5.com/manage/s/article/K000152049
CVE: CVE-2025-55163
Published: 2025-08-13
Description: Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames in order to break the max concurrent streams limit - which results in resource exhaustion and distributed denial of service. This issue has been patched in versions 4.1.124.Final and 4.2.4.Final.
CVSS Score: 7.5 (HIGH)
CWE: CWE-770
References: https://github.com/netty/netty/security/advisories/GHSA-prj3-ccx8-p6x4; http://www.openwall.com/lists/oss-security/2025/08/16/1; https://www.kb.cert.org/vuls/id/767506
CVE: CVE-2025-8941
Published: 2025-08-13
Description: A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to root. This CVE provides a "complete" fix for CVE-2025-6020.
CVSS Score: 7.8 (HIGH)
CWE: CWE-22
References: https://access.redhat.com/errata/RHSA-2025:14557; https://access.redhat.com/errata/RHSA-2025:15099; https://access.redhat.com/errata/RHSA-2025:15100
CVE: CVE-2025-50608
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00471994 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/1
CVE: CVE-2025-50609
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the Function_00465620 of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of specify_parame in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/2
CVE: CVE-2025-50610
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00476598 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_base_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/3
CVE: CVE-2025-50611
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00473154 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set_5g and wl_sec_rp_set_5g in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/4
CVE: CVE-2025-50612
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_004743f8 function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wl_sec_set in the payload, which may cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/5
CVE: CVE-2025-50613
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in Netis WF2880 v2.1.40207 in the FUN_00475e1c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_key_wep in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/6
CVE: CVE-2025-50614
Published: 2025-08-13
Description: A buffer overflow vulnerability has been discovered in the Netis WF2880 v2.1.40207 in the FUN_0047151c function of the cgitest.cgi file. Attackers can trigger this vulnerability by controlling the value of wds_set in the payload, which can cause the program to crash and potentially lead to a Denial of Service (DoS) attack.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: https://github.com/Chinesexilinyu/Netis-WF2880-cgitest.cgi-Vulnerability/tree/main/7
CVE: CVE-2025-51452
Published: 2025-08-13
Description: In TOTOLINK A7000R firmware 9.1.0u.6115_B20201022, an attacker can bypass login by sending a specific request through formLoginAuth.htm.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-288
References: http://a7000rfirmware.com; https://gist.github.com/lin-3-start/5b20f6fbe3aa0c3fc75f320cd589182a; https://www.totolink.net/home/menu/detail/menu_listtpl/download/id/171/ids/36.html