deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-7085
Published: 2025-07-06
Description: A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. This issue affects the function formiNICWpsStart of the file /goform/formiNICWpsStart of the component webs. The manipulation of the argument pinCode leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_5/5.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_5/5.md#poc; https://vuldb.com/?ctiid.314999
CVE: CVE-2025-7086
Published: 2025-07-06
Description: A vulnerability classified as critical has been found in Belkin F9K1122 1.00.33. Affected is the function formPPTPSetup of the file /goform/formPPTPSetup of the component webs. The manipulation of the argument pptpUserName leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_6/6.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_6/6.md#poc; https://vuldb.com/?ctiid.315000
CVE: CVE-2025-7087
Published: 2025-07-06
Description: A vulnerability classified as critical was found in Belkin F9K1122 1.00.33. Affected by this vulnerability is the function formL2TPSetup of the file /goform/formL2TPSetup of the component webs. The manipulation of the argument L2TPUserName leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_7/7.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_7/7.md#poc; https://vuldb.com/?ctiid.315001
CVE: CVE-2025-7088
Published: 2025-07-06
Description: A vulnerability, which was classified as critical, was found in Belkin F9K1122 1.00.33. This affects the function formPPPoESetup of the file /goform/formPPPoESetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_8/8.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_8/8.md#poc; https://vuldb.com/?ctiid.315003
CVE: CVE-2025-7089
Published: 2025-07-06
Description: A vulnerability was found in Belkin F9K1122 1.00.33 and classified as critical. This issue affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup of the component webs. The manipulation of the argument pppUserName leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_9/9.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_9/9.md#poc; https://vuldb.com/?ctiid.315005
CVE: CVE-2025-7090
Published: 2025-07-06
Description: A vulnerability, which was classified as critical, has been found in Belkin F9K1122 1.00.33. Affected by this issue is the function formConnectionSetting of the file /goform/formConnectionSetting of the component webs. The manipulation of the argument max_Conn/timeOut leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_10/10.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_10/10.md#poc; https://vuldb.com/?ctiid.315002
CVE: CVE-2025-7091
Published: 2025-07-06
Description: A vulnerability was found in Belkin F9K1122 1.00.33. It has been classified as critical. Affected is the function formWlanMP of the file /goform/formWlanMP of the component webs. The manipulation of the argument ateFunc/ateGain/ateTxCount/ateChan/ateRate/ateMacID/e2pTxPower1/e2pTxPower2/e2pTxPower3/e2pTxPower4/e2pTxPower5/e2pTxPower6/e2pTxPower7/e2pTx2Power1/e2pTx2Power2/e2pTx2Power3/e2pTx2Power4/e2pTx2Power5/e2pTx2Power6/e2pTx2Power7/ateTxFreqOffset/ateMode/ateBW/ateAntenna/e2pTxFreqOffset/e2pTxPwDeltaB/e2pTxPwDeltaG/e2pTxPwDeltaMix/e2pTxPwDeltaN/readE2P leads to stack-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_11/11.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_11/11.md#poc; https://vuldb.com/?ctiid.315006
CVE: CVE-2025-7092
Published: 2025-07-06
Description: A vulnerability has been found in Belkin F9K1122 1.00.33 and classified as critical. This vulnerability affects the function formWlanSetupWPS of the file /goform/formWlanSetupWPS of the component webs. The manipulation of the argument wps_enrolee_pin/webpage leads to stack-based buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_12/12.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_12/12.md#poc; https://vuldb.com/?ctiid.315004
CVE: CVE-2025-7093
Published: 2025-07-06
Description: A vulnerability was found in Belkin F9K1122 1.00.33. It has been declared as critical. Affected by this vulnerability is the function formSetLanguage of the file /goform/formSetLanguage of the component webs. The manipulation of the argument webpage leads to stack-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_13/13.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_13/13.md#poc; https://vuldb.com/?ctiid.315007
CVE: CVE-2025-7094
Published: 2025-07-06
Description: A vulnerability was found in Belkin F9K1122 1.00.33. It has been rated as critical. Affected by this issue is the function formBSSetSitesurvey of the file /goform/formBSSetSitesurvey of the component webs. The manipulation of the argument submit-url-ok leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.8 (HIGH)
CWE: CWE-119, CWE-121
References: https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_14/14.md; https://github.com/wudipjq/my_vuln/blob/main/Belkin/vuln_14/14.md#poc; https://vuldb.com/?ctiid.315008
CVE: CVE-2025-7095
Published: 2025-07-06
Description: A vulnerability classified as critical has been found in Comodo Internet Security Premium 12.3.4.8162. This affects an unknown part of the component Update Handler. The manipulation leads to improper certificate validation. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.7 (LOW)
CWE: CWE-287, CWE-295, CWE-295
References: https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing; https://vuldb.com/?ctiid.315009; https://vuldb.com/?id.315009
CVE: CVE-2025-7096
Published: 2025-07-06
Description: A vulnerability classified as critical was found in Comodo Internet Security Premium 12.3.4.8162. This vulnerability affects unknown code of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation leads to improper validation of integrity check value. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.1 (HIGH)
CWE: CWE-345, CWE-354, CWE-354
References: https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing; https://vuldb.com/?ctiid.315010; https://vuldb.com/?id.315010
CVE: CVE-2025-3108
Published: 2025-07-06
Description: A critical deserialization vulnerability exists in the run-llama/llama_index library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer prioritizes deserialization using pickle.loads(), which can execute arbitrary code when processing untrusted data. Attackers can exploit this by crafting malicious payloads to achieve full system compromise. The root cause includes an insecure fallback mechanism, lack of validation or safeguards, misleading design, and violation of Python security guidelines.
CVSS Score: 7.5 (HIGH)
CWE: CWE-1112
References: https://github.com/run-llama/llama_index/commit/702e[PII_REDACTED]fac4cf2fe95eb[PII_REDACTED]da3; https://huntr.com/bounties/9b55a5e8-74e6-4241-b323-e360dc8b110a
CVE: CVE-2025-7097
Published: 2025-07-06
Description: A vulnerability, which was classified as critical, has been found in Comodo Internet Security Premium 12.3.4.8162. This issue affects some unknown processing of the file cis_update_x64.xml of the component Manifest File Handler. The manipulation of the argument binary/params leads to os command injection. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 8.1 (HIGH)
CWE: CWE-77, CWE-78, CWE-78
References: https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing; https://vuldb.com/?ctiid.315011; https://vuldb.com/?id.315011
CVE: CVE-2025-7098
Published: 2025-07-06
Description: A vulnerability, which was classified as critical, was found in Comodo Internet Security Premium 12.3.4.8162. Affected is an unknown function of the component File Name Handler. The manipulation of the argument name/folder leads to path traversal. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-22
References: https://drive.google.com/file/d/1qnWarYsTSc5_sV6o8ULv0LBvGfKKXPxn/view?usp=sharing; https://vuldb.com/?ctiid.315012; https://vuldb.com/?id.315012
CVE: CVE-2025-7099
Published: 2025-07-07
Description: A vulnerability has been found in BoyunCMS up to 1.21 on PHP7 and classified as critical. Affected by this vulnerability is an unknown functionality of the file install/install2.php of the component Installation Handler. The manipulation of the argument db_host leads to deserialization. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
CVSS Score: 5.6 (MEDIUM)
CWE: CWE-20, CWE-502, CWE-502
References: https://note-hxlab.wetolink.com/share/cQGEOmctNARD; https://vuldb.com/?ctiid.315013; https://vuldb.com/?id.315013
CVE: CVE-2025-7100
Published: 2025-07-07
Description: A vulnerability was found in BoyunCMS up to 1.4.20 and classified as critical. Affected by this issue is some unknown functionality of the file /application/user/controller/Index.php. The manipulation of the argument image leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-284, CWE-434, CWE-434
References: https://note-hxlab.wetolink.com/share/KLjaD7oBzCSp; https://vuldb.com/?ctiid.315014; https://vuldb.com/?id.315014
CVE: CVE-2025-7101
Published: 2025-07-07
Description: A vulnerability was found in BoyunCMS up to 1.4.20. It has been classified as critical. This affects an unknown part of the file /install/install_ok.php of the component Configuration File Handler. The manipulation of the argument db_pass leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-94, CWE-94
References: https://note-hxlab.wetolink.com/share/6wemW8CnOMbu; https://vuldb.com/?ctiid.315015; https://vuldb.com/?id.315015
CVE: CVE-2025-7102
Published: 2025-07-07
Description: A vulnerability was found in BoyunCMS up to 1.4.20. It has been declared as critical. This vulnerability affects unknown code of the file application/update/controller/Server.php. The manipulation of the argument phone leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89, CWE-89
References: https://note-hxlab.wetolink.com/share/sEjaSsXWRNz1; https://vuldb.com/?ctiid.315016; https://vuldb.com/?id.315016
CVE: CVE-2025-7103
Published: 2025-07-07
Description: A vulnerability was found in BoyunCMS up to 1.4.20. It has been rated as critical. This issue affects some unknown processing of the file /application/pay/controller/Index.php of the component curl. The manipulation leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-918
References: https://note-hxlab.wetolink.com/share/gRI0WyQLQsmd; https://vuldb.com/?ctiid.315017; https://vuldb.com/?id.315017
CVE: CVE-2024-58117
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53167
Published: 2025-07-07
Description: Authentication vulnerability in the distributed collaboration framework module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-305
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53168
Published: 2025-07-07
Description: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras
Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-275
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53169
Published: 2025-07-07
Description: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras
Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.
CVSS Score: 7.6 (HIGH)
CWE: CWE-287
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53170
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the application exit cause module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53171
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53172
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53173
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53174
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53175
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53176
Published: 2025-07-07
Description: Stack overflow risk when vector images are parsed during file preview
Impact: Successful exploitation of this vulnerability may affect the file preview function.
CVSS Score: 3.3 (LOW)
CWE: CWE-121
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53177
Published: 2025-07-07
Description: Permission bypass vulnerability in the calendar storage module
Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.
CVSS Score: 3.9 (LOW)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53178
Published: 2025-07-07
Description: Permission bypass vulnerability in the calendar storage module
Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53179
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53180
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53181
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53182
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53183
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53184
Published: 2025-07-07
Description: Null pointer dereference vulnerability in the PDF preview module
Impact: Successful exploitation of this vulnerability may affect function stability.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-122, CWE-476
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53185
Published: 2025-07-07
Description: Virtual address reuse issue in the memory management module, which can be exploited by non-privileged users to access released memory
Impact: Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-53186
Published: 2025-07-07
Description: Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module
Impact: Successful exploitation of this vulnerability may affect availability.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-264
References: https://consumer.huawei.com/en/support/bulletin/2025/7/
CVE: CVE-2025-7107
Published: 2025-07-07
Description: A vulnerability classified as critical has been found in SimStudioAI sim up to 0.1.17. Affected is the function handleLocalFile of the file apps/sim/app/api/files/parse/route.ts. The manipulation of the argument filePath leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The patch is identified as b2450530d1ddd0397a11001a72aa0fde401db16a. It is recommended to apply a patch to fix this issue.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-22
References: https://github.com/simstudioai/sim/commit/b2450530d1ddd0397a11001a72aa0fde401db16a; https://github.com/simstudioai/sim/pull/437; https://github.com/vri-report/reports/issues/2
CVE: CVE-2025-7108
Published: 2025-07-07
Description: A vulnerability classified as critical was found in risesoft-y9 Digital-Infrastructure up to 9.6.7. Affected by this vulnerability is the function deleteFile of the file /Digital-Infrastructure-9.6.7/y9-digitalbase-webapp/y9-module-filemanager/risenet-y9boot-webapp-filemanager/src/main/java/net/risesoft/y9public/controller/Y9FileController.java. The manipulation of the argument fullPath leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250621-01.md; https://vuldb.com/?ctiid.315019; https://vuldb.com/?id.315019
CVE: CVE-2025-7109
Published: 2025-07-07
Description: A vulnerability, which was classified as problematic, has been found in Portabilis i-Educar 2.9.0. Affected by this issue is some unknown functionality of the file /intranet/educar_aluno_beneficio_lst.php of the component Student Benefits Registration. The manipulation of the argument Benefício leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS Score: 3.5 (LOW)
CWE: CWE-79, CWE-94
References: https://github.com/RaulPazemecxas/PoCVulDb/blob/main/README11.md; https://vuldb.com/?ctiid.315020; https://vuldb.com/?id.315020