deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2025-8381
Published: 2025-07-31
Description: A vulnerability, which was classified as critical, has been found in Campcodes Online Hotel Reservation System 1.0. This issue affects some unknown processing of the file /add_reserve.php. The manipulation of the argument room_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/XiaoJiesecqwq/sql/issues/4; https://vuldb.com/?ctiid.318359; https://vuldb.com/?id.318359
CVE: CVE-2025-8382
Published: 2025-07-31
Description: A vulnerability, which was classified as critical, was found in Campcodes Online Hotel Reservation System 1.0. Affected is an unknown function of the file /admin/edit_room.php. The manipulation of the argument room_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-74, CWE-89
References: https://github.com/XiaoJiesecqwq/sql/issues/5; https://vuldb.com/?ctiid.318360; https://vuldb.com/?id.318360
CVE: CVE-2025-8401
Published: 2025-07-31
Description: The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.9.1 via the 'get_post_data' function. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including the content of private, password-protected, and draft posts and pages.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-285
References: https://plugins.trac.wordpress.org/browser/ht-mega-for-elementor/tags/2.9.1/htmega-blocks/includes/classes/Manage_Styles.php#L99; https://plugins.trac.wordpress.org/changeset/3336533/; https://www.wordfence.com/threat-intel/vulnerabilities/id/9540b339-3386-4ee8-8141-acb9f3d83772?source=cve
CVE: CVE-2025-8213
Published: 2025-07-31
Description: The NinjaScanner – Virus & Malware scan plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'nscan_ajax_quarantine' and 'nscan_quarantine_select' functions in all versions up to, and including, 3.2.5. This makes it possible for authenticated attackers, with Administrator-level access and above, to delete arbitrary files on the server, including files outside the WordPress root directory.
CVSS Score: 7.2 (HIGH)
CWE: CWE-36
References: https://plugins.trac.wordpress.org/browser/ninjascanner/trunk/lib/ajax_hooks.php#L331; https://plugins.trac.wordpress.org/browser/ninjascanner/trunk/lib/tab_quarantine.php#L114; https://plugins.trac.wordpress.org/changeset/3336569/
CVE: CVE-2025-54589
Published: 2025-07-31
Description: Copyparty is a portable file server. In versions 1.18.6 and below, when accessing the recent uploads page at `/?ru`, users can filter the results using an input field at the top. This field appends a filter parameter to the URL, which reflects its value directly into a `<script>` block without proper escaping, allowing for reflected Cross-Site Scripting (XSS) and can be exploited against both authenticated and unauthenticated users. This is fixed in version 1.18.7.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/9001/copyparty/commit/a8705e611d05eeb22be5d3d7d9ab5c020fe54c62; https://github.com/9001/copyparty/releases/tag/v1.18.7; https://github.com/9001/copyparty/security/advisories/GHSA-8mx2-rjh8-q3jq
CVE: CVE-2025-7738
Published: 2025-07-31
Description: A flaw was found in Ansible Automation Platform (AAP) where the Gateway API returns the client secret for certain GitHub Enterprise authenticators in clear text. This vulnerability affects administrators or auditors accessing authenticator configurations. While access is limited to privileged users, the clear text exposure of sensitive credentials increases the risk of accidental leaks or misuse.
CVSS Score: 4.4 (MEDIUM)
CWE: CWE-312
References: https://access.redhat.com/errata/RHSA-2025:12772; https://access.redhat.com/security/cve/CVE-2025-7738; https://bugzilla.redhat.com/show_bug.cgi?id=2381589
CVE: CVE-2025-8407
Published: 2025-07-31
Description: A vulnerability, which was classified as critical, has been found in code-projects Vehicle Management 1.0. This issue affects some unknown processing of the file /filter2.php. The manipulation of the argument from leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
CVSS Score: 7.3 (HIGH)
CWE: CWE-74, CWE-89
References: https://code-projects.org/; https://github.com/wllovemy/cve/issues/3; https://vuldb.com/?ctiid.318395
CVE: CVE-2011-10008
Published: 2025-07-31
Description: A stack-based buffer overflow vulnerability exists in MPlayer Lite r33064 due to improper bounds checking when handling M3U playlist files containing long http:// URL entries. An attacker can craft a malicious .m3u file with a specially formatted URL that triggers a stack overflow when processed by the player, particularly via drag-and-drop interaction. This flaw allows for control of the execution flow through SEH overwrite and a DEP bypass using a ROP chain that leverages known gadgets in loaded DLLs. Successful exploitation may result in arbitrary code execution with the privileges of the current user.
CWE: CWE-20, CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/mplayer_m3u_bof.rb; https://www.exploit-db.com/exploits/17013; https://www.vulncheck.com/advisories/mplayer-lite-r33064-m3u-stack-based-buffer-overflow
CVE: CVE-2012-10021
Published: 2025-07-31
Description: A stack-based buffer overflow vulnerability exists in D-Link DIR-605L Wireless N300 Cloud Router firmware versions 1.12 and 1.13 via the getAuthCode() function. The flaw arises from unsafe usage of sprintf() when processing user-supplied CAPTCHA data via the FILECODE parameter in /goform/formLogin. A remote unauthenticated attacker can exploit this to execute arbitrary code with root privileges on the device.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://forums.dlink.com/index.php?topic=51923.0; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/dlink_dir605l_captcha_bof.rb; https://web.archive.org/web/[PII_REDACTED]2554/http://www.devttys0.com/2012/10/exploiting-a-mips-stack-overflow/
CVE: CVE-2013-10033
Published: 2025-07-31
Description: An unauthenticated SQL injection vulnerability exists in Kimai version 0.9.2.x via the db_restore.php endpoint. The flaw allows attackers to inject arbitrary SQL queries into the dates[] POST parameter, enabling file write via INTO OUTFILE under specific environmental conditions. This can lead to remote code execution by writing a PHP payload to the web-accessible temporary directory. The vulnerability has been confirmed in versions including 0.9.2.beta, 0.9.2.1294.beta, and 0.9.2.1306-3.
CWE: CWE-89
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/kimai_sqli.rb; https://vulners.com/metasploit/MSF:EXPLOIT-UNIX-WEBAPP-KIMAI_SQLI-; https://www.exploit-db.com/exploits/25606
CVE: CVE-2013-10034
Published: 2025-07-31
Description: An unrestricted file upload vulnerability exists in Kaseya KServer versions prior to 6.3.0.2. The uploadImage.asp endpoint allows unauthenticated users to upload files to arbitrary paths via a crafted filename parameter in a multipart/form-data POST request. Due to the lack of authentication and input sanitation, an attacker can upload a file with an .asp extension to a web-accessible directory, which can then be invoked to execute arbitrary code with the privileges of the IUSR account. The vulnerability enables remote code execution without prior authentication and was resolved in version 6.3.0.2 by removing the vulnerable uploadImage.asp endpoint.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/http/kaseya_uploadimage_file_upload.rb; https://web.archive.org/web/[PII_REDACTED]3922/http://security-assessment.com/files/documents/advisory/Kaseya%20File%20Upload.pdf; https://www.exploit-db.com/exploits/29675
CVE: CVE-2013-10035
Published: 2025-07-31
Description: A code injection vulnerability exists in ProcessMaker Open Source versions 2.x when using the default 'neoclassic' skin. An authenticated user can execute arbitrary PHP code via multiple endpoints, including appFolderAjax.php, casesStartPage_Ajax.php, and cases_SchedulerGetPlugins.php, by supplying crafted POST requests to parameters such as action and params. These endpoints fail to validate user input and directly invoke PHP functions like system() with user-supplied parameters, enabling remote code execution. The vulnerability affects both Linux and Windows installations and is present in default configurations of versions including 2.0.23 through 2.5.1. The vulnerable skin cannot be removed through the web interface, and exploitation requires only valid user credentials.
CWE: CWE-94
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/processmaker_exec.rb; https://web.archive.org/web/[PII_REDACTED]3936/https://bugs.processmaker.com/view.php?id=13436; https://www.exploit-db.com/exploits/29325
CVE: CVE-2013-10036
Published: 2025-07-31
Description: A stack-based buffer overflow vulnerability exists in Beetel Connection Manager version PCW_BTLINDV1.0.0B04 when parsing the UserName parameter in the NetConfig.ini configuration file. A crafted .ini file containing an overly long UserName value can overwrite the Structured Exception Handler (SEH), leading to arbitrary code execution when the application processes the file.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/beetel_netconfig_ini_bof.rb; https://www.exploit-db.com/exploits/28969; https://www.fortiguard.com/encyclopedia/ips/37394/beetel-connection-manager-netconfig-username-buffer-overflow
CVE: CVE-2013-10037
Published: 2025-07-31
Description: An OS command injection vulnerability exists in WebTester version 5.x via the install2.php installation script. The parameters cpusername, cppassword, and cpdomain are passed directly to shell commands without sanitization. A remote unauthenticated attacker can exploit this flaw by sending a crafted HTTP POST request, resulting in arbitrary command execution on the underlying system with web server privileges.
CWE: CWE-78
References: https://advisories.checkpoint.com/defense/advisories/public/2014/cpai-2014-1620.html; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/webtester_exec.rb; https://sourceforge.net/p/webtesteronline/bugs/3/
CVE: CVE-2013-10038
Published: 2025-07-31
Description: An unauthenticated arbitrary file upload vulnerability exists in FlashChat versions 6.0.2 and 6.0.4 through 6.0.8. The upload.php endpoint fails to properly validate file types and authentication, allowing attackers to upload malicious PHP scripts. Once uploaded, these scripts can be executed remotely, resulting in arbitrary code execution as the web server user.
CWE: CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/flashchat_upload_exec.rb; https://www.exploit-db.com/exploits/28709; https://www.fortiguard.com/encyclopedia/ips/37342/flashchat-arbitrary-file-upload
CVE: CVE-2013-10039
Published: 2025-07-31
Description: A command injection vulnerability exists in GestioIP 3.0 commit ac67be and earlier in ip_checkhost.cgi. Crafted input to the 'ip' parameter allows attackers to execute arbitrary shell commands on the server via embedded base64-encoded payloads. Authentication may be required depending on deployment configuration.
CWE: CWE-78
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/multi/http/gestioip_exec.rb; https://sourceforge.net/p/gestioip/gestioip/ci/ac67be9fce5ee4c0438d27dfa5c1dcbca08c457c/; https://sourceforge.net/projects/gestioip/
CVE: CVE-2013-10040
Published: 2025-07-31
Description: ClipBucket version 2.6 and earlier contains a critical vulnerability in the ofc_upload_image.php script located at /admin_area/charts/ofc-library/. This endpoint allows unauthenticated users to upload arbitrary files, including executable PHP scripts. Once uploaded, the attacker can access the file via a predictable path and trigger remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: https://clipbucket.com/; https://github.com/arslancb/clipbucket; https://packetstorm.news/files/id/123480
CVE: CVE-2013-10042
Published: 2025-07-31
Description: A stack-based buffer overflow vulnerability exists in freeFTPd version 1.0.10 and earlier in the handling of the FTP PASS command. When an attacker sends a specially crafted password string, the application fails to validate input length, resulting in memory corruption. This can lead to denial of service or arbitrary code execution. Exploitation requires the anonymous user account to be enabled.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/ftp/freeftpd_pass.rb; https://www.exploit-db.com/exploits/27747; https://www.vulncheck.com/advisories/freeftpd-pass-command-stack-based-buffer-overflow
CVE: CVE-2013-10043
Published: 2025-07-31
Description: A vulnerability exists in OAstium VoIP PBX astium-confweb-2.1-25399 and earlier, where improper input validation in the logon.php script allows an attacker to bypass authentication via SQL injection. Once authenticated as an administrator, the attacker can upload arbitrary PHP code through the importcompany field in import.php, resulting in remote code execution. The malicious payload is injected into /usr/local/astium/web/php/config.php and executed with root privileges by triggering a configuration reload via sudo /sbin/service astcfgd reload. Successful exploitation leads to full system compromise.
CWE: CWE-89, CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/astium_sqli_upload.rb; https://www.exploit-db.com/exploits/23831; https://www.vulncheck.com/advisories/astium-voip-pbx-sqli-file-upload-rce
CVE: CVE-2014-125121
Published: 2025-07-31
Description: Array Networks vAPV (version 8.3.2.17) and vxAG (version 9.2.0.34) appliances are affected by a privilege escalation vulnerability caused by a combination of hardcoded SSH credentials (or SSH private key) and insecure permissions on a startup script. The devices ship with a default SSH login or a hardcoded DSA private key, allowing an attacker to authenticate remotely with limited privileges.


Once authenticated, an attacker can overwrite the world-writable /ca/bin/monitor.sh script with arbitrary commands. Since this script is executed with elevated privileges through the backend binary, enabling the debug monitor via backend -c "debug monitor on" triggers execution of the attacker's payload as root. This allows full system compromise.
CWE: CWE-732, CWE-798
References: https://packetstorm.news/files/id/125761; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ssh/array_vxag_vapv_privkey_privesc.rb; https://www.exploit-db.com/exploits/32440
CVE: CVE-2014-125122
Published: 2025-07-31
Description: A stack-based buffer overflow vulnerability exists in the tmUnblock.cgi endpoint of the Linksys WRT120N wireless router. The vulnerability is triggered by sending a specially crafted HTTP POST request with an overly long TM_Block_URL parameter to the endpoint. By exploiting this flaw, an unauthenticated remote attacker can overwrite memory in a controlled manner, enabling them to temporarily reset the administrator password of the device to a blank value. This grants unauthorized access to the router’s web management interface without requiring valid credentials.
CWE: CWE-121
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/admin/http/linksys_tmunblock_admin_reset_bof.rb; https://web.archive.org/web/[PII_REDACTED]3058/http://www.devttys0.com/2014/02/wrt120n-fprintf-stack-overflow/; https://www.exploit-db.com/exploits/31758
CVE: CVE-2014-125123
Published: 2025-07-31
Description: An unauthenticated SQL injection vulnerability exists in the Kloxo web hosting control panel (developed by LXCenter) prior to version 6.1.12. The flaw resides in the login-name parameter passed to lbin/webcommand.php, which fails to properly sanitize input, allowing an attacker to extract the administrator’s password from the backend database. After recovering valid credentials, the attacker can authenticate to the Kloxo control panel and leverage the Command Center feature (display.php) to execute arbitrary operating system commands as root on the underlying host system. This vulnerability was reported to be exploited in the wild in January 2014.
CWE: CWE-89
References: https://github.com/lxcenter/kloxo; https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/kloxo_sqli.rb; https://web.archive.org/web/[PII_REDACTED]5222/http://www.webhostingtalk.com/showthread.php?p=8996984
CVE: CVE-2014-125124
Published: 2025-07-31
Description: An unauthenticated remote command execution vulnerability exists in Pandora FMS versions up to and including 5.0RC1 via the Anyterm web interface, which listens on TCP port 8023. The anyterm-module endpoint accepts unsanitized user input via the p parameter and directly injects it into a shell command, allowing arbitrary command execution as the pandora user. In certain versions (notably 4.1 and 5.0RC1), the pandora user can elevate privileges to root without a password using a chain involving the artica user account. This account is typically installed without a password and is configured to run sudo without authentication. Therefore, full system compromise is possible without any credentials.
CWE: CWE-78, CWE-306
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/linux/http/pandora_fms_exec.rb; https://www.exploit-db.com/exploits/31518; https://www.vulncheck.com/advisories/pandora-fms-anyterm-unauth-command-injection
CVE: CVE-2014-125125
Published: 2025-07-31
Description: A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vulnerability resides in the handling of the filename parameter in the /xml/downloads endpoint, which fails to properly sanitize user input. An unauthenticated attacker can exploit this flaw by sending crafted HTTP requests containing directory traversal sequences to read arbitrary files outside the intended directory. The files returned by the vulnerable endpoint are deleted from the system after retrieval. This can lead to unauthorized disclosure of sensitive information such as SSL certificates and private keys, as well as unintended file deletion.
CWE: CWE-22, CWE-706
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/a10networks_ax_directory_traversal.rb; https://www.exploit-db.com/exploits/31261; https://www.vulncheck.com/advisories/a10-networks-ax-loadbalancer-path-traversal
CVE: CVE-2014-125126
Published: 2025-07-31
Description: An unrestricted file upload vulnerability exists in Simple E-Document versions 3.0 to 3.1 that allows an unauthenticated attacker to bypass authentication by sending a specific cookie header (access=3) with HTTP requests. The application’s upload mechanism fails to restrict file types and does not validate or sanitize user-supplied input, allowing attackers to upload malicious .php scripts. Authentication can be bypassed entirely by supplying a specially crafted cookie (access=3), granting access to the upload functionality without valid credentials. If file uploads are enabled on the server, the attacker can upload a web shell and gain remote code execution with the privileges of the web server user, potentially leading to full system compromise.
CWE: CWE-306, CWE-434
References: https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/webapp/simple_e_document_upload_exec.rb; https://sourceforge.net/projects/simplee-doc/; https://www.exploit-db.com/exploits/31264
CVE: CVE-2024-34328
Published: 2025-07-31
Description: An open redirect in Sielox AnyWare v2.1.2 allows attackers to execute a man-in-the-middle attack via a crafted URL.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-601
References: https://github.com/0xsu3ks/CVE-2024-34328; https://sielox.com
CVE: CVE-2025-29557
Published: 2025-07-31
Description: ExaGrid EX10 6.3 - 7.0.1.P08 is vulnerable to Incorrect Access Control in the MailConfiguration API endpoint, where users with operator-level privileges can issue an HTTP request to retrieve SMTP credentials, including plaintext passwords.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-284
References: https://github.com/0xsu3ks/CVE-2025-29557; https://www.exagrid.com/
CVE: CVE-2025-34146
Published: 2025-07-31
Description: A prototype pollution vulnerability exists in @nyariv/sandboxjs versions <= 0.8.23, allowing attackers to inject arbitrary properties into Object.prototype via crafted JavaScript code. This can result in a denial-of-service (DoS) condition or, under certain conditions, escape the sandboxed environment intended to restrict code execution. The vulnerability stems from insufficient prototype access checks in the sandbox’s executor logic, particularly in the handling of JavaScript function objects returned.
CWE: CWE-1321
References: https://gist.github.com/Hagrid29/9df27829a491080f923c4f6b8518d7e3; https://github.com/nyariv/SandboxJS/issues/31; https://www.npmjs.com/package/@nyariv/sandboxjs
CVE: CVE-2025-50270
Published: 2025-07-31
Description: A stored Cross Site Scripting (xss) vulnerability in the "content management" feature in AnQiCMS v.3.4.11 allows a remote attacker to execute arbitrary code via a crafted script to the title, categoryTitle, and tmpTag parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://gist.github.com/Baotong-Wu/1988181a78a797204a75d399af284f7c; https://github.com/fesiong/anqicms/issues/80
CVE: CVE-2025-50475
Published: 2025-07-31
Description: An OS command injection vulnerability exists in Russound MBX-PRE-D67F firmware version 3.1.6, allowing unauthenticated attackers to execute arbitrary commands as root via crafted input to the hostname parameter in network configuration requests. This vulnerability stems from improper neutralization of special elements used in an OS command within the network configuration handler, enabling remote code execution with the highest privileges.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: https://drive.google.com/file/d/1ZmZHzJKU-nrhFXd9w94aiGXYYYldtmni/view?usp=sharing; https://pastebin.com/ic8hkC5V; https://pastebin.com/raw/0U6F55G5
CVE: CVE-2025-50849
Published: 2025-07-31
Description: CS Cart 4.18.3 is vulnerable to Insecure Direct Object Reference (IDOR). The user profile functionality allows enabling or disabling stickers through a parameter (company_id) sent in the request. However, this operation is not properly validated on the server side. An authenticated user can manipulate the request to target other users' accounts and toggle the sticker setting by modifying the company_id or other object identifiers.
CVSS Score: 8.0 (HIGH)
CWE: CWE-639
References: http://cs.com; https://github.com/hackerwahab/CS-Cart-Vulns/blob/main/CVE-2025-50849.md