rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-61121 
Mobile Scanner Android App version 2.12.38 (package name com.glority.everlens), developed by Glority Global Group Ltd., contains a credential leakage vulnerability. Improper handling of cloud service credentials may allow attackers to obtain them and carry out unauthorized actions, such as sensitive information disclosure and abuse of cloud resources. Successful exploitation could result in privacy breaches and misuse of the platform infrastructure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-30T00:00:00.000Z
CVE-2025-61128 
Stack-based buffer overflow vulnerability in WAVLINK QUANTUM D3G/WL-WN530HG3 firmware M30HG3_V240730, and possibly other wavlink models allows attackers to execute arbitrary code via crafted referrer value POST to login.cgi.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-28T00:00:00.000Z
CVE-2025-61132 
A Host Header Injection vulnerability in the password reset component in levlaz braindump v0.4.14 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's url_for(_external=True) generates reset links without a fixed SERVER_NAME.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-61136 
A Host Header Injection vulnerability in the password reset component in axewater sharewarez v2.4.3 allows remote attackers to conduct password reset poisoning and account takeover via manipulation of the Host header when Flask's url_for(_external=True) generates reset links without a fixed SERVER_NAME.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-61138 
Qlik Sense Enterprise v14.212.13 was discovered to contain an information leak via the /dev-hub/ directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-20T00:00:00.000Z
CVE-2025-61140 
The value function in jsonpath 1.1.1 lib/index.js is vulnerable to Prototype Pollution.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-01-28T00:00:00.000Z
CVE-2025-61141 
sqls-server/sqls 0.2.28 is vulnerable to command injection in the config command because the openEditor function passes the EDITOR environment variable and config file path to sh -c without sanitization, allowing attackers to execute arbitrary commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-30T00:00:00.000Z
CVE-2025-61143 
libtiff up to v4.7.1 was discovered to contain a NULL pointer dereference via the component libtiff/tif_open.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-23T00:00:00.000Z
CVE-2025-61144 
libtiff up to v4.7.1 was discovered to contain a stack overflow via the readSeparateStripsIntoBuffer function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-23T00:00:00.000Z
CVE-2025-61145 
libtiff up to v4.7.1 was discovered to contain a double free via the component tools/tiffcrop.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-23T00:00:00.000Z
CVE-2025-61146 
saitoha libsixel until v1.8.7 was discovered to contain a memory leak via the component malloc_stub.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-23T00:00:00.000Z
CVE-2025-61147 
strukturag libde265 commit d9fea9d wa discovered to contain a segmentation fault via the component decoder_context::compute_framedrop_table().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-23T00:00:00.000Z
CVE-2025-61148 
An Insecure Direct Object Reference (IDOR) vulnerability in the EduplusCampus 3.0.1 Student Payment API allows authenticated users to access other students personal and financial records by modifying the 'rec_no' parameter in the /student/get-receipt endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-04T00:00:00.000Z
CVE-2025-61152 
python-jose thru 3.3.0 allows JWT tokens with 'alg=none' to be decoded and accepted without any cryptographic signature verification. A malicious actor can craft a forged token with arbitrary claims (e.g., is_admin=true) and bypass authentication checks, leading to privilege escalation or unauthorized access in applications that rely on python-jose for token validation. This issue is exploitable unless developers explicitly reject 'alg=none' tokens, which is not enforced by the library. NOTE: all parties agree that the issue is not relevant because it only occurs in a "verify_signature": False situation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-10T00:00:00.000Z
CVE-2025-61154 
Heap buffer overflow vulnerability in LibreDWG versions v0.13.3.7571 up to v0.13.3.7835 allows a crafted DWG file to cause a Denial of Service (DoS) via the function decompress_R2004_section at decode.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-12T00:00:00.000Z
CVE-2025-61155 
The GameDriverX64.sys kernel-mode anti-cheat driver (v7.23.4.7 and earlier) contains an access control vulnerability in one of its IOCTL handlers. A user-mode process can open a handle to the driver device and send specially crafted IOCTL requests. These requests are executed in kernel-mode context without proper authentication or access validation, allowing the attacker to terminate arbitrary processes, including critical system and security services, without requiring administrative privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-28T00:00:00.000Z
CVE-2025-61156 
Incorrect access control in the kernel driver of ThreatFire System Monitor v4.7.0.53 allows attackers to escalate privileges and execute arbitrary commands via an insecure IOCTL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-29T00:00:00.000Z
CVE-2025-61161 
DLL hijacking vulnerability in Evope Collector 1.1.6.9.0 and related components load the wtsapi32.dll library from an uncontrolled search path (C:\ProgramData\Evope). This allows local unprivileged attackers to execute arbitrary code or escalate privileges to SYSTEM by placing a crafted DLL in that location. The vulnerable component is Evope.Service.exe, which runs with SYSTEM privileges and automatically loads the DLL on startup or reboot.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-29T00:00:00.000Z
CVE-2025-61166 
An open redirect in Ascertia SigningHub User v10.0 allows attackers to redirect users to a malicious site via a crafted URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-06T00:00:00.000Z
CVE-2025-61167 
SIGB PMB v8.0.1.14 was discovered to contain multiple SQL injection vulnerabilities in the /opac_css/ajax_selector.php component via the id and datas parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-25T00:00:00.000Z
CVE-2025-61168 
An issue in the cms_rest.php component of SIGB PMB v8.0.1.14 allows attackers to execute arbitrary code via unserializing an arbitrary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-25T00:00:00.000Z
CVE-2025-61181 
daicuocms V1.3.13 contains an arbitrary file upload vulnerability in the image upload feature.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-21T00:00:00.000Z
CVE-2025-61183 
Cross Site Scripting in vaahcms v.2.3.1 allows a remote attacker to execute arbitrary code via upload method in the storeAvatar() method of UserBase.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-08T00:00:00.000Z
CVE-2025-61188 
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-01T00:00:00.000Z
CVE-2025-61189 
Jeecgboot versions 3.8.2 and earlier are affected by a path traversal vulnerability. The endpoint is /sys/comment/addFile. This vulnerability allows attackers to upload files with system-whitelisted extensions to the system directory /opt, instead of the /opt/upFiles directory specified by the web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-01T00:00:00.000Z
CVE-2025-61190 
A Reflected Cross-Site Scripting (XSS) vulnerability has been identified in DSpace JSPUI 6.5 within the search/discover filtering functionality. The vulnerability exists due to improper sanitization of user-supplied input via the filter_type_1 parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-27T00:00:00.000Z
CVE-2025-61194 
daicuocms V1.3.13 contains a SQL injection vulnerability in the file library\think\db\Builder.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-21T00:00:00.000Z
CVE-2025-61196 
An issue in BusinessNext CRMnext v.10.8.3.0 allows a remote attacker to execute arbitrary code via the comments input parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-30T00:00:00.000Z
CVE-2025-61197 
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 allows a remote attacker to escalate privileges via the application stores user privilege/role information in client-side browser storage
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-06T00:00:00.000Z
CVE-2025-61198 
A stored cross-site scripting (XSS) vulnerability in Optimod 5950 - Optimod 5950HD - Optimod 5750 - Optimod 5750HD - Optimod Trio - Optimod version 1.0.0.33 - System version 2.5.26, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the logs which would be returned in logs rendered in the UI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-06T00:00:00.000Z
CVE-2025-61220 
The incomplete verification mechanism in the AutoBizLine com.mysecondline.app 1.2.91 allows attackers to log in as other users and gain unauthorized access to their personal information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-21T00:00:00.000Z
CVE-2025-61224 
Cross Site Scripting vulnerability in DokuWiki 2025-05-14a 'Librarian'[56.1] allows a remote attacker to execute arbitrary code via the q parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
CVSS v3.1: version: 3.1
vectorString: CVSS:3.1/AC:L/AV:N/A:N/C:H/I:N/PR:N/S:U/UI:R
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 6.5
baseSeverity: MEDIUM
Published: 2025-10-06T00:00:00.000Z
CVE-2025-61228 
An issue in Shirt Pocket SuperDuper! V.3.10 and before allows a local attacker to execute arbitrary code via the software update mechanism
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-01T00:00:00.000Z
CVE-2025-61229 
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-01T00:00:00.000Z
CVE-2025-61234 
Incorrect access control on Dataphone A920 v2025.07.161103 exposes a service on port 8888 by default on the local network without authentication. This allows an attacker to interact with the device via a TCP socket without credentials. Additionally, sending an HTTP request to the service on port 8888 triggers an error in the response, which exposes the functionality, headers identifying Paytef dataphone packets, and the build version.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-29T00:00:00.000Z
CVE-2025-61235 
An issue was discovered in Dataphone A920 v2025.07.161103. A custom packet based on public documentation can be crafted, where some fields can contain arbitrary or trivial data. Normally, such data should cause the device to reject the packet. However, due to a lack of validation, the device accepts it with no authetication and triggers the functionality instead.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-28T00:00:00.000Z
CVE-2025-61246 
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in master/review_action.php via the proId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-01-08T00:00:00.000Z
CVE-2025-61247 
indieka900 online-shopping-system-php 1.0 is vulnerable to SQL Injection in the password parameter of login.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-27T00:00:00.000Z
CVE-2025-61255 
Bank Locker Management System by PHPGurukul is affected by a Cross-Site Scripting (XSS) vulnerability via the /search parameter, where unsanitized input allows arbitrary HTML and JavaScript injection, potentially resulting in information disclosure and user redirection.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-21T00:00:00.000Z
CVE-2025-61258 
Outsystems Platform Server 11.18.1.37828 allows attackers to cause a denial of service via a crafted content-length value mismatching the body length. NOTE: the Supplier indicates that they are unable to reproduce this.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-09T00:00:00.000Z
CVE-2025-61260 
A vulnerability was identified in OpenAI Codex CLI v0.23.0 and before that enables code execution through malicious MCP (Model Context Protocol) configuration files. The attack is triggered when a user runs the codex command inside a malicious or compromised repository. Codex automatically loads project-local .env and .codex/config.toml files without requiring user confirmation, allowing attackers to embed arbitrary commands that execute immediately.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-14T00:00:00.000Z
CVE-2025-61261 
A reflected cross-site scripting (XSS) vulnerability in CKeditor v46.1.0 & Angular v18.0.0 allows attackers to execute arbitrary code in the context of a user's browser via injecting a crafted payload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-07T00:00:00.000Z
CVE-2025-61301 
Denial-of-analysis in reporting/mongodb.py and reporting/jsondump.py in CAPEv2 (commit 52e4b43, on 2025-05-17) allows attackers who can submit samples to cause incomplete or missing behavioral analysis reports by generating deeply nested or oversized behavior data that trigger MongoDB BSON limits or orjson recursion errors when the sample executes in the sandbox.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-20T00:00:00.000Z
CVE-2025-61303 
Hatching Triage Sandbox Windows 10 build 2004 (2025-08-14) and Windows 10 LTSC 2021(2025-08-14) contains a vulnerability in its Windows behavioral analysis engine that allows a submitted malware sample to evade detection and cause denial-of-analysis. The vulnerability is triggered when a sample recursively spawns a large number of child processes, generating high log volume and exhausting system resources. As a result, key malicious behavior, including PowerShell execution and reverse shell activity, may not be recorded or reported, misleading analysts and compromising the integrity and availability of sandboxed analysis results.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-20T00:00:00.000Z
CVE-2025-61304 
OS command injection vulnerability in Dynatrace ActiveGate ping extension up to 1.016 via crafted ip address.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-11-05T00:00:00.000Z
CVE-2025-61305 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_firmware.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61306 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_coveragealerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61307 
A reflected cross-site scripted (XSS) vulnerability in the acc-menu_papers.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61308 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_maintenance.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61309 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_departments.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61310 
A reflected cross-site scripted (XSS) vulnerability in the acc-menu_billings.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61311 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_alerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61312 
A reflected cross-site scripted (XSS) vulnerability in the acc-menu_pricess.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61313 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_markeralerts.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61314 
A reflected cross-site scripted (XSS) vulnerability in the dfm-menu_orderopt.php component of GmbH Mecury Managed Print Services (docuForm) v11.11c allows attackers to execute arbitrary Javascript in the context of a user's browser via injecting a crafted payload into an unfiltered variable value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-05-11T00:00:00.000Z
CVE-2025-61318 
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability. This vulnerability stems from the admin/template.php component and the admin/plugin.php component. They fail to perform path verification and dangerous code filtering for deletion parameters, allowing attackers to exploit this feature for directory traversal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-08T00:00:00.000Z
CVE-2025-61319 
ReNgine thru 2.2.0 is vulnerable to a Stored Cross-Site Scripting (XSS) vulnerability in the Vulnerabilities module. When scanning a target with an XSS payload, the unsanitized payload is rendered in the ReNgine web UI, resulting in arbitrary JavaScript execution in the victim's browser. This can be abused to steal session cookies, perform unauthorized actions, or compromise the ReNgine administrator's account.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-10T00:00:00.000Z
CVE-2025-61330 
A hard-coded weak password vulnerability has been discovered in all Magic-branded devices from Chinese network equipment manufacturer H3C. The vulnerability stems from the use of a hard-coded weak password for the root account in the /etc/shadow configuration or even the absence of any password at all. Some of these devices have the Telnet service enabled by default, or users can choose to enable the Telnet service in other device management interfaces (e.g. /debug.asp or /debug_telnet.asp). In addition, these devices have related interfaces called Virtual Servers, which can map the devices to the public network, posing the risk of remote attacks. Therefore, attackers can obtain the highest root privileges of the devices through the Telnet service using the weak password hardcoded in the firmware (or without a password), and remote attacks are possible.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-16T00:00:00.000Z
CVE-2025-61385 
SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-27T00:00:00.000Z
CVE-2025-61413 
A stored cross-site scripting (XSS) vulnerability in the /manager/pages component of Piranha CMS v12.0 allows attackers to execute arbitrary web scripts or HTML via creating a page and injecting a crafted payload into the Markdown blocks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-61417 
Cross-Site Scripting (XSS) vulnerability exists in TastyIgniter 3.7.7, affecting the /admin/media_manager component. Attackers can upload a malicious SVG file containing JavaScript code. When an administrator previews the file, the code executes in their browser context, allowing the attacker to perform unauthorized actions such as modifying the admin account credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-20T00:00:00.000Z