rainbutterfly/cve_corpus huggingface dataset:
CVE-2025-55834 
A Cross Site Scripting vulnerability in JeeWMS v.3.7 and before allows a remote attacker to obtain sensitive information via the logController.do component
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-16T00:00:00.000Z
CVE-2025-55835 
File Upload vulnerability in SueamCMS v.0.1.2 allows a remote attacker to execute arbitrary code via the lack of filtering.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-12T00:00:00.000Z
CVE-2025-55847 
Wavlink M86X3A_V240730 contains a buffer overflow vulnerability in the /cgi-bin/ExportAllSettings.cgi file. The vulnerability arises because the Cookie parameter does not properly validate the length of input data. Attackers can exploit this to execute arbitrary code or cause a denial of service (DoS) on the system
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-26T00:00:00.000Z
CVE-2025-55848 
An issue was discovered in DIR-823 firmware 20250416. There is an RCE vulnerability in the set_cassword settings interface, as the http_casswd parameter is not filtered by '&'to allow injection of reverse connection commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-26T00:00:00.000Z
CVE-2025-55849 
WeiPHP v5.0 and before is vulnerable to SQL Injection via the SucaiController.class.php file and the cancelTemplatee
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-08T00:00:00.000Z
CVE-2025-55852 
Tenda AC8 v16.03.34.06 is vulnerable to Buffer Overflow in the formWifiBasicSet function via the parameter security or security_5g.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-03T00:00:00.000Z
CVE-2025-55853 
SoftVision webPDF before 10.0.2 is vulnerable to Server-Side Request Forgery (SSRF). The PDF converter function does not check if internal or external resources are requested in the uploaded files and allows for protocols such as http:// and file:///. This allows an attacker to upload an XML or HTML file in the application, which when rendered to a PDF allows for internal port scanning and Local File Inclusion (LFI).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-02-19T00:00:00.000Z
CVE-2025-55885 
SQL Injection vulnerability in Alpes Recherche et Developpement ARD GEC en Lign before v.2025-04-23 allows a remote attacker to escalate privileges via the GET parameters in index.php
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-55886 
An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists in the `fe_uid` parameter of the payment history API endpoint. An authenticated attacker can manipulate this parameter to access the payment history of other users without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-55887 
Cross-Site Scripting (XSS) vulnerability was discovered in the meal reservation service ARD. The vulnerability exists in the transactionID GET parameter on the transaction confirmation page. Due to improper input validation and output encoding, an attacker can inject malicious JavaScript code that is executed in the context of a user s browser. This can lead to session hijacking, theft of cookies, and other malicious actions performed on behalf of the victim.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-55888 
Cross-Site Scripting (XSS) vulnerability was discovered in the Ajax transaction manager endpoint of ARD. An attacker can intercept the Ajax response and inject malicious JavaScript into the accountName field. This input is not properly sanitized or encoded when rendered, allowing script execution in the context of users browsers. This flaw could lead to session hijacking, cookie theft, and other malicious actions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-55893 
TOTOLINK N200RE V9.3.5u.6437_B20230519 is vulnerable to command Injection in setOpModeCfg via hostName.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-15T00:00:00.000Z
CVE-2025-55895 
TOTOLINK A3300R V17.0.0cu.557_B20221024 and N200RE V9.3.5u.6448_B20240521 and V9.3.5u.6437_B20230519 are vulnerable to Incorrect Access Control. Attackers can send payloads to the interface without logging in (remote).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-15T00:00:00.000Z
CVE-2025-55901 
TOTOLINK A3300R V17.0.0cu.596_B20250515 is vulnerable to command injection in the function NTPSyncWithHost via the host_time parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-15T00:00:00.000Z
CVE-2025-55903 
A HTML injection vulnerability exists in Perfex CRM v3.3.1. The application fails to sanitize user input in the "Bill To" address field within the estimate module. As a result, arbitrary HTML can be injected and rendered unescaped in client-facing documents.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-10T00:00:00.000Z
CVE-2025-55904 
Open5GS v2.7.5, prior to commit 67ba7f92bbd7a378954895d96d9d7b05d5b64615, is vulnerable to a NULL pointer dereference when a multipart/related HTTP POST request with an empty HTTP body is sent to the SBI of either AMF, AUSF, BSF, NRF, NSSF, PCF, SMF, UDM, or UDR, resulting in a denial of service. This occurs in the parse_multipart function in lib/sbi/message.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-17T00:00:00.000Z
CVE-2025-55910 
CMSEasy v7.7.8.0 and before is vulnerable to Arbitrary file deletion in database_admin.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-19T00:00:00.000Z
CVE-2025-55911 
An issue Clip Bucket v.5.5.2 Build#90 allows a remote attacker to execute arbitrary codes via the file_downloader.php and the file parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-18T00:00:00.000Z
CVE-2025-55912 
An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access controls in the upload handler
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-18T00:00:00.000Z
CVE-2025-55944 
Slink v1.4.9 allows stored cross-site scripting (XSS) via crafted SVG uploads. When a user views the shared image in a new browser tab, the embedded JavaScript executes. The issue affects both authenticated and unauthenticated users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-03T00:00:00.000Z
CVE-2025-55948 
This vulnerability fundamentally arises from yzcheng90 X-SpringBoot 6.0's implementation of role-based access control (RBAC) through dual dependency on frontend menu systems and backend permission tables, without enforcing atomic synchronization between these components. The critical flaw manifests when frontend menu updates (such as privilege revocation) fail to propagate to the backend permission table in real-time, creating a dangerous desynchronization. While users lose access to restricted functions through the web interface (as UI elements properly disappear), the stale permission records still validate unauthorized API requests when accessed directly through tools like Postman. Attackers exploiting this inconsistency can perform privileged operations including but not limited to: creating high-permission user accounts, accessing sensitive data beyond their clearance level, and executing admin-level commands.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-04T00:00:00.000Z
CVE-2025-55971 
TCL 65C655 Smart TV, running firmware version V8-R75PT01-LF1V269.001116 (Android TV, Kernel 5.4.242+), is vulnerable to a blind, unauthenticated Server-Side Request Forgery (SSRF) vulnerability via the UPnP MediaRenderer service (AVTransport:1). The device accepts unauthenticated SetAVTransportURI SOAP requests over TCP/16398 and attempts to retrieve externally referenced URIs, including attacker-controlled payloads. The blind SSRF allows for sending requests on behalf of the TV, which can be leveraged to probe for other internal or external services accessible by the device (e.g., 127.0.0.1:16XXX, LAN services, or internet targets), potentially enabling additional exploit chains.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-03T00:00:00.000Z
CVE-2025-55972 
A TCL Smart TV running a vulnerable UPnP/DLNA MediaRenderer implementation is affected by a remote, unauthenticated Denial of Service (DoS) condition. By sending a flood of malformed or oversized SetAVTransportURI SOAP requests to the UPnP control endpoint, an attacker can cause the device to become unresponsive. This denial persists as long as the attack continues and affects all forms of TV operation. Manual user control and even reboots do not restore functionality unless the flood stops.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-03T00:00:00.000Z
CVE-2025-55976 
Intelbras IWR 3000N 1.9.8 exposes the Wi-Fi password in plaintext via the /api/wireless endpoint. Any unauthenticated user on the local network can directly obtain the Wi-Fi network password by querying this endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-10T00:00:00.000Z
CVE-2025-55988 
An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-03-20T00:00:00.000Z
CVE-2025-55996 
Viber Desktop 25.6.0 is vulnerable to HTML Injection via the text parameter of the message compose/forward interface
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-12T00:00:00.000Z
CVE-2025-55998 
A cross-site scripting (XSS) vulnerability in Smart Search & Filter Shopify and BigCommerce apps allows a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into several filter parameter
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-08T00:00:00.000Z
CVE-2025-56005 
An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-01-20T00:00:00.000Z
CVE-2025-56007 
CRLF-injection in KeeneticOS before 4.3 at "/auth" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-56008 
Cross site scripting (XSS) vulnerability in KeeneticOS before 4.3 at "Wireless ISP" page allows attackers located near to the router to takeover the device via adding additional users with full permissions.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-56009 
Cross site request forgery (CSRF) vulnerability in KeeneticOS before 4.3 at "/rci" API endpoint allows attackers to take over the device via adding additional users with full permissions by managing the victim to open page with exploit.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-23T00:00:00.000Z
CVE-2025-56015 
In GenieACS 1.2.13, an unauthenticated access vulnerability exists in the NBI API endpoint.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2026-04-07T00:00:00.000Z
CVE-2025-56018 
SourceCodester Web-based Pharmacy Product Management System V1.0 is vulnerable to Cross Site Scripting (XSS) in Category Management via the category name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-30T00:00:00.000Z
CVE-2025-56019 
An insecure permission vulnerability exists in the Agasta Easytouch+ version 9.3.97 The device allows unauthorized mobile applications to connect via Bluetooth Low Energy (BLE) without authentication. Once an unauthorized connection is established, legitimate applications are unable to connect, causing a denial of service. The attack requires proximity to the device, making it exploitable from an adjacent network location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-10-02T00:00:00.000Z
CVE-2025-56074 
A SQL Injection vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-56075 
A SQL Injection vulnerability was discovered in the normal-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. This vulnerability allows remote attackers to execute arbitrary SQL code via the fromdate parameter in a POST request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-09-22T00:00:00.000Z
CVE-2025-56077 
OS Command Injection vulnerability in Ruijie RG-RAP2200(E) 247 2200 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56079 
OS Command Injection vulnerability in Ruijie RG-EW1300G EW1300G V1.00/V2.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56082 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the check_changes in file /usr/lib/lua/luci/controller/admin/common.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56083 
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_networkId_merge.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56084 
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56085 
OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56086 
OS Command Injection vulnerability in Ruijie RG-EW1200 EW_3.0(1)B11P227_EW1200_11130208RG-EW1200 V1.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56087 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the run_tcpdump in file /usr/lib/lua/luci/controller/admin/common_tcpdump.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56088 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_service in file /usr/lib/lua/luci/controller/admin/service.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56089 
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56090 
OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56091 
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56092 
OS Command Injection vulnerability in Ruijie X30 PRO V1 X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56093 
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the setWisp in file /usr/lib/lua/luci/modules/wireless.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56094 
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/host_access_delay.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56095 
OS Command Injection vulnerability in Ruijie RG-EW1200G PRO RG-EW1200G PRO V1.00/V2.00/V3.00/V4.00 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56096 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the restart_modules in file /usr/lib/lua/luci/controller/admin/common.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56097 
OS Command Injection vulnerability in Ruijie RG-EW1800GX PRO B11P226_EW1800GX-PRO_10223117 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_config/config_retain.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56098 
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56099 
OS Command Injection vulnerability in Ruijie RG-YST AP_3.0(1)B11P280YST250F allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56101 
OS Command Injection vulnerability in Ruijie M18 EW_3.0(1)B11P226_M18_10223116 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56102 
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_get in file /usr/local/lua/dev_sta/networkConnect.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56106 
OS Command Injection vulnerability in Ruijie RG-EW1800GX B11P226_EW1800GX_10223121 allowing attackers to execute arbitrary commands via a crafted POST request to the module_set in file /usr/local/lua/dev_sta/nbr_cwmp.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56107 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR600W allowing attackers to execute arbitrary commands via a crafted POST request to the submit_wifi in file /usr/lib/lua/luci/controller/admin/common_quick_config.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56108 
OS Command Injection vulnerability in Ruijie X30-PRO X30-PRO-V1_09241521 allowing attackers to execute arbitrary commands via a crafted POST request to the pwdmodify in file /usr/lib/lua/luci/modules/common.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56109 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_wireless in file /usr/lib/lua/luci/control/admin/wireless.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z
CVE-2025-56110 
OS Command Injection vulnerability in Ruijie RG-BCR RG-BCR860 allowing attackers to execute arbitrary commands via a crafted POST request to the action_deal_update in file /usr/lib/lua/luci/controller/api/rcmsAPI.lua.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2025-12-11T00:00:00.000Z