Instruction: Please provide detailed information about CVE-2025-21977

CVE:CVE-2025-21977
Description:In the Linux kernel, the following vulnerability has been resolved:  fbdev: hyperv_fb: Fix hang in kdump kernel when on Hyper-V Gen 2 VMs  Gen 2 Hyper-V VMs boot via EFI and have a standard EFI framebuffer device. When the kdump kernel runs in such a VM, loading the efifb driver may hang because of accessing the framebuffer at the wrong memory address.  The scenario occurs when the hyperv_fb driver in the original kernel moves the framebuffer to a different MMIO address because of conflicts with an already-running efifb or simplefb driver. The hyperv_fb driver then informs Hyper-V of the change, which is allowed by the Hyper-V FB VMBus device protocol. However, when the kexec command loads the kdump kernel into crash memory via the kexec_file_load() system call, the system call doesn't know the framebuffer has moved, and it sets up the kdump screen_info using the original framebuffer address. The transition to the kdump kernel does not go through the Hyper-V host, so Hyper-V does not reset the framebuffer address like it would do on a reboot. When efifb tries to run, it accesses a non-existent framebuffer address, which traps to the Hyper-V host. After many such accesses, the Hyper-V host thinks the guest is being malicious, and throttles the guest to the point that it runs very slowly or appears to have hung.  When the kdump kernel is loaded into crash memory via the kexec_load() system call, the problem does not occur. In this case, the kexec command builds the screen_info table itself in user space from data returned by the FBIOGET_FSCREENINFO ioctl against /dev/fb0, which gives it the new framebuffer location.  This problem was originally reported in 2020 [1], resulting in commit 3cb73bc3fa2a ("hyperv_fb: Update screen_info after removing old framebuffer"). This commit solved the problem by setting orig_video_isVGA to 0, so the kdump kernel was unaware of the EFI framebuffer. The efifb driver did not try to load, and no hang occurred. But in 2024, commit c25a19afb81c ("fbdev/hyperv_fb: Do not clear global screen_info") effectively reverted 3cb73bc3fa2a. Commit c25a19afb81c has no reference to 3cb73bc3fa2a, so perhaps it was done without knowing the implications that were reported with 3cb73bc3fa2a. In any case, as of commit c25a19afb81c, the original problem came back again.  Interestingly, the hyperv_drm driver does not have this problem because it never moves the framebuffer. The difference is that the hyperv_drm driver removes any conflicting framebuffers *before* allocating an MMIO address, while the hyperv_fb drivers removes conflicting framebuffers *after* allocating an MMIO address. With the "after" ordering, hyperv_fb may encounter a conflict and move the framebuffer to a different MMIO address. But the conflict is essentially bogus because it is removed a few lines of code later.  Rather than fix the problem with the approach from 2020 in commit 3cb73bc3fa2a, instead slightly reorder the steps in hyperv_fb so conflicting framebuffers are removed before allocating an MMIO address. Then the default framebuffer MMIO address should always be available, and there's never any confusion about which framebuffer address the kdump kernel should use -- it's always the original address provided by the Hyper-V host. This approach is already used by the hyperv_drm driver, and is consistent with the usage guidelines at the head of the module with the function aperture_remove_conflicting_devices().  This approach also solves a related minor problem when kexec_load() is used to load the kdump kernel. With current code, unbinding and rebinding the hyperv_fb driver could result in the framebuffer moving back to the default framebuffer address, because on the rebind there are no conflicts. If such a move is done after the kdump kernel is loaded with the new framebuffer address, at kdump time it could again have the wrong address.  This problem and fix are described in terms of the kdump kernel, but it can also occur ---truncated---
published:2025-04-01T16:15:29.077


Instruction: Please provide detailed information about CVE-2025-21978

CVE:CVE-2025-21978
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/hyperv: Fix address space leak when Hyper-V DRM device is removed  When a Hyper-V DRM device is probed, the driver allocates MMIO space for the vram, and maps it cacheable. If the device removed, or in the error path for device probing, the MMIO space is released but no unmap is done. Consequently the kernel address space for the mapping is leaked.  Fix this by adding iounmap() calls in the device removal path, and in the error path during device probing.
published:2025-04-01T16:15:29.183


Instruction: Please provide detailed information about CVE-2025-21979

CVE:CVE-2025-21979
Description:In the Linux kernel, the following vulnerability has been resolved:  wifi: cfg80211: cancel wiphy_work before freeing wiphy  A wiphy_work can be queued from the moment the wiphy is allocated and initialized (i.e. wiphy_new_nm). When a wiphy_work is queued, the rdev::wiphy_work is getting queued.  If wiphy_free is called before the rdev::wiphy_work had a chance to run, the wiphy memory will be freed, and then when it eventally gets to run it'll use invalid memory.  Fix this by canceling the work before freeing the wiphy.
published:2025-04-01T16:15:29.287


Instruction: Please provide detailed information about CVE-2025-21980

CVE:CVE-2025-21980
Description:In the Linux kernel, the following vulnerability has been resolved:  sched: address a potential NULL pointer dereference in the GRED scheduler.  If kzalloc in gred_init returns a NULL pointer, the code follows the error handling path, invoking gred_destroy. This, in turn, calls gred_offload, where memset could receive a NULL pointer as input, potentially leading to a kernel crash.  When table->opt is NULL in gred_init(), gred_change_table_def() is not called yet, so it is not necessary to call ->ndo_setup_tc() in gred_offload().
published:2025-04-01T16:15:29.390


Instruction: Please provide detailed information about CVE-2025-21981

CVE:CVE-2025-21981
Description:In the Linux kernel, the following vulnerability has been resolved:  ice: fix memory leak in aRFS after reset  Fix aRFS (accelerated Receive Flow Steering) structures memory leak by adding a checker to verify if aRFS memory is already allocated while configuring VSI. aRFS objects are allocated in two cases: - as part of VSI initialization (at probe), and - as part of reset handling  However, VSI reconfiguration executed during reset involves memory allocation one more time, without prior releasing already allocated resources. This led to the memory leak with the following signature:  [root@os-delivery ~]# cat /sys/kernel/debug/kmemleak unreferenced object 0xff3c1ca7252e6000 (size 8192):   comm "kworker/0:0", pid 8, jiffies 4296833052   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace (crc 0):     [<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340     [<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice]     [<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice]     [<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice]     [<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice]     [<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice]     [<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0     [<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20     [<ffffffff98f0b6d9>] process_one_work+0x179/0x390     [<ffffffff98f0c1e9>] worker_thread+0x239/0x340     [<ffffffff98f14abc>] kthread+0xcc/0x100     [<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50     [<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30     ...
published:2025-04-01T16:15:29.503


Instruction: Please provide detailed information about CVE-2025-21982

CVE:CVE-2025-21982
Description:In the Linux kernel, the following vulnerability has been resolved:  pinctrl: nuvoton: npcm8xx: Add NULL check in npcm8xx_gpio_fw  devm_kasprintf() calls can return null pointers on failure. But the return values were not checked in npcm8xx_gpio_fw(). Add NULL check in npcm8xx_gpio_fw(), to handle kernel NULL pointer dereference error.
published:2025-04-01T16:15:29.613


Instruction: Please provide detailed information about CVE-2025-21983

CVE:CVE-2025-21983
Description:In the Linux kernel, the following vulnerability has been resolved:  mm/slab/kvfree_rcu: Switch to WQ_MEM_RECLAIM wq  Currently kvfree_rcu() APIs use a system workqueue which is "system_unbound_wq" to driver RCU machinery to reclaim a memory.  Recently, it has been noted that the following kernel warning can be observed:  <snip> workqueue: WQ_MEM_RECLAIM nvme-wq:nvme_scan_work is flushing !WQ_MEM_RECLAIM events_unbound:kfree_rcu_work   WARNING: CPU: 21 PID: 330 at kernel/workqueue.c:3719 check_flush_dependency+0x112/0x120   Modules linked in: intel_uncore_frequency(E) intel_uncore_frequency_common(E) skx_edac(E) ...   CPU: 21 UID: 0 PID: 330 Comm: kworker/u144:6 Tainted: G            E      6.13.2-0_g925d379822da #1   Hardware name: Wiwynn Twin Lakes MP/Twin Lakes Passive MP, BIOS YMM20 02/01/2023   Workqueue: nvme-wq nvme_scan_work   RIP: 0010:check_flush_dependency+0x112/0x120   Code: 05 9a 40 14 02 01 48 81 c6 c0 00 00 00 48 8b 50 18 48 81 c7 c0 00 00 00 48 89 f9 48 ...   RSP: 0018:ffffc90000df7bd8 EFLAGS: 00010082   RAX: 000000000000006a RBX: ffffffff81622390 RCX: 0000000000000027   RDX: 00000000fffeffff RSI: 000000000057ffa8 RDI: ffff88907f960c88   RBP: 0000000000000000 R08: ffffffff83068e50 R09: 000000000002fffd   R10: 0000000000000004 R11: 0000000000000000 R12: ffff8881001a4400   R13: 0000000000000000 R14: ffff88907f420fb8 R15: 0000000000000000   FS:  0000000000000000(0000) GS:ffff88907f940000(0000) knlGS:0000000000000000   CR2: 00007f60c3001000 CR3: 000000107d010005 CR4: 00000000007726f0   PKRU: 55555554   Call Trace:    <TASK>    ? __warn+0xa4/0x140    ? check_flush_dependency+0x112/0x120    ? report_bug+0xe1/0x140    ? check_flush_dependency+0x112/0x120    ? handle_bug+0x5e/0x90    ? exc_invalid_op+0x16/0x40    ? asm_exc_invalid_op+0x16/0x20    ? timer_recalc_next_expiry+0x190/0x190    ? check_flush_dependency+0x112/0x120    ? check_flush_dependency+0x112/0x120    __flush_work.llvm.1643880146586177030+0x174/0x2c0    flush_rcu_work+0x28/0x30    kvfree_rcu_barrier+0x12f/0x160    kmem_cache_destroy+0x18/0x120    bioset_exit+0x10c/0x150    disk_release.llvm.6740012984264378178+0x61/0xd0    device_release+0x4f/0x90    kobject_put+0x95/0x180    nvme_put_ns+0x23/0xc0    nvme_remove_invalid_namespaces+0xb3/0xd0    nvme_scan_work+0x342/0x490    process_scheduled_works+0x1a2/0x370    worker_thread+0x2ff/0x390    ? pwq_release_workfn+0x1e0/0x1e0    kthread+0xb1/0xe0    ? __kthread_parkme+0x70/0x70    ret_from_fork+0x30/0x40    ? __kthread_parkme+0x70/0x70    ret_from_fork_asm+0x11/0x20    </TASK>   ---[ end trace 0000000000000000 ]--- <snip>  To address this switch to use of independent WQ_MEM_RECLAIM workqueue, so the rules are not violated from workqueue framework point of view.  Apart of that, since kvfree_rcu() does reclaim memory it is worth to go with WQ_MEM_RECLAIM type of wq because it is designed for this purpose.
published:2025-04-01T16:15:29.710


Instruction: Please provide detailed information about CVE-2025-21984

CVE:CVE-2025-21984
Description:In the Linux kernel, the following vulnerability has been resolved:  mm: fix kernel BUG when userfaultfd_move encounters swapcache  userfaultfd_move() checks whether the PTE entry is present or a swap entry.  - If the PTE entry is present, move_present_pte() handles folio   migration by setting:    src_folio->index = linear_page_index(dst_vma, dst_addr);  - If the PTE entry is a swap entry, move_swap_pte() simply copies   the PTE to the new dst_addr.  This approach is incorrect because, even if the PTE is a swap entry, it can still reference a folio that remains in the swap cache.  This creates a race window between steps 2 and 4.  1. add_to_swap: The folio is added to the swapcache.  2. try_to_unmap: PTEs are converted to swap entries.  3. pageout: The folio is written back.  4. Swapcache is cleared. If userfaultfd_move() occurs in the window between steps 2 and 4, after the swap PTE has been moved to the destination, accessing the destination triggers do_swap_page(), which may locate the folio in the swapcache. However, since the folio's index has not been updated to match the destination VMA, do_swap_page() will detect a mismatch.  This can result in two critical issues depending on the system configuration.  If KSM is disabled, both small and large folios can trigger a BUG during the add_rmap operation due to:   page_pgoff(folio, page) != linear_page_index(vma, address)  [   13.336953] page: refcount:6 mapcount:1 mapping:00000000f43db19c index:0xffffaf150 pfn:0x4667c [   13.337520] head: order:2 mapcount:1 entire_mapcount:0 nr_pages_mapped:1 pincount:0 [   13.337716] memcg:ffff00000405f000 [   13.337849] anon flags: 0x3fffc0000020459(locked|uptodate|dirty|owner_priv_1|head|swapbacked|node=0|zone=0|lastcpupid=0xffff) [   13.338630] raw: 03fffc0000020459 ffff80008507b538 ffff80008507b538 ffff000006260361 [   13.338831] raw: 0000000ffffaf150 0000000000004000 0000000600000000 ffff00000405f000 [   13.339031] head: 03fffc0000020459 ffff80008507b538 ffff80008507b538 ffff000006260361 [   13.339204] head: 0000000ffffaf150 0000000000004000 0000000600000000 ffff00000405f000 [   13.339375] head: 03fffc0000000202 fffffdffc0199f01 ffffffff00000000 0000000000000001 [   13.339546] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [   13.339736] page dumped because: VM_BUG_ON_PAGE(page_pgoff(folio, page) != linear_page_index(vma, address)) [   13.340190] ------------[ cut here ]------------ [   13.340316] kernel BUG at mm/rmap.c:1380! [   13.340683] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [   13.340969] Modules linked in: [   13.341257] CPU: 1 UID: 0 PID: 107 Comm: a.out Not tainted 6.14.0-rc3-gcf42737e247a-dirty #299 [   13.341470] Hardware name: linux,dummy-virt (DT) [   13.341671] pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) [   13.341815] pc : __page_check_anon_rmap+0xa0/0xb0 [   13.341920] lr : __page_check_anon_rmap+0xa0/0xb0 [   13.342018] sp : ffff80008752bb20 [   13.342093] x29: ffff80008752bb20 x28: fffffdffc0199f00 x27: 0000000000000001 [   13.342404] x26: 0000000000000000 x25: 0000000000000001 x24: 0000000000000001 [   13.342575] x23: 0000ffffaf0d0000 x22: 0000ffffaf0d0000 x21: fffffdffc0199f00 [   13.342731] x20: fffffdffc0199f00 x19: ffff000006210700 x18: 00000000ffffffff [   13.342881] x17: 6c203d2120296567 x16: 6170202c6f696c6f x15: 662866666f67705f [   13.343033] x14: 6567617028454741 x13: 2929737365726464 x12: ffff800083728ab0 [   13.343183] x11: ffff800082996bf8 x10: 0000000000000fd7 x9 : ffff80008011bc40 [   13.343351] x8 : 0000000000017fe8 x7 : 00000000fffff000 x6 : ffff8000829eebf8 [   13.343498] x5 : c0000000fffff000 x4 : 0000000000000000 x3 : 0000000000000000 [   13.343645] x2 : 0000000000000000 x1 : ffff0000062db980 x0 : 000000000000005f [   13.343876] Call trace: [   13.344045]  __page_check_anon_rmap+0xa0/0xb0 (P) [   13.344234]  folio_add_anon_rmap_ptes+0x22c/0x320 [   13.344333]  do_swap_page+0x1060/0x1400 [   13.344417]  __handl ---truncated---
published:2025-04-01T16:15:29.810


Instruction: Please provide detailed information about CVE-2025-21985

CVE:CVE-2025-21985
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: Fix out-of-bound accesses  [WHAT & HOW] hpo_stream_to_link_encoder_mapping has size MAX_HPO_DP2_ENCODERS(=4), but location can have size up to 6. As a result, it is necessary to check location against MAX_HPO_DP2_ENCODERS.  Similiarly, disp_cfg_stream_location can be used as an array index which should be 0..5, so the ASSERT's conditions should be less without equal.
published:2025-04-01T16:15:29.910


Instruction: Please provide detailed information about CVE-2025-21986

CVE:CVE-2025-21986
Description:In the Linux kernel, the following vulnerability has been resolved:  net: switchdev: Convert blocking notification chain to a raw one  A blocking notification chain uses a read-write semaphore to protect the integrity of the chain. The semaphore is acquired for writing when adding / removing notifiers to / from the chain and acquired for reading when traversing the chain and informing notifiers about an event.  In case of the blocking switchdev notification chain, recursive notifications are possible which leads to the semaphore being acquired twice for reading and to lockdep warnings being generated [1].  Specifically, this can happen when the bridge driver processes a SWITCHDEV_BRPORT_UNOFFLOADED event which causes it to emit notifications about deferred events when calling switchdev_deferred_process().  Fix this by converting the notification chain to a raw notification chain in a similar fashion to the netdev notification chain. Protect the chain using the RTNL mutex by acquiring it when modifying the chain. Events are always informed under the RTNL mutex, but add an assertion in call_switchdev_blocking_notifiers() to make sure this is not violated in the future.  Maintain the "blocking" prefix as events are always emitted from process context and listeners are allowed to block.  [1]: WARNING: possible recursive locking detected 6.14.0-rc4-custom-g079270089484 #1 Not tainted -------------------------------------------- ip/52731 is trying to acquire lock: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0  but task is already holding lock: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0  other info that might help us debug this: Possible unsafe locking scenario: CPU0 ---- lock((switchdev_blocking_notif_chain).rwsem); lock((switchdev_blocking_notif_chain).rwsem);  *** DEADLOCK *** May be due to missing lock nesting notation 3 locks held by ip/52731:  #0: ffffffff84f795b0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x727/0x1dc0  #1: ffffffff8731f628 (&net->rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x790/0x1dc0  #2: ffffffff850918d8 ((switchdev_blocking_notif_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x58/0xa0  stack backtrace: ... ? __pfx_down_read+0x10/0x10 ? __pfx_mark_lock+0x10/0x10 ? __pfx_switchdev_port_attr_set_deferred+0x10/0x10 blocking_notifier_call_chain+0x58/0xa0 switchdev_port_attr_notify.constprop.0+0xb3/0x1b0 ? __pfx_switchdev_port_attr_notify.constprop.0+0x10/0x10 ? mark_held_locks+0x94/0xe0 ? switchdev_deferred_process+0x11a/0x340 switchdev_port_attr_set_deferred+0x27/0xd0 switchdev_deferred_process+0x164/0x340 br_switchdev_port_unoffload+0xc8/0x100 [bridge] br_switchdev_blocking_event+0x29f/0x580 [bridge] notifier_call_chain+0xa2/0x440 blocking_notifier_call_chain+0x6e/0xa0 switchdev_bridge_port_unoffload+0xde/0x1a0 ...
published:2025-04-01T16:15:30.010


Instruction: Please provide detailed information about CVE-2025-25041

CVE:CVE-2025-25041
Description:A vulnerability in the HPE Aruba Networking Virtual Intranet Access (VIA) client could allow malicious users to overwrite arbitrary files as NT AUTHORITY\SYSTEM (root). A successful exploit could allow the creation of a Denial-of-Service (DoS) condition affecting the Microsoft Windows Operating System. This vulnerability does not affect Linux and Android based clients.
published:2025-04-01T17:15:44.967


Instruction: Please provide detailed information about CVE-2025-27829

CVE:CVE-2025-27829
Description:An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.35. If multicast streams are enabled on different interfaces, it may be possible to interrupt multicast traffic on some of these interfaces. That could result in a denial of the multicast routing service on the firewall.
published:2025-04-01T17:15:46.303


Instruction: Please provide detailed information about CVE-2025-28131

CVE:CVE-2025-28131
Description:A Broken Access Control vulnerability in Nagios Network Analyzer 2024R1.0.3 allows low-privilege users with "Read-Only" access to perform administrative actions, including stopping system services and deleting critical resources. This flaw arises due to improper authorization enforcement, enabling unauthorized modifications that compromise system integrity and availability.
published:2025-04-01T17:15:46.493


Instruction: Please provide detailed information about CVE-2025-28132

CVE:CVE-2025-28132
Description:A session management flaw in Nagios Network Analyzer 2024R1.0.3 allows an attacker to reuse session tokens even after a user logs out, leading to unauthorized access and account takeover. This occurs due to insufficient session expiration, where session tokens remain valid beyond logout, allowing an attacker to impersonate users and perform actions on their behalf.
published:2025-04-01T17:15:46.700


Instruction: Please provide detailed information about CVE-2025-29208

CVE:CVE-2025-29208
Description:CodeZips Gym Management System v1.0 is vulnerable to SQL injection in the name parameter within /dashboard/admin/deleteroutine.php.
published:2025-04-01T18:15:29.780


Instruction: Please provide detailed information about CVE-2025-26054

CVE:CVE-2025-26054
Description:Infinxt iEdge 100 2.1.32 is vulnerable to Cross Site Scripting (XSS) via the "Description" field during LAN configuration.
published:2025-04-01T19:15:44.193


Instruction: Please provide detailed information about CVE-2025-26055

CVE:CVE-2025-26055
Description:An OS Command Injection vulnerability exists in the Infinxt iEdge 100 2.1.32 Troubleshoot module, specifically in the tracertVal parameter of the Tracert function.
published:2025-04-01T19:15:44.310


Instruction: Please provide detailed information about CVE-2025-26056

CVE:CVE-2025-26056
Description:A command injection vulnerability exists in the Infinxt iEdge 100 2.1.32 in the Troubleshoot module "MTR" functionality. The vulnerability is due to improper validation of user-supplied input in the mtrIp parameter. An attacker can exploit this flaw to execute arbitrary operating system commands on the underlying system with the same privileges as the web application process.
published:2025-04-01T19:15:44.427


Instruction: Please provide detailed information about CVE-2025-31137

CVE:CVE-2025-31137
Description:React Router is a multi-strategy router for React bridging the gap from React 18 to React 19. There is a vulnerability in Remix/React Router that affects all Remix 2 and React Router 7 consumers using the Express adapter. Basically, this vulnerability allows anyone to spoof the URL used in an incoming Request by putting a URL pathname in the port section of a URL that is part of a Host or X-Forwarded-Host header sent to a Remix/React Router request handler. This issue has been patched and released in Remix 2.16.3 and React Router 7.4.1.
published:2025-04-01T19:15:45.663


Instruction: Please provide detailed information about CVE-2025-3096

CVE:CVE-2025-3096
Description:Clinic’s Patient Management System versions 2.0 suffers from a SQL injection vulnerability in the login page.
published:2025-04-01T19:15:47.857


Instruction: Please provide detailed information about CVE-2025-29069

CVE:CVE-2025-29069
Description:A heap buffer overflow vulnerability has been identified in the lcms2-2.16. The vulnerability exists in the UnrollChunkyBytes function in cmspack.c, which is responsible for handling color space transformations. NOTE: this is disputed by the Supplier because the finding identified a bug in a third-party calling program, not in lcms.
published:2025-04-01T20:15:17.607


Instruction: Please provide detailed information about CVE-2025-29033

CVE:CVE-2025-29033
Description:An issue in BambooHR Build v.25.0210.170831-83b08dd allows a remote attacker to escalate privileges via the /saml/index.php?r=" HTTP GET parameter.
published:2025-04-01T21:15:43.523


Instruction: Please provide detailed information about CVE-2025-29036

CVE:CVE-2025-29036
Description:An issue in hackathon-starter v.8.1.0 allows a remote attacker to escalate privileges via the user.js component.
published:2025-04-01T21:15:43.680


Instruction: Please provide detailed information about CVE-2025-29049

CVE:CVE-2025-29049
Description:Cross Site Scripting vulnerability in arnog MathLive Versions v0.103.0 and before (fixed in 0.104.0) allows an attacker to execute arbitrary code via the MathLive function.
published:2025-04-01T21:15:43.820


Instruction: Please provide detailed information about CVE-2025-29070

CVE:CVE-2025-29070
Description:A heap buffer overflow vulnerability has been identified in thesmooth2() in cmsgamma.c in lcms2-2.16 which allows a remote attacker to cause a denial of service. NOTE: the Supplier disputes this because "this is not exploitable as this function is never called on normal color management, is there only as a helper for low-level programming and investigation."
published:2025-04-01T21:15:44.023


Instruction: Please provide detailed information about CVE-2025-30554

CVE:CVE-2025-30554
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Frizzly allows Reflected XSS. This issue affects Frizzly: from n/a through 1.1.0.
published:2025-04-01T21:15:44.443


Instruction: Please provide detailed information about CVE-2025-30580

CVE:CVE-2025-30580
Description:Improper Control of Generation of Code ('Code Injection') vulnerability in NotFound DigiWidgets Image Editor allows Remote Code Inclusion. This issue affects DigiWidgets Image Editor: from n/a through 1.10.
published:2025-04-01T21:15:44.590


Instruction: Please provide detailed information about CVE-2025-30778

CVE:CVE-2025-30778
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vikas Ratudi VForm allows Reflected XSS. This issue affects VForm: from n/a through 3.1.9.
published:2025-04-01T21:15:44.730


Instruction: Please provide detailed information about CVE-2025-30807

CVE:CVE-2025-30807
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Martin Nguyen Next-Cart Store to WooCommerce Migration allows SQL Injection. This issue affects Next-Cart Store to WooCommerce Migration: from n/a through 3.9.4.
published:2025-04-01T21:15:44.877


Instruction: Please provide detailed information about CVE-2025-30825

CVE:CVE-2025-30825
Description:Missing Authorization vulnerability in WPClever WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce allows Privilege Escalation. This issue affects WPC Smart Linked Products - Upsells & Cross-sells for WooCommerce: from n/a through 1.3.5.
published:2025-04-01T21:15:45.017


Instruction: Please provide detailed information about CVE-2025-30841

CVE:CVE-2025-30841
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in adamskaat Countdown & Clock allows Remote Code Inclusion. This issue affects Countdown & Clock: from n/a through 2.8.8.
published:2025-04-01T21:15:45.167


Instruction: Please provide detailed information about CVE-2025-30844

CVE:CVE-2025-30844
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bob Watu Quiz allows Reflected XSS. This issue affects Watu Quiz: from n/a through 3.4.2.
published:2025-04-01T21:15:45.307


Instruction: Please provide detailed information about CVE-2025-30852

CVE:CVE-2025-30852
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in emotionalonlinestorytelling Oracle Cards Lite allows Reflected XSS. This issue affects Oracle Cards Lite: from n/a through 1.2.1.
published:2025-04-01T21:15:45.443


Instruction: Please provide detailed information about CVE-2025-30853

CVE:CVE-2025-30853
Description:Missing Authorization vulnerability in ShortPixel ShortPixel Adaptive Images allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ShortPixel Adaptive Images: from n/a through 3.10.0.
published:2025-04-01T21:15:45.573


Instruction: Please provide detailed information about CVE-2025-30892

CVE:CVE-2025-30892
Description:Deserialization of Untrusted Data vulnerability in magepeopleteam WpTravelly allows Object Injection. This issue affects WpTravelly: from n/a through 1.8.7.
published:2025-04-01T21:15:45.717


Instruction: Please provide detailed information about CVE-2025-30905

CVE:CVE-2025-30905
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Secure Copy Content Protection and Content Locking allows Stored XSS. This issue affects Secure Copy Content Protection and Content Locking: from n/a through 4.4.3.
published:2025-04-01T21:15:45.863


Instruction: Please provide detailed information about CVE-2025-30906

CVE:CVE-2025-30906
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Coffee Code Tech Plugin Oficial – Getnet para WooCommerce allows Reflected XSS. This issue affects Plugin Oficial – Getnet para WooCommerce: from n/a through 1.7.3.
published:2025-04-01T21:15:46.010


Instruction: Please provide detailed information about CVE-2025-30913

CVE:CVE-2025-30913
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in podpirate Access Areas allows Reflected XSS. This issue affects Access Areas: from n/a through 1.5.19.
published:2025-04-01T21:15:46.147


Instruction: Please provide detailed information about CVE-2025-31078

CVE:CVE-2025-31078
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in enituretechnology Small Package Quotes – Worldwide Express Edition allows Reflected XSS. This issue affects Small Package Quotes – Worldwide Express Edition: from n/a through 5.2.18.
published:2025-04-01T21:15:46.297


Instruction: Please provide detailed information about CVE-2025-31080

CVE:CVE-2025-31080
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Link Software LLC HTML Forms allows Stored XSS. This issue affects HTML Forms: from n/a through 1.5.1.
published:2025-04-01T21:15:46.440


Instruction: Please provide detailed information about CVE-2025-31081

CVE:CVE-2025-31081
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ShortPixel Enable Media Replace allows Reflected XSS. This issue affects Enable Media Replace: from n/a through 4.1.5.
published:2025-04-01T21:15:46.577


Instruction: Please provide detailed information about CVE-2025-31082

CVE:CVE-2025-31082
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in InfornWeb News & Blog Designer Pack allows PHP Local File Inclusion. This issue affects News & Blog Designer Pack: from n/a through 4.0.
published:2025-04-01T21:15:46.720


Instruction: Please provide detailed information about CVE-2025-31085

CVE:CVE-2025-31085
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michel - xiligroup dev xili-language allows Reflected XSS. This issue affects xili-language: from n/a through 2.21.2.
published:2025-04-01T21:15:46.873


Instruction: Please provide detailed information about CVE-2025-31086

CVE:CVE-2025-31086
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nick McReynolds Product Table by WBW allows Reflected XSS. This issue affects Product Table by WBW: from n/a through 2.1.4.
published:2025-04-01T21:15:47.013


Instruction: Please provide detailed information about CVE-2025-31089

CVE:CVE-2025-31089
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Fahad Mahmood Order Splitter for WooCommerce allows SQL Injection. This issue affects Order Splitter for WooCommerce: from n/a through 5.3.0.
published:2025-04-01T21:15:47.150


Instruction: Please provide detailed information about CVE-2025-31097

CVE:CVE-2025-31097
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in ho3einie Material Dashboard allows PHP Local File Inclusion. This issue affects Material Dashboard: from n/a through 1.4.5.
published:2025-04-01T21:15:47.300


Instruction: Please provide detailed information about CVE-2025-31431

CVE:CVE-2025-31431
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound WP Bookmarks allows Reflected XSS. This issue affects WP Bookmarks: from n/a through 1.1.
published:2025-04-01T21:15:47.443


Instruction: Please provide detailed information about CVE-2025-31441

CVE:CVE-2025-31441
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in S WordPress Galleria allows Reflected XSS. This issue affects WordPress Galleria: from n/a through 1.4.
published:2025-04-01T21:15:47.600


Instruction: Please provide detailed information about CVE-2025-31445

CVE:CVE-2025-31445
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Pages Order allows Reflected XSS. This issue affects Pages Order: from n/a through 1.1.3.
published:2025-04-01T21:15:47.750


Instruction: Please provide detailed information about CVE-2025-31446

CVE:CVE-2025-31446
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in jiangmiao WP Cleaner allows Reflected XSS. This issue affects WP Cleaner: from n/a through 1.1.5.
published:2025-04-01T21:15:47.890


Instruction: Please provide detailed information about CVE-2025-31454

CVE:CVE-2025-31454
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Delete Post Revision allows Reflected XSS. This issue affects Delete Post Revision: from n/a through 1.1.
published:2025-04-01T21:15:48.030


Instruction: Please provide detailed information about CVE-2025-31455

CVE:CVE-2025-31455
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound Limit Max IPs Per User allows DOM-Based XSS. This issue affects Limit Max IPs Per User: from n/a through 1.5.
published:2025-04-01T21:15:48.180


Instruction: Please provide detailed information about CVE-2025-31461

CVE:CVE-2025-31461
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound NanoSupport allows Reflected XSS. This issue affects NanoSupport: from n/a through 0.6.0.
published:2025-04-01T21:15:48.330


Instruction: Please provide detailed information about CVE-2025-31462

CVE:CVE-2025-31462
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in rzfarrell CGM Event Calendar allows Reflected XSS. This issue affects CGM Event Calendar: from n/a through 0.8.5.
published:2025-04-01T21:15:48.483


Instruction: Please provide detailed information about CVE-2025-31525

CVE:CVE-2025-31525
Description:Missing Authorization vulnerability in WP Messiah WP Mobile Bottom Menu allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Mobile Bottom Menu: from n/a through 1.2.9.
published:2025-04-01T21:15:48.723


Instruction: Please provide detailed information about CVE-2025-31531

CVE:CVE-2025-31531
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in click5 History Log by click5 allows SQL Injection. This issue affects History Log by click5: from n/a through 1.0.13.
published:2025-04-01T21:15:48.873


Instruction: Please provide detailed information about CVE-2025-31534

CVE:CVE-2025-31534
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in shopperdotcom Shopper allows SQL Injection. This issue affects Shopper: from n/a through 3.2.5.
published:2025-04-01T21:15:49.017


Instruction: Please provide detailed information about CVE-2025-31537

CVE:CVE-2025-31537
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in madfishdigital Bulk NoIndex & NoFollow Toolkit allows Reflected XSS. This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 2.16.
published:2025-04-01T21:15:49.170


Instruction: Please provide detailed information about CVE-2025-31548

CVE:CVE-2025-31548
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in M. Tuhin Ultimate Push Notifications allows Reflected XSS. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
published:2025-04-01T21:15:49.313


Instruction: Please provide detailed information about CVE-2025-31550

CVE:CVE-2025-31550
Description:Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in thom4 WP-LESS allows Retrieve Embedded Sensitive Data. This issue affects WP-LESS: from 1.9.3 through 3.
published:2025-04-01T21:15:49.463


Instruction: Please provide detailed information about CVE-2025-31551

CVE:CVE-2025-31551
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Salesmate.io Salesmate Add-On for Gravity Forms allows SQL Injection. This issue affects Salesmate Add-On for Gravity Forms: from n/a through 2.0.3.
published:2025-04-01T21:15:49.613


Instruction: Please provide detailed information about CVE-2025-31552

CVE:CVE-2025-31552
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in davidfcarr RSVPMarker  allows SQL Injection. This issue affects RSVPMarker : from n/a through 11.4.8.
published:2025-04-01T21:15:49.760


Instruction: Please provide detailed information about CVE-2025-31553

CVE:CVE-2025-31553
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPFactory Advanced WooCommerce Product Sales Reporting allows SQL Injection. This issue affects Advanced WooCommerce Product Sales Reporting: from n/a through 3.1.
published:2025-04-01T21:15:49.910


Instruction: Please provide detailed information about CVE-2025-31560

CVE:CVE-2025-31560
Description:Incorrect Privilege Assignment vulnerability in Dimitri Grassi Salon booking system allows Privilege Escalation. This issue affects Salon booking system: from n/a through 10.11.
published:2025-04-01T21:15:50.060


Instruction: Please provide detailed information about CVE-2025-31561

CVE:CVE-2025-31561
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in M. Tuhin Ultimate Push Notifications allows SQL Injection. This issue affects Ultimate Push Notifications: from n/a through 1.1.8.
published:2025-04-01T21:15:50.197


Instruction: Please provide detailed information about CVE-2025-31563

CVE:CVE-2025-31563
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vimal Kava AI Search Bar allows Stored XSS. This issue affects AI Search Bar: from n/a through 1.3.
published:2025-04-01T21:15:50.340


Instruction: Please provide detailed information about CVE-2025-31564

CVE:CVE-2025-31564
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in aitool Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One allows Blind SQL Injection. This issue affects Ai Auto Tool Content Writing Assistant (Gemini Writer, ChatGPT ) All in One: from n/a through 2.1.7.
published:2025-04-01T21:15:50.490


Instruction: Please provide detailed information about CVE-2025-31568

CVE:CVE-2025-31568
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wiredmindshelp LeadLab by wiredminds allows Reflected XSS. This issue affects LeadLab by wiredminds: from n/a through 1.3.
published:2025-04-01T21:15:50.640


Instruction: Please provide detailed information about CVE-2025-31571

CVE:CVE-2025-31571
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cynob IT Consultancy The Logo Slider allows Reflected XSS. This issue affects The Logo Slider: from n/a through 1.0.0.
published:2025-04-01T21:15:50.780


Instruction: Please provide detailed information about CVE-2025-31578

CVE:CVE-2025-31578
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Wisdomlogix Solutions Pvt. Ltd. Fonts Manager | Custom Fonts allows Reflected XSS. This issue affects Fonts Manager | Custom Fonts: from n/a through 1.2.
published:2025-04-01T21:15:50.930


Instruction: Please provide detailed information about CVE-2025-31579

CVE:CVE-2025-31579
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in EXEIdeas International WP AutoKeyword allows SQL Injection. This issue affects WP AutoKeyword: from n/a through 1.0.
published:2025-04-01T21:15:51.087


Instruction: Please provide detailed information about CVE-2025-31580

CVE:CVE-2025-31580
Description:Missing Authorization vulnerability in Anzar Ahmed Ni WooCommerce Product Enquiry allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects Ni WooCommerce Product Enquiry: from n/a through 4.1.8.
published:2025-04-01T21:15:51.233


Instruction: Please provide detailed information about CVE-2025-31594

CVE:CVE-2025-31594
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPglob Auto scroll for reading allows Reflected XSS. This issue affects Auto scroll for reading: from n/a through 1.1.4.
published:2025-04-01T21:15:51.390


Instruction: Please provide detailed information about CVE-2025-31612

CVE:CVE-2025-31612
Description:Deserialization of Untrusted Data vulnerability in Sabuj Kundu CBX Poll allows Object Injection. This issue affects CBX Poll: from n/a through 1.2.7.
published:2025-04-01T21:15:51.533


Instruction: Please provide detailed information about CVE-2025-31619

CVE:CVE-2025-31619
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in marcoingraiti Actionwear products sync allows SQL Injection. This issue affects Actionwear products sync: from n/a through 2.3.3.
published:2025-04-01T21:15:51.690


Instruction: Please provide detailed information about CVE-2025-31628

CVE:CVE-2025-31628
Description:Missing Authorization vulnerability in SlicedInvoices Sliced Invoices. This issue affects Sliced Invoices: from n/a through 3.9.4.
published:2025-04-01T21:15:51.833


Instruction: Please provide detailed information about CVE-2025-31753

CVE:CVE-2025-31753
Description:Cross-Site Request Forgery (CSRF) vulnerability in Animesh Kumar Advanced Speed Increaser. This issue affects Advanced Speed Increaser: from n/a through 2.2.1.
published:2025-04-01T21:15:52.430


Instruction: Please provide detailed information about CVE-2025-31819

CVE:CVE-2025-31819
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in pixelgrade Nova Blocks by Pixelgrade. This issue affects Nova Blocks by Pixelgrade: from n/a through 2.1.8.
published:2025-04-01T21:15:53.473


Instruction: Please provide detailed information about CVE-2025-31889

CVE:CVE-2025-31889
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in petesheppard84 Extensions for Elementor. This issue affects Extensions for Elementor: from n/a through 2.0.40.
published:2025-04-01T21:15:53.633


Instruction: Please provide detailed information about CVE-2025-30356

CVE:CVE-2025-30356
Description:CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDLS-EP) to secure communications between a spacecraft running the core Flight System (cFS) and a ground station. In 1.3.3 and earlier, a heap buffer overflow vulnerability persists in the Crypto_TC_ApplySecurity function due to an incomplete validation check on the fl (frame length) field. Although CVE-2025-29912 addressed an underflow issue involving fl, the patch fails to fully prevent unsafe calculations. As a result, an attacker can still craft malicious frames that cause a negative tf_payload_len, which is then interpreted as a large unsigned value, leading to a heap buffer overflow in a memcpy call.
published:2025-04-01T22:15:21.297


Instruction: Please provide detailed information about CVE-2025-31135

CVE:CVE-2025-31135
Description:Go-Guerrilla SMTP Daemon is a lightweight SMTP server written in Go. Prior to 1.6.7, when ProxyOn is enabled, the PROXY command will be accepted multiple times, with later invocations overriding earlier ones. The proxy protocol only supports one initial PROXY header; anything after that is considered part of the exchange between client and server, so the client is free to send further PROXY commands with whatever data it pleases. go-guerrilla will treat these as coming from the reverse proxy, allowing a client to spoof its IP address. This vulnerability is fixed in 1.6.7.
published:2025-04-01T22:15:21.437


Instruction: Please provide detailed information about CVE-2025-27692

CVE:CVE-2025-27692
Description:Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Unrestricted Upload of File with Dangerous Type vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution
published:2025-04-02T01:15:37.117


Instruction: Please provide detailed information about CVE-2025-27693

CVE:CVE-2025-27693
Description:Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
published:2025-04-02T01:15:37.283


Instruction: Please provide detailed information about CVE-2025-27694

CVE:CVE-2025-27694
Description:Dell Wyse Management Suite, versions prior to  WMS 5.1, contains an Insufficient Resource Pool vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service.
published:2025-04-02T01:15:37.430


Instruction: Please provide detailed information about CVE-2025-29981

CVE:CVE-2025-29981
Description:Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Exposure of Sensitive Information Through Data Queries vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
published:2025-04-02T01:15:37.577


Instruction: Please provide detailed information about CVE-2025-29982

CVE:CVE-2025-29982
Description:Dell Wyse Management Suite, versions prior to WMS 5.1, contains an Insecure Inherited Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Unauthorized access.
published:2025-04-02T01:15:37.723


Instruction: Please provide detailed information about CVE-2025-3066

CVE:CVE-2025-3066
Description:Use after free in Site Isolation in Google Chrome prior to 135.0.7049.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-04-02T01:15:37.873


Instruction: Please provide detailed information about CVE-2025-3067

CVE:CVE-2025-3067
Description:Inappropriate implementation in Custom Tabs in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted app. (Chromium security severity: Medium)
published:2025-04-02T01:15:38.010


Instruction: Please provide detailed information about CVE-2025-3068

CVE:CVE-2025-3068
Description:Inappropriate implementation in Intents in Google Chrome on Android prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
published:2025-04-02T01:15:38.093


Instruction: Please provide detailed information about CVE-2025-3069

CVE:CVE-2025-3069
Description:Inappropriate implementation in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
published:2025-04-02T01:15:38.187


Instruction: Please provide detailed information about CVE-2025-3070

CVE:CVE-2025-3070
Description:Insufficient validation of untrusted input in Extensions in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
published:2025-04-02T01:15:38.283


Instruction: Please provide detailed information about CVE-2025-3071

CVE:CVE-2025-3071
Description:Inappropriate implementation in Navigations in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to bypass same origin policy via a crafted HTML page. (Chromium security severity: Low)
published:2025-04-02T01:15:38.413


Instruction: Please provide detailed information about CVE-2025-3072

CVE:CVE-2025-3072
Description:Inappropriate implementation in Custom Tabs in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
published:2025-04-02T01:15:38.503


Instruction: Please provide detailed information about CVE-2025-3073

CVE:CVE-2025-3073
Description:Inappropriate implementation in Autofill in Google Chrome prior to 135.0.7049.52 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
published:2025-04-02T01:15:38.600


Instruction: Please provide detailed information about CVE-2025-3074

CVE:CVE-2025-3074
Description:Inappropriate implementation in Downloads in Google Chrome prior to 135.0.7049.52 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
published:2025-04-02T01:15:38.690


Instruction: Please provide detailed information about CVE-2025-2779

CVE:CVE-2025-2779
Description:The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the ajax_dismiss function in all versions up to, and including, 1.1.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update option values to 1/true on the WordPress site. This can be leveraged to update an option that would create an error on the site and deny access to legitimate users or be used to set some values to true, such as registration.
published:2025-04-02T02:15:14.380


Instruction: Please provide detailed information about CVE-2025-25060

CVE:CVE-2025-25060
Description:Missing authentication for critical function vulnerability exists in AssetView and AssetView CLOUD. If exploited, the files on the server where the product is running may be obtained and/or deleted by a remote unauthenticated attacker.
published:2025-04-02T04:15:34.993


Instruction: Please provide detailed information about CVE-2025-27244

CVE:CVE-2025-27244
Description:AssetView and AssetView CLOUD contain an issue with acquiring sensitive information from sent data to the developer. If exploited, sensitive information may be obtained by a remote unauthenticated attacker.
published:2025-04-02T04:15:35.407


Instruction: Please provide detailed information about CVE-2025-0415

CVE:CVE-2025-0415
Description:A remote attacker with web administrator privileges can exploit the device’s web interface to execute arbitrary system commands through the NTP settings. Successful exploitation may result in the device entering an infinite reboot loop, leading to a total or partial denial of connectivity for downstream systems that rely on its network services.
published:2025-04-02T07:15:41.720


Instruction: Please provide detailed information about CVE-2025-0676

CVE:CVE-2025-0676
Description:This vulnerability involves command injection in tcpdump within Moxa products, enabling an authenticated attacker with console access to exploit improper input validation to inject and execute systems commands. Successful exploitation could result in privilege escalation, allowing the attacker to gain root shell access and maintain persistent control over the device, potentially disrupting network services and affecting the availability of downstream systems that rely on its connectivity.
published:2025-04-02T07:15:41.903


Instruction: Please provide detailed information about CVE-2025-2005

CVE:CVE-2025-2005
Description:The Front End Users plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the file uploads field of the registration form in all versions up to, and including, 3.2.32. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
published:2025-04-02T10:15:19.117


Instruction: Please provide detailed information about CVE-2025-2483

CVE:CVE-2025-2483
Description:The Gift Certificate Creator plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘receip_address’ parameter in all versions up to, and including, 1.1.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-04-02T10:15:19.320


Instruction: Please provide detailed information about CVE-2025-2513

CVE:CVE-2025-2513
Description:The Smart Icons For WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 1.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Editor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses the SVG file.
published:2025-04-02T10:15:19.540


Instruction: Please provide detailed information about CVE-2025-3063

CVE:CVE-2025-3063
Description:The Shopper Approved Reviews plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the ajax_callback_update_sa_option() function in versions 2.0 to 2.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
published:2025-04-02T10:15:19.757


Instruction: Please provide detailed information about CVE-2025-3097

CVE:CVE-2025-3097
Description:The wp Time Machine plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.4.0. This is due to missing or incorrect nonce validation on the 'wpTimeMachineCore.php' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-04-02T10:15:19.967


Instruction: Please provide detailed information about CVE-2025-3098

CVE:CVE-2025-3098
Description:The Video Url plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.0.0.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-04-02T10:15:20.177


Instruction: Please provide detailed information about CVE-2025-3099

CVE:CVE-2025-3099
Description:The Advanced Search by My Solr Server plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.0.5. This is due to missing or incorrect nonce validation on the 'MySolrServerSettings' page. This makes it possible for unauthenticated attackers to update settings and inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-04-02T10:15:20.387


Instruction: Please provide detailed information about CVE-2025-2786

CVE:CVE-2025-2786
Description:A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks.
published:2025-04-02T11:15:39.300


Instruction: Please provide detailed information about CVE-2025-2842

CVE:CVE-2025-2842
Description:A flaw was found in the Tempo Operator. When the Jaeger UI Monitor Tab functionality is enabled in a Tempo instance managed by the Tempo Operator, the Operator creates a ClusterRoleBinding for the Service Account of the Tempo instance to grant the cluster-monitoring-view ClusterRole. This can be exploited if a user has 'create' permissions on TempoStack and 'get' permissions on Secret in a namespace (for example, a user has ClusterAdmin permissions for a specific namespace), as the user can read the token of the Tempo service account and therefore has access to see all cluster metrics.
published:2025-04-02T12:15:14.677


Instruction: Please provide detailed information about CVE-2025-1805

CVE:CVE-2025-1805
Description:Crypt::Salt for Perl version 0.01 uses insecure rand() function when generating salts for cryptographic purposes.
published:2025-04-02T13:15:40.927


Instruction: Please provide detailed information about CVE-2025-21987

CVE:CVE-2025-21987
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: init return value in amdgpu_ttm_clear_buffer  Otherwise an uninitialized value can be returned if amdgpu_res_cleared returns true for all regions.  Possibly closes: https://gitlab.freedesktop.org/drm/amd/-/issues/3812  (cherry picked from commit 7c62aacc3b452f73a1284198c81551035fac6d71)
published:2025-04-02T13:15:43.207


Instruction: Please provide detailed information about CVE-2025-21988

CVE:CVE-2025-21988
Description:In the Linux kernel, the following vulnerability has been resolved:  fs/netfs/read_collect: add to next->prev_donated  If multiple subrequests donate data to the same "next" request (depending on the subrequest completion order), each of them would overwrite the `prev_donated` field, causing data corruption and a BUG() crash ("Can't donate prior to front").
published:2025-04-02T13:15:43.317


Instruction: Please provide detailed information about CVE-2025-21989

CVE:CVE-2025-21989
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/amd/display: fix missing .is_two_pixels_per_container  Starting from 6.11, AMDGPU driver, while being loaded with amdgpu.dc=1, due to lack of .is_two_pixels_per_container function in dce60_tg_funcs, causes a NULL pointer dereference on PCs with old GPUs, such as R9 280X.  So this fix adds missing .is_two_pixels_per_container to dce60_tg_funcs.  (cherry picked from commit bd4b125eb949785c6f8a53b0494e32795421209d)
published:2025-04-02T13:15:43.427


Instruction: Please provide detailed information about CVE-2025-21990

CVE:CVE-2025-21990
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/amdgpu: NULL-check BO's backing store when determining GFX12 PTE flags  PRT BOs may not have any backing store, so bo->tbo.resource will be NULL. Check for that before dereferencing.  (cherry picked from commit 3e3fcd29b505cebed659311337ea03b7698767fc)
published:2025-04-02T13:15:43.547


Instruction: Please provide detailed information about CVE-2025-21991

CVE:CVE-2025-21991
Description:In the Linux kernel, the following vulnerability has been resolved:  x86/microcode/AMD: Fix out-of-bounds on systems with CPU-less NUMA nodes  Currently, load_microcode_amd() iterates over all NUMA nodes, retrieves their CPU masks and unconditionally accesses per-CPU data for the first CPU of each mask.  According to Documentation/admin-guide/mm/numaperf.rst:    "Some memory may share the same node as a CPU, and others are provided as   memory only nodes."  Therefore, some node CPU masks may be empty and wouldn't have a "first CPU".  On a machine with far memory (and therefore CPU-less NUMA nodes): - cpumask_of_node(nid) is 0 - cpumask_first(0) is CONFIG_NR_CPUS - cpu_data(CONFIG_NR_CPUS) accesses the cpu_info per-CPU array at an   index that is 1 out of bounds  This does not have any security implications since flashing microcode is a privileged operation but I believe this has reliability implications by potentially corrupting memory while flashing a microcode update.  When booting with CONFIG_UBSAN_BOUNDS=y on an AMD machine that flashes a microcode update. I get the following splat:    UBSAN: array-index-out-of-bounds in arch/x86/kernel/cpu/microcode/amd.c:X:Y   index 512 is out of range for type 'unsigned long[512]'   [...]   Call Trace:    dump_stack    __ubsan_handle_out_of_bounds    load_microcode_amd    request_microcode_amd    reload_store    kernfs_fop_write_iter    vfs_write    ksys_write    do_syscall_64    entry_SYSCALL_64_after_hwframe  Change the loop to go over only NUMA nodes which have CPUs before determining whether the first CPU on the respective node needs microcode update.    [ bp: Massage commit message, fix typo. ]
published:2025-04-02T13:15:43.670


Instruction: Please provide detailed information about CVE-2025-21992

CVE:CVE-2025-21992
Description:In the Linux kernel, the following vulnerability has been resolved:  HID: ignore non-functional sensor in HP 5MP Camera  The HP 5MP Camera (USB ID 0408:5473) reports a HID sensor interface that is not actually implemented. Attempting to access this non-functional sensor via iio_info causes system hangs as runtime PM tries to wake up an unresponsive sensor.    [453] hid-sensor-hub 0003:0408:5473.0003: Report latency attributes: ffffffff:ffffffff   [453] hid-sensor-hub 0003:0408:5473.0003: common attributes: 5:1, 2:1, 3:1 ffffffff:ffffffff  Add this device to the HID ignore list since the sensor interface is non-functional by design and should not be exposed to userspace.
published:2025-04-02T13:15:43.800


Instruction: Please provide detailed information about CVE-2025-21993

CVE:CVE-2025-21993
Description:In the Linux kernel, the following vulnerability has been resolved:  iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()  When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix length is 64, this causes the shift exponent to become negative, triggering a UBSAN warning. As the concept of a subnet mask does not apply to IPv6, the value is set to ~0 to suppress the warning message.
published:2025-04-02T13:15:43.940


Instruction: Please provide detailed information about CVE-2025-27556

CVE:CVE-2025-27556
Description:An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
published:2025-04-02T13:15:44.373


Instruction: Please provide detailed information about CVE-2025-30090

CVE:CVE-2025-30090
Description:mime.php in SquirrelMail through 1.4.23-svn-20250401 and 1.5.x through 1.5.2-svn-20250401 allows XSS via e-mail headers, because JavaScript payloads are mishandled after $encoded has been set to true.
published:2025-04-02T13:15:44.730


Instruction: Please provide detailed information about CVE-2025-21994

CVE:CVE-2025-21994
Description:In the Linux kernel, the following vulnerability has been resolved:  ksmbd: fix incorrect validation for num_aces field of smb_acl  parse_dcal() validate num_aces to allocate posix_ace_state_array.  if (num_aces > ULONG_MAX / sizeof(struct smb_ace *))  It is an incorrect validation that we can create an array of size ULONG_MAX. smb_acl has ->size field to calculate actual number of aces in request buffer size. Use this to check invalid num_aces.
published:2025-04-02T14:16:01.440


Instruction: Please provide detailed information about CVE-2025-31720

CVE:CVE-2025-31720
Description:A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Extended Read permission to copy an agent, gaining access to its configuration.
published:2025-04-02T15:15:59.420


Instruction: Please provide detailed information about CVE-2025-31721

CVE:CVE-2025-31721
Description:A missing permission check in Jenkins 2.503 and earlier, LTS 2.492.2 and earlier allows attackers with Computer/Create permission but without Computer/Configure permission to copy an agent, gaining access to encrypted secrets in its configuration.
published:2025-04-02T15:15:59.547


Instruction: Please provide detailed information about CVE-2025-31722

CVE:CVE-2025-31722
Description:In Jenkins Templating Engine Plugin 2.5.3 and earlier, libraries defined in folders are not subject to sandbox protection, allowing attackers with Item/Configure permission to execute arbitrary code in the context of the Jenkins controller JVM.
published:2025-04-02T15:15:59.680


Instruction: Please provide detailed information about CVE-2025-31723

CVE:CVE-2025-31723
Description:A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order.
published:2025-04-02T15:15:59.803


Instruction: Please provide detailed information about CVE-2025-31724

CVE:CVE-2025-31724
Description:Jenkins Cadence vManager Plugin 4.0.0-282.v5096a_c2db_275 and earlier stores Verisium Manager vAPI keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
published:2025-04-02T15:15:59.910


Instruction: Please provide detailed information about CVE-2025-31725

CVE:CVE-2025-31725
Description:Jenkins monitor-remote-job Plugin 1.0 stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
published:2025-04-02T15:16:00.043


Instruction: Please provide detailed information about CVE-2025-31726

CVE:CVE-2025-31726
Description:Jenkins Stack Hammer Plugin 1.0.6 and earlier stores Stack Hammer API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system.
published:2025-04-02T15:16:00.150


Instruction: Please provide detailed information about CVE-2025-31727

CVE:CVE-2025-31727
Description:Jenkins AsakusaSatellite Plugin 0.1.1 and earlier stores AsakusaSatellite API keys unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Item/Extended Read permission or access to the Jenkins controller file system.
published:2025-04-02T15:16:00.270


Instruction: Please provide detailed information about CVE-2025-31728

CVE:CVE-2025-31728
Description:Jenkins AsakusaSatellite Plugin 0.1.1 and earlier does not mask AsakusaSatellite API keys displayed on the job configuration form, increasing the potential for attackers to observe and capture them.
published:2025-04-02T15:16:00.383


Instruction: Please provide detailed information about CVE-2025-0154

CVE:CVE-2025-0154
Description:IBM TXSeries for Multiplatforms 9.1 and 11.1 could disclose sensitive information to a remote attacker due to improper neutralization of HTTP headers.
published:2025-04-02T16:17:40.430


Instruction: Please provide detailed information about CVE-2025-0014

CVE:CVE-2025-0014
Description:Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
published:2025-04-02T17:15:41.183


Instruction: Please provide detailed information about CVE-2025-20120

CVE:CVE-2025-20120
Description:A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an unauthenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against a user of the interface on an affected device.

 This vulnerability is due to insufficient validation of user-supplied input by the web-based management interface of an affected system. An attacker could exploit this vulnerability by injecting malicious code into specific pages of the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
published:2025-04-02T17:15:42.570


Instruction: Please provide detailed information about CVE-2025-20139

CVE:CVE-2025-20139
Description:A vulnerability in chat messaging features of Cisco Enterprise Chat and Email (ECE) could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition.

 This vulnerability is due to improper validation of user-supplied input to chat entry points. An attacker could exploit this vulnerability by sending malicious requests to a messaging chat entry point in the affected application. A successful exploit could allow the attacker to cause the application to stop responding, resulting in a DoS condition. The application may not recover on its own and may need an administrator to manually restart services to recover.
published:2025-04-02T17:15:43.097


Instruction: Please provide detailed information about CVE-2025-20203

CVE:CVE-2025-20203
Description:A vulnerability in the web-based management interface of Cisco Evolved Programmable Network Manager (EPNM) and Cisco Prime Infrastructure could allow an authenticated, remote attacker to conduct a stored cross-site scripting (XSS) attack against users of the interface of an affected system.

 The vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by inserting malicious code into specific data fields in the interface. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information. To exploit this vulnerability, the attacker must have valid administrative credentials.

  {{value}} ["%7b%7bvalue%7d%7d"])}]]
published:2025-04-02T17:15:43.700


Instruction: Please provide detailed information about CVE-2025-20212

CVE:CVE-2025-20212
Description:A vulnerability in the Cisco AnyConnect VPN server of Cisco Meraki MX and Cisco Meraki Z Series devices could allow an authenticated, remote attacker to cause a denial of service (DoS) condition in the Cisco AnyConnect service on an affected device. To exploit this vulnerability, the attacker must have valid VPN user credentials on the affected device.

 This vulnerability exists because a variable is not initialized when an SSL VPN session is established. An attacker could exploit this vulnerability by supplying crafted attributes while establishing an SSL VPN session with an affected device. A successful exploit could allow the attacker to cause the Cisco AnyConnect VPN server to restart, resulting in the failure of the established SSL VPN sessions and forcing remote users to initiate a new VPN connection and reauthenticate. A sustained attack could prevent new SSL VPN connections from being established.

 Note: When the attack traffic stops, the Cisco AnyConnect VPN server recovers without manual intervention.
published:2025-04-02T17:15:44.323


Instruction: Please provide detailed information about CVE-2025-31282

CVE:CVE-2025-31282
Description:A broken access control vulnerability previously discovered in the Trend Vision One User Account component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges.

 Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
published:2025-04-02T17:15:46.473


Instruction: Please provide detailed information about CVE-2025-31283

CVE:CVE-2025-31283
Description:A broken access control vulnerability previously discovered in the Trend Vision One User Roles component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges.

 Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
published:2025-04-02T17:15:47.903


Instruction: Please provide detailed information about CVE-2025-31284

CVE:CVE-2025-31284
Description:A broken access control vulnerability previously discovered in the Trend Vision One Status component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges.

 Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
published:2025-04-02T17:15:48.420


Instruction: Please provide detailed information about CVE-2025-31285

CVE:CVE-2025-31285
Description:A broken access control vulnerability previously discovered in the Trend Vision One Role Name component could have allowed an administrator to create users who could then change the role of the account and ultimately escalate privileges.

 Please note: ths issue has already been addressed on the backend service and is no longer considered an active vulnerability.
published:2025-04-02T17:15:48.943


Instruction: Please provide detailed information about CVE-2025-31286

CVE:CVE-2025-31286
Description:An HTML injection vulnerability previously discovered in Trend Vision One could have allowed a malicious user to execute arbitrary code.

 Please note: this issue has already been addressed on the backend service and is no longer considered an active vulnerability.
published:2025-04-02T17:15:49.290


Instruction: Please provide detailed information about CVE-2025-22923

CVE:CVE-2025-22923
Description:An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal and delete files by sending a crafted POST request to /Modules.php?modname=users/Staff.php&removefile.
published:2025-04-02T21:15:32.100


Instruction: Please provide detailed information about CVE-2025-22924

CVE:CVE-2025-22924
Description:OS4ED openSIS v7.0 through v9.1 contains a SQL injection vulnerability via the stu_id parameter at /modules/students/Student.php.
published:2025-04-02T21:15:32.230


Instruction: Please provide detailed information about CVE-2025-22925

CVE:CVE-2025-22925
Description:OS4ED openSIS v7.0 to v9.1 was discovered to contain a SQL injection vulnerability via the table parameter at /attendance/AttendanceCodes.php. The remote, authenticated attacker requires the admin role to successfully exploit this vulnerability.
published:2025-04-02T21:15:32.340


Instruction: Please provide detailed information about CVE-2025-29062

CVE:CVE-2025-29062
Description:An issue in BL-AC2100 <=V1.0.4 allows a remote attacker to execute arbitrary code via the time1 and time2 parameters in the set_LimitClient_cfg of the goahead webservice.
published:2025-04-02T21:15:32.463


Instruction: Please provide detailed information about CVE-2025-29063

CVE:CVE-2025-29063
Description:An issue in BL-AC2100 V1.0.4 and before allows a remote attacker to execute arbitrary code via the enable parameter passed to /goform/set_hidessid_cfg is not handled properly.
published:2025-04-02T21:15:32.583


Instruction: Please provide detailed information about CVE-2025-29085

CVE:CVE-2025-29085
Description:SQL injection vulnerability in vipshop Saturn v.3.5.1 and before allows a remote attacker to execute arbitrary code via /console/dashboard/executorCount?zkClusterKey component.
published:2025-04-02T21:15:32.707


Instruction: Please provide detailed information about CVE-2025-29719

CVE:CVE-2025-29719
Description:SourceCodester (rems) Employee Management System 1.0 is vulnerable to Cross Site Scripting (XSS) in add_employee.php via the First Name and Address text fields.
published:2025-04-02T21:15:32.820


Instruction: Please provide detailed information about CVE-2025-2704

CVE:CVE-2025-2704
Description:OpenVPN version 2.6.1 through 2.6.13 in server mode using TLS-crypt-v2 allows remote attackers to trigger a denial of service by corrupting and replaying network packets in the early handshake phase
published:2025-04-02T21:15:32.943


Instruction: Please provide detailed information about CVE-2025-30080

CVE:CVE-2025-30080
Description:Signalling in Pexip Infinity 29 through 36.2 before 37.0 has improper input validation that allows remote attackers to trigger a temporary denial of service (software abort).
published:2025-04-02T21:15:33.797


Instruction: Please provide detailed information about CVE-2025-3118

CVE:CVE-2025-3118
Description:A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been classified as critical. This affects an unknown part of the file /tutor/courses/view_course.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-02T21:15:33.930


Instruction: Please provide detailed information about CVE-2025-0257

CVE:CVE-2025-0257
Description:HCL DevOps Deploy / HCL Launch could allow unauthorized access to other services or potential exposure of sensitive data due to missing authentication in its Agent Relay service.
published:2025-04-02T22:15:18.477


Instruction: Please provide detailed information about CVE-2025-27608

CVE:CVE-2025-27608
Description:Arduino IDE 2.x is an IDE based on the Theia IDE framework and built with Electron. A Self Cross-Site Scripting (XSS) vulnerability has been identified within the Arduino-IDE prior to version v2.3.5. The vulnerability occurs in the Additional Board Manager URLs field, which can be found in the Preferences -> Settings section of the Arduino IDE interface. In the vulnerable versions, any values entered in this field are directly displayed to the user through a notification tooltip object, without a proper output encoding routine, due to the underlying ElectronJS engine interpretation. This vulnerability exposes the input parameter to Self-XSS attacks, which may lead to security risks depending on where the malicious payload is injected. This vulnerability is fixed in 2.3.5.
published:2025-04-02T22:15:19.510


Instruction: Please provide detailed information about CVE-2025-30218

CVE:CVE-2025-30218
Description:Next.js is a React framework for building full-stack web applications. To mitigate CVE-2025-29927, Next.js validated the x-middleware-subrequest-id which persisted across multiple incoming requests. However, this subrequest ID is sent to all requests, even if the destination is not the same host as the Next.js application. Initiating a fetch request to a third-party within Middleware will send the x-middleware-subrequest-id to that third party. This vulnerability is fixed in 12.3.6, 13.5.10, 14.2.26, and 15.2.4.
published:2025-04-02T22:15:19.940


Instruction: Please provide detailed information about CVE-2025-31477

CVE:CVE-2025-31477
Description:The Tauri shell plugin allows access to the system shell. Prior to 2.2.1, the Tauri shell plugin exposes functionality to execute code and open programs on the system. The open endpoint of this plugin is designed to allow open functionality with the system opener (e.g. xdg-open on Linux). This was meant to be restricted to a reasonable number of protocols like https or mailto by default. This default restriction was not functional due to improper validation of the allowed protocols, allowing for potentially dangerous protocols like file://, smb://, or nfs:// and others to be opened by the system registered protocol handler. By passing untrusted user input to the open endpoint these potentially dangerous protocols can be abused to gain remote code execution on the system. This either requires direct exposure of the endpoint to application users or code execution in the frontend of a Tauri application. This vulnerability is fixed in 2.2.1.
published:2025-04-02T22:15:20.420


Instruction: Please provide detailed information about CVE-2025-31479

CVE:CVE-2025-31479
Description:canonical/get-workflow-version-action is a GitHub composite action to get commit SHA that GitHub Actions reusable workflow was called with. Prior to 1.0.1, if the get-workflow-version-action step fails, the exception output may include the GITHUB_TOKEN. If the full token is included in the exception output, GitHub will automatically redact the secret from the GitHub Actions logs. However, the token may be truncated—causing part of the GITHUB_TOKEN to be displayed in plaintext in the GitHub Actions logs. Anyone with read access to the GitHub repository can view GitHub Actions logs. For public repositories, anyone can view the GitHub Actions logs. The opportunity to exploit this vulnerability is limited—the GITHUB_TOKEN is automatically revoked when the job completes. However, there is an opportunity for an attack in the time between the GITHUB_TOKEN being displayed in the logs and the completion of the job. Users using the github-token input are impacted. This vulnerability is fixed in 1.0.1.
published:2025-04-02T22:15:20.563


Instruction: Please provide detailed information about CVE-2025-31484

CVE:CVE-2025-31484
Description:conda-forge infrastructure holds common configurations and settings for key pieces of the conda-forge infrastructure. Between 2025-02-10 and 2025-04-01, conda-forge infrastructure used the wrong token for Azure's cf-staging access. This bug meant that any feedstock maintainer could upload a package to the conda-forge channel, bypassing our feedstock-token + upload process. The security logs on anaconda.org were check for any packages that were not copied from the cf-staging to the conda-forge channel and none were found.
published:2025-04-02T22:15:20.720


Instruction: Please provide detailed information about CVE-2025-3119

CVE:CVE-2025-3119
Description:A vulnerability was found in SourceCodester Online Tutor Portal 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /tutor/courses/manage_course.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-02T22:15:20.867


Instruction: Please provide detailed information about CVE-2025-3120

CVE:CVE-2025-3120
Description:A vulnerability was found in SourceCodester Apartment Visitors Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument apartmentno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-04-02T22:15:21.047


Instruction: Please provide detailed information about CVE-2025-3121

CVE:CVE-2025-3121
Description:A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
published:2025-04-02T22:15:21.220


Instruction: Please provide detailed information about CVE-2025-3122

CVE:CVE-2025-3122
Description:A vulnerability classified as problematic was found in WebAssembly wabt 1.0.36. Affected by this vulnerability is the function BinaryReaderInterp::BeginFunctionBody of the file src/interp/binary-reader-interp.cc. The manipulation leads to null pointer dereference. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-04-02T22:15:21.410


Instruction: Please provide detailed information about CVE-2025-3129

CVE:CVE-2025-3129
Description:Improper Restriction of Excessive Authentication Attempts vulnerability in Drupal Access code allows Brute Force.This issue affects Access code: from 0.0.0 before 2.0.4.
published:2025-04-02T22:15:21.593


Instruction: Please provide detailed information about CVE-2025-3130

CVE:CVE-2025-3130
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Drupal Obfuscate allows Stored XSS.This issue affects Obfuscate: from 0.0.0 before 2.0.1.
published:2025-04-02T22:15:21.710


Instruction: Please provide detailed information about CVE-2025-3123

CVE:CVE-2025-3123
Description:A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateModuleAction of the component Theme Installation/Plugin Installation. The manipulation leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The vendor explains, that "[t]he philosophy has always been, admin [...] bear responsibility to not install themes/plugins from untrusted sources."
published:2025-04-02T23:15:17.360


Instruction: Please provide detailed information about CVE-2025-3154

CVE:CVE-2025-3154
Description:Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by an invalid VerticesPerRow value in a PDF shading dictionary.
published:2025-04-02T23:15:18.523


Instruction: Please provide detailed information about CVE-2025-3134

CVE:CVE-2025-3134
Description:A vulnerability classified as critical has been found in code-projects Payroll Management System 1.0. This affects an unknown part of the file /add_overtime.php. The manipulation of the argument rate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T02:15:20.340


Instruction: Please provide detailed information about CVE-2025-3135

CVE:CVE-2025-3135
Description:A vulnerability classified as critical was found in fcba_zzm ics-park Smart Park Management System 2.1. This vulnerability affects unknown code of the file /api/system/dept/update. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T02:15:20.540


Instruction: Please provide detailed information about CVE-2025-3153

CVE:CVE-2025-3153
Description:Concrete CMS version 9 below 9.4.0RC2 and versions below 8.5.20 are vulnerable to CSRF and XSS in the Concrete CMS Address attribute because addresses are not properly sanitized in the output when a country is not specified.  Attackers are limited to individuals whom a site administrator has granted the ability to fill in an address attribute. It is possible for the attacker to glean limited information from the site but amount and type is restricted by mitigating controls and the level of access of the attacker. Limited data modification is possible. The dashboard page itself could be rendered unavailable.  The fix only sanitizes new data uploaded post update to Concrete CMS 9.4.0RC2. Existing database entries added before the update will still be “live” if there were successful exploits added under previous versions; a database search is recommended. The Concrete CMS security team gave this vulnerability CVSS v.4.0 score of 5.1  with vector CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L Thanks Myq Larson for reporting.
published:2025-04-03T02:15:20.733


Instruction: Please provide detailed information about CVE-2025-29991

CVE:CVE-2025-29991
Description:Yubico YubiKey 5.4.1 through 5.7.3 before 5.7.4 has an incorrect FIDO CTAP PIN/UV Auth Protocol Two implementation. It uses the signature length from CTAP PIN/UV Auth Protocol One, even when CTAP PIN/UV Auth Protocol Two was chosen, resulting in a partial signature verification.
published:2025-04-03T03:15:17.947


Instruction: Please provide detailed information about CVE-2025-2784

CVE:CVE-2025-2784
Description:A flaw was found in libsoup. The package is vulnerable to a heap buffer over-read when sniffing content via the skip_insight_whitespace() function. Libsoup clients may read one byte out-of-bounds in response to a crafted HTTP response by an HTTP server.
published:2025-04-03T03:15:18.113


Instruction: Please provide detailed information about CVE-2025-3136

CVE:CVE-2025-3136
Description:A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
published:2025-04-03T04:15:38.540


Instruction: Please provide detailed information about CVE-2025-3137

CVE:CVE-2025-3137
Description:A vulnerability, which was classified as critical, was found in PHPGurukul Online Security Guards Hiring System 1.0. Affected is an unknown function of the file /admin/changeimage.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T04:15:39.307


Instruction: Please provide detailed information about CVE-2025-3138

CVE:CVE-2025-3138
Description:A vulnerability has been found in PHPGurukul Online Security Guards Hiring System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-guard-detail.php. The manipulation of the argument editid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T04:15:39.733


Instruction: Please provide detailed information about CVE-2025-3139

CVE:CVE-2025-3139
Description:A vulnerability was found in code-projects Bus Reservation System 1.0 and classified as critical. Affected by this issue is the function Login of the component Login Form. The manipulation of the argument Str1 leads to buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
published:2025-04-03T04:15:39.940


Instruction: Please provide detailed information about CVE-2025-3140

CVE:CVE-2025-3140
Description:A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been classified as critical. This affects an unknown part of the file /view_category.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T05:15:40.777


Instruction: Please provide detailed information about CVE-2025-3141

CVE:CVE-2025-3141
Description:A vulnerability was found in SourceCodester Online Medicine Ordering System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /manage_category.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T05:15:42.363


Instruction: Please provide detailed information about CVE-2025-2055

CVE:CVE-2025-2055
Description:The MapPress Maps for WordPress plugin before 2.94.9 does not sanitise and escape some parameters when outputing them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks.
published:2025-04-03T06:15:42.727


Instruction: Please provide detailed information about CVE-2025-31334

CVE:CVE-2025-31334
Description:Issue that bypasses the "Mark of the Web" security warning function for files when opening a symbolic link that points to an executable file exists in WinRAR versions prior to 7.11. If a symbolic link specially crafted by an attacker is opened on the affected product, arbitrary code may be executed.
published:2025-04-03T06:15:42.903


Instruction: Please provide detailed information about CVE-2025-3142

CVE:CVE-2025-3142
Description:A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /add-apartment.php. The manipulation of the argument buildingno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.
published:2025-04-03T06:15:43.200


Instruction: Please provide detailed information about CVE-2025-3143

CVE:CVE-2025-3143
Description:A vulnerability classified as critical has been found in SourceCodester Apartment Visitor Management System 1.0. Affected is an unknown function of the file /visitor-entry.php. The manipulation of the argument visname/address leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.
published:2025-04-03T06:15:43.467


Instruction: Please provide detailed information about CVE-2025-3144

CVE:CVE-2025-3144
Description:A vulnerability classified as problematic was found in MindSpore 2.5.0. Affected by this vulnerability is the function mindspore.numpy.fft.hfftn. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
published:2025-04-03T06:15:43.677


Instruction: Please provide detailed information about CVE-2025-30485

CVE:CVE-2025-30485
Description:UNIX symbolic link (Symlink) following issue exists in FutureNet NXR series, VXR series and WXR series routers. Attaching to the affected product an external storage containing malicious symbolic link files, a logged-in administrative user may obtain and/or destroy internal files.
published:2025-04-03T07:15:41.110


Instruction: Please provide detailed information about CVE-2025-3145

CVE:CVE-2025-3145
Description:A vulnerability, which was classified as problematic, has been found in MindSpore 2.5.0. Affected by this issue is the function mindspore.numpy.fft.rfft2. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.
published:2025-04-03T07:15:41.290


Instruction: Please provide detailed information about CVE-2025-3146

CVE:CVE-2025-3146
Description:A vulnerability, which was classified as critical, was found in PHPGurukul Bus Pass Management System 1.0. This affects an unknown part of the file /view-pass-detail.php. The manipulation of the argument viewid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T07:15:41.517


Instruction: Please provide detailed information about CVE-2025-3147

CVE:CVE-2025-3147
Description:A vulnerability has been found in PHPGurukul Boat Booking System 1.0 and classified as critical. This vulnerability affects unknown code of the file /add-subadmin.php. The manipulation of the argument sadminusername leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-03T07:15:41.707


Instruction: Please provide detailed information about CVE-2025-3148

CVE:CVE-2025-3148
Description:A vulnerability was found in codeprojects Product Management System 1.0 and classified as problematic. This issue affects some unknown processing of the component Login. The manipulation of the argument Str1 leads to buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
published:2025-04-03T07:15:41.927


Instruction: Please provide detailed information about CVE-2025-1663

CVE:CVE-2025-1663
Description:The Unlimited Elements For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several widgets in all versions up to, and including, 1.5.142 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-04-03T08:15:14.693


Instruction: Please provide detailed information about CVE-2025-21995

CVE:CVE-2025-21995
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/sched: Fix fence reference count leak  The last_scheduled fence leaks when an entity is being killed and adding the cleanup callback fails.  Decrement the reference count of prev when dma_fence_add_callback() fails, ensuring proper balance.  [phasta: add git tag info for stable kernel]
published:2025-04-03T08:15:14.870