Instruction: Please provide detailed information about CVE-2025-22984

CVE:CVE-2025-22984
Description:An access control issue in the component /api/squareComment/DelectSquareById of iceCMS v2.2.0 allows unauthenticated attackers to access sensitive information.
published:2025-01-14T16:15:35.710


Instruction: Please provide detailed information about CVE-2025-0462

CVE:CVE-2025-0462
Description:A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0 and classified as critical. This issue affects some unknown processing of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1. The manipulation of the argument searchcontent leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-01-14T17:15:21.040


Instruction: Please provide detailed information about CVE-2025-0463

CVE:CVE-2025-0463
Description:A vulnerability was found in Shanghai Lingdang Information Technology Lingdang CRM up to 8.6.0.0. It has been classified as critical. Affected is an unknown function of the file /crm/weixinmp/index.php?userid=123&module=Users&usid=1&action=UsersAjax&minipro_const_type=1&related_module=Singin. The manipulation of the argument name leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-01-14T17:15:21.210


Instruction: Please provide detailed information about CVE-2025-0464

CVE:CVE-2025-0464
Description:A vulnerability was found in SourceCodester Task Reminder System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Maintenance Section. The manipulation of the argument System Name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-14T17:15:21.387


Instruction: Please provide detailed information about CVE-2025-23080

CVE:CVE-2025-23080
Description:Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - OpenBadges Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - OpenBadges Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.
published:2025-01-14T17:15:21.620


Instruction: Please provide detailed information about CVE-2025-23081

CVE:CVE-2025-23081
Description:Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - DataTransfer Extension allows Cross Site Request Forgery, Cross-Site Scripting (XSS).This issue affects Mediawiki - DataTransfer Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.
published:2025-01-14T17:15:21.750


Instruction: Please provide detailed information about CVE-2025-0465

CVE:CVE-2025-0465
Description:A vulnerability was found in AquilaCMS 1.412.13. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/v2/categories. The manipulation of the argument PostBody.populate leads to deserialization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-01-14T18:15:29.883


Instruction: Please provide detailed information about CVE-2025-21171

CVE:CVE-2025-21171
Description:.NET Remote Code Execution Vulnerability
published:2025-01-14T18:15:30.100


Instruction: Please provide detailed information about CVE-2025-21172

CVE:CVE-2025-21172
Description:.NET and Visual Studio Remote Code Execution Vulnerability
published:2025-01-14T18:15:30.300


Instruction: Please provide detailed information about CVE-2025-21173

CVE:CVE-2025-21173
Description:.NET Elevation of Privilege Vulnerability
published:2025-01-14T18:15:30.480


Instruction: Please provide detailed information about CVE-2025-21176

CVE:CVE-2025-21176
Description:.NET, .NET Framework, and Visual Studio Remote Code Execution Vulnerability
published:2025-01-14T18:15:30.650


Instruction: Please provide detailed information about CVE-2025-21178

CVE:CVE-2025-21178
Description:Visual Studio Remote Code Execution Vulnerability
published:2025-01-14T18:15:30.847


Instruction: Please provide detailed information about CVE-2025-21186

CVE:CVE-2025-21186
Description:Microsoft Access Remote Code Execution Vulnerability
published:2025-01-14T18:15:31.020


Instruction: Please provide detailed information about CVE-2025-21187

CVE:CVE-2025-21187
Description:Microsoft Power Automate Remote Code Execution Vulnerability
published:2025-01-14T18:15:31.187


Instruction: Please provide detailed information about CVE-2025-21189

CVE:CVE-2025-21189
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:31.377


Instruction: Please provide detailed information about CVE-2025-21193

CVE:CVE-2025-21193
Description:Active Directory Federation Server Spoofing Vulnerability
published:2025-01-14T18:15:31.637


Instruction: Please provide detailed information about CVE-2025-21202

CVE:CVE-2025-21202
Description:Windows Recovery Environment Agent Elevation of Privilege Vulnerability
published:2025-01-14T18:15:31.827


Instruction: Please provide detailed information about CVE-2025-21207

CVE:CVE-2025-21207
Description:Windows Connected Devices Platform Service (Cdpsvc) Denial of Service Vulnerability
published:2025-01-14T18:15:32.027


Instruction: Please provide detailed information about CVE-2025-21210

CVE:CVE-2025-21210
Description:Windows BitLocker Information Disclosure Vulnerability
published:2025-01-14T18:15:32.207


Instruction: Please provide detailed information about CVE-2025-21211

CVE:CVE-2025-21211
Description:Secure Boot Security Feature Bypass Vulnerability
published:2025-01-14T18:15:32.410


Instruction: Please provide detailed information about CVE-2025-21213

CVE:CVE-2025-21213
Description:Secure Boot Security Feature Bypass Vulnerability
published:2025-01-14T18:15:32.600


Instruction: Please provide detailed information about CVE-2025-21214

CVE:CVE-2025-21214
Description:Windows BitLocker Information Disclosure Vulnerability
published:2025-01-14T18:15:32.777


Instruction: Please provide detailed information about CVE-2025-21215

CVE:CVE-2025-21215
Description:Secure Boot Security Feature Bypass Vulnerability
published:2025-01-14T18:15:32.973


Instruction: Please provide detailed information about CVE-2025-21217

CVE:CVE-2025-21217
Description:Windows NTLM Spoofing Vulnerability
published:2025-01-14T18:15:33.193


Instruction: Please provide detailed information about CVE-2025-21218

CVE:CVE-2025-21218
Description:Windows Kerberos Denial of Service Vulnerability
published:2025-01-14T18:15:33.370


Instruction: Please provide detailed information about CVE-2025-21219

CVE:CVE-2025-21219
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:33.547


Instruction: Please provide detailed information about CVE-2025-21220

CVE:CVE-2025-21220
Description:Microsoft Message Queuing Information Disclosure Vulnerability
published:2025-01-14T18:15:33.750


Instruction: Please provide detailed information about CVE-2025-21223

CVE:CVE-2025-21223
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:33.947


Instruction: Please provide detailed information about CVE-2025-21224

CVE:CVE-2025-21224
Description:Windows Line Printer Daemon (LPD) Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:34.150


Instruction: Please provide detailed information about CVE-2025-21225

CVE:CVE-2025-21225
Description:Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
published:2025-01-14T18:15:34.367


Instruction: Please provide detailed information about CVE-2025-21226

CVE:CVE-2025-21226
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:34.560


Instruction: Please provide detailed information about CVE-2025-21227

CVE:CVE-2025-21227
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:34.753


Instruction: Please provide detailed information about CVE-2025-21228

CVE:CVE-2025-21228
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:34.950


Instruction: Please provide detailed information about CVE-2025-21229

CVE:CVE-2025-21229
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:35.153


Instruction: Please provide detailed information about CVE-2025-21230

CVE:CVE-2025-21230
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:35.333


Instruction: Please provide detailed information about CVE-2025-21231

CVE:CVE-2025-21231
Description:IP Helper Denial of Service Vulnerability
published:2025-01-14T18:15:35.513


Instruction: Please provide detailed information about CVE-2025-21232

CVE:CVE-2025-21232
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:35.690


Instruction: Please provide detailed information about CVE-2025-21233

CVE:CVE-2025-21233
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:35.870


Instruction: Please provide detailed information about CVE-2025-21234

CVE:CVE-2025-21234
Description:Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
published:2025-01-14T18:15:36.080


Instruction: Please provide detailed information about CVE-2025-21235

CVE:CVE-2025-21235
Description:Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability
published:2025-01-14T18:15:36.320


Instruction: Please provide detailed information about CVE-2025-21236

CVE:CVE-2025-21236
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:36.667


Instruction: Please provide detailed information about CVE-2025-21237

CVE:CVE-2025-21237
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:36.983


Instruction: Please provide detailed information about CVE-2025-21238

CVE:CVE-2025-21238
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:37.407


Instruction: Please provide detailed information about CVE-2025-21239

CVE:CVE-2025-21239
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:38.010


Instruction: Please provide detailed information about CVE-2025-21240

CVE:CVE-2025-21240
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:38.770


Instruction: Please provide detailed information about CVE-2025-21241

CVE:CVE-2025-21241
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:39.490


Instruction: Please provide detailed information about CVE-2025-21242

CVE:CVE-2025-21242
Description:Windows Kerberos Information Disclosure Vulnerability
published:2025-01-14T18:15:39.867


Instruction: Please provide detailed information about CVE-2025-21243

CVE:CVE-2025-21243
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:40.180


Instruction: Please provide detailed information about CVE-2025-21244

CVE:CVE-2025-21244
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:40.487


Instruction: Please provide detailed information about CVE-2025-21245

CVE:CVE-2025-21245
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:41.100


Instruction: Please provide detailed information about CVE-2025-21246

CVE:CVE-2025-21246
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:41.790


Instruction: Please provide detailed information about CVE-2025-21248

CVE:CVE-2025-21248
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:42.107


Instruction: Please provide detailed information about CVE-2025-21249

CVE:CVE-2025-21249
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:42.360


Instruction: Please provide detailed information about CVE-2025-21250

CVE:CVE-2025-21250
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:42.593


Instruction: Please provide detailed information about CVE-2025-21251

CVE:CVE-2025-21251
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:42.867


Instruction: Please provide detailed information about CVE-2025-21252

CVE:CVE-2025-21252
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:43.180


Instruction: Please provide detailed information about CVE-2025-21255

CVE:CVE-2025-21255
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:43.437


Instruction: Please provide detailed information about CVE-2025-21256

CVE:CVE-2025-21256
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:43.730


Instruction: Please provide detailed information about CVE-2025-21257

CVE:CVE-2025-21257
Description:Windows WLAN AutoConfig Service Information Disclosure Vulnerability
published:2025-01-14T18:15:43.990


Instruction: Please provide detailed information about CVE-2025-21258

CVE:CVE-2025-21258
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:44.660


Instruction: Please provide detailed information about CVE-2025-21260

CVE:CVE-2025-21260
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:44.927


Instruction: Please provide detailed information about CVE-2025-21261

CVE:CVE-2025-21261
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:45.137


Instruction: Please provide detailed information about CVE-2025-21263

CVE:CVE-2025-21263
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:45.337


Instruction: Please provide detailed information about CVE-2025-21265

CVE:CVE-2025-21265
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:45.583


Instruction: Please provide detailed information about CVE-2025-21266

CVE:CVE-2025-21266
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:45.797


Instruction: Please provide detailed information about CVE-2025-21268

CVE:CVE-2025-21268
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:46.023


Instruction: Please provide detailed information about CVE-2025-21269

CVE:CVE-2025-21269
Description:Windows HTML Platforms Security Feature Bypass Vulnerability
published:2025-01-14T18:15:46.290


Instruction: Please provide detailed information about CVE-2025-21270

CVE:CVE-2025-21270
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:46.503


Instruction: Please provide detailed information about CVE-2025-21271

CVE:CVE-2025-21271
Description:Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
published:2025-01-14T18:15:46.747


Instruction: Please provide detailed information about CVE-2025-21272

CVE:CVE-2025-21272
Description:Windows COM Server Information Disclosure Vulnerability
published:2025-01-14T18:15:46.987


Instruction: Please provide detailed information about CVE-2025-21273

CVE:CVE-2025-21273
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:47.240


Instruction: Please provide detailed information about CVE-2025-21274

CVE:CVE-2025-21274
Description:Windows Event Tracing Denial of Service Vulnerability
published:2025-01-14T18:15:47.487


Instruction: Please provide detailed information about CVE-2025-21275

CVE:CVE-2025-21275
Description:Windows App Package Installer Elevation of Privilege Vulnerability
published:2025-01-14T18:15:47.723


Instruction: Please provide detailed information about CVE-2025-21276

CVE:CVE-2025-21276
Description:Windows MapUrlToZone Denial of Service Vulnerability
published:2025-01-14T18:15:48.013


Instruction: Please provide detailed information about CVE-2025-21277

CVE:CVE-2025-21277
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:48.260


Instruction: Please provide detailed information about CVE-2025-21278

CVE:CVE-2025-21278
Description:Windows Remote Desktop Gateway (RD Gateway) Denial of Service Vulnerability
published:2025-01-14T18:15:48.480


Instruction: Please provide detailed information about CVE-2025-21280

CVE:CVE-2025-21280
Description:Windows Virtual Trusted Platform Module Denial of Service Vulnerability
published:2025-01-14T18:15:48.690


Instruction: Please provide detailed information about CVE-2025-21281

CVE:CVE-2025-21281
Description:Microsoft COM for Windows Elevation of Privilege Vulnerability
published:2025-01-14T18:15:48.897


Instruction: Please provide detailed information about CVE-2025-21282

CVE:CVE-2025-21282
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:49.110


Instruction: Please provide detailed information about CVE-2025-21284

CVE:CVE-2025-21284
Description:Windows Virtual Trusted Platform Module Denial of Service Vulnerability
published:2025-01-14T18:15:49.317


Instruction: Please provide detailed information about CVE-2025-21285

CVE:CVE-2025-21285
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:49.530


Instruction: Please provide detailed information about CVE-2025-21286

CVE:CVE-2025-21286
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:49.760


Instruction: Please provide detailed information about CVE-2025-21287

CVE:CVE-2025-21287
Description:Windows Installer Elevation of Privilege Vulnerability
published:2025-01-14T18:15:49.947


Instruction: Please provide detailed information about CVE-2025-21288

CVE:CVE-2025-21288
Description:Windows COM Server Information Disclosure Vulnerability
published:2025-01-14T18:15:50.173


Instruction: Please provide detailed information about CVE-2025-21289

CVE:CVE-2025-21289
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:50.363


Instruction: Please provide detailed information about CVE-2025-21290

CVE:CVE-2025-21290
Description:Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability
published:2025-01-14T18:15:50.587


Instruction: Please provide detailed information about CVE-2025-21291

CVE:CVE-2025-21291
Description:Windows Direct Show Remote Code Execution Vulnerability
published:2025-01-14T18:15:50.767


Instruction: Please provide detailed information about CVE-2025-21292

CVE:CVE-2025-21292
Description:Windows Search Service Elevation of Privilege Vulnerability
published:2025-01-14T18:15:50.927


Instruction: Please provide detailed information about CVE-2025-21293

CVE:CVE-2025-21293
Description:Active Directory Domain Services Elevation of Privilege Vulnerability
published:2025-01-14T18:15:51.110


Instruction: Please provide detailed information about CVE-2025-21294

CVE:CVE-2025-21294
Description:Microsoft Digest Authentication Remote Code Execution Vulnerability
published:2025-01-14T18:15:51.320


Instruction: Please provide detailed information about CVE-2025-21295

CVE:CVE-2025-21295
Description:SPNEGO Extended Negotiation (NEGOEX) Security Mechanism Remote Code Execution Vulnerability
published:2025-01-14T18:15:51.520


Instruction: Please provide detailed information about CVE-2025-21296

CVE:CVE-2025-21296
Description:BranchCache Remote Code Execution Vulnerability
published:2025-01-14T18:15:51.710


Instruction: Please provide detailed information about CVE-2025-21297

CVE:CVE-2025-21297
Description:Windows Remote Desktop Services Remote Code Execution Vulnerability
published:2025-01-14T18:15:51.890


Instruction: Please provide detailed information about CVE-2025-21298

CVE:CVE-2025-21298
Description:Windows OLE Remote Code Execution Vulnerability
published:2025-01-14T18:15:52.080


Instruction: Please provide detailed information about CVE-2025-21299

CVE:CVE-2025-21299
Description:Windows Kerberos Security Feature Bypass Vulnerability
published:2025-01-14T18:15:52.270


Instruction: Please provide detailed information about CVE-2025-21300

CVE:CVE-2025-21300
Description:Windows upnphost.dll Denial of Service Vulnerability
published:2025-01-14T18:15:52.463


Instruction: Please provide detailed information about CVE-2025-21301

CVE:CVE-2025-21301
Description:Windows Geolocation Service Information Disclosure Vulnerability
published:2025-01-14T18:15:52.660


Instruction: Please provide detailed information about CVE-2025-21302

CVE:CVE-2025-21302
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:52.840


Instruction: Please provide detailed information about CVE-2025-21303

CVE:CVE-2025-21303
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:53.047


Instruction: Please provide detailed information about CVE-2025-21304

CVE:CVE-2025-21304
Description:Microsoft DWM Core Library Elevation of Privilege Vulnerability
published:2025-01-14T18:15:53.237


Instruction: Please provide detailed information about CVE-2025-21305

CVE:CVE-2025-21305
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:53.450


Instruction: Please provide detailed information about CVE-2025-21306

CVE:CVE-2025-21306
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:53.630


Instruction: Please provide detailed information about CVE-2025-21307

CVE:CVE-2025-21307
Description:Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability
published:2025-01-14T18:15:53.837


Instruction: Please provide detailed information about CVE-2025-21308

CVE:CVE-2025-21308
Description:Windows Themes Spoofing Vulnerability
published:2025-01-14T18:15:54.030


Instruction: Please provide detailed information about CVE-2025-21309

CVE:CVE-2025-21309
Description:Windows Remote Desktop Services Remote Code Execution Vulnerability
published:2025-01-14T18:15:54.210


Instruction: Please provide detailed information about CVE-2025-21310

CVE:CVE-2025-21310
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:54.380


Instruction: Please provide detailed information about CVE-2025-21311

CVE:CVE-2025-21311
Description:Windows NTLM V1 Elevation of Privilege Vulnerability
published:2025-01-14T18:15:54.567


Instruction: Please provide detailed information about CVE-2025-21312

CVE:CVE-2025-21312
Description:Windows Smart Card Reader Information Disclosure Vulnerability
published:2025-01-14T18:15:54.770


Instruction: Please provide detailed information about CVE-2025-21313

CVE:CVE-2025-21313
Description:Windows Security Account Manager (SAM) Denial of Service Vulnerability
published:2025-01-14T18:15:55.007


Instruction: Please provide detailed information about CVE-2025-21314

CVE:CVE-2025-21314
Description:Windows SmartScreen Spoofing Vulnerability
published:2025-01-14T18:15:55.163


Instruction: Please provide detailed information about CVE-2025-21315

CVE:CVE-2025-21315
Description:Microsoft Brokering File System Elevation of Privilege Vulnerability
published:2025-01-14T18:15:55.343


Instruction: Please provide detailed information about CVE-2025-21316

CVE:CVE-2025-21316
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:55.510


Instruction: Please provide detailed information about CVE-2025-21317

CVE:CVE-2025-21317
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:55.697


Instruction: Please provide detailed information about CVE-2025-21318

CVE:CVE-2025-21318
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:55.880


Instruction: Please provide detailed information about CVE-2025-21319

CVE:CVE-2025-21319
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:56.090


Instruction: Please provide detailed information about CVE-2025-21320

CVE:CVE-2025-21320
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:56.297


Instruction: Please provide detailed information about CVE-2025-21321

CVE:CVE-2025-21321
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:56.533


Instruction: Please provide detailed information about CVE-2025-21323

CVE:CVE-2025-21323
Description:Windows Kernel Memory Information Disclosure Vulnerability
published:2025-01-14T18:15:56.760


Instruction: Please provide detailed information about CVE-2025-21324

CVE:CVE-2025-21324
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:56.970


Instruction: Please provide detailed information about CVE-2025-21326

CVE:CVE-2025-21326
Description:Internet Explorer Remote Code Execution Vulnerability
published:2025-01-14T18:15:57.170


Instruction: Please provide detailed information about CVE-2025-21327

CVE:CVE-2025-21327
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:57.340


Instruction: Please provide detailed information about CVE-2025-21328

CVE:CVE-2025-21328
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:57.530


Instruction: Please provide detailed information about CVE-2025-21329

CVE:CVE-2025-21329
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:57.733


Instruction: Please provide detailed information about CVE-2025-21330

CVE:CVE-2025-21330
Description:Windows Remote Desktop Services Denial of Service Vulnerability
published:2025-01-14T18:15:57.940


Instruction: Please provide detailed information about CVE-2025-21331

CVE:CVE-2025-21331
Description:Windows Installer Elevation of Privilege Vulnerability
published:2025-01-14T18:15:58.120


Instruction: Please provide detailed information about CVE-2025-21332

CVE:CVE-2025-21332
Description:MapUrlToZone Security Feature Bypass Vulnerability
published:2025-01-14T18:15:58.307


Instruction: Please provide detailed information about CVE-2025-21333

CVE:CVE-2025-21333
Description:Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
published:2025-01-14T18:15:58.530


Instruction: Please provide detailed information about CVE-2025-21334

CVE:CVE-2025-21334
Description:Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
published:2025-01-14T18:15:58.770


Instruction: Please provide detailed information about CVE-2025-21335

CVE:CVE-2025-21335
Description:Windows Hyper-V NT Kernel Integration VSP Elevation of Privilege Vulnerability
published:2025-01-14T18:15:58.960


Instruction: Please provide detailed information about CVE-2025-21336

CVE:CVE-2025-21336
Description:Windows Cryptographic Information Disclosure Vulnerability
published:2025-01-14T18:15:59.143


Instruction: Please provide detailed information about CVE-2025-21338

CVE:CVE-2025-21338
Description:GDI+ Remote Code Execution Vulnerability
published:2025-01-14T18:15:59.300


Instruction: Please provide detailed information about CVE-2025-21339

CVE:CVE-2025-21339
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:15:59.480


Instruction: Please provide detailed information about CVE-2025-21340

CVE:CVE-2025-21340
Description:Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability
published:2025-01-14T18:15:59.673


Instruction: Please provide detailed information about CVE-2025-21341

CVE:CVE-2025-21341
Description:Windows Digital Media Elevation of Privilege Vulnerability
published:2025-01-14T18:15:59.853


Instruction: Please provide detailed information about CVE-2025-21343

CVE:CVE-2025-21343
Description:Windows Web Threat Defense User Service Information Disclosure Vulnerability
published:2025-01-14T18:16:00.053


Instruction: Please provide detailed information about CVE-2025-21344

CVE:CVE-2025-21344
Description:Microsoft SharePoint Server Remote Code Execution Vulnerability
published:2025-01-14T18:16:00.227


Instruction: Please provide detailed information about CVE-2025-21345

CVE:CVE-2025-21345
Description:Microsoft Office Visio Remote Code Execution Vulnerability
published:2025-01-14T18:16:00.437


Instruction: Please provide detailed information about CVE-2025-21346

CVE:CVE-2025-21346
Description:Microsoft Office Security Feature Bypass Vulnerability
published:2025-01-14T18:16:00.607


Instruction: Please provide detailed information about CVE-2025-21348

CVE:CVE-2025-21348
Description:Microsoft SharePoint Server Remote Code Execution Vulnerability
published:2025-01-14T18:16:00.780


Instruction: Please provide detailed information about CVE-2025-21354

CVE:CVE-2025-21354
Description:Microsoft Excel Remote Code Execution Vulnerability
published:2025-01-14T18:16:00.947


Instruction: Please provide detailed information about CVE-2025-21356

CVE:CVE-2025-21356
Description:Microsoft Office Visio Remote Code Execution Vulnerability
published:2025-01-14T18:16:01.130


Instruction: Please provide detailed information about CVE-2025-21357

CVE:CVE-2025-21357
Description:Microsoft Outlook Remote Code Execution Vulnerability
published:2025-01-14T18:16:01.293


Instruction: Please provide detailed information about CVE-2025-21360

CVE:CVE-2025-21360
Description:Microsoft AutoUpdate (MAU) Elevation of Privilege Vulnerability
published:2025-01-14T18:16:01.470


Instruction: Please provide detailed information about CVE-2025-21361

CVE:CVE-2025-21361
Description:Microsoft Outlook Remote Code Execution Vulnerability
published:2025-01-14T18:16:01.637


Instruction: Please provide detailed information about CVE-2025-21362

CVE:CVE-2025-21362
Description:Microsoft Excel Remote Code Execution Vulnerability
published:2025-01-14T18:16:01.820


Instruction: Please provide detailed information about CVE-2025-21363

CVE:CVE-2025-21363
Description:Microsoft Word Remote Code Execution Vulnerability
published:2025-01-14T18:16:01.993


Instruction: Please provide detailed information about CVE-2025-21364

CVE:CVE-2025-21364
Description:Microsoft Excel Security Feature Bypass Vulnerability
published:2025-01-14T18:16:02.150


Instruction: Please provide detailed information about CVE-2025-21365

CVE:CVE-2025-21365
Description:Microsoft Office Remote Code Execution Vulnerability
published:2025-01-14T18:16:02.310


Instruction: Please provide detailed information about CVE-2025-21366

CVE:CVE-2025-21366
Description:Microsoft Access Remote Code Execution Vulnerability
published:2025-01-14T18:16:02.463


Instruction: Please provide detailed information about CVE-2025-21370

CVE:CVE-2025-21370
Description:Windows Virtualization-Based Security (VBS) Enclave Elevation of Privilege Vulnerability
published:2025-01-14T18:16:02.650


Instruction: Please provide detailed information about CVE-2025-21372

CVE:CVE-2025-21372
Description:Microsoft Brokering File System Elevation of Privilege Vulnerability
published:2025-01-14T18:16:02.813


Instruction: Please provide detailed information about CVE-2025-21374

CVE:CVE-2025-21374
Description:Windows CSC Service Information Disclosure Vulnerability
published:2025-01-14T18:16:03.003


Instruction: Please provide detailed information about CVE-2025-21378

CVE:CVE-2025-21378
Description:Windows CSC Service Elevation of Privilege Vulnerability
published:2025-01-14T18:16:03.183


Instruction: Please provide detailed information about CVE-2025-21382

CVE:CVE-2025-21382
Description:Windows Graphics Component Elevation of Privilege Vulnerability
published:2025-01-14T18:16:03.413


Instruction: Please provide detailed information about CVE-2025-21389

CVE:CVE-2025-21389
Description:Windows upnphost.dll Denial of Service Vulnerability
published:2025-01-14T18:16:03.660


Instruction: Please provide detailed information about CVE-2025-21393

CVE:CVE-2025-21393
Description:Microsoft SharePoint Server Spoofing Vulnerability
published:2025-01-14T18:16:03.863


Instruction: Please provide detailed information about CVE-2025-21395

CVE:CVE-2025-21395
Description:Microsoft Access Remote Code Execution Vulnerability
published:2025-01-14T18:16:04.033


Instruction: Please provide detailed information about CVE-2025-21402

CVE:CVE-2025-21402
Description:Microsoft Office OneNote Remote Code Execution Vulnerability
published:2025-01-14T18:16:04.190


Instruction: Please provide detailed information about CVE-2025-21403

CVE:CVE-2025-21403
Description:On-Premises Data Gateway Information Disclosure Vulnerability
published:2025-01-14T18:16:04.350


Instruction: Please provide detailed information about CVE-2025-21405

CVE:CVE-2025-21405
Description:Visual Studio Elevation of Privilege Vulnerability
published:2025-01-14T18:16:04.507


Instruction: Please provide detailed information about CVE-2025-21409

CVE:CVE-2025-21409
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:16:04.673


Instruction: Please provide detailed information about CVE-2025-21411

CVE:CVE-2025-21411
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:16:04.860


Instruction: Please provide detailed information about CVE-2025-21413

CVE:CVE-2025-21413
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:16:05.103


Instruction: Please provide detailed information about CVE-2025-21417

CVE:CVE-2025-21417
Description:Windows Telephony Service Remote Code Execution Vulnerability
published:2025-01-14T18:16:05.307


Instruction: Please provide detailed information about CVE-2025-21607

CVE:CVE-2025-21607
Description:Vyper is a Pythonic Smart Contract Language for the EVM. When the Vyper Compiler uses the precompiles EcRecover (0x1) and Identity (0x4), the success flag of the call is not checked. As a consequence an attacker can provide a specific amount of gas to make these calls fail but let the overall execution continue. Then the execution result can be incorrect. Based on EVM's rules, after the failed precompile the remaining code has only 1/64 of the pre-call-gas left (as 63/64 were forwarded and spent). Hence, only fairly simple executions can follow the failed precompile calls. Therefore, we found no significantly impacted real-world contracts. None the less an advisory has been made out of an abundance of caution. There are no actions for users to take.
published:2025-01-14T18:16:05.490


Instruction: Please provide detailed information about CVE-2025-23025

CVE:CVE-2025-23025
Description:XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. NOTE: The Realtime WYSIWYG Editor extension was **experimental**, and thus **not recommended**, in the versions affected by this vulnerability. It has become enabled by default, and thus recommended, starting with XWiki 16.9.0. A user with only **edit right** can join a realtime editing session where others, that where already there or that may join later, have **script** or **programming** access rights. This user can then insert **script rendering macros** that are executed for those users in the realtime session that have script or programming rights. The inserted scripts can be used to gain more access rights. This vulnerability has been patched in XWiki 15.10.2, 16.4.1 and 16.6.0-rc-1. Users are advised to upgrade. Users unable to upgrade may either disable the realtime WYSIWYG editing by disabling the ``xwiki-realtime`` CKEditor plugin from the WYSIWYG editor administration section or uninstall the Realtime WYSIWYG Editorextension (org.xwiki.platform:xwiki-platform-realtime-wysiwyg-ui).
published:2025-01-14T18:16:05.650


Instruction: Please provide detailed information about CVE-2025-23051

CVE:CVE-2025-23051
Description:An authenticated parameter injection vulnerability exists in the web-based management interface of the AOS-8 and AOS-10 Operating Systems. Successful exploitation could allow an authenticated user to leverage parameter injection to overwrite arbitrary system files.
published:2025-01-14T18:16:05.813


Instruction: Please provide detailed information about CVE-2025-23052

CVE:CVE-2025-23052
Description:Authenticated command injection vulnerability in the command line interface of a network management service. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands as a privileged user on the underlying operating system.
published:2025-01-14T18:16:05.960


Instruction: Please provide detailed information about CVE-2025-23366

CVE:CVE-2025-23366
Description:A flaw was found in the HAL Console in the Wildfly component, which does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a web page that is served to other users. The attacker must be authenticated as a user that belongs to management groups “SuperUser”, “Admin”, or “Maintainer”.
published:2025-01-14T18:16:06.290


Instruction: Please provide detailed information about CVE-2025-0474

CVE:CVE-2025-0474
Description:Invoice Ninja is vulnerable to authenticated Server-Side Request Forgery (SSRF) allowing for arbitrary file read and network resource requests as the application user. This issue affects Invoice Ninja: from 5.8.56 through 5.11.23.
published:2025-01-14T19:15:32.930


Instruction: Please provide detailed information about CVE-2025-21122

CVE:CVE-2025-21122
Description:Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:33.070


Instruction: Please provide detailed information about CVE-2025-21127

CVE:CVE-2025-21127
Description:Photoshop Desktop versions 25.12, 26.1 and earlier are affected by an Uncontrolled Search Path Element vulnerability that could lead to arbitrary code execution. An attacker could manipulate the search path environment variable to point to a malicious library, resulting in the execution of arbitrary code when the application loads. Exploitation of this issue requires user interaction in that a victim must run the vulnerable application.
published:2025-01-14T19:15:33.230


Instruction: Please provide detailed information about CVE-2025-21128

CVE:CVE-2025-21128
Description:Substance3D - Stager versions 3.0.4 and earlier are affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:33.387


Instruction: Please provide detailed information about CVE-2025-21129

CVE:CVE-2025-21129
Description:Substance3D - Stager versions 3.0.4 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:33.550


Instruction: Please provide detailed information about CVE-2025-21130

CVE:CVE-2025-21130
Description:Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:33.723


Instruction: Please provide detailed information about CVE-2025-21131

CVE:CVE-2025-21131
Description:Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:33.897


Instruction: Please provide detailed information about CVE-2025-21132

CVE:CVE-2025-21132
Description:Substance3D - Stager versions 3.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:34.047


Instruction: Please provide detailed information about CVE-2025-21133

CVE:CVE-2025-21133
Description:Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:34.187


Instruction: Please provide detailed information about CVE-2025-21134

CVE:CVE-2025-21134
Description:Illustrator on iPad versions 3.0.7 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T19:15:34.337


Instruction: Please provide detailed information about CVE-2025-23041

CVE:CVE-2025-23041
Description:Umbraco.Forms is a web form framework written for the nuget ecosystem. Character limits configured by editors for short and long answer fields are validated only client-side, not server-side. This issue has been patched in versions 8.13.16, 10.5.7, 13.2.2, and 14.1.2. Users are advised to upgrade. There are no known workarounds for this issue.
published:2025-01-14T19:15:44.713


Instruction: Please provide detailed information about CVE-2025-23042

CVE:CVE-2025-23042
Description:Gradio is an open-source Python package that allows quick building of demos and web application for machine learning models, API, or any arbitrary Python function. Gradio's Access Control List (ACL) for file paths can be bypassed by altering the letter case of a blocked file or directory path. This vulnerability arises due to the lack of case normalization in the file path validation logic. On case-insensitive file systems, such as those used by Windows and macOS, this flaw enables attackers to circumvent security restrictions and access sensitive files that should be protected. This issue can lead to unauthorized data access, exposing sensitive information and undermining the integrity of Gradio's security model. Given Gradio's popularity for building web applications, particularly in machine learning and AI, this vulnerability may pose a substantial threat if exploited in production environments. This issue has been addressed in release version 5.6.0. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-01-14T19:15:44.863


Instruction: Please provide detailed information about CVE-2025-23072

CVE:CVE-2025-23072
Description:Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Wikimedia Foundation Mediawiki - RefreshSpecial Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - RefreshSpecial Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.
published:2025-01-14T19:15:45.007


Instruction: Please provide detailed information about CVE-2025-23073

CVE:CVE-2025-23073
Description:Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - GlobalBlocking Extension allows Retrieve Embedded Sensitive Data.  This issue briefly impacted the master branch of MediaWiki’s GlobalBlocking Extension.
published:2025-01-14T19:15:45.120


Instruction: Please provide detailed information about CVE-2025-23074

CVE:CVE-2025-23074
Description:Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Wikimedia Foundation Mediawiki - SocialProfile Extension allows Functionality Misuse.This issue affects Mediawiki - SocialProfile Extension: from 1.39.X before 1.39.11, from 1.41.X before 1.41.3, from 1.42.X before 1.42.2.
published:2025-01-14T19:15:45.223


Instruction: Please provide detailed information about CVE-2025-21135

CVE:CVE-2025-21135
Description:Animate versions 24.0.6, 23.0.9 and earlier are affected by an Integer Underflow (Wrap or Wraparound) vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T20:15:30.853


Instruction: Please provide detailed information about CVE-2025-21136

CVE:CVE-2025-21136
Description:Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T20:15:31.007


Instruction: Please provide detailed information about CVE-2025-21137

CVE:CVE-2025-21137
Description:Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T20:15:31.157


Instruction: Please provide detailed information about CVE-2025-21138

CVE:CVE-2025-21138
Description:Substance3D - Designer versions 14.0 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T20:15:31.300


Instruction: Please provide detailed information about CVE-2025-21139

CVE:CVE-2025-21139
Description:Substance3D - Designer versions 14.0 and earlier are affected by a Heap-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
published:2025-01-14T20:15:31.457


Instruction: Please provide detailed information about CVE-2025-23018

CVE:CVE-2025-23018
Description:IPv4-in-IPv6 and IPv6-in-IPv6 tunneling (RFC 2473) do not require the validation or verification of the source of a network packet, allowing an attacker to spoof and route arbitrary traffic via an exposed network interface. This is a similar issue to CVE-2020-10136.
published:2025-01-14T20:15:32.440


Instruction: Please provide detailed information about CVE-2025-23019

CVE:CVE-2025-23019
Description:IPv6-in-IPv4 tunneling (RFC 4213) allows an attacker to spoof and route traffic via an exposed network interface.
published:2025-01-14T20:15:32.577


Instruction: Please provide detailed information about CVE-2025-22996

CVE:CVE-2025-22996
Description:A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter.
published:2025-01-15T00:15:45.053


Instruction: Please provide detailed information about CVE-2025-22997

CVE:CVE-2025-22997
Description:A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter.
published:2025-01-15T00:15:45.167


Instruction: Please provide detailed information about CVE-2025-0343

CVE:CVE-2025-0343
Description:Swift ASN.1 can be caused to crash when parsing certain BER/DER constructions. This crash is caused by a confusion in the ASN.1 library itself which assumes that certain objects can only be provided in either constructed or primitive forms, and will trigger a preconditionFailure if that constraint isn't met.  Importantly, these constraints are actually required to be true in DER, but that correctness wasn't enforced on the early node parser side so it was incorrect to rely on it later on in decoding, which is what the library did.  These crashes can be triggered when parsing any DER/BER format object. There is no memory-safety issue here: the crash is a graceful one from the Swift runtime. The impact of this is that it can be used as a denial-of-service vector when parsing BER/DER data from unknown sources, e.g. when parsing TLS certificates.
published:2025-01-15T01:15:13.673


Instruction: Please provide detailed information about CVE-2025-23013

CVE:CVE-2025-23013
Description:In Yubico pam-u2f before 1.3.1, local privilege escalation can sometimes occur. This product implements a Pluggable Authentication Module (PAM) that can be deployed to support authentication using a YubiKey or other FIDO compliant authenticators on macOS or Linux. This software package has an issue that allows for an authentication bypass in some configurations. An attacker would require the ability to access the system as an unprivileged user. Depending on the configuration, the attacker may also need to know the user's password.
published:2025-01-15T04:15:20.037


Instruction: Please provide detailed information about CVE-2025-21101

CVE:CVE-2025-21101
Description:Dell Display Manager, versions prior to 2.3.2.20, contain a race condition vulnerability. A local malicious user could potentially exploit this vulnerability during installation, leading to arbitrary folder or file deletion.
published:2025-01-15T05:15:09.097


Instruction: Please provide detailed information about CVE-2025-22394

CVE:CVE-2025-22394
Description:Dell Display Manager, versions prior to 2.3.2.18, contain a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and possibly privilege escalation.
published:2025-01-15T05:15:10.343


Instruction: Please provide detailed information about CVE-2025-23061

CVE:CVE-2025-23061
Description:Mongoose before 8.9.5 can improperly use a nested $where filter with a populate() match, leading to search injection. NOTE: this issue exists because of an incomplete fix for CVE-2024-53900.
published:2025-01-15T05:15:10.517


Instruction: Please provide detailed information about CVE-2025-0354

CVE:CVE-2025-0354
Description:Cross-site scripting vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to inject an arbitrary script via the network.
published:2025-01-15T08:15:26.330


Instruction: Please provide detailed information about CVE-2025-0355

CVE:CVE-2025-0355
Description:Missing Authentication for Critical Function vulnerability in NEC Corporation Aterm WG2600HS Ver.1.7.2 and earlier, WF1200CRS Ver.1.6.0 and earlier, WG1200CRS Ver.1.5.0 and earlier, GB1200PE Ver.1.3.0 and earlier, WG2600HP4 Ver.1.4.2 and earlier, WG2600HM4 Ver.1.4.2 and earlier, WG2600HS2 Ver.1.3.2 and earlier, WX3000HP Ver.2.4.2 and earlier and WX4200D5 Ver.1.2.4 and earlier allows a attacker to get a Wi-Fi password via the network.
published:2025-01-15T08:15:26.493


Instruction: Please provide detailed information about CVE-2025-0356

CVE:CVE-2025-0356
Description:NEC Corporation Aterm WX1500HP Ver.1.4.2 and earlier and WX3600HP Ver.1.5.3 and earlier allows a attacker to execute arbitrary OS commands via the network.
published:2025-01-15T08:15:26.650


Instruction: Please provide detailed information about CVE-2025-0193

CVE:CVE-2025-0193
Description:A stored Cross-site Scripting (XSS) vulnerability exists in the MGate 5121/5122/5123 Series firmware version v1.0 because of insufficient sanitization and encoding of user input in the "Login Message" functionality. An authenticated attacker with administrative access can exploit this vulnerability to inject malicious scripts that are continuously stored on the device. These scripts are executed when other users access the login page, potentially resulting in unauthorized actions or other impacts, depending on the user's privileges.
published:2025-01-15T11:15:09.280


Instruction: Please provide detailed information about CVE-2025-0434

CVE:CVE-2025-0434
Description:Out of bounds memory access in V8 in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-01-15T11:15:09.470


Instruction: Please provide detailed information about CVE-2025-0435

CVE:CVE-2025-0435
Description:Inappropriate implementation in Navigation in Google Chrome on Android prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: High)
published:2025-01-15T11:15:09.580


Instruction: Please provide detailed information about CVE-2025-0436

CVE:CVE-2025-0436
Description:Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-01-15T11:15:09.673


Instruction: Please provide detailed information about CVE-2025-0437

CVE:CVE-2025-0437
Description:Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-01-15T11:15:09.800


Instruction: Please provide detailed information about CVE-2025-0438

CVE:CVE-2025-0438
Description:Stack buffer overflow in Tracing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit stack corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-01-15T11:15:09.930


Instruction: Please provide detailed information about CVE-2025-0439

CVE:CVE-2025-0439
Description:Race in Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
published:2025-01-15T11:15:10.060


Instruction: Please provide detailed information about CVE-2025-0440

CVE:CVE-2025-0440
Description:Inappropriate implementation in Fullscreen in Google Chrome on Windows prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
published:2025-01-15T11:15:10.187


Instruction: Please provide detailed information about CVE-2025-0441

CVE:CVE-2025-0441
Description:Inappropriate implementation in Fenced Frames in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to obtain potentially sensitive information from the system via a crafted HTML page. (Chromium security severity: Medium)
published:2025-01-15T11:15:10.287


Instruction: Please provide detailed information about CVE-2025-0442

CVE:CVE-2025-0442
Description:Inappropriate implementation in Payments in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. (Chromium security severity: Medium)
published:2025-01-15T11:15:10.383


Instruction: Please provide detailed information about CVE-2025-0443

CVE:CVE-2025-0443
Description:Insufficient data validation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform privilege escalation via a crafted HTML page. (Chromium security severity: Medium)
published:2025-01-15T11:15:10.483


Instruction: Please provide detailed information about CVE-2025-0446

CVE:CVE-2025-0446
Description:Inappropriate implementation in Extensions in Google Chrome prior to 132.0.6834.83 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted Chrome Extension. (Chromium security severity: Low)
published:2025-01-15T11:15:10.580


Instruction: Please provide detailed information about CVE-2025-0447

CVE:CVE-2025-0447
Description:Inappropriate implementation in Navigation in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform privilege escalation via a crafted HTML page. (Chromium security severity: Low)
published:2025-01-15T11:15:10.673


Instruction: Please provide detailed information about CVE-2025-0448

CVE:CVE-2025-0448
Description:Inappropriate implementation in Compositing in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)
published:2025-01-15T11:15:10.763


Instruction: Please provide detailed information about CVE-2025-21629

CVE:CVE-2025-21629
Description:In the Linux kernel, the following vulnerability has been resolved:  net: reenable NETIF_F_IPV6_CSUM offload for BIG TCP packets  The blamed commit disabled hardware offoad of IPv6 packets with extension headers on devices that advertise NETIF_F_IPV6_CSUM, based on the definition of that feature in skbuff.h:   *   * - %NETIF_F_IPV6_CSUM  *     - Driver (device) is only able to checksum plain  *       TCP or UDP packets over IPv6. These are specifically  *       unencapsulated packets of the form IPv6|TCP or  *       IPv6|UDP where the Next Header field in the IPv6  *       header is either TCP or UDP. IPv6 extension headers  *       are not supported with this feature. This feature  *       cannot be set in features for a device with  *       NETIF_F_HW_CSUM also set. This feature is being  *       DEPRECATED (see below).  The change causes skb_warn_bad_offload to fire for BIG TCP packets.  [  496.310233] WARNING: CPU: 13 PID: 23472 at net/core/dev.c:3129 skb_warn_bad_offload+0xc4/0xe0  [  496.310297]  ? skb_warn_bad_offload+0xc4/0xe0 [  496.310300]  skb_checksum_help+0x129/0x1f0 [  496.310303]  skb_csum_hwoffload_help+0x150/0x1b0 [  496.310306]  validate_xmit_skb+0x159/0x270 [  496.310309]  validate_xmit_skb_list+0x41/0x70 [  496.310312]  sch_direct_xmit+0x5c/0x250 [  496.310317]  __qdisc_run+0x388/0x620  BIG TCP introduced an IPV6_TLV_JUMBO IPv6 extension header to communicate packet length, as this is an IPv6 jumbogram. But, the feature is only enabled on devices that support BIG TCP TSO. The header is only present for PF_PACKET taps like tcpdump, and not transmitted by physical devices.  For this specific case of extension headers that are not transmitted, return to the situation before the blamed commit and support hardware offload.  ipv6_has_hopopt_jumbo() tests not only whether this header is present, but also that it is the only extension header before a terminal (L4) header.
published:2025-01-15T13:15:15.220


Instruction: Please provide detailed information about CVE-2025-21630

CVE:CVE-2025-21630
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-01-15T13:15:15.330


Instruction: Please provide detailed information about CVE-2025-21088

CVE:CVE-2025-21088
Description:Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the frontend via crafted malicious input.
published:2025-01-15T16:15:32.413


Instruction: Please provide detailed information about CVE-2025-22317

CVE:CVE-2025-22317
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in galleryape Photo Gallery – Image Gallery by Ape allows Reflected XSS.This issue affects Photo Gallery – Image Gallery by Ape: from n/a through 2.2.8.
published:2025-01-15T16:15:34.590


Instruction: Please provide detailed information about CVE-2025-22329

CVE:CVE-2025-22329
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AGILELOGIX Free Google Maps allows Stored XSS.This issue affects Free Google Maps: from n/a through 1.0.1.
published:2025-01-15T16:15:34.763


Instruction: Please provide detailed information about CVE-2025-22346

CVE:CVE-2025-22346
Description:Server-Side Request Forgery (SSRF) vulnerability in Faizaan Gagan Course Migration for LearnDash allows Server Side Request Forgery.This issue affects Course Migration for LearnDash: from 1.0.2 through n/a.
published:2025-01-15T16:15:34.923


Instruction: Please provide detailed information about CVE-2025-22587

CVE:CVE-2025-22587
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NCiphers SEO Bulk Editor allows Stored XSS.This issue affects SEO Bulk Editor: from n/a through 1.1.0.
published:2025-01-15T16:15:35.097


Instruction: Please provide detailed information about CVE-2025-22724

CVE:CVE-2025-22724
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MojofyWP Product Carousel For WooCommerce – WoorouSell allows Stored XSS.This issue affects Product Carousel For WooCommerce – WoorouSell: from n/a through 1.1.0.
published:2025-01-15T16:15:35.250


Instruction: Please provide detailed information about CVE-2025-22729

CVE:CVE-2025-22729
Description:Missing Authorization vulnerability in Infomaniak Staff VOD Infomaniak allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects VOD Infomaniak: from n/a through 1.5.9.
published:2025-01-15T16:15:35.400


Instruction: Please provide detailed information about CVE-2025-22731

CVE:CVE-2025-22731
Description:Cross-Site Request Forgery (CSRF) vulnerability in silverplugins217 Build Private Store For Woocommerce allows Cross Site Request Forgery.This issue affects Build Private Store For Woocommerce: from n/a through 1.0.
published:2025-01-15T16:15:35.550


Instruction: Please provide detailed information about CVE-2025-22734

CVE:CVE-2025-22734
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Data443 Posts Footer Manager allows Stored XSS.This issue affects Posts Footer Manager: from n/a through 2.1.0.
published:2025-01-15T16:15:35.703


Instruction: Please provide detailed information about CVE-2025-22736

CVE:CVE-2025-22736
Description:Incorrect Privilege Assignment vulnerability in WPExperts User Management allows Privilege Escalation.This issue affects User Management: from n/a through 1.2.
published:2025-01-15T16:15:35.877


Instruction: Please provide detailed information about CVE-2025-22737

CVE:CVE-2025-22737
Description:Missing Authorization vulnerability in MagePeople Team WpTravelly allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WpTravelly: from n/a through 1.8.5.
published:2025-01-15T16:15:36.030


Instruction: Please provide detailed information about CVE-2025-22738

CVE:CVE-2025-22738
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TechnoWich WP ULike allows Stored XSS.This issue affects WP ULike: from n/a through 4.7.6.
published:2025-01-15T16:15:36.187


Instruction: Please provide detailed information about CVE-2025-22742

CVE:CVE-2025-22742
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in falldeaf WP ViewSTL allows DOM-Based XSS.This issue affects WP ViewSTL: from n/a through 1.0.
published:2025-01-15T16:15:36.350


Instruction: Please provide detailed information about CVE-2025-22743

CVE:CVE-2025-22743
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohsin Rasool Twitter Bootstrap Collapse aka Accordian Shortcode allows DOM-Based XSS.This issue affects Twitter Bootstrap Collapse aka Accordian Shortcode: from n/a through 1.0.
published:2025-01-15T16:15:36.503


Instruction: Please provide detailed information about CVE-2025-22744

CVE:CVE-2025-22744
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Rob von Bothmer / SeoDev S-DEV SEO allows Stored XSS.This issue affects S-DEV SEO: from n/a through 1.88.
published:2025-01-15T16:15:36.657


Instruction: Please provide detailed information about CVE-2025-22745

CVE:CVE-2025-22745
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Björn Weinbrenner Navigation Du Lapin Blanc allows DOM-Based XSS.This issue affects Navigation Du Lapin Blanc: from n/a through 1.1.1.
published:2025-01-15T16:15:36.810


Instruction: Please provide detailed information about CVE-2025-22746

CVE:CVE-2025-22746
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HireHive HireHive Job Plugin allows Stored XSS.This issue affects HireHive Job Plugin: from n/a through 2.9.0.
published:2025-01-15T16:15:36.980


Instruction: Please provide detailed information about CVE-2025-22747

CVE:CVE-2025-22747
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tor Morten Jensen Foundation Columns allows Stored XSS.This issue affects Foundation Columns: from n/a through 0.8.
published:2025-01-15T16:15:37.150


Instruction: Please provide detailed information about CVE-2025-22748

CVE:CVE-2025-22748
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SetMore Appointments SetMore Theme – Custom Post Types allows Stored XSS.This issue affects SetMore Theme – Custom Post Types: from n/a through 1.1.
published:2025-01-15T16:15:37.300


Instruction: Please provide detailed information about CVE-2025-22749

CVE:CVE-2025-22749
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AwoThemes Social Media Engine allows Stored XSS.This issue affects Social Media Engine: from n/a through 1.0.2.
published:2025-01-15T16:15:37.450


Instruction: Please provide detailed information about CVE-2025-22750

CVE:CVE-2025-22750
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Tarak Patel Post Carousel & Slider allows Reflected XSS.This issue affects Post Carousel & Slider: from n/a through 1.0.4.
published:2025-01-15T16:15:37.610


Instruction: Please provide detailed information about CVE-2025-22751

CVE:CVE-2025-22751
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mighty Digital Partners allows Reflected XSS.This issue affects Partners: from n/a through 0.2.0.
published:2025-01-15T16:15:37.770


Instruction: Please provide detailed information about CVE-2025-22752

CVE:CVE-2025-22752
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GSheetConnector GSheetConnector for Forminator Forms allows Reflected XSS.This issue affects GSheetConnector for Forminator Forms: from n/a through 1.0.11.
published:2025-01-15T16:15:37.933


Instruction: Please provide detailed information about CVE-2025-22753

CVE:CVE-2025-22753
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dueclic turboSMTP allows Reflected XSS.This issue affects turboSMTP: from n/a through 4.6.
published:2025-01-15T16:15:38.090


Instruction: Please provide detailed information about CVE-2025-22754

CVE:CVE-2025-22754
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Berkman Center for Internet & Society Amber allows Reflected XSS.This issue affects Amber: from n/a through 1.4.4.
published:2025-01-15T16:15:38.260


Instruction: Please provide detailed information about CVE-2025-22755

CVE:CVE-2025-22755
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in James Bavington WP Headmaster allows Reflected XSS.This issue affects WP Headmaster: from n/a through 0.3.
published:2025-01-15T16:15:38.417


Instruction: Please provide detailed information about CVE-2025-22758

CVE:CVE-2025-22758
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in aiwp Elementor AI Addons allows DOM-Based XSS.This issue affects Elementor AI Addons: from n/a through 2.2.1.
published:2025-01-15T16:15:38.577


Instruction: Please provide detailed information about CVE-2025-22759

CVE:CVE-2025-22759
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BoldGrid Post and Page Builder by BoldGrid – Visual Drag and Drop Editor allows Stored XSS.This issue affects Post and Page Builder by BoldGrid – Visual Drag and Drop Editor: from n/a through 1.27.4.
published:2025-01-15T16:15:38.733


Instruction: Please provide detailed information about CVE-2025-22760

CVE:CVE-2025-22760
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Reflected XSS.This issue affects CodeBard Help Desk: from n/a through 1.1.2.
published:2025-01-15T16:15:38.890


Instruction: Please provide detailed information about CVE-2025-22761

CVE:CVE-2025-22761
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Olaf Lederer Ajax Contact Form allows Stored XSS.This issue affects Ajax Contact Form: from n/a through 1.2.5.1.
published:2025-01-15T16:15:39.053


Instruction: Please provide detailed information about CVE-2025-22762

CVE:CVE-2025-22762
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Octrace Studio WordPress HelpDesk & Support Ticket System Plugin – Octrace Support allows Stored XSS.This issue affects WordPress HelpDesk & Support Ticket System Plugin – Octrace Support: from n/a through 1.2.7.
published:2025-01-15T16:15:39.227


Instruction: Please provide detailed information about CVE-2025-22764

CVE:CVE-2025-22764
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in wpwebs Team - VA Jariwala WP Post Corrector allows Reflected XSS.This issue affects WP Post Corrector: from n/a through 1.0.2.
published:2025-01-15T16:15:39.373


Instruction: Please provide detailed information about CVE-2025-22765

CVE:CVE-2025-22765
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Uri Weil WP Order By allows Reflected XSS.This issue affects WP Order By: from n/a through 1.4.2.
published:2025-01-15T16:15:39.543


Instruction: Please provide detailed information about CVE-2025-22766

CVE:CVE-2025-22766
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Masoud Amini Zarinpal Paid Download allows Reflected XSS.This issue affects Zarinpal Paid Download: from n/a through 2.3.
published:2025-01-15T16:15:39.700


Instruction: Please provide detailed information about CVE-2025-22769

CVE:CVE-2025-22769
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Creative Brahma Multifox allows Stored XSS.This issue affects Multifox: from n/a through 1.3.7.
published:2025-01-15T16:15:39.860


Instruction: Please provide detailed information about CVE-2025-22773

CVE:CVE-2025-22773
Description:Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability in WPChill Htaccess File Editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Htaccess File Editor: from n/a through 1.0.19.
published:2025-01-15T16:15:40.027


Instruction: Please provide detailed information about CVE-2025-22776

CVE:CVE-2025-22776
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jay Carter WP Bulletin Board allows Reflected XSS.This issue affects WP Bulletin Board: from n/a through 1.1.4.
published:2025-01-15T16:15:40.193


Instruction: Please provide detailed information about CVE-2025-22778

CVE:CVE-2025-22778
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lijit Networks Inc. and Crowd Favorite Lijit Search allows Reflected XSS.This issue affects Lijit Search: from n/a through 1.1.
published:2025-01-15T16:15:40.350


Instruction: Please provide detailed information about CVE-2025-22779

CVE:CVE-2025-22779
Description:Missing Authorization vulnerability in Ugur CELIK WP News Sliders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP News Sliders: from n/a through 1.0.
published:2025-01-15T16:15:40.510


Instruction: Please provide detailed information about CVE-2025-22780

CVE:CVE-2025-22780
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alexey Yuzhakov wp-pano allows Stored XSS.This issue affects wp-pano: from n/a through 1.17.
published:2025-01-15T16:15:40.660


Instruction: Please provide detailed information about CVE-2025-22781

CVE:CVE-2025-22781
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Nativery Developer Nativery allows DOM-Based XSS.This issue affects Nativery: from n/a through 0.1.6.
published:2025-01-15T16:15:40.813


Instruction: Please provide detailed information about CVE-2025-22782

CVE:CVE-2025-22782
Description:Unrestricted Upload of File with Dangerous Type vulnerability in Web Ready Now WR Price List Manager For Woocommerce allows Upload a Web Shell to a Web Server.This issue affects WR Price List Manager For Woocommerce: from n/a through 1.0.8.
published:2025-01-15T16:15:40.973


Instruction: Please provide detailed information about CVE-2025-22784

CVE:CVE-2025-22784
Description:Cross-Site Request Forgery (CSRF) vulnerability in Johan Ström Background Control allows Path Traversal.This issue affects Background Control: from n/a through 1.0.5.
published:2025-01-15T16:15:41.127


Instruction: Please provide detailed information about CVE-2025-22785

CVE:CVE-2025-22785
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ComMotion Course Booking System allows SQL Injection.This issue affects Course Booking System: from n/a through 6.0.5.
published:2025-01-15T16:15:41.290


Instruction: Please provide detailed information about CVE-2025-22786

CVE:CVE-2025-22786
Description:Path Traversal vulnerability in ElementInvader ElementInvader Addons for Elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through 1.2.6.
published:2025-01-15T16:15:41.440


Instruction: Please provide detailed information about CVE-2025-22787

CVE:CVE-2025-22787
Description:Missing Authorization vulnerability in bPlugins LLC Button Block allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Button Block: from n/a through 1.1.5.
published:2025-01-15T16:15:41.603


Instruction: Please provide detailed information about CVE-2025-22788

CVE:CVE-2025-22788
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Codexpert, Inc CoDesigner WooCommerce Builder for Elementor allows Stored XSS.This issue affects CoDesigner WooCommerce Builder for Elementor: from n/a through 4.7.17.2.
published:2025-01-15T16:15:41.750


Instruction: Please provide detailed information about CVE-2025-22793

CVE:CVE-2025-22793
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bold Bold pagos en linea allows DOM-Based XSS.This issue affects Bold pagos en linea: from n/a through 3.1.0.
published:2025-01-15T16:15:41.897


Instruction: Please provide detailed information about CVE-2025-22795

CVE:CVE-2025-22795
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Thorsten Krug Multilang Contact Form allows Reflected XSS.This issue affects Multilang Contact Form: from n/a through 1.5.
published:2025-01-15T16:15:42.053


Instruction: Please provide detailed information about CVE-2025-22797

CVE:CVE-2025-22797
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Oğulcan Özügenç Gallery and Lightbox allows Stored XSS.This issue affects Gallery and Lightbox: from n/a through 1.0.14.
published:2025-01-15T16:15:42.200


Instruction: Please provide detailed information about CVE-2025-22798

CVE:CVE-2025-22798
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CHR Designer Responsive jQuery Slider allows Stored XSS.This issue affects Responsive jQuery Slider: from n/a through 1.1.1.
published:2025-01-15T16:15:42.343


Instruction: Please provide detailed information about CVE-2025-22799

CVE:CVE-2025-22799
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Vertim Coders Neon Product Designer allows SQL Injection.This issue affects Neon Product Designer: from n/a through 2.1.1.
published:2025-01-15T16:15:42.490


Instruction: Please provide detailed information about CVE-2025-22968

CVE:CVE-2025-22968
Description:An issue in D-Link DWR-M972V 1.05SSG allows a remote attacker to execute arbitrary code via SSH using root account without restrictions
published:2025-01-15T16:15:42.657


Instruction: Please provide detailed information about CVE-2025-20036

CVE:CVE-2025-20036
Description:Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.
published:2025-01-15T17:15:18.950


Instruction: Please provide detailed information about CVE-2025-20086

CVE:CVE-2025-20086
Description:Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.
published:2025-01-15T17:15:19.107


Instruction: Please provide detailed information about CVE-2025-20088

CVE:CVE-2025-20088
Description:Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.
published:2025-01-15T17:15:19.243


Instruction: Please provide detailed information about CVE-2025-21083

CVE:CVE-2025-21083
Description:Mattermost Mobile Apps versions <=2.22.0 fail to properly validate post props which allows a malicious authenticated user to cause a crash via a malicious post.
published:2025-01-15T17:15:19.393


Instruction: Please provide detailed information about CVE-2025-0480

CVE:CVE-2025-0480
Description:A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T18:15:24.457


Instruction: Please provide detailed information about CVE-2025-0502

CVE:CVE-2025-0502
Description:Transmission of Private Resources into a New Sphere ('Resource Leak') vulnerability in CrafterCMS Engine on Linux, MacOS, x86, Windows, 64 bit, ARM allows Directory Indexing, Resource Leak Exposure.This issue affects CrafterCMS: from 4.0.0 before 4.0.8, from 4.1.0 before 4.1.6.
published:2025-01-15T18:15:24.650


Instruction: Please provide detailed information about CVE-2025-23040

CVE:CVE-2025-23040
Description:GitHub Desktop is an open-source Electron-based GitHub app designed for git development. An attacker convincing a user to clone a repository directly or through a submodule can allow the attacker access to the user's credentials through the use of maliciously crafted remote URL. GitHub Desktop relies on Git to perform all network related operations (such as cloning, fetching, and pushing). When a user attempts to clone a repository GitHub Desktop will invoke `git clone` and when Git encounters a remote which requires authentication it will request the credentials for that remote host from GitHub Desktop using the git-credential protocol. Using a maliciously crafted URL it's possible to cause the credential request coming from Git to be misinterpreted by Github Desktop such that it will send credentials for a different host than the host that Git is currently communicating with thereby allowing for secret exfiltration. GitHub username and OAuth token, or credentials for other Git remote hosts stored in GitHub Desktop could be improperly transmitted to an unrelated host. Users should update to GitHub Desktop 3.4.12 or greater which fixes this vulnerability. Users who suspect they may be affected should revoke any relevant credentials.
published:2025-01-15T18:15:24.797


Instruction: Please provide detailed information about CVE-2025-0481

CVE:CVE-2025-0481
Description:A vulnerability classified as problematic has been found in D-Link DIR-878 1.03. Affected is an unknown function of the file /dllog.cgi of the component HTTP POST Request Handler. The manipulation leads to information disclosure. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T19:15:26.807


Instruction: Please provide detailed information about CVE-2025-0500

CVE:CVE-2025-0500
Description:An issue in the native clients for Amazon WorkSpaces (when running Amazon DCV protocol), Amazon AppStream 2.0, and Amazon DCV Clients may allow an attacker to access remote sessions via man-in-the-middle.
published:2025-01-15T19:15:27.003


Instruction: Please provide detailed information about CVE-2025-0501

CVE:CVE-2025-0501
Description:An issue in the native clients for Amazon WorkSpaces (when running PCoIP protocol) may allow an attacker to access remote sessions via man-in-the-middle.
published:2025-01-15T19:15:27.190


Instruction: Please provide detailed information about CVE-2025-0482

CVE:CVE-2025-0482
Description:A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file /fladmin/user_recoverpwd.php. The manipulation leads to use of default credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T20:15:28.863


Instruction: Please provide detailed information about CVE-2025-0483

CVE:CVE-2025-0483
Description:A vulnerability has been found in Fanli2012 native-php-cms 1.0 and classified as problematic. This vulnerability affects unknown code of the file /fladmin/jump.php. The manipulation of the argument message/error leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T20:15:29.040


Instruction: Please provide detailed information about CVE-2025-0484

CVE:CVE-2025-0484
Description:A vulnerability was found in Fanli2012 native-php-cms 1.0 and classified as critical. This issue affects some unknown processing of the file /fladmin/sysconfig_doedit.php of the component Backend. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T20:15:29.227


Instruction: Please provide detailed information about CVE-2025-0485

CVE:CVE-2025-0485
Description:A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been classified as problematic. Affected is an unknown function of the file /fladmin/sysconfig_doedit.php. The manipulation of the argument info leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T20:15:29.400


Instruction: Please provide detailed information about CVE-2025-22146

CVE:CVE-2025-22146
Description:Sentry is a developer-first error tracking and performance monitoring tool. A critical vulnerability was discovered in the SAML SSO implementation of Sentry. It was reported to us via our private bug bounty program. The vulnerability allows an attacker to take over any user account by using a malicious SAML Identity Provider and another organization on the same Sentry instance. The victim email address must be known in order to exploit this vulnerability. The Sentry SaaS fix was deployed on Jan 14, 2025. For self hosted users; if only a single organization is allowed `(SENTRY_SINGLE_ORGANIZATION = True)`, then no action is needed. Otherwise, users should upgrade to version 25.1.0 or higher. There are no known workarounds for this vulnerability.
published:2025-01-15T20:15:30.557


Instruction: Please provide detailed information about CVE-2025-0486

CVE:CVE-2025-0486
Description:A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /fladmin/login.php. The manipulation of the argument username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T21:15:14.960


Instruction: Please provide detailed information about CVE-2025-0487

CVE:CVE-2025-0487
Description:A vulnerability was found in Fanli2012 native-php-cms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /fladmin/cat_edit.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T21:15:15.160


Instruction: Please provide detailed information about CVE-2025-0488

CVE:CVE-2025-0488
Description:A vulnerability classified as critical has been found in Fanli2012 native-php-cms 1.0. This affects an unknown part of the file product_list.php. The manipulation of the argument cat leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T21:15:15.380


Instruction: Please provide detailed information about CVE-2025-0489

CVE:CVE-2025-0489
Description:A vulnerability classified as critical was found in Fanli2012 native-php-cms 1.0. This vulnerability affects unknown code of the file /fladmin/friendlink_dodel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T22:15:26.660


Instruction: Please provide detailed information about CVE-2025-0490

CVE:CVE-2025-0490
Description:A vulnerability, which was classified as critical, has been found in Fanli2012 native-php-cms 1.0. This issue affects some unknown processing of the file /fladmin/article_dodel.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T22:15:26.820


Instruction: Please provide detailed information about CVE-2025-0491

CVE:CVE-2025-0491
Description:A vulnerability, which was classified as critical, was found in Fanli2012 native-php-cms 1.0. Affected is an unknown function of the file /fladmin/cat_dodel.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T22:15:26.990


Instruction: Please provide detailed information about CVE-2025-0492

CVE:CVE-2025-0492
Description:A vulnerability has been found in D-Link DIR-823X 240126/240802 and classified as critical. Affected by this vulnerability is the function FUN_00412244. The manipulation leads to null pointer dereference. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-15T22:15:27.157


Instruction: Please provide detailed information about CVE-2025-0215

CVE:CVE-2025-0215
Description:The UpdraftPlus: WP Backup & Migration Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the showdata and initiate_restore parameters in all versions up to, and including, 1.24.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick an admin user into performing an action such as clicking on a link.
published:2025-01-15T23:15:10.453


Instruction: Please provide detailed information about CVE-2025-22964

CVE:CVE-2025-22964
Description:DDSN Interactive cm3 Acora CMS version 10.1.1 has an unauthenticated time-based blind SQL Injection vulnerability caused by insufficient input sanitization and validation in the "table" parameter. This flaw allows attackers to inject malicious SQL queries by directly incorporating user-supplied input into database queries without proper escaping or validation. Exploiting this issue enables unauthorized access, manipulation of data, or exposure of sensitive information, posing significant risks to the integrity and confidentiality of the application.
published:2025-01-15T23:15:10.650


Instruction: Please provide detailed information about CVE-2025-22976

CVE:CVE-2025-22976
Description:SQL Injection vulnerability in dingfanzuCMS v.1.0 allows a local attacker to execute arbitrary code via not filtering the content correctly at the "checkOrder.php" shopId module.
published:2025-01-15T23:15:10.783


Instruction: Please provide detailed information about CVE-2025-0476

CVE:CVE-2025-0476
Description:Mattermost Mobile Apps versions <=2.22.0 fail to properly handle specially crafted attachment names, which allows an attacker to crash the mobile app for any user who opened a channel containing the specially crafted attachment
published:2025-01-16T00:15:25.217


Instruction: Please provide detailed information about CVE-2025-0170

CVE:CVE-2025-0170
Description:The DWT - Directory & Listing WordPress Theme is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.3.3 due to insufficient input sanitization and output escaping on the 'sort_by' and 'token' parameters. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-01-16T02:15:27.043


Instruction: Please provide detailed information about CVE-2025-0455

CVE:CVE-2025-0455
Description:The airPASS from NetVision Information has a SQL Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
published:2025-01-16T02:15:27.203


Instruction: Please provide detailed information about CVE-2025-0456

CVE:CVE-2025-0456
Description:The airPASS from NetVision Information has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access the specific administrative functionality to retrieve * all accounts and passwords.
published:2025-01-16T02:15:27.387


Instruction: Please provide detailed information about CVE-2025-0457

CVE:CVE-2025-0457
Description:The airPASS from NetVision Information has an OS Command Injection vulnerability, allowing remote attackers with regular privileges to inject and execute arbitrary OS commands.
published:2025-01-16T02:15:27.553


Instruction: Please provide detailed information about CVE-2025-22904

CVE:CVE-2025-22904
Description:RE11S v1.11 was discovered to contain a stack overflow via the pptpUserName parameter in the setWAN function.
published:2025-01-16T03:15:06.313


Instruction: Please provide detailed information about CVE-2025-22905

CVE:CVE-2025-22905
Description:RE11S v1.11 was discovered to contain a command injection vulnerability via the command parameter at /goform/mp.
published:2025-01-16T03:15:06.430


Instruction: Please provide detailed information about CVE-2025-22906

CVE:CVE-2025-22906
Description:RE11S v1.11 was discovered to contain a command injection vulnerability via the L2TPUserName parameter at /goform/setWAN.
published:2025-01-16T03:15:06.530


Instruction: Please provide detailed information about CVE-2025-22907

CVE:CVE-2025-22907
Description:RE11S v1.11 was discovered to contain a stack overflow via the selSSID parameter in the formWlSiteSurvey function.
published:2025-01-16T03:15:06.630


Instruction: Please provide detailed information about CVE-2025-22912

CVE:CVE-2025-22912
Description:RE11S v1.11 was discovered to contain a command injection vulnerability via the component /goform/formAccept.
published:2025-01-16T03:15:06.723


Instruction: Please provide detailed information about CVE-2025-22913

CVE:CVE-2025-22913
Description:RE11S v1.11 was discovered to contain a stack overflow via the rootAPmac parameter in the formStaDrvSetup function.
published:2025-01-16T03:15:06.850


Instruction: Please provide detailed information about CVE-2025-22916

CVE:CVE-2025-22916
Description:RE11S v1.11 was discovered to contain a stack overflow via the pppUserName parameter in the formPPPoESetup function.
published:2025-01-16T03:15:06.970


Instruction: Please provide detailed information about CVE-2025-0471

CVE:CVE-2025-0471
Description:Unrestricted file upload vulnerability in the PMB platform, affecting versions 4.0.10 and above. This vulnerability could allow an attacker to upload a file to gain remote access to the machine, being able to access, modify and execute commands freely.
published:2025-01-16T13:15:06.973


Instruction: Please provide detailed information about CVE-2025-0472

CVE:CVE-2025-0472
Description:Information exposure in the PMB platform affecting versions 4.2.13 and earlier. This vulnerability allows an attacker to upload a file to the environment and enumerate the internal files of a machine by looking at the request response.
published:2025-01-16T13:15:07.353


Instruction: Please provide detailed information about CVE-2025-0473

CVE:CVE-2025-0473
Description:Vulnerability in the PMB platform that allows an attacker to persist temporary files on the server, affecting versions 4.0.10 and above. This vulnerability exists in the file upload functionality on the ‘/pmb/authorities/import/iimport_authorities’ endpoint. When a file is uploaded via this resource, the server will create a temporary file that will be deleted after the client sends a POST request to ‘/pmb/authorities/import/iimport_authorities’. This workflow is automated by the web client, however an attacker can trap and launch the second POST request to prevent the temporary file from being deleted.
published:2025-01-16T13:15:07.540


Instruction: Please provide detailed information about CVE-2025-0518

CVE:CVE-2025-0518
Description:Unchecked Return Value, Out-of-bounds Read vulnerability in FFmpeg allows Read Sensitive Constants Within an Executable. This vulnerability is associated with program files  https://github.Com/FFmpeg/FFmpeg/blob/master/libavfilter/af_pan.C .  This issue affects FFmpeg: 7.1.  Issue was fixed:  https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a   https://github.com/FFmpeg/FFmpeg/commit/b5b6391d64807578ab872dc58fb8aa621dcfc38a This issue was discovered by: Simcha Kosman
published:2025-01-16T17:15:12.577


Instruction: Please provide detailed information about CVE-2025-20072

CVE:CVE-2025-20072
Description:Mattermost Mobile versions <= 2.22.0 fail to properly validate the style of proto supplied to an action's style in post.props.attachments, which allows an attacker to crash the mobile via crafted malicious input.
published:2025-01-16T18:15:28.517


Instruction: Please provide detailed information about CVE-2025-20621

CVE:CVE-2025-20621
Description:Mattermost versions 10.2.x <= 10.2.0, 9.11.x <= 9.11.5, 10.0.x <= 10.0.3, 10.1.x <= 10.1.3 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the webapp to crash via creating and sending such a post to a channel.
published:2025-01-16T19:15:29.960


Instruction: Please provide detailed information about CVE-2025-20630

CVE:CVE-2025-20630
Description:Mattermost Mobile versions <=2.22.0 fail to properly handle posts with attachments containing fields that cannot be cast to a String, which allows an attacker to cause the mobile to crash via creating and sending such a post to a channel.
published:2025-01-16T19:15:30.110


Instruction: Please provide detailed information about CVE-2025-23423

CVE:CVE-2025-23423
Description:Missing Authorization vulnerability in Smackcoders SendGrid for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SendGrid for WordPress: from n/a through 1.4.
published:2025-01-16T20:15:33.573


Instruction: Please provide detailed information about CVE-2025-23424

CVE:CVE-2025-23424
Description:Cross-Site Request Forgery (CSRF) vulnerability in Brian Novotny – Creative Software Design Solutions Marquee Style RSS News Ticker allows Cross Site Request Forgery.This issue affects Marquee Style RSS News Ticker: from n/a through 3.2.0.
published:2025-01-16T20:15:33.723