Instruction: Please provide detailed information about CVE-2025-23216

CVE:CVE-2025-23216
Description:Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. A vulnerability was discovered in Argo CD that exposed secret values in error messages and the diff view when an invalid Kubernetes Secret resource was synced from a repository. The vulnerability assumes the user has write access to the repository and can exploit it, either intentionally or unintentionally, by committing an invalid Secret to repository and triggering a Sync. Once exploited, any user with read access to Argo CD can view the exposed secret data. The vulnerability is fixed in v2.13.4, v2.12.10, and v2.11.13.
published:2025-01-30T16:15:31.473


Instruction: Please provide detailed information about CVE-2025-24376

CVE:CVE-2025-24376
Description:kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. By design, AdmissionPolicy and AdmissionPolicyGroup can evaluate only namespaced resources. The resources to be evaluated are determined by the rules provided by the user when defining the policy. There might be Kubernetes namespaced resources that should not be validated by AdmissionPolicy and by the AdmissionPolicyGroup policies because of their sensitive nature. For example, PolicyReport are namespaced resources that contain the list of non compliant objects found inside of a namespace. An attacker can use either an AdmissionPolicy or an AdmissionPolicyGroup to prevent the creation and update of PolicyReport objects to hide non-compliant resources. Moreover, the same attacker might use a mutating AdmissionPolicy to alter the contents of the PolicyReport created inside of the namespace. Starting from the 1.21.0 release, the validation rules applied to AdmissionPolicy and AdmissionPolicyGroup have been tightened to prevent them from validating sensitive types of namespaced resources.
published:2025-01-30T16:15:31.630


Instruction: Please provide detailed information about CVE-2025-24784

CVE:CVE-2025-24784
Description:kubewarden-controller is a Kubernetes controller that allows you to dynamically register Kubewarden admission policies. The policy group feature, added to by the 1.17.0 release. By being namespaced, the AdmissionPolicyGroup has a well constrained impact on cluster resources. Hence, it’s considered safe to allow non-admin users to create and manage these resources in the namespaces they own. Kubewarden policies can be allowed to query the Kubernetes API at evaluation time; these types of policies are called “context aware“. Context aware policies can perform list and get operations against a Kubernetes cluster. The queries are done using the ServiceAccount of the Policy Server instance that hosts the policy. That means that access to the cluster is determined by the RBAC rules that apply to that ServiceAccount. The AdmissionPolicyGroup CRD allowed the deployment of context aware policies. This could allow an attacker to obtain information about resources that are out of their reach, by leveraging a higher access to the cluster granted to the ServiceAccount token used to run the policy. The impact of this vulnerability depends on the privileges that have been granted to the ServiceAccount used to run the Policy Server and assumes that users are using the recommended best practices of keeping the Policy Server's ServiceAccount least privileged. By default, the Kubewarden helm chart grants access to the following resources (cluster wide) only: Namespace, Pod, Deployment and Ingress. This vulnerability is fixed in 1.21.0.
published:2025-01-30T16:15:31.780


Instruction: Please provide detailed information about CVE-2025-24883

CVE:CVE-2025-24883
Description:go-ethereum (geth) is a golang execution layer implementation of the Ethereum protocol. A vulnerable node can be forced to shutdown/crash using a specially crafted message. This vulnerability is fixed in 1.14.13.
published:2025-01-30T16:15:31.947


Instruction: Please provide detailed information about CVE-2025-0367

CVE:CVE-2025-0367
Description:In versions 3.1.0 and lower of the Splunk Supporting Add-on for Active Directory, also known as SA-ldapsearch, a vulnerable regular expression pattern could lead to a Regular Expression Denial of Service (ReDoS) attack.
published:2025-01-30T17:15:18.097


Instruction: Please provide detailed information about CVE-2025-0873

CVE:CVE-2025-0873
Description:A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /customeredit.php. The manipulation of the argument id/address/fullname/phonenumber/email/city/comment leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-30T17:15:18.293


Instruction: Please provide detailed information about CVE-2025-24099

CVE:CVE-2025-24099
Description:The issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.3, macOS Ventura 13.7.3, macOS Sonoma 14.7.3. A local attacker may be able to elevate their privileges.
published:2025-01-30T17:15:18.473


Instruction: Please provide detailed information about CVE-2025-0477

CVE:CVE-2025-0477
Description:An encryption vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to a weak encryption methodology and could allow a threat actor to extract passwords belonging to other users of the application.
published:2025-01-30T18:15:31.893


Instruction: Please provide detailed information about CVE-2025-0497

CVE:CVE-2025-0497
Description:A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to storing credentials in the configuration file of EventLogAttachmentExtractor, ArchiveExtractor, LogCleanUp, or ArchiveLogCleanUp packages.
published:2025-01-30T18:15:32.493


Instruction: Please provide detailed information about CVE-2025-0498

CVE:CVE-2025-0498
Description:A data exposure vulnerability exists in all versions prior to V15.00.001 of Rockwell Automation FactoryTalk® AssetCentre. The vulnerability exists due to insecure storage of FactoryTalk® Security user tokens, which could allow a threat actor to steal a token and, impersonate another user.
published:2025-01-30T18:15:33.253


Instruction: Please provide detailed information about CVE-2025-0874

CVE:CVE-2025-0874
Description:A vulnerability, which was classified as critical, has been found in code-projects Simple Plugins Car Rental Management 1.0. Affected by this issue is some unknown functionality of the file /admin/approve.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-30T18:15:33.753


Instruction: Please provide detailed information about CVE-2025-0626

CVE:CVE-2025-0626
Description:The "monitor" binary in the firmware of the affected product attempts to mount to a hard-coded, routable IP address, bypassing existing device network settings to do so. The function also enables the network interface of the device if it is disabled. The function is triggered by attempting to update the device from the user menu. This could serve as a backdoor to the device, and could lead to a malicious actor being able to upload and overwrite files on the device.
published:2025-01-30T19:15:14.010


Instruction: Please provide detailed information about CVE-2025-0680

CVE:CVE-2025-0680
Description:Affected products contain a vulnerability in the device cloud rpc command handling process that could allow remote attackers to take control over arbitrary devices connected to the cloud.
published:2025-01-30T19:15:14.147


Instruction: Please provide detailed information about CVE-2025-0681

CVE:CVE-2025-0681
Description:The Cloud MQTT service of the affected products supports wildcard topic  subscription which could allow an attacker to obtain sensitive  information from tapping the service communications.
published:2025-01-30T19:15:14.300


Instruction: Please provide detailed information about CVE-2025-0683

CVE:CVE-2025-0683
Description:In its default configuration, Contec Health CMS8000 Patient Monitor transmits plain-text  patient data to a hard-coded public IP address when a patient is hooked  up to the monitor. This could lead to a leakage of confidential patient  data to any device with that IP address or an attacker in a  machine-in-the-middle scenario.
published:2025-01-30T19:15:14.460


Instruction: Please provide detailed information about CVE-2025-24500

CVE:CVE-2025-24500
Description:The vulnerability allows an unauthenticated attacker to access information in PAM database.
published:2025-01-30T19:15:14.600


Instruction: Please provide detailed information about CVE-2025-24501

CVE:CVE-2025-24501
Description:An improper input validation allows an unauthenticated attacker to alter PAM logs by sending a specially crafted HTTP request.
published:2025-01-30T19:15:14.723


Instruction: Please provide detailed information about CVE-2025-24502

CVE:CVE-2025-24502
Description:An improper session validation allows an unauthenticated attacker to cause certain request notifications to be executed in the context of an incorrect user by spoofing the client IP address.
published:2025-01-30T19:15:14.863


Instruction: Please provide detailed information about CVE-2025-24503

CVE:CVE-2025-24503
Description:A malicious actor can fix the session of a PAM user by tricking the user to click on a specially crafted link to the PAM server.
published:2025-01-30T19:15:16.453


Instruction: Please provide detailed information about CVE-2025-24504

CVE:CVE-2025-24504
Description:An improper input validation the CSRF filter results in unsanitized user input written to the application logs.
published:2025-01-30T19:15:16.967


Instruction: Please provide detailed information about CVE-2025-24505

CVE:CVE-2025-24505
Description:This vulnerability allows a high-privileged authenticated PAM user to achieve remote command execution on the affected PAM system by uploading a specially crafted upgrade file.
published:2025-01-30T19:15:17.210


Instruction: Please provide detailed information about CVE-2025-24506

CVE:CVE-2025-24506
Description:A specific authentication strategy allows to learn ids of PAM users associated with certain authentication types.
published:2025-01-30T19:15:17.590


Instruction: Please provide detailed information about CVE-2025-24507

CVE:CVE-2025-24507
Description:This vulnerability allows appliance compromise at boot time.
published:2025-01-30T19:15:17.920


Instruction: Please provide detailed information about CVE-2025-0142

CVE:CVE-2025-0142
Description:Cleartext storage of sensitive information in the Zoom Jenkins Marketplace plugin before version 1.4 may allow an authenticated user to conduct a disclosure of information via network access.
published:2025-01-30T20:15:33.853


Instruction: Please provide detailed information about CVE-2025-0143

CVE:CVE-2025-0143
Description:Out-of-bounds write in the Zoom Workplace App for Linux before version 6.2.5 may allow an unauthorized user to conduct a denial of service via network access.
published:2025-01-30T20:15:34.050


Instruction: Please provide detailed information about CVE-2025-0144

CVE:CVE-2025-0144
Description:Out-of-bounds write in some Zoom Workplace Apps may allow an authorized user to conduct a loss of integrity via network access.
published:2025-01-30T20:15:34.210


Instruction: Please provide detailed information about CVE-2025-0145

CVE:CVE-2025-0145
Description:Untrusted search path in the installer for some Zoom Workplace Apps for Windows may allow an authorized user to conduct an escalation of privilege via local access.
published:2025-01-30T20:15:34.547


Instruction: Please provide detailed information about CVE-2025-0146

CVE:CVE-2025-0146
Description:Symlink following in the installer for Zoom Workplace App for macOS before 6.2.10 may allow an authenticated user to conduct a denial of service via local access.
published:2025-01-30T20:15:34.907


Instruction: Please provide detailed information about CVE-2025-0147

CVE:CVE-2025-0147
Description:Type confusion in the Zoom Workplace App for Linux before 6.2.10 may allow an authorized user to conduct an escalation of privilege via network access.
published:2025-01-30T20:15:35.253


Instruction: Please provide detailed information about CVE-2025-24802

CVE:CVE-2025-24802
Description:Plonky2 is a SNARK implementation based on techniques from PLONK and FRI. Lookup tables, whose length is not divisible by 26 = floor(num_routed_wires / 3) always include the 0 -> 0 input-output pair. Thus a malicious prover can always prove that f(0) = 0 for any lookup table f (unless its length happens to be divisible by 26). The cause of problem is that the LookupTableGate-s are padded with zeros. A workaround from the user side is to extend the table (by repeating some entries) so that its length becomes divisible by 26. This vulnerability is fixed in 1.0.1.
published:2025-01-30T20:15:51.010


Instruction: Please provide detailed information about CVE-2025-0568

CVE:CVE-2025-0568
Description:Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25302.
published:2025-01-30T21:15:13.587


Instruction: Please provide detailed information about CVE-2025-0569

CVE:CVE-2025-0569
Description:Sante PACS Server DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25303.
published:2025-01-30T21:15:13.710


Instruction: Please provide detailed information about CVE-2025-0570

CVE:CVE-2025-0570
Description:Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25304.
published:2025-01-30T21:15:13.830


Instruction: Please provide detailed information about CVE-2025-0571

CVE:CVE-2025-0571
Description:Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25305.
published:2025-01-30T21:15:13.960


Instruction: Please provide detailed information about CVE-2025-0572

CVE:CVE-2025-0572
Description:Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of the current user. Was ZDI-CAN-25308.
published:2025-01-30T21:15:14.093


Instruction: Please provide detailed information about CVE-2025-0573

CVE:CVE-2025-0573
Description:Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.  The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of the current user. Was ZDI-CAN-25309.
published:2025-01-30T21:15:14.227


Instruction: Please provide detailed information about CVE-2025-0574

CVE:CVE-2025-0574
Description:Sante PACS Server URL path Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability.  The specific flaw exists within the parsing of URLs in the web server module. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25318.
published:2025-01-30T21:15:14.357


Instruction: Please provide detailed information about CVE-2025-0880

CVE:CVE-2025-0880
Description:A vulnerability was found in Codezips Gym Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/admin/updateplan.php. The manipulation of the argument planid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-30T21:15:14.487


Instruction: Please provide detailed information about CVE-2025-0881

CVE:CVE-2025-0881
Description:A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /dashboard/admin/saveroutine.php. The manipulation of the argument rname leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-30T21:15:14.650


Instruction: Please provide detailed information about CVE-2025-0882

CVE:CVE-2025-0882
Description:A vulnerability was found in code-projects Chat System up to 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /user/addnewmember.php. The manipulation of the argument user leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-30T21:15:14.820


Instruction: Please provide detailed information about CVE-2025-24885

CVE:CVE-2025-24885
Description:pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Missing access control on rendering custom (unprivileged) dojo pages causes ability for users to create stored XSS.
published:2025-01-30T23:15:07.993


Instruction: Please provide detailed information about CVE-2025-24886

CVE:CVE-2025-24886
Description:pwn.college is an education platform to learn about, and practice, core cybersecurity concepts in a hands-on fashion. Incorrect symlink checks on user specified dojos allows for users (admin not required) to perform an LFI from the CTFd container. When a user clones or updates repositories, a check is performed to see if the repository had contained any symlinks. A malicious user could craft a repository with symlinks pointed to sensitive files and then retrieve them using the CTFd website.
published:2025-01-30T23:15:08.990


Instruction: Please provide detailed information about CVE-2025-24336

CVE:CVE-2025-24336
Description:SXF Common Library handles input data improperly. If a product using the library reads a crafted file, the product may be crashed.
published:2025-01-31T00:15:20.607


Instruction: Please provide detailed information about CVE-2025-0470

CVE:CVE-2025-0470
Description:The Forminator Forms – Contact Form, Payment Form & Custom Form Builder plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the title parameter in all versions up to, and including, 1.38.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-01-31T04:15:09.053


Instruction: Please provide detailed information about CVE-2025-0493

CVE:CVE-2025-0493
Description:The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited  Local File Inclusion in all versions up to, and including, 4.2.14 via the tabname parameter. This makes it possible for unauthenticated attackers to include PHP files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where PHP files can be uploaded and included
published:2025-01-31T05:15:10.087


Instruction: Please provide detailed information about CVE-2025-0507

CVE:CVE-2025-0507
Description:The Ticketmeo – Sell Tickets – Event Ticketing plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 2.3.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-01-31T05:15:10.280


Instruction: Please provide detailed information about CVE-2025-0809

CVE:CVE-2025-0809
Description:The Link Fixer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via broken links in all versions up to, and including, 3.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-01-31T06:15:29.933


Instruction: Please provide detailed information about CVE-2025-22216

CVE:CVE-2025-22216
Description:A UAA configured with multiple identity zones, does not properly validate session information across those zones.  A User authenticated against a corporate IDP can re-use their jsessionid to access other zones.
published:2025-01-31T06:15:30.090


Instruction: Please provide detailed information about CVE-2025-22265

CVE:CVE-2025-22265
Description:Missing Authorization vulnerability in mgplugin EMI Calculator allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects EMI Calculator: from n/a through 1.1.
published:2025-01-31T09:15:07.167


Instruction: Please provide detailed information about CVE-2025-22332

CVE:CVE-2025-22332
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Bryan Shanaver @ fiftyandfifty.org CloudFlare(R) Cache Purge allows Reflected XSS. This issue affects CloudFlare(R) Cache Purge: from n/a through 1.2.
published:2025-01-31T09:15:07.317


Instruction: Please provide detailed information about CVE-2025-22341

CVE:CVE-2025-22341
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Mohammad Hossein Aghanabi Hide Login+ allows Reflected XSS. This issue affects Hide Login+: from n/a through 3.5.1.
published:2025-01-31T09:15:07.470


Instruction: Please provide detailed information about CVE-2025-22564

CVE:CVE-2025-22564
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Faaiq Pretty Url allows Reflected XSS. This issue affects Pretty Url: from n/a through 1.5.4.
published:2025-01-31T09:15:07.627


Instruction: Please provide detailed information about CVE-2025-22720

CVE:CVE-2025-22720
Description:Missing Authorization vulnerability in MagePeople Team Booking and Rental Manager allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Booking and Rental Manager: from n/a through 2.2.1.
published:2025-01-31T09:15:07.770


Instruction: Please provide detailed information about CVE-2025-22757

CVE:CVE-2025-22757
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodeBard CodeBard Help Desk allows Stored XSS. This issue affects CodeBard Help Desk: from n/a through 1.1.2.
published:2025-01-31T09:15:07.913


Instruction: Please provide detailed information about CVE-2025-23596

CVE:CVE-2025-23596
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Notifikacie.sk Notifikácie.sk allows Reflected XSS. This issue affects Notifikácie.sk: from n/a through 1.0.
published:2025-01-31T09:15:08.060


Instruction: Please provide detailed information about CVE-2025-23671

CVE:CVE-2025-23671
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fabio Savina WP OpenSearch allows Stored XSS. This issue affects WP OpenSearch: from n/a through 1.0.
published:2025-01-31T09:15:08.210


Instruction: Please provide detailed information about CVE-2025-23759

CVE:CVE-2025-23759
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in leduchuy89vn Affiliate Tools Việt Nam allows Reflected XSS. This issue affects Affiliate Tools Việt Nam: from n/a through 0.3.17.
published:2025-01-31T09:15:08.357


Instruction: Please provide detailed information about CVE-2025-23976

CVE:CVE-2025-23976
Description:Cross-Site Request Forgery (CSRF) vulnerability in Pedro Marcelo Issuu Panel allows Stored XSS. This issue affects Issuu Panel: from n/a through 2.1.1.
published:2025-01-31T09:15:08.530


Instruction: Please provide detailed information about CVE-2025-23977

CVE:CVE-2025-23977
Description:Cross-Site Request Forgery (CSRF) vulnerability in Bhaskar Dhote Post Carousel Slider allows Stored XSS. This issue affects Post Carousel Slider: from n/a through 2.0.1.
published:2025-01-31T09:15:08.687


Instruction: Please provide detailed information about CVE-2025-23978

CVE:CVE-2025-23978
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ninos Ego FlashCounter allows Stored XSS. This issue affects FlashCounter: from n/a through 1.1.8.
published:2025-01-31T09:15:08.830


Instruction: Please provide detailed information about CVE-2025-23980

CVE:CVE-2025-23980
Description:Cross-Site Request Forgery (CSRF) vulnerability in James Andrews Full Circle allows Stored XSS. This issue affects Full Circle: from n/a through 0.5.7.8.
published:2025-01-31T09:15:08.973


Instruction: Please provide detailed information about CVE-2025-23985

CVE:CVE-2025-23985
Description:Cross-Site Request Forgery (CSRF) vulnerability in Brainvireinfo Dynamic URL SEO allows Cross Site Request Forgery. This issue affects Dynamic URL SEO: from n/a through 1.0.
published:2025-01-31T09:15:09.127


Instruction: Please provide detailed information about CVE-2025-23987

CVE:CVE-2025-23987
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in CodegearThemes Designer allows DOM-Based XSS. This issue affects Designer: from n/a through 1.6.0.
published:2025-01-31T09:15:09.280


Instruction: Please provide detailed information about CVE-2025-23989

CVE:CVE-2025-23989
Description:Cross-Site Request Forgery (CSRF) vulnerability in Alessandro Piconi - SabLab Internal Link Builder allows Cross Site Request Forgery. This issue affects Internal Link Builder: from n/a through 1.0.
published:2025-01-31T09:15:09.427


Instruction: Please provide detailed information about CVE-2025-23990

CVE:CVE-2025-23990
Description:Cross-Site Request Forgery (CSRF) vulnerability in jablonczay Scroll Styler. This issue affects Scroll Styler: from n/a through 1.1.
published:2025-01-31T09:15:09.577


Instruction: Please provide detailed information about CVE-2025-24534

CVE:CVE-2025-24534
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Emili Castells DPortfolio allows Reflected XSS. This issue affects DPortfolio: from n/a through 2.0.
published:2025-01-31T09:15:09.720


Instruction: Please provide detailed information about CVE-2025-24535

CVE:CVE-2025-24535
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SKT Themes SKT Donation allows Reflected XSS. This issue affects SKT Donation: from n/a through 1.9.
published:2025-01-31T09:15:09.870


Instruction: Please provide detailed information about CVE-2025-24549

CVE:CVE-2025-24549
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mahbubur Rahman Post Meta allows Reflected XSS. This issue affects Post Meta: from n/a through 1.0.9.
published:2025-01-31T09:15:10.027


Instruction: Please provide detailed information about CVE-2025-24551

CVE:CVE-2025-24551
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OneTeamSoftware Radio Buttons and Swatches for WooCommerce allows Reflected XSS. This issue affects Radio Buttons and Swatches for WooCommerce: from n/a through 1.1.20.
published:2025-01-31T09:15:10.170


Instruction: Please provide detailed information about CVE-2025-24560

CVE:CVE-2025-24560
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Awesome TOGI Awesome Event Booking allows Reflected XSS. This issue affects Awesome Event Booking: from n/a through 2.7.1.
published:2025-01-31T09:15:10.323


Instruction: Please provide detailed information about CVE-2025-24563

CVE:CVE-2025-24563
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThemeGlow Cleanup – Directory Listing & Classifieds WordPress Plugin allows Reflected XSS. This issue affects Cleanup – Directory Listing & Classifieds WordPress Plugin: from n/a through 1.0.4.
published:2025-01-31T09:15:10.467


Instruction: Please provide detailed information about CVE-2025-24597

CVE:CVE-2025-24597
Description:Insertion of Sensitive Information Into Sent Data vulnerability in UkrSolution Barcode Generator for WooCommerce allows Retrieve Embedded Sensitive Data. This issue affects Barcode Generator for WooCommerce: from n/a through 2.0.2.
published:2025-01-31T09:15:10.607


Instruction: Please provide detailed information about CVE-2025-24608

CVE:CVE-2025-24608
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Mail Queue allows Reflected XSS. This issue affects GD Mail Queue: from n/a through 4.3.
published:2025-01-31T09:15:10.767


Instruction: Please provide detailed information about CVE-2025-24609

CVE:CVE-2025-24609
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PortOne PORTONE 우커머스 결제 allows Reflected XSS. This issue affects PORTONE 우커머스 결제: from n/a through 3.2.4.
published:2025-01-31T09:15:10.900


Instruction: Please provide detailed information about CVE-2025-24632

CVE:CVE-2025-24632
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce allows Reflected XSS. This issue affects Advanced Dynamic Pricing for WooCommerce: from n/a through 4.9.0.
published:2025-01-31T09:15:11.040


Instruction: Please provide detailed information about CVE-2025-24635

CVE:CVE-2025-24635
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paytm Paytm Payment Donation allows Reflected XSS. This issue affects Paytm Payment Donation: from n/a through 2.3.1.
published:2025-01-31T09:15:11.190


Instruction: Please provide detailed information about CVE-2025-24686

CVE:CVE-2025-24686
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Metagauss User Registration Forms RegistrationMagic allows Reflected XSS. This issue affects RegistrationMagic: from n/a through 6.0.3.3.
published:2025-01-31T09:15:11.340


Instruction: Please provide detailed information about CVE-2025-24710

CVE:CVE-2025-24710
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Marcel Pol Gwolle Guestbook allows Reflected XSS. This issue affects Gwolle Guestbook: from n/a through 4.7.1.
published:2025-01-31T09:15:11.477


Instruction: Please provide detailed information about CVE-2025-24718

CVE:CVE-2025-24718
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in SWIT WP Sessions Time Monitoring Full Automatic allows Reflected XSS. This issue affects WP Sessions Time Monitoring Full Automatic: from n/a through 1.1.1.
published:2025-01-31T09:15:11.617


Instruction: Please provide detailed information about CVE-2025-24749

CVE:CVE-2025-24749
Description:Cross-Site Request Forgery (CSRF) vulnerability in Overt Software Solutions LTD EZPZ SAML SP Single Sign On (SSO) allows Cross Site Request Forgery. This issue affects EZPZ SAML SP Single Sign On (SSO): from n/a through 1.2.5.
published:2025-01-31T09:15:11.760


Instruction: Please provide detailed information about CVE-2025-21665

CVE:CVE-2025-21665
Description:In the Linux kernel, the following vulnerability has been resolved:  filemap: avoid truncating 64-bit offset to 32 bits  On 32-bit kernels, folio_seek_hole_data() was inadvertently truncating a 64-bit value to 32 bits, leading to a possible infinite loop when writing to an xfs filesystem.
published:2025-01-31T12:15:27.633


Instruction: Please provide detailed information about CVE-2025-21666

CVE:CVE-2025-21666
Description:In the Linux kernel, the following vulnerability has been resolved:  vsock: prevent null-ptr-deref in vsock_*[has_data|has_space]  Recent reports have shown how we sometimes call vsock_*_has_data() when a vsock socket has been de-assigned from a transport (see attached links), but we shouldn't.  Previous commits should have solved the real problems, but we may have more in the future, so to avoid null-ptr-deref, we can return 0 (no space, no data available) but with a warning.  This way the code should continue to run in a nearly consistent state and have a warning that allows us to debug future problems.
published:2025-01-31T12:15:27.763


Instruction: Please provide detailed information about CVE-2025-21667

CVE:CVE-2025-21667
Description:In the Linux kernel, the following vulnerability has been resolved:  iomap: avoid avoid truncating 64-bit offset to 32 bits  on 32-bit kernels, iomap_write_delalloc_scan() was inadvertently using a 32-bit position due to folio_next_index() returning an unsigned long. This could lead to an infinite loop when writing to an xfs filesystem.
published:2025-01-31T12:15:27.863


Instruction: Please provide detailed information about CVE-2025-21668

CVE:CVE-2025-21668
Description:In the Linux kernel, the following vulnerability has been resolved:  pmdomain: imx8mp-blk-ctrl: add missing loop break condition  Currently imx8mp_blk_ctrl_remove() will continue the for loop until an out-of-bounds exception occurs.  pstate: 60000005 (nZCv daif -PAN -UAO -TCO -DIT -SSBS BTYPE=--) pc : dev_pm_domain_detach+0x8/0x48 lr : imx8mp_blk_ctrl_shutdown+0x58/0x90 sp : ffffffc084f8bbf0 x29: ffffffc084f8bbf0 x28: ffffff80daf32ac0 x27: 0000000000000000 x26: ffffffc081658d78 x25: 0000000000000001 x24: ffffffc08201b028 x23: ffffff80d0db9490 x22: ffffffc082340a78 x21: 00000000000005b0 x20: ffffff80d19bc180 x19: 000000000000000a x18: ffffffffffffffff x17: ffffffc080a39e08 x16: ffffffc080a39c98 x15: 4f435f464f006c72 x14: 0000000000000004 x13: ffffff80d0172110 x12: 0000000000000000 x11: ffffff80d0537740 x10: ffffff80d05376c0 x9 : ffffffc0808ed2d8 x8 : ffffffc084f8bab0 x7 : 0000000000000000 x6 : 0000000000000000 x5 : ffffff80d19b9420 x4 : fffffffe03466e60 x3 : 0000000080800077 x2 : 0000000000000000 x1 : 0000000000000001 x0 : 0000000000000000 Call trace:  dev_pm_domain_detach+0x8/0x48  platform_shutdown+0x2c/0x48  device_shutdown+0x158/0x268  kernel_restart_prepare+0x40/0x58  kernel_kexec+0x58/0xe8  __do_sys_reboot+0x198/0x258  __arm64_sys_reboot+0x2c/0x40  invoke_syscall+0x5c/0x138  el0_svc_common.constprop.0+0x48/0xf0  do_el0_svc+0x24/0x38  el0_svc+0x38/0xc8  el0t_64_sync_handler+0x120/0x130  el0t_64_sync+0x190/0x198 Code: 8128c2d0 ffffffc0 aa1e03e9 d503201f
published:2025-01-31T12:15:27.960


Instruction: Please provide detailed information about CVE-2025-21669

CVE:CVE-2025-21669
Description:In the Linux kernel, the following vulnerability has been resolved:  vsock/virtio: discard packets if the transport changes  If the socket has been de-assigned or assigned to another transport, we must discard any packets received because they are not expected and would cause issues when we access vsk->transport.  A possible scenario is described by Hyunwoo Kim in the attached link, where after a first connect() interrupted by a signal, and a second connect() failed, we can find `vsk->transport` at NULL, leading to a NULL pointer dereference.
published:2025-01-31T12:15:28.053


Instruction: Please provide detailed information about CVE-2025-21670

CVE:CVE-2025-21670
Description:In the Linux kernel, the following vulnerability has been resolved:  vsock/bpf: return early if transport is not assigned  Some of the core functions can only be called if the transport has been assigned.  As Michal reported, a socket might have the transport at NULL, for example after a failed connect(), causing the following trace:      BUG: kernel NULL pointer dereference, address: 00000000000000a0     #PF: supervisor read access in kernel mode     #PF: error_code(0x0000) - not-present page     PGD 12faf8067 P4D 12faf8067 PUD 113670067 PMD 0     Oops: Oops: 0000 [#1] PREEMPT SMP NOPTI     CPU: 15 UID: 0 PID: 1198 Comm: a.out Not tainted 6.13.0-rc2+     RIP: 0010:vsock_connectible_has_data+0x1f/0x40     Call Trace:      vsock_bpf_recvmsg+0xca/0x5e0      sock_recvmsg+0xb9/0xc0      __sys_recvfrom+0xb3/0x130      __x64_sys_recvfrom+0x20/0x30      do_syscall_64+0x93/0x180      entry_SYSCALL_64_after_hwframe+0x76/0x7e  So we need to check the `vsk->transport` in vsock_bpf_recvmsg(), especially for connected sockets (stream/seqpacket) as we already do in __vsock_connectible_recvmsg().
published:2025-01-31T12:15:28.160


Instruction: Please provide detailed information about CVE-2025-21671

CVE:CVE-2025-21671
Description:In the Linux kernel, the following vulnerability has been resolved:  zram: fix potential UAF of zram table  If zram_meta_alloc failed early, it frees allocated zram->table without setting it NULL.  Which will potentially cause zram_meta_free to access the table if user reset an failed and uninitialized device.
published:2025-01-31T12:15:28.263


Instruction: Please provide detailed information about CVE-2025-21672

CVE:CVE-2025-21672
Description:In the Linux kernel, the following vulnerability has been resolved:  afs: Fix merge preference rule failure condition  syzbot reported a lock held when returning to userspace[1].  This is because if argc is less than 0 and the function returns directly, the held inode lock is not released.  Fix this by store the error in ret and jump to done to clean up instead of returning directly.  [dh: Modified Lizhi Xu's original patch to make it honour the error code from afs_split_string()]  [1] WARNING: lock held when returning to user space! 6.13.0-rc3-syzkaller-00209-g499551201b5f #0 Not tainted ------------------------------------------------ syz-executor133/5823 is leaving the kernel with locks still held! 1 lock held by syz-executor133/5823:  #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: inode_lock include/linux/fs.h:818 [inline]  #0: ffff888071cffc00 (&sb->s_type->i_mutex_key#9){++++}-{4:4}, at: afs_proc_addr_prefs_write+0x2bb/0x14e0 fs/afs/addr_prefs.c:388
published:2025-01-31T12:15:28.360


Instruction: Please provide detailed information about CVE-2025-21673

CVE:CVE-2025-21673
Description:In the Linux kernel, the following vulnerability has been resolved:  smb: client: fix double free of TCP_Server_Info::hostname  When shutting down the server in cifs_put_tcp_session(), cifsd thread might be reconnecting to multiple DFS targets before it realizes it should exit the loop, so @server->hostname can't be freed as long as cifsd thread isn't done.  Otherwise the following can happen:    RIP: 0010:__slab_free+0x223/0x3c0   Code: 5e 41 5f c3 cc cc cc cc 4c 89 de 4c 89 cf 44 89 44 24 08 4c 89   1c 24 e8 fb cf 8e 00 44 8b 44 24 08 4c 8b 1c 24 e9 5f fe ff ff <0f>   0b 41 f7 45 08 00 0d 21 00 0f 85 2d ff ff ff e9 1f ff ff ff 80   RSP: 0018:ffffb26180dbfd08 EFLAGS: 00010246   RAX: ffff8ea34728e510 RBX: ffff8ea34728e500 RCX: 0000000000800068   RDX: 0000000000800068 RSI: 0000000000000000 RDI: ffff8ea340042400   RBP: ffffe112041ca380 R08: 0000000000000001 R09: 0000000000000000   R10: 6170732e31303000 R11: 70726f632e786563 R12: ffff8ea34728e500   R13: ffff8ea340042400 R14: ffff8ea34728e500 R15: 0000000000800068   FS: 0000000000000000(0000) GS:ffff8ea66fd80000(0000)   000000   CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033   CR2: 00007ffc25376080 CR3: 000000012a2ba001 CR4:   PKRU: 55555554   Call Trace:    <TASK>    ? show_trace_log_lvl+0x1c4/0x2df    ? show_trace_log_lvl+0x1c4/0x2df    ? __reconnect_target_unlocked+0x3e/0x160 [cifs]    ? __die_body.cold+0x8/0xd    ? die+0x2b/0x50    ? do_trap+0xce/0x120    ? __slab_free+0x223/0x3c0    ? do_error_trap+0x65/0x80    ? __slab_free+0x223/0x3c0    ? exc_invalid_op+0x4e/0x70    ? __slab_free+0x223/0x3c0    ? asm_exc_invalid_op+0x16/0x20    ? __slab_free+0x223/0x3c0    ? extract_hostname+0x5c/0xa0 [cifs]    ? extract_hostname+0x5c/0xa0 [cifs]    ? __kmalloc+0x4b/0x140    __reconnect_target_unlocked+0x3e/0x160 [cifs]    reconnect_dfs_server+0x145/0x430 [cifs]    cifs_handle_standard+0x1ad/0x1d0 [cifs]    cifs_demultiplex_thread+0x592/0x730 [cifs]    ? __pfx_cifs_demultiplex_thread+0x10/0x10 [cifs]    kthread+0xdd/0x100    ? __pfx_kthread+0x10/0x10    ret_from_fork+0x29/0x50    </TASK>
published:2025-01-31T12:15:28.463


Instruction: Please provide detailed information about CVE-2025-21674

CVE:CVE-2025-21674
Description:In the Linux kernel, the following vulnerability has been resolved:  net/mlx5e: Fix inversion dependency warning while enabling IPsec tunnel  Attempt to enable IPsec packet offload in tunnel mode in debug kernel generates the following kernel panic, which is happening due to two issues: 1. In SA add section, the should be _bh() variant when marking SA mode. 2. There is not needed flush_workqueue in SA delete routine. It is not needed as at this stage as it is removed from SADB and the running work will be canceled later in SA free.   =====================================================  WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected  6.12.0+ #4 Not tainted  -----------------------------------------------------  charon/1337 [HC0[0]:SC0[4]:HE1:SE0] is trying to acquire:  ffff88810f365020 (&xa->xa_lock#24){+.+.}-{3:3}, at: mlx5e_xfrm_del_state+0xca/0x1e0 [mlx5_core]   and this task is already holding:  ffff88813e0f0d48 (&x->lock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30  which would create a new lock dependency:   (&x->lock){+.-.}-{3:3} -> (&xa->xa_lock#24){+.+.}-{3:3}   but this new dependency connects a SOFTIRQ-irq-safe lock:   (&x->lock){+.-.}-{3:3}   ... which became SOFTIRQ-irq-safe at:    lock_acquire+0x1be/0x520    _raw_spin_lock_bh+0x34/0x40    xfrm_timer_handler+0x91/0xd70    __hrtimer_run_queues+0x1dd/0xa60    hrtimer_run_softirq+0x146/0x2e0    handle_softirqs+0x266/0x860    irq_exit_rcu+0x115/0x1a0    sysvec_apic_timer_interrupt+0x6e/0x90    asm_sysvec_apic_timer_interrupt+0x16/0x20    default_idle+0x13/0x20    default_idle_call+0x67/0xa0    do_idle+0x2da/0x320    cpu_startup_entry+0x50/0x60    start_secondary+0x213/0x2a0    common_startup_64+0x129/0x138   to a SOFTIRQ-irq-unsafe lock:   (&xa->xa_lock#24){+.+.}-{3:3}   ... which became SOFTIRQ-irq-unsafe at:  ...    lock_acquire+0x1be/0x520    _raw_spin_lock+0x2c/0x40    xa_set_mark+0x70/0x110    mlx5e_xfrm_add_state+0xe48/0x2290 [mlx5_core]    xfrm_dev_state_add+0x3bb/0xd70    xfrm_add_sa+0x2451/0x4a90    xfrm_user_rcv_msg+0x493/0x880    netlink_rcv_skb+0x12e/0x380    xfrm_netlink_rcv+0x6d/0x90    netlink_unicast+0x42f/0x740    netlink_sendmsg+0x745/0xbe0    __sock_sendmsg+0xc5/0x190    __sys_sendto+0x1fe/0x2c0    __x64_sys_sendto+0xdc/0x1b0    do_syscall_64+0x6d/0x140    entry_SYSCALL_64_after_hwframe+0x4b/0x53   other info that might help us debug this:    Possible interrupt unsafe locking scenario:          CPU0                    CPU1         ----                    ----    lock(&xa->xa_lock#24);                                 local_irq_disable();                                 lock(&x->lock);                                 lock(&xa->xa_lock#24);    <Interrupt>      lock(&x->lock);    *** DEADLOCK ***   2 locks held by charon/1337:   #0: ffffffff87f8f858 (&net->xfrm.xfrm_cfg_mutex){+.+.}-{4:4}, at: xfrm_netlink_rcv+0x5e/0x90   #1: ffff88813e0f0d48 (&x->lock){+.-.}-{3:3}, at: xfrm_state_delete+0x16/0x30   the dependencies between SOFTIRQ-irq-safe lock and the holding lock:  -> (&x->lock){+.-.}-{3:3} ops: 29 {     HARDIRQ-ON-W at:                      lock_acquire+0x1be/0x520                      _raw_spin_lock_bh+0x34/0x40                      xfrm_alloc_spi+0xc0/0xe60                      xfrm_alloc_userspi+0x5f6/0xbc0                      xfrm_user_rcv_msg+0x493/0x880                      netlink_rcv_skb+0x12e/0x380                      xfrm_netlink_rcv+0x6d/0x90                      netlink_unicast+0x42f/0x740                      netlink_sendmsg+0x745/0xbe0                      __sock_sendmsg+0xc5/0x190                      __sys_sendto+0x1fe/0x2c0                      __x64_sys_sendto+0xdc/0x1b0                      do_syscall_64+0x6d/0x140                      entry_SYSCALL_64_after_hwframe+0x4b/0x53     IN-SOFTIRQ-W at:                      lock_acquire+0x1be/0x520                      _raw_spin_lock_bh+0x34/0x40                      xfrm_timer_handler+0x91/0xd70                      __hrtimer_run_queues+0x1dd/0xa60     ---truncated---
published:2025-01-31T12:15:28.560


Instruction: Please provide detailed information about CVE-2025-21675

CVE:CVE-2025-21675
Description:In the Linux kernel, the following vulnerability has been resolved:  net/mlx5: Clear port select structure when fail to create  Clear the port select structure on error so no stale values left after definers are destroyed. That's because the mlx5_lag_destroy_definers() always try to destroy all lag definers in the tt_map, so in the flow below lag definers get double-destroyed and cause kernel crash:    mlx5_lag_port_sel_create()     mlx5_lag_create_definers()       mlx5_lag_create_definer()     <- Failed on tt 1         mlx5_lag_destroy_definers() <- definers[tt=0] gets destroyed   mlx5_lag_port_sel_create()     mlx5_lag_create_definers()       mlx5_lag_create_definer()     <- Failed on tt 0         mlx5_lag_destroy_definers() <- definers[tt=0] gets double-destroyed   Unable to handle kernel NULL pointer dereference at virtual address 0000000000000008  Mem abort info:    ESR = 0x0000000096000005    EC = 0x25: DABT (current EL), IL = 32 bits    SET = 0, FnV = 0    EA = 0, S1PTW = 0    FSC = 0x05: level 1 translation fault  Data abort info:    ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000    CM = 0, WnR = 0, TnD = 0, TagAccess = 0    GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0  user pgtable: 64k pages, 48-bit VAs, pgdp=0000000112ce2e00  [0000000000000008] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000  Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP  Modules linked in: iptable_raw bonding ip_gre ip6_gre gre ip6_tunnel tunnel6 geneve ip6_udp_tunnel udp_tunnel ipip tunnel4 ip_tunnel rdma_ucm(OE) rdma_cm(OE) iw_cm(OE) ib_ipoib(OE) ib_cm(OE) ib_umad(OE) mlx5_ib(OE) ib_uverbs(OE) mlx5_fwctl(OE) fwctl(OE) mlx5_core(OE) mlxdevm(OE) ib_core(OE) mlxfw(OE) memtrack(OE) mlx_compat(OE) openvswitch nsh nf_conncount psample xt_conntrack xt_MASQUERADE nf_conntrack_netlink nfnetlink xfrm_user xfrm_algo xt_addrtype iptable_filter iptable_nat nf_nat nf_conntrack nf_defrag_ipv6 nf_defrag_ipv4 br_netfilter bridge stp llc netconsole overlay efi_pstore sch_fq_codel zram ip_tables crct10dif_ce qemu_fw_cfg fuse ipv6 crc_ccitt [last unloaded: mlx_compat(OE)]   CPU: 3 UID: 0 PID: 217 Comm: kworker/u53:2 Tainted: G           OE      6.11.0+ #2   Tainted: [O]=OOT_MODULE, [E]=UNSIGNED_MODULE   Hardware name: QEMU KVM Virtual Machine, BIOS 0.0.0 02/06/2015   Workqueue: mlx5_lag mlx5_do_bond_work [mlx5_core]   pstate: 60400005 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)   pc : mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core]   lr : mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core]   sp : ffff800085fafb00   x29: ffff800085fafb00 x28: ffff0000da0c8000 x27: 0000000000000000   x26: ffff0000da0c8000 x25: ffff0000da0c8000 x24: ffff0000da0c8000   x23: ffff0000c31f81a0 x22: 0400000000000000 x21: ffff0000da0c8000   x20: 0000000000000000 x19: 0000000000000001 x18: 0000000000000000   x17: 0000000000000000 x16: 0000000000000000 x15: 0000ffff8b0c9350   x14: 0000000000000000 x13: ffff800081390d18 x12: ffff800081dc3cc0   x11: 0000000000000001 x10: 0000000000000b10 x9 : ffff80007ab7304c   x8 : ffff0000d00711f0 x7 : 0000000000000004 x6 : 0000000000000190   x5 : ffff00027edb3010 x4 : 0000000000000000 x3 : 0000000000000000   x2 : ffff0000d39b8000 x1 : ffff0000d39b8000 x0 : 0400000000000000   Call trace:    mlx5_del_flow_rules+0x24/0x2c0 [mlx5_core]    mlx5_lag_destroy_definer+0x54/0x100 [mlx5_core]    mlx5_lag_destroy_definers+0xa0/0x108 [mlx5_core]    mlx5_lag_port_sel_create+0x2d4/0x6f8 [mlx5_core]    mlx5_activate_lag+0x60c/0x6f8 [mlx5_core]    mlx5_do_bond_work+0x284/0x5c8 [mlx5_core]    process_one_work+0x170/0x3e0    worker_thread+0x2d8/0x3e0    kthread+0x11c/0x128    ret_from_fork+0x10/0x20   Code: a9025bf5 aa0003f6 a90363f7 f90023f9 (f9400400)   ---[ end trace 0000000000000000 ]---
published:2025-01-31T12:15:28.677


Instruction: Please provide detailed information about CVE-2025-21676

CVE:CVE-2025-21676
Description:In the Linux kernel, the following vulnerability has been resolved:  net: fec: handle page_pool_dev_alloc_pages error  The fec_enet_update_cbd function calls page_pool_dev_alloc_pages but did not handle the case when it returned NULL. There was a WARN_ON(!new_page) but it would still proceed to use the NULL pointer and then crash.  This case does seem somewhat rare but when the system is under memory pressure it can happen. One case where I can duplicate this with some frequency is when writing over a smbd share to a SATA HDD attached to an imx6q.  Setting /proc/sys/vm/min_free_kbytes to higher values also seems to solve the problem for my test case. But it still seems wrong that the fec driver ignores the memory allocation error and can crash.  This commit handles the allocation error by dropping the current packet.
published:2025-01-31T12:15:28.780


Instruction: Please provide detailed information about CVE-2025-21677

CVE:CVE-2025-21677
Description:In the Linux kernel, the following vulnerability has been resolved:  pfcp: Destroy device along with udp socket's netns dismantle.  pfcp_newlink() links the device to a list in dev_net(dev) instead of net, where a udp tunnel socket is created.  Even when net is removed, the device stays alive on dev_net(dev). Then, removing net triggers the splat below. [0]  In this example, pfcp0 is created in ns2, but the udp socket is created in ns1.    ip netns add ns1   ip netns add ns2   ip -n ns1 link add netns ns2 name pfcp0 type pfcp   ip netns del ns1  Let's link the device to the socket's netns instead.  Now, pfcp_net_exit() needs another netdev iteration to remove all pfcp devices in the netns.  pfcp_dev_list is not used under RCU, so the list API is converted to the non-RCU variant.  pfcp_net_exit() can be converted to .exit_batch_rtnl() in net-next.  [0]: ref_tracker: net notrefcnt@00000000128b34dc has 1/1 users at      sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236)      inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252)      __sock_create (net/socket.c:1558)      udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18)      pfcp_create_sock (drivers/net/pfcp.c:168)      pfcp_newlink (drivers/net/pfcp.c:182 drivers/net/pfcp.c:197)      rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012)      rtnetlink_rcv_msg (net/core/rtnetlink.c:6922)      netlink_rcv_skb (net/netlink/af_netlink.c:2542)      netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347)      netlink_sendmsg (net/netlink/af_netlink.c:1891)      ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583)      ___sys_sendmsg (net/socket.c:2639)      __sys_sendmsg (net/socket.c:2669)      do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)      entry_SYSCALL_64_after_hwframe (arch/x86/entry/entry_64.S:130)  WARNING: CPU: 1 PID: 11 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 11 Comm: kworker/u16:0 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000007f3fb60 EFLAGS: 00010286 RAX: 00000000000020ef RBX: ff1100000d6481e0 RCX: 1ffffffff0e40d82 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000d648230 R08: 0000000000000001 R09: fffffbfff0e395af R10: 0000000000000001 R11: 0000000000000000 R12: ff1100000d648230 R13: dead000000000100 R14: ff1100000d648230 R15: dffffc0000000000 FS:  0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00005620e1363990 CR3: 000000000eeb2002 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace:  <TASK>  ? __warn (kernel/panic.c:748)  ? ref_tracker_dir_exit (lib/ref_tracker.c:179)  ? report_bug (lib/bug.c:201 lib/bug.c:219)  ? handle_bug (arch/x86/kernel/traps.c:285)  ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1))  ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)  ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194)  ? ref_tracker_dir_exit (lib/ref_tracker.c:179)  ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158)  ? kfree (mm/slub.c:4613 mm/slub.c:4761)  net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467)  cleanup_net (net/cor ---truncated---
published:2025-01-31T12:15:28.877


Instruction: Please provide detailed information about CVE-2025-21678

CVE:CVE-2025-21678
Description:In the Linux kernel, the following vulnerability has been resolved:  gtp: Destroy device along with udp socket's netns dismantle.  gtp_newlink() links the device to a list in dev_net(dev) instead of src_net, where a udp tunnel socket is created.  Even when src_net is removed, the device stays alive on dev_net(dev). Then, removing src_net triggers the splat below. [0]  In this example, gtp0 is created in ns2, and the udp socket is created in ns1.    ip netns add ns1   ip netns add ns2   ip -n ns1 link add netns ns2 name gtp0 type gtp role sgsn   ip netns del ns1  Let's link the device to the socket's netns instead.  Now, gtp_net_exit_batch_rtnl() needs another netdev iteration to remove all gtp devices in the netns.  [0]: ref_tracker: net notrefcnt@000000003d6e7d05 has 1/2 users at      sk_alloc (./include/net/net_namespace.h:345 net/core/sock.c:2236)      inet_create (net/ipv4/af_inet.c:326 net/ipv4/af_inet.c:252)      __sock_create (net/socket.c:1558)      udp_sock_create4 (net/ipv4/udp_tunnel_core.c:18)      gtp_create_sock (./include/net/udp_tunnel.h:59 drivers/net/gtp.c:1423)      gtp_create_sockets (drivers/net/gtp.c:1447)      gtp_newlink (drivers/net/gtp.c:1507)      rtnl_newlink (net/core/rtnetlink.c:3786 net/core/rtnetlink.c:3897 net/core/rtnetlink.c:4012)      rtnetlink_rcv_msg (net/core/rtnetlink.c:6922)      netlink_rcv_skb (net/netlink/af_netlink.c:2542)      netlink_unicast (net/netlink/af_netlink.c:1321 net/netlink/af_netlink.c:1347)      netlink_sendmsg (net/netlink/af_netlink.c:1891)      ____sys_sendmsg (net/socket.c:711 net/socket.c:726 net/socket.c:2583)      ___sys_sendmsg (net/socket.c:2639)      __sys_sendmsg (net/socket.c:2669)      do_syscall_64 (arch/x86/entry/common.c:52 arch/x86/entry/common.c:83)  WARNING: CPU: 1 PID: 60 at lib/ref_tracker.c:179 ref_tracker_dir_exit (lib/ref_tracker.c:179) Modules linked in: CPU: 1 UID: 0 PID: 60 Comm: kworker/u16:2 Not tainted 6.13.0-rc5-00147-g4c1224501e9d #5 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.16.0-0-gd239552ce722-prebuilt.qemu.org 04/01/2014 Workqueue: netns cleanup_net RIP: 0010:ref_tracker_dir_exit (lib/ref_tracker.c:179) Code: 00 00 00 fc ff df 4d 8b 26 49 bd 00 01 00 00 00 00 ad de 4c 39 f5 0f 85 df 00 00 00 48 8b 74 24 08 48 89 df e8 a5 cc 12 02 90 <0f> 0b 90 48 8d 6b 44 be 04 00 00 00 48 89 ef e8 80 de 67 ff 48 89 RSP: 0018:ff11000009a07b60 EFLAGS: 00010286 RAX: 0000000000002bd3 RBX: ff1100000f4e1aa0 RCX: 1ffffffff0e40ac6 RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8423ee3c RBP: ff1100000f4e1af0 R08: 0000000000000001 R09: fffffbfff0e395ae R10: 0000000000000001 R11: 0000000000036001 R12: ff1100000f4e1af0 R13: dead000000000100 R14: ff1100000f4e1af0 R15: dffffc0000000000 FS:  0000000000000000(0000) GS:ff1100006ce80000(0000) knlGS:0000000000000000 CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f9b2464bd98 CR3: 0000000005286005 CR4: 0000000000771ef0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400 PKRU: 55555554 Call Trace:  <TASK>  ? __warn (kernel/panic.c:748)  ? ref_tracker_dir_exit (lib/ref_tracker.c:179)  ? report_bug (lib/bug.c:201 lib/bug.c:219)  ? handle_bug (arch/x86/kernel/traps.c:285)  ? exc_invalid_op (arch/x86/kernel/traps.c:309 (discriminator 1))  ? asm_exc_invalid_op (./arch/x86/include/asm/idtentry.h:621)  ? _raw_spin_unlock_irqrestore (./arch/x86/include/asm/irqflags.h:42 ./arch/x86/include/asm/irqflags.h:97 ./arch/x86/include/asm/irqflags.h:155 ./include/linux/spinlock_api_smp.h:151 kernel/locking/spinlock.c:194)  ? ref_tracker_dir_exit (lib/ref_tracker.c:179)  ? __pfx_ref_tracker_dir_exit (lib/ref_tracker.c:158)  ? kfree (mm/slub.c:4613 mm/slub.c:4761)  net_free (net/core/net_namespace.c:476 net/core/net_namespace.c:467)  cleanup_net (net/core/net_namespace.c:664 (discriminator 3))  process_one_work (kernel/workqueue.c:3229)  worker_thread (kernel/workqueue.c:3304 kernel/workqueue.c:3391 ---truncated---
published:2025-01-31T12:15:28.970


Instruction: Please provide detailed information about CVE-2025-21679

CVE:CVE-2025-21679
Description:In the Linux kernel, the following vulnerability has been resolved:  btrfs: add the missing error handling inside get_canonical_dev_path  Inside function get_canonical_dev_path(), we call d_path() to get the final device path.  But d_path() can return error, and in that case the next strscpy() call will trigger an invalid memory access.  Add back the missing error handling for d_path().
published:2025-01-31T12:15:29.070


Instruction: Please provide detailed information about CVE-2025-21680

CVE:CVE-2025-21680
Description:In the Linux kernel, the following vulnerability has been resolved:  pktgen: Avoid out-of-bounds access in get_imix_entries  Passing a sufficient amount of imix entries leads to invalid access to the pkt_dev->imix_entries array because of the incorrect boundary check.  UBSAN: array-index-out-of-bounds in net/core/pktgen.c:874:24 index 20 is out of range for type 'imix_pkt [20]' CPU: 2 PID: 1210 Comm: bash Not tainted 6.10.0-rc1 #121 Hardware name: QEMU Standard PC (i440FX + PIIX, 1996) Call Trace: <TASK> dump_stack_lvl lib/dump_stack.c:117 __ubsan_handle_out_of_bounds lib/ubsan.c:429 get_imix_entries net/core/pktgen.c:874 pktgen_if_write net/core/pktgen.c:1063 pde_write fs/proc/inode.c:334 proc_reg_write fs/proc/inode.c:346 vfs_write fs/read_write.c:593 ksys_write fs/read_write.c:644 do_syscall_64 arch/x86/entry/common.c:83 entry_SYSCALL_64_after_hwframe arch/x86/entry/entry_64.S:130  Found by Linux Verification Center (linuxtesting.org) with SVACE.  [ fp: allow to fill the array completely; minor changelog cleanup ]
published:2025-01-31T12:15:29.160


Instruction: Please provide detailed information about CVE-2025-21681

CVE:CVE-2025-21681
Description:In the Linux kernel, the following vulnerability has been resolved:  openvswitch: fix lockup on tx to unregistering netdev with carrier  Commit in a fixes tag attempted to fix the issue in the following sequence of calls:      do_output     -> ovs_vport_send        -> dev_queue_xmit           -> __dev_queue_xmit              -> netdev_core_pick_tx                 -> skb_tx_hash  When device is unregistering, the 'dev->real_num_tx_queues' goes to zero and the 'while (unlikely(hash >= qcount))' loop inside the 'skb_tx_hash' becomes infinite, locking up the core forever.  But unfortunately, checking just the carrier status is not enough to fix the issue, because some devices may still be in unregistering state while reporting carrier status OK.  One example of such device is a net/dummy.  It sets carrier ON on start, but it doesn't implement .ndo_stop to set the carrier off. And it makes sense, because dummy doesn't really have a carrier. Therefore, while this device is unregistering, it's still easy to hit the infinite loop in the skb_tx_hash() from the OVS datapath.  There might be other drivers that do the same, but dummy by itself is important for the OVS ecosystem, because it is frequently used as a packet sink for tcpdump while debugging OVS deployments.  And when the issue is hit, the only way to recover is to reboot.  Fix that by also checking if the device is running.  The running state is handled by the net core during unregistering, so it covers unregistering case better, and we don't really need to send packets to devices that are not running anyway.  While only checking the running state might be enough, the carrier check is preserved.  The running and the carrier states seem disjoined throughout the code and different drivers.  And other core functions like __dev_direct_xmit() check both before attempting to transmit a packet.  So, it seems safer to check both flags in OVS as well.
published:2025-01-31T12:15:29.260


Instruction: Please provide detailed information about CVE-2025-21682

CVE:CVE-2025-21682
Description:In the Linux kernel, the following vulnerability has been resolved:  eth: bnxt: always recalculate features after XDP clearing, fix null-deref  Recalculate features when XDP is detached.  Before:   # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp   # ip li set dev eth0 xdp off   # ethtool -k eth0 | grep gro   rx-gro-hw: off [requested on]  After:   # ip li set dev eth0 xdp obj xdp_dummy.bpf.o sec xdp   # ip li set dev eth0 xdp off   # ethtool -k eth0 | grep gro   rx-gro-hw: on  The fact that HW-GRO doesn't get re-enabled automatically is just a minor annoyance. The real issue is that the features will randomly come back during another reconfiguration which just happens to invoke netdev_update_features(). The driver doesn't handle reconfiguring two things at a time very robustly.  Starting with commit 98ba1d931f61 ("bnxt_en: Fix RSS logic in __bnxt_reserve_rings()") we only reconfigure the RSS hash table if the "effective" number of Rx rings has changed. If HW-GRO is enabled "effective" number of rings is 2x what user sees. So if we are in the bad state, with HW-GRO re-enablement "pending" after XDP off, and we lower the rings by / 2 - the HW-GRO rings doing 2x and the ethtool -L doing / 2 may cancel each other out, and the:    if (old_rx_rings != bp->hw_resc.resv_rx_rings &&  condition in __bnxt_reserve_rings() will be false. The RSS map won't get updated, and we'll crash with:    BUG: kernel NULL pointer dereference, address: 0000000000000168   RIP: 0010:__bnxt_hwrm_vnic_set_rss+0x13a/0x1a0     bnxt_hwrm_vnic_rss_cfg_p5+0x47/0x180     __bnxt_setup_vnic_p5+0x58/0x110     bnxt_init_nic+0xb72/0xf50     __bnxt_open_nic+0x40d/0xab0     bnxt_open_nic+0x2b/0x60     ethtool_set_channels+0x18c/0x1d0  As we try to access a freed ring.  The issue is present since XDP support was added, really, but prior to commit 98ba1d931f61 ("bnxt_en: Fix RSS logic in __bnxt_reserve_rings()") it wasn't causing major issues.
published:2025-01-31T12:15:29.363


Instruction: Please provide detailed information about CVE-2025-21683

CVE:CVE-2025-21683
Description:In the Linux kernel, the following vulnerability has been resolved:  bpf: Fix bpf_sk_select_reuseport() memory leak  As pointed out in the original comment, lookup in sockmap can return a TCP ESTABLISHED socket. Such TCP socket may have had SO_ATTACH_REUSEPORT_EBPF set before it was ESTABLISHED. In other words, a non-NULL sk_reuseport_cb does not imply a non-refcounted socket.  Drop sk's reference in both error paths.  unreferenced object 0xffff888101911800 (size 2048):   comm "test_progs", pid 44109, jiffies 4297131437   hex dump (first 32 bytes):     00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................     80 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00  ................   backtrace (crc 9336483b):     __kmalloc_noprof+0x3bf/0x560     __reuseport_alloc+0x1d/0x40     reuseport_alloc+0xca/0x150     reuseport_attach_prog+0x87/0x140     sk_reuseport_attach_bpf+0xc8/0x100     sk_setsockopt+0x1181/0x1990     do_sock_setsockopt+0x12b/0x160     __sys_setsockopt+0x7b/0xc0     __x64_sys_setsockopt+0x1b/0x30     do_syscall_64+0x93/0x180     entry_SYSCALL_64_after_hwframe+0x76/0x7e
published:2025-01-31T12:15:29.460


Instruction: Please provide detailed information about CVE-2025-24827

CVE:CVE-2025-24827
Description:Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
published:2025-01-31T13:15:27.553


Instruction: Please provide detailed information about CVE-2025-24828

CVE:CVE-2025-24828
Description:Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
published:2025-01-31T13:15:27.727


Instruction: Please provide detailed information about CVE-2025-24829

CVE:CVE-2025-24829
Description:Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
published:2025-01-31T13:15:27.870


Instruction: Please provide detailed information about CVE-2025-24830

CVE:CVE-2025-24830
Description:Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
published:2025-01-31T13:15:28.000


Instruction: Please provide detailed information about CVE-2025-24831

CVE:CVE-2025-24831
Description:Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 39378.
published:2025-01-31T13:15:28.130


Instruction: Please provide detailed information about CVE-2025-0929

CVE:CVE-2025-0929
Description:SQL injection vulnerability in TeamCal Neo, version 3.8.2. This could allow an attacker to retrieve, update and delete all database information by injecting a malicious SQL statement via the ‘abs’ parameter in ‘/teamcal/src/index.php’.
published:2025-01-31T14:15:34.130


Instruction: Please provide detailed information about CVE-2025-0930

CVE:CVE-2025-0930
Description:Reflected Cross-Site Scripting (XSS) in TeamCal Neo, version 3.8.2. This allows an attacker to execute malicious JavaScript code, after injecting code via the ‘abs’ parameter in ‘/teamcal/src/index.php’.
published:2025-01-31T14:15:34.293


Instruction: Please provide detailed information about CVE-2025-22994

CVE:CVE-2025-22994
Description:O2OA 9.1.3 is vulnerable to Cross Site Scripting (XSS) in Meetings - Settings.
published:2025-01-31T16:15:35.557


Instruction: Please provide detailed information about CVE-2025-23215

CVE:CVE-2025-23215
Description:PMD is an extensible multilanguage static code analyzer. The passphrase for the PMD and PMD Designer release signing keys are included in jar published to Maven Central. The private key itself is not known to have been compromised itself, but given its passphrase is, it must also be considered potentially compromised. As a mitigation, both compromised keys have been revoked so that no future use of the keys are possible. Note, that the published artifacts in Maven Central under the group id net.sourceforge.pmd are not compromised and the signatures are valid.
published:2025-01-31T16:15:35.643


Instruction: Please provide detailed information about CVE-2025-22957

CVE:CVE-2025-22957
Description:A SQL injection vulnerability exists in the front-end of the website in ZZCMS <= 2023, which can be exploited without any authentication. This vulnerability could potentially allow attackers to gain unauthorized access to the database and extract sensitive information.
published:2025-01-31T17:15:16.583


Instruction: Please provide detailed information about CVE-2025-23001

CVE:CVE-2025-23001
Description:A Host header injection vulnerability exists in CTFd 3.7.5, due to the application failing to properly validate or sanitize the Host header. An attacker can manipulate the Host header in HTTP requests, which may lead to phishing attacks, reset password, or cache poisoning. NOTE: the Supplier's position is that the end user is supposed to edit the NGINX configuration template to set server_name (with this setting, Host header injection cannot occur).
published:2025-01-31T17:15:16.693


Instruction: Please provide detailed information about CVE-2025-0938

CVE:CVE-2025-0938
Description:The Python standard library functions `urllib.parse.urlsplit` and `urlparse` accepted domain names that included square brackets which isn't valid according to RFC 3986. Square brackets are only meant to be used as delimiters for specifying IPv6 and IPvFuture hosts in URLs. This could result in differential parsing across the Python URL parser and other specification-compliant URL parsers.
published:2025-01-31T18:15:38.053


Instruction: Please provide detailed information about CVE-2025-0934

CVE:CVE-2025-0934
Description:A vulnerability was found in code-projects Job Recruitment 1.0. It has been classified as problematic. This affects an unknown part of the file /parse/_call_job_search_ajax.php. The manipulation of the argument n leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-01-31T20:15:32.893


Instruction: Please provide detailed information about CVE-2025-24891

CVE:CVE-2025-24891
Description:Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrary system files. As the container runs as root by default, there is no limit to what can be overwritten. With this, it's possible to inject malicious payloads into files ran on schedule or upon certain service actions. As the service is not required to run with authentication enabled, this may permit wholly unprivileged users root access. Otherwise, anybody with a PIN.
published:2025-01-31T23:15:08.457


Instruction: Please provide detailed information about CVE-2025-0365

CVE:CVE-2025-0365
Description:The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
published:2025-02-01T06:15:31.213


Instruction: Please provide detailed information about CVE-2025-0366

CVE:CVE-2025-0366
Description:The Jupiter X Core plugin for WordPress is vulnerable to Local File Inclusion to Remote Code Execution in all versions up to, and including, 4.8.7 via the get_svg() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution. In this specific case,  an attacker can create a form that allows SVG uploads, upload an SVG file with malicious content and then include the SVG file in a post to achieve remote code execution. This means it is relatively easy to gain remote code execution as a contributor-level user and above by default.
published:2025-02-01T06:15:31.367


Instruction: Please provide detailed information about CVE-2025-0939

CVE:CVE-2025-0939
Description:The MagicForm plugin for WordPress is vulnerable to access and modification of data due to a missing capability check on the plugin's AJAX actions in all versions up to, and including, 1.6.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to invoke those actions in order to delete or view logs, modify forms or modify plugin settings.
published:2025-02-01T07:15:08.097


Instruction: Please provide detailed information about CVE-2025-23091

CVE:CVE-2025-23091
Description:An Improper Certificate Validation on UniFi OS devices, with Identity Enterprise configured, could allow a malicious actor to execute a man-in-the-middle (MitM) attack during application update.
published:2025-02-01T07:15:08.277


Instruction: Please provide detailed information about CVE-2025-0943

CVE:CVE-2025-0943
Description:A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file deldoc.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T11:15:08.457


Instruction: Please provide detailed information about CVE-2025-0944

CVE:CVE-2025-0944
Description:A vulnerability was found in itsourcecode Tailoring Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file customerview.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T13:15:23.027


Instruction: Please provide detailed information about CVE-2025-0945

CVE:CVE-2025-0945
Description:A vulnerability classified as critical has been found in itsourcecode Tailoring Management System 1.0. Affected is an unknown function of the file typedelete.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T15:15:08.320


Instruction: Please provide detailed information about CVE-2025-0946

CVE:CVE-2025-0946
Description:A vulnerability classified as critical was found in itsourcecode Tailoring Management System 1.0. Affected by this vulnerability is an unknown functionality of the file templatedelete.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T16:15:27.180


Instruction: Please provide detailed information about CVE-2025-0947

CVE:CVE-2025-0947
Description:A vulnerability, which was classified as critical, has been found in itsourcecode Tailoring Management System 1.0. Affected by this issue is some unknown functionality of the file expview.php. The manipulation of the argument expid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T17:15:08.207


Instruction: Please provide detailed information about CVE-2025-0948

CVE:CVE-2025-0948
Description:A vulnerability, which was classified as critical, was found in itsourcecode Tailoring Management System 1.0. This affects an unknown part of the file incview.php. The manipulation of the argument incid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T18:15:27.087


Instruction: Please provide detailed information about CVE-2025-0949

CVE:CVE-2025-0949
Description:A vulnerability has been found in itsourcecode Tailoring Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file partview.php. The manipulation of the argument typeid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T19:15:08.990


Instruction: Please provide detailed information about CVE-2025-0950

CVE:CVE-2025-0950
Description:A vulnerability was found in itsourcecode Tailoring Management System 1.0 and classified as critical. This issue affects some unknown processing of the file staffview.php. The manipulation of the argument staffid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T20:15:26.167


Instruction: Please provide detailed information about CVE-2025-0961

CVE:CVE-2025-0961
Description:A vulnerability, which was classified as problematic, has been found in code-projects Job Recruitment 1.0. Affected by this issue is some unknown functionality of the file /_parse/load_job-details.php. The manipulation of the argument business_stream_name/company_website_url leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-01T23:15:21.923


Instruction: Please provide detailed information about CVE-2025-0967

CVE:CVE-2025-0967
Description:A vulnerability was found in code-projects Chat System 1.0 and classified as critical. This issue affects some unknown processing of the file /user/add_chatroom.php. The manipulation of the argument chatname/chatpass leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-02T16:15:27.693


Instruction: Please provide detailed information about CVE-2025-0970

CVE:CVE-2025-0970
Description:A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /Account/Login. The manipulation of the argument ReturnUrl leads to open redirect. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 25.01.22.245a473c54 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-02T23:15:19.027


Instruction: Please provide detailed information about CVE-2025-0971

CVE:CVE-2025-0971
Description:A vulnerability was found in Zenvia Movidesk up to 25.01.22. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /Account/EditProfile of the component Profile Editing. The manipulation of the argument username leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 25.01.22.245a473c54 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-03T00:15:27.797


Instruction: Please provide detailed information about CVE-2025-0972

CVE:CVE-2025-0972
Description:A vulnerability classified as problematic has been found in Zenvia Movidesk up to 25.01.22. This affects an unknown part of the component New Ticket Handler. The manipulation of the argument subject leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 25.01.22.245a473c54 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-03T00:15:28.007


Instruction: Please provide detailed information about CVE-2025-0973

CVE:CVE-2025-0973
Description:A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/database_admin.php of the file /index.php?case=database&act=backAll&admin_dir=admin&site=default. The manipulation of the argument select[] leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-03T01:15:07.263


Instruction: Please provide detailed information about CVE-2025-0974

CVE:CVE-2025-0974
Description:A vulnerability, which was classified as critical, has been found in MaxD Lightning Module 4.43 on OpenCart. This issue affects some unknown processing. The manipulation of the argument li_op/md leads to deserialization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-02-03T02:15:26.433


Instruction: Please provide detailed information about CVE-2025-20631

CVE:CVE-2025-20631
Description:In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187.
published:2025-02-03T04:15:08.060


Instruction: Please provide detailed information about CVE-2025-20632

CVE:CVE-2025-20632
Description:In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397139; Issue ID: MSV-2188.
published:2025-02-03T04:15:08.177


Instruction: Please provide detailed information about CVE-2025-20633

CVE:CVE-2025-20633
Description:In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote (proximal/adjacent) code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491.
published:2025-02-03T04:15:08.307


Instruction: Please provide detailed information about CVE-2025-20634

CVE:CVE-2025-20634
Description:In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01289384; Issue ID: MSV-2436.
published:2025-02-03T04:15:08.423


Instruction: Please provide detailed information about CVE-2025-20635

CVE:CVE-2025-20635
Description:In V6 DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09403752; Issue ID: MSV-2434.
published:2025-02-03T04:15:08.540


Instruction: Please provide detailed information about CVE-2025-20636

CVE:CVE-2025-20636
Description:In secmem, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS09403554; Issue ID: MSV-2431.
published:2025-02-03T04:15:08.643


Instruction: Please provide detailed information about CVE-2025-20637

CVE:CVE-2025-20637
Description:In network HW, there is a possible system hang due to an uncaught exception. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00399035; Issue ID: MSV-2380.
published:2025-02-03T04:15:08.747


Instruction: Please provide detailed information about CVE-2025-20638

CVE:CVE-2025-20638
Description:In DA, there is a possible read of uninitialized heap data due to uninitialized data. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291449; Issue ID: MSV-2066.
published:2025-02-03T04:15:08.863


Instruction: Please provide detailed information about CVE-2025-20639

CVE:CVE-2025-20639
Description:In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2060.
published:2025-02-03T04:15:08.980


Instruction: Please provide detailed information about CVE-2025-20640

CVE:CVE-2025-20640
Description:In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2059.
published:2025-02-03T04:15:09.093


Instruction: Please provide detailed information about CVE-2025-20641

CVE:CVE-2025-20641
Description:In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2058.
published:2025-02-03T04:15:09.210


Instruction: Please provide detailed information about CVE-2025-20642

CVE:CVE-2025-20642
Description:In DA, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, if an attacker has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2057.
published:2025-02-03T04:15:09.333


Instruction: Please provide detailed information about CVE-2025-20643

CVE:CVE-2025-20643
Description:In DA, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure, if an attacker has physical access to the device, if a malicious actor has already obtained the System privilege. User interaction is needed for exploitation. Patch ID: ALPS09291146; Issue ID: MSV-2056.
published:2025-02-03T04:15:09.460


Instruction: Please provide detailed information about CVE-2025-25062

CVE:CVE-2025-25062
Description:An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It doesn't sufficiently isolate long text content when the CKEditor 5 rich text editor is used. This allows a potential attacker to craft specialized HTML and JavaScript that may be executed when an administrator attempts to edit a piece of content. This vulnerability is mitigated by the fact that an attacker must have the ability to create long text content (such as through the node or comment forms) and an administrator must edit (not view) the content that contains the malicious content. This problem only exists when using the CKEditor 5 module.
published:2025-02-03T04:15:09.587


Instruction: Please provide detailed information about CVE-2025-25063

CVE:CVE-2025-25063
Description:An XSS issue was discovered in Backdrop CMS 1.28.x before 1.28.5 and 1.29.x before 1.29.3. It does not sufficiently validate uploaded SVG images to ensure they do not contain potentially dangerous SVG tags. SVG images can contain clickable links and executable scripting, and using a crafted SVG, it is possible to execute scripting in the browser when an SVG image is viewed. This issue is mitigated by the attacker needing to be able to upload SVG images, and that Backdrop embeds all uploaded SVG images within <img> tags, which prevents scripting from executing. The SVG must be viewed directly by its URL in order to run any embedded scripting.
published:2025-02-03T04:15:09.760


Instruction: Please provide detailed information about CVE-2025-25066

CVE:CVE-2025-25066
Description:nDPI through 4.12 has a potential stack-based buffer overflow in ndpi_address_cache_restore in lib/ndpi_cache.c.
published:2025-02-03T06:15:11.373


Instruction: Please provide detailed information about CVE-2025-0015

CVE:CVE-2025-0015
Description:Use After Free vulnerability in Arm Ltd Valhall GPU Kernel Driver, Arm Ltd Arm 5th Gen GPU Architecture Kernel Driver allows a local non-privileged user process to make improper GPU processing operations to gain access to already freed memory.This issue affects Valhall GPU Kernel Driver: from r48p0 through r49p1, from r50p0 through r52p0; Arm 5th Gen GPU Architecture Kernel Driver: from r48p0 through r49p1, from r50p0 through r52p0.
published:2025-02-03T11:15:09.807


Instruction: Please provide detailed information about CVE-2025-22260

CVE:CVE-2025-22260
Description:Missing Authorization vulnerability in Pixelite Meta Tag Manager. This issue affects Meta Tag Manager: from n/a through 3.1.
published:2025-02-03T15:15:17.503


Instruction: Please provide detailed information about CVE-2025-22292

CVE:CVE-2025-22292
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Felipe Peixoto Powerful Auto Chat allows Stored XSS. This issue affects Powerful Auto Chat: from n/a through 1.9.8.
published:2025-02-03T15:15:17.677


Instruction: Please provide detailed information about CVE-2025-22677

CVE:CVE-2025-22677
Description:Missing Authorization vulnerability in UIUX Lab Uix Shortcodes allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Uix Shortcodes: from n/a through 2.0.3.
published:2025-02-03T15:15:17.827


Instruction: Please provide detailed information about CVE-2025-22679

CVE:CVE-2025-22679
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Job Board Manager allows Reflected XSS. This issue affects Job Board Manager: from n/a through 2.1.60.
published:2025-02-03T15:15:17.980


Instruction: Please provide detailed information about CVE-2025-22681

CVE:CVE-2025-22681
Description:Missing Authorization vulnerability in Xfinity Soft Content Cloner allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Content Cloner: from n/a through 1.0.1.
published:2025-02-03T15:15:18.127


Instruction: Please provide detailed information about CVE-2025-22682

CVE:CVE-2025-22682
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hesabfa Hesabfa Accounting allows Reflected XSS. This issue affects Hesabfa Accounting: from n/a through 2.1.2.
published:2025-02-03T15:15:18.270


Instruction: Please provide detailed information about CVE-2025-22683

CVE:CVE-2025-22683
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPDeveloper NotificationX allows Stored XSS. This issue affects NotificationX: from n/a through 2.9.5.
published:2025-02-03T15:15:18.440


Instruction: Please provide detailed information about CVE-2025-22684

CVE:CVE-2025-22684
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hakan Ozevin WP BASE Booking allows Stored XSS. This issue affects WP BASE Booking: from n/a through 5.0.0.
published:2025-02-03T15:15:18.577


Instruction: Please provide detailed information about CVE-2025-22685

CVE:CVE-2025-22685
Description:Cross-Site Request Forgery (CSRF) vulnerability in CheGevara Tags to Keywords allows Stored XSS. This issue affects Tags to Keywords: from n/a through 1.0.1.
published:2025-02-03T15:15:18.717


Instruction: Please provide detailed information about CVE-2025-22686

CVE:CVE-2025-22686
Description:Missing Authorization vulnerability in GSheetConnector CF7 Google Sheets Connector allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects CF7 Google Sheets Connector: from n/a through 5.0.17.
published:2025-02-03T15:15:18.863


Instruction: Please provide detailed information about CVE-2025-22688

CVE:CVE-2025-22688
Description:Cross-Site Request Forgery (CSRF) vulnerability in Ederson Peka Unlimited Page Sidebars allows Stored XSS. This issue affects Unlimited Page Sidebars: from n/a through 0.2.6.
published:2025-02-03T15:15:19.007


Instruction: Please provide detailed information about CVE-2025-22690

CVE:CVE-2025-22690
Description:Cross-Site Request Forgery (CSRF) vulnerability in DigiTimber DigiTimber cPanel Integration allows Stored XSS. This issue affects DigiTimber cPanel Integration: from n/a through 1.4.6.
published:2025-02-03T15:15:19.150


Instruction: Please provide detailed information about CVE-2025-22691

CVE:CVE-2025-22691
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Travel WP Travel allows SQL Injection. This issue affects WP Travel: from n/a through 10.1.0.
published:2025-02-03T15:15:19.307


Instruction: Please provide detailed information about CVE-2025-22693

CVE:CVE-2025-22693
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Contest Gallery Contest Gallery allows SQL Injection. This issue affects Contest Gallery: from n/a through 25.1.0.
published:2025-02-03T15:15:19.467


Instruction: Please provide detailed information about CVE-2025-22694

CVE:CVE-2025-22694
Description:Missing Authorization vulnerability in theDotstore Hide Shipping Method For WooCommerce. This issue affects Hide Shipping Method For WooCommerce: from n/a through 1.5.0.
published:2025-02-03T15:15:19.597


Instruction: Please provide detailed information about CVE-2025-22695

CVE:CVE-2025-22695
Description:Authorization Bypass Through User-Controlled Key vulnerability in NirWp Team Nirweb support. This issue affects Nirweb support: from n/a through 3.0.3.
published:2025-02-03T15:15:19.770


Instruction: Please provide detailed information about CVE-2025-22701

CVE:CVE-2025-22701
Description:Server-Side Request Forgery (SSRF) vulnerability in NotFound Traveler Layout Essential For Elementor. This issue affects Traveler Layout Essential For Elementor: from n/a through 1.0.8.
published:2025-02-03T15:15:19.933


Instruction: Please provide detailed information about CVE-2025-22703

CVE:CVE-2025-22703
Description:Cross-Site Request Forgery (CSRF) vulnerability in manuelvicedo Forge – Front-End Page Builder allows Stored XSS. This issue affects Forge – Front-End Page Builder: from n/a through 1.4.6.
published:2025-02-03T15:15:20.100


Instruction: Please provide detailed information about CVE-2025-22704

CVE:CVE-2025-22704
Description:Cross-Site Request Forgery (CSRF) vulnerability in Abinav Thakuri WordPress Signature allows Cross Site Request Forgery. This issue affects WordPress Signature: from n/a through 0.1.
published:2025-02-03T15:15:20.273


Instruction: Please provide detailed information about CVE-2025-22775

CVE:CVE-2025-22775
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in idIA Tech Catalog Importer, Scraper & Crawler allows Reflected XSS.This issue affects Catalog Importer, Scraper & Crawler: from n/a through 5.1.3.
published:2025-02-03T15:15:20.457


Instruction: Please provide detailed information about CVE-2025-23491

CVE:CVE-2025-23491
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in vikashsrivastava1111989 VSTEMPLATE Creator allows Reflected XSS. This issue affects VSTEMPLATE Creator: from n/a through 2.0.2.
published:2025-02-03T15:15:20.640


Instruction: Please provide detailed information about CVE-2025-23527

CVE:CVE-2025-23527
Description:Missing Authorization vulnerability in Hemnath Mouli WC Wallet allows Accessing Functionality Not Properly Constrained by ACLs. This issue affects WC Wallet: from n/a through 2.2.0.
published:2025-02-03T15:15:20.807


Instruction: Please provide detailed information about CVE-2025-23561

CVE:CVE-2025-23561
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in NotFound MLL Audio Player MP3 Ajax allows Stored XSS. This issue affects MLL Audio Player MP3 Ajax: from n/a through 0.7.
published:2025-02-03T15:15:20.957