Instruction: Please provide detailed information about CVE-2025-26603

CVE:CVE-2025-26603
Description:Vim is a greatly improved version of the good old UNIX editor Vi. Vim allows to redirect screen messages using the `:redir` ex command to register, variables and files. It also allows to show the contents of registers using the `:registers` or `:display` ex command. When redirecting the output of `:display` to a register, Vim will free the register content before storing the new content in the register. Now when redirecting the `:display` command to a register that is being displayed, Vim will free the content while shortly afterwards trying to access it, which leads to a use-after-free. Vim pre 9.1.1115 checks in the ex_display() function, that it does not try to redirect to a register while displaying this register at the same time. However this check is not complete, and so Vim does not check the `+` and `*` registers (which typically donate the X11/clipboard registers, and when a clipboard connection is not possible will fall back to use register 0 instead. In Patch 9.1.1115 Vim will therefore skip outputting to register zero when trying to redirect to the clipboard registers `*` or `+`. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T19:15:29.387


Instruction: Please provide detailed information about CVE-2025-0622

CVE:CVE-2025-0622
Description:A flaw was found in command/gpg. In some scenarios, hooks created by loaded modules are not removed when the related module is unloaded. This flaw allows an attacker to force grub2 to call the hooks once the module that registered it was unloaded, leading to a use-after-free vulnerability. If correctly exploited, this vulnerability may result in arbitrary code execution, eventually allowing the attacker to bypass secure boot protections.
published:2025-02-18T20:15:23.570


Instruction: Please provide detailed information about CVE-2025-22639

CVE:CVE-2025-22639
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in NotFound Distance Rate Shipping for WooCommerce allows Blind SQL Injection. This issue affects Distance Rate Shipping for WooCommerce: from n/a through 1.3.4.
published:2025-02-18T20:15:26.010


Instruction: Please provide detailed information about CVE-2025-22645

CVE:CVE-2025-22645
Description:Improper Restriction of Excessive Authentication Attempts vulnerability in Rameez Iqbal Real Estate Manager allows Password Brute Forcing. This issue affects Real Estate Manager: from n/a through 7.3.
published:2025-02-18T20:15:26.570


Instruction: Please provide detailed information about CVE-2025-22650

CVE:CVE-2025-22650
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Erez Hadas-Sonnenschein Smartarget allows Stored XSS. This issue affects Smartarget: from n/a through 1.4.
published:2025-02-18T20:15:26.720


Instruction: Please provide detailed information about CVE-2025-22654

CVE:CVE-2025-22654
Description:Unrestricted Upload of File with Dangerous Type vulnerability in kodeshpa Simplified allows Using Malicious Files. This issue affects Simplified: from n/a through 1.0.6.
published:2025-02-18T20:15:26.877


Instruction: Please provide detailed information about CVE-2025-22656

CVE:CVE-2025-22656
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in Oscar Alvarez Cookie Monster allows PHP Local File Inclusion. This issue affects Cookie Monster: from n/a through 1.2.2.
published:2025-02-18T20:15:27.037


Instruction: Please provide detailed information about CVE-2025-22657

CVE:CVE-2025-22657
Description:Missing Authorization vulnerability in Vito Peleg Atarim allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Atarim: from n/a through 4.0.9.
published:2025-02-18T20:15:27.190


Instruction: Please provide detailed information about CVE-2025-22663

CVE:CVE-2025-22663
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in videowhisper Paid Videochat Turnkey Site allows Path Traversal. This issue affects Paid Videochat Turnkey Site: from n/a through 7.2.12.
published:2025-02-18T20:15:27.343


Instruction: Please provide detailed information about CVE-2025-26604

CVE:CVE-2025-26604
Description:Discord-Bot-Framework-Kernel is a Discord bot framework built with interactions.py, featuring modular extension management and secure execution. Because of the nature of arbitrary user-submited code execution, this allows user to execute potentially malicious code to perform damage or extract sensitive information. By loading the module containing the following code and run the command, the bot token can be extracted. Then the attacker can load a blocking module to sabotage the bot (DDoS attack) and the token can be used to make the fake bot act as the real one. If the bot has very high privilege, the attacker basically has full control before the user kicks the bot. Any Discord user that hosts Discord-Bot-Framework-Kernel before commit f0d9e70841a0e3170b88c4f8d562018ccd8e8b14 is affected. Users are advised to upgrade. Users unable to upgrade may attempt to limit their discord bot's access via configuration options.
published:2025-02-18T20:15:33.003


Instruction: Please provide detailed information about CVE-2025-26623

CVE:CVE-2025-26623
Description:Exiv2 is a C++ library and a command-line utility to read, write, delete and modify Exif, IPTC, XMP and ICC image metadata. A heap buffer overflow was found in Exiv2 versions v0.28.0 to v0.28.4. Versions prior to v0.28.0, such as v0.27.7, are **not** affected. Exiv2 is a command-line utility and C++ library for reading, writing, deleting, and modifying the metadata of image files. The heap overflow is triggered when Exiv2 is used to write metadata into a crafted image file. An attacker could potentially exploit the vulnerability to gain code execution, if they can trick the victim into running Exiv2 on a crafted image file. Note that this bug is only triggered when writing the metadata, which is a less frequently used Exiv2 operation than reading the metadata. For example, to trigger the bug in the Exiv2 command-line application, you need to add an extra command-line argument such as `fixiso`. The bug is fixed in version v0.28.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T20:15:33.153


Instruction: Please provide detailed information about CVE-2025-27013

CVE:CVE-2025-27013
Description:Missing Authorization vulnerability in EPC MediCenter - Health Medical Clinic WordPress Theme allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects MediCenter - Health Medical Clinic WordPress Theme: from n/a through n/a.
published:2025-02-18T20:15:33.880


Instruction: Please provide detailed information about CVE-2025-27016

CVE:CVE-2025-27016
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in awsm.in Drivr Lite – Google Drive Plugin allows Stored XSS. This issue affects Drivr Lite – Google Drive Plugin: from n/a through 1.0.1.
published:2025-02-18T20:15:34.013


Instruction: Please provide detailed information about CVE-2025-26605

CVE:CVE-2025-26605
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_cargo.php` endpoint. This vulnerability could allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:28.440


Instruction: Please provide detailed information about CVE-2025-26606

CVE:CVE-2025-26606
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `informacao_adicional.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:28.583


Instruction: Please provide detailed information about CVE-2025-26607

CVE:CVE-2025-26607
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `documento_excluir.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:28.730


Instruction: Please provide detailed information about CVE-2025-26608

CVE:CVE-2025-26608
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `dependente_docdependente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:28.893


Instruction: Please provide detailed information about CVE-2025-26609

CVE:CVE-2025-26609
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `familiar_docfamiliar.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.110


Instruction: Please provide detailed information about CVE-2025-26610

CVE:CVE-2025-26610
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `restaurar_produto_desocultar.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.233


Instruction: Please provide detailed information about CVE-2025-26611

CVE:CVE-2025-26611
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `remover_produto.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.357


Instruction: Please provide detailed information about CVE-2025-26612

CVE:CVE-2025-26612
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `adicionar_almoxarife.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.13 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.480


Instruction: Please provide detailed information about CVE-2025-26613

CVE:CVE-2025-26613
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. An OS Command Injection vulnerability was discovered in the WeGIA application, `gerenciar_backup.php` endpoint. This vulnerability could allow an attacker to execute arbitrary code remotely. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.607


Instruction: Please provide detailed information about CVE-2025-26614

CVE:CVE-2025-26614
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `deletar_documento.php` endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.737


Instruction: Please provide detailed information about CVE-2025-26615

CVE:CVE-2025-26615
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `examples.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:29.867


Instruction: Please provide detailed information about CVE-2025-26616

CVE:CVE-2025-26616
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A Path Traversal vulnerability was discovered in the WeGIA application, `exportar_dump.php` endpoint. This vulnerability could allow an attacker to gain unauthorized access to sensitive information stored in `config.php`. `config.php` contains information that could allow direct access to the database. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:30.010


Instruction: Please provide detailed information about CVE-2025-26617

CVE:CVE-2025-26617
Description:WeGIA is an open source Web Manager for Institutions with a focus on Portuguese language users. A SQL Injection vulnerability was discovered in the WeGIA application, `historico_paciente.php` endpoint. This vulnerability could allow an attacker to execute arbitrary SQL queries, allowing unauthorized access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-18T21:15:30.137


Instruction: Please provide detailed information about CVE-2025-22921

CVE:CVE-2025-22921
Description:FFmpeg git-master,N-113007-g8d24a28d06 was discovered to contain a segmentation violation via the component /libavcodec/jpeg2000dec.c.
published:2025-02-18T22:15:18.040


Instruction: Please provide detailed information about CVE-2025-25467

CVE:CVE-2025-25467
Description:Insufficient tracking and releasing of allocated used memory in libx264 git master allows attackers to execute arbitrary code via creating a crafted AAC file.
published:2025-02-18T22:15:18.373


Instruction: Please provide detailed information about CVE-2025-25468

CVE:CVE-2025-25468
Description:FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/mem.c.
published:2025-02-18T22:15:18.477


Instruction: Please provide detailed information about CVE-2025-25469

CVE:CVE-2025-25469
Description:FFmpeg git-master before commit d5873b was discovered to contain a memory leak in the component libavutil/iamf.c.
published:2025-02-18T22:15:18.587


Instruction: Please provide detailed information about CVE-2025-25891

CVE:CVE-2025-25891
Description:A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01, triggered by the destination, netmask and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-18T22:15:18.693


Instruction: Please provide detailed information about CVE-2025-25892

CVE:CVE-2025-25892
Description:A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the sstartip, sendip, dstartip, and dendip parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-18T22:15:18.803


Instruction: Please provide detailed information about CVE-2025-25893

CVE:CVE-2025-25893
Description:An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the inIP, insPort, inePort, exsPort, exePort, and protocol parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
published:2025-02-18T22:15:18.920


Instruction: Please provide detailed information about CVE-2025-25894

CVE:CVE-2025-25894
Description:An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the samba_wg and samba_nbn parameters. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
published:2025-02-18T22:15:19.040


Instruction: Please provide detailed information about CVE-2025-25895

CVE:CVE-2025-25895
Description:An OS command injection vulnerability was discovered in D-Link DSL-3782 v1.01 via the public_type parameter. This vulnerability allows attackers to execute arbitrary operating system (OS) commands via a crafted packet.
published:2025-02-18T22:15:19.163


Instruction: Please provide detailed information about CVE-2025-25896

CVE:CVE-2025-25896
Description:A buffer overflow vulnerability was discovered in D-Link DSL-3782 v1.01 via the destination, netmask, and gateway parameters. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-18T22:15:19.277


Instruction: Please provide detailed information about CVE-2025-22919

CVE:CVE-2025-22919
Description:A reachable assertion in FFmpeg git-master commit N-113007-g8d24a28d06 allows attackers to cause a Denial of Service (DoS) via opening a crafted AAC file.
published:2025-02-18T23:15:10.073


Instruction: Please provide detailed information about CVE-2025-22920

CVE:CVE-2025-22920
Description:A heap buffer overflow vulnerability in FFmpeg before commit 4bf784c allows attackers to trigger a memory corruption via supplying a crafted media file in avformat when processing tile grid group streams. This can lead to a Denial of Service (DoS).
published:2025-02-18T23:15:10.160


Instruction: Please provide detailed information about CVE-2025-24928

CVE:CVE-2025-24928
Description:libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a stack-based buffer overflow in xmlSnprintfElements in valid.c. To exploit this, DTD validation must occur for an untrusted document or untrusted DTD. NOTE: this is similar to CVE-2017-9047.
published:2025-02-18T23:15:10.250


Instruction: Please provide detailed information about CVE-2025-25471

CVE:CVE-2025-25471
Description:FFmpeg git master before commit fd1772 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c.
published:2025-02-18T23:15:10.370


Instruction: Please provide detailed information about CVE-2025-25472

CVE:CVE-2025-25472
Description:A buffer overflow in DCMTK git master v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DCM file.
published:2025-02-18T23:15:10.453


Instruction: Please provide detailed information about CVE-2025-25473

CVE:CVE-2025-25473
Description:FFmpeg git master before commit c08d30 was discovered to contain a NULL pointer dereference via the component libavformat/mov.c.
published:2025-02-18T23:15:10.543


Instruction: Please provide detailed information about CVE-2025-25474

CVE:CVE-2025-25474
Description:DCMTK v3.6.9+ DEV was discovered to contain a buffer overflow via the component /dcmimgle/diinpxt.h.
published:2025-02-18T23:15:10.627


Instruction: Please provide detailed information about CVE-2025-25475

CVE:CVE-2025-25475
Description:A NULL pointer dereference in the component /libsrc/dcrleccd.cc of DCMTK v3.6.9+ DEV allows attackers to cause a Denial of Service (DoS) via a crafted DICOM file.
published:2025-02-18T23:15:10.720


Instruction: Please provide detailed information about CVE-2025-26624

CVE:CVE-2025-26624
Description:Rufus is a utility that helps format and create bootable USB flash drives. A DLL hijacking vulnerability in Rufus 4.6.2208 and earlier versions allows an attacker loading and executing a malicious DLL with escalated privileges (since the executable has been granted higher privileges during the time of launch) due to the ability to inject a malicious `cfgmgr32.dll` in the same directory as the executable and have it side load automatically. This is fixed in commit `74dfa49`, which will be part of version 4.7. Users are advised to upgrade as soon as version 4.7 becomes available. There are no known workarounds for this vulnerability.
published:2025-02-18T23:15:10.810


Instruction: Please provide detailed information about CVE-2025-27113

CVE:CVE-2025-27113
Description:libxml2 before 2.12.10 and 2.13.x before 2.13.6 has a NULL pointer dereference in xmlPatMatch in pattern.c.
published:2025-02-18T23:15:10.960


Instruction: Please provide detailed information about CVE-2025-1447

CVE:CVE-2025-1447
Description:A vulnerability was found in kasuganosoras Pigeon 1.0.177. It has been declared as critical. This vulnerability affects unknown code of the file /pigeon/imgproxy/index.php. The manipulation of the argument url leads to server-side request forgery. The attack can be initiated remotely. Upgrading to version 1.0.181 is able to address this issue. The patch is identified as 84cea5fe73141689da2e7ec8676d47435bd6423e. It is recommended to upgrade the affected component.
published:2025-02-19T01:15:09.407


Instruction: Please provide detailed information about CVE-2025-1448

CVE:CVE-2025-1448
Description:A vulnerability was found in Synway SMG Gateway Management Software up to 20250204. It has been rated as critical. This issue affects some unknown processing of the file 9-12ping.php. The manipulation of the argument retry leads to command injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-19T02:15:08.833


Instruction: Please provide detailed information about CVE-2025-22622

CVE:CVE-2025-22622
Description:Age Verification for your checkout page. Verify your customer's identity 1.20.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/class-wc-integration-agechecker-integration.php.
published:2025-02-19T04:15:10.550


Instruction: Please provide detailed information about CVE-2025-1441

CVE:CVE-2025-1441
Description:The Royal Elementor Addons and Templates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.7.1007. This is due to missing or incorrect nonce validation on the 'wpr_filter_woo_products' function. This makes it possible for unauthenticated attackers to inject malicious web scripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-02-19T05:15:12.050


Instruction: Please provide detailed information about CVE-2025-1065

CVE:CVE-2025-1065
Description:The Visualizer: Tables and Charts Manager for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Import Data From File feature in all versions up to, and including, 3.11.8 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-19T06:15:21.507


Instruction: Please provide detailed information about CVE-2025-22888

CVE:CVE-2025-22888
Description:Movable Type contains a stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor. If exploited, an arbitrary script may be executed on a logged-in user's web browser.
published:2025-02-19T06:15:21.687


Instruction: Please provide detailed information about CVE-2025-24841

CVE:CVE-2025-24841
Description:Movable Type contains a stored cross-site scripting vulnerability in the HTML edit mode of MT Block Editor. It is exploitable when TinyMCE6 is used as a rich text editor and an arbitrary script may be executed on a logged-in user's web browser.
published:2025-02-19T06:15:21.853


Instruction: Please provide detailed information about CVE-2025-25054

CVE:CVE-2025-25054
Description:Movable Type contains a reflected cross-site scripting vulnerability in the user information edit page. When Multi-Factor authentication plugin is enabled and a user accesses a crafted page while logged in to the affected product, an arbitrary script may be executed on the web browser of the user.
published:2025-02-19T06:15:22.010


Instruction: Please provide detailed information about CVE-2025-0633

CVE:CVE-2025-0633
Description:Heap-based Buffer Overflow vulnerability in iniparser_dumpsection_ini() in iniparser allows attacker to read out of bound memory
published:2025-02-19T07:15:33.537


Instruction: Please provide detailed information about CVE-2025-0865

CVE:CVE-2025-0865
Description:The WP Media Category Management plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions 2.0 to 2.3.3. This is due to missing or incorrect nonce validation on the wp_mcm_handle_action_settings() function. This makes it possible for unauthenticated attackers to alter plugin settings, such as the taxonomy used for media, the base slug for media categories, and the default media category via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-02-19T08:15:21.853


Instruction: Please provide detailed information about CVE-2025-1007

CVE:CVE-2025-1007
Description:In OpenVSX version v0.9.0 to v0.20.0, the  /user/namespace/{namespace}/details API allows a user to edit all  namespace details, even if the user is not a namespace Owner or  Contributor. The details include: name, description, website, support  link and social media links. The same issues existed in  /user/namespace/{namespace}/details/logo and allowed a user to change  the logo.
published:2025-02-19T09:15:10.117


Instruction: Please provide detailed information about CVE-2025-1024

CVE:CVE-2025-1024
Description:A vulnerability exists in ChurchCRM 5.13.0 that allows an attacker to execute arbitrary JavaScript in a victim's browser via Reflected Cross-Site Scripting (XSS) in the EditEventAttendees.php page. This requires Administration privileges and affects the EID parameter. The flaw allows an attacker to steal session cookies, perform actions on behalf of an authenticated user, and gain unauthorized access to the application.
published:2025-02-19T09:15:10.280


Instruction: Please provide detailed information about CVE-2025-1132

CVE:CVE-2025-1132
Description:A time-based blind SQL Injection vulnerability exists in the ChurchCRM 5.13.0 and prior EditEventAttendees.php within the EN_tyid parameter. The parameter is directly inserted into an SQL query without proper sanitization, allowing attackers to inject malicious SQL commands. Please note that the vulnerability requires Administrator permissions. This flaw can potentially allow attackers to delay the response, indicating the presence of an SQL injection vulnerability. While it is a time-based blind injection, it can be exploited to gain insights into the underlying database, and with further exploitation, sensitive data could be retrieved.
published:2025-02-19T09:15:10.417


Instruction: Please provide detailed information about CVE-2025-1133

CVE:CVE-2025-1133
Description:A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based blind SQL Injection vulnerability in the EditEventAttendees functionality. The EID parameter is directly concatenated into an SQL query without proper sanitization, making it susceptible to SQL injection attacks. An attacker can manipulate the query, potentially leading to data exfiltration, modification, or deletion.  Please note that this vulnerability requires Administrator privileges.
published:2025-02-19T09:15:10.550


Instruction: Please provide detailed information about CVE-2025-1134

CVE:CVE-2025-1134
Description:A vulnerability exists in ChurchCRM 5.13.0 and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the DonatedItemEditor functionality. The CurrentFundraiser parameter is directly concatenated into an SQL query without sufficient sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion. Please note that this vulnerability requires Administrator privileges.
published:2025-02-19T09:15:10.687


Instruction: Please provide detailed information about CVE-2025-1135

CVE:CVE-2025-1135
Description:A vulnerability exists in ChurchCRM 5.13.0. and prior that allows an attacker to execute arbitrary SQL queries by exploiting a boolean-based and time-based blind SQL Injection vulnerability in the BatchWinnerEntry functionality. The CurrentFundraiser parameter is directly concatenated into an SQL query without sufficient sanitization, allowing an attacker to manipulate database queries and execute arbitrary commands, potentially leading to data exfiltration, modification, or deletion. Please note the vulnerability requires Administrator privileges.
published:2025-02-19T09:15:10.823


Instruction: Please provide detailed information about CVE-2025-1075

CVE:CVE-2025-1075
Description:Insertion of Sensitive Information into Log File in Checkmk GmbH's Checkmk versions <2.3.0p27, <2.2.0p40, and 2.1.0p51 (EOL) causes LDAP credentials to be written to Apache error log file accessible to administrators.
published:2025-02-19T10:15:09.043


Instruction: Please provide detailed information about CVE-2025-0916

CVE:CVE-2025-0916
Description:The YaySMTP and Email Logs: Amazon SES, SendGrid, Outlook, Mailgun, Brevo, Google and Any SMTP Service plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions 2.4.9 to 2.6.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Note: The vulnerability has been initially patched in version 2.4.8 and was reintroduced in version 2.4.9 with the removal of the wp_kses_post() built-in WordPress sanitization function.
published:2025-02-19T12:15:31.630


Instruction: Please provide detailed information about CVE-2025-0968

CVE:CVE-2025-0968
Description:The ElementsKit Elementor addons plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.4.0  due to a missing capability checks on the get_megamenu_content() function. This makes it possible for unauthenticated attackers to view any item created in Elementor, such as posts, pages and templates including drafts, trashed and private items.
published:2025-02-19T12:15:31.770


Instruction: Please provide detailed information about CVE-2025-1464

CVE:CVE-2025-1464
Description:A vulnerability, which was classified as critical, has been found in Baiyi Cloud Asset Management System up to 20250204. This issue affects some unknown processing of the file /wuser/admin.house.collect.php. The manipulation of the argument project_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-19T14:15:30.337


Instruction: Please provide detailed information about CVE-2025-1465

CVE:CVE-2025-1465
Description:A vulnerability, which was classified as problematic, was found in lmxcms 1.41. Affected is an unknown function of the file db.inc.php of the component Maintenance. The manipulation leads to code injection. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-19T16:15:40.667


Instruction: Please provide detailed information about CVE-2025-20153

CVE:CVE-2025-20153
Description:A vulnerability in the email filtering mechanism of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to bypass the configured rules and allow emails that should have been denied to flow through an affected device.

 This vulnerability is due to improper handling of email that passes through an affected device. An attacker could exploit this vulnerability by sending a crafted email through the affected device. A successful exploit could allow the attacker to bypass email filters on the affected device.
published:2025-02-19T16:15:40.860


Instruction: Please provide detailed information about CVE-2025-20158

CVE:CVE-2025-20158
Description:A vulnerability in the debug shell of Cisco Video Phone 8875 and Cisco Desk Phone 9800 Series could allow an authenticated, local attacker to access sensitive information on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials with SSH access on the affected device. SSH access is disabled by default.

 This vulnerability is due to insufficient validation of user-supplied input by the debug shell of an affected device. An attacker could exploit this vulnerability by sending a crafted SSH client command to the CLI. A successful exploit could allow the attacker to access sensitive information on the underlying operating system.
published:2025-02-19T16:15:41.017


Instruction: Please provide detailed information about CVE-2025-20211

CVE:CVE-2025-20211
Description:A vulnerability in the web-based management interface of Cisco BroadWorks Application Delivery Platform could allow an unauthenticated, remote attacker to conduct a cross-site scripting attack against a user of the interface.

 This vulnerability exists because the web-based management interface does not properly validate user-supplied input. An attacker could exploit this vulnerability by persuading a user of the interface to click a crafted link. A successful exploit could allow the attacker to execute arbitrary script code in the context of the affected interface or access sensitive, browser-based information.
published:2025-02-19T16:15:41.163


Instruction: Please provide detailed information about CVE-2025-0999

CVE:CVE-2025-0999
Description:Heap buffer overflow in V8 in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-02-19T17:15:14.930


Instruction: Please provide detailed information about CVE-2025-1006

CVE:CVE-2025-1006
Description:Use after free in Network in Google Chrome prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted web app. (Chromium security severity: Medium)
published:2025-02-19T17:15:15.050


Instruction: Please provide detailed information about CVE-2025-1426

CVE:CVE-2025-1426
Description:Heap buffer overflow in GPU in Google Chrome on Android prior to 133.0.6943.126 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
published:2025-02-19T17:15:15.173


Instruction: Please provide detailed information about CVE-2025-24965

CVE:CVE-2025-24965
Description:crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-19T17:15:15.510


Instruction: Please provide detailed information about CVE-2025-27089

CVE:CVE-2025-27089
Description:Directus is a real-time API and App dashboard for managing SQL database content. In affected versions if there are two overlapping policies for the `update` action that allow access to different fields, instead of correctly checking access permissions against the item they apply for the user is allowed to update the superset of fields allowed by any of the policies. E.g. have one policy allowing update access to `field_a` if the `id == 1` and one policy allowing update access to `field_b` if the `id == 2`. The user with both these policies is allowed to update both `field_a` and `field_b` for the items with ids `1` and `2`. Before v11, if a user was allowed to update an item they were allowed to update the fields that the single permission, that applied to that item, listed. With overlapping permissions this isn't as clear cut anymore and the union of fields might not be the fields the user is allowed to update for that specific item. The solution that this PR introduces is to evaluate the permissions for each field that the user tries to update in the validateItemAccess DB query, instead of only verifying access to the item as a whole. This is done by, instead of returning the actual field value, returning a flag that indicates if the user has access to that field. This uses the same case/when mechanism that is used for stripping out non permitted field that is at the core of the permissions engine. As a result, for every item that the access is validated for, the expected result is an item that has either 1 or null for all the "requested" fields instead of any of the actual field values. These results are not useful for anything other than verifying the field level access permissions. The final check in validateItemAccess can either fail if the number of items does not match the number of items the access is checked for (ie. the user does not have access to the item at all) or if not all of the passed in fields have access permissions for any of the returned items. This is a vulnerability that allows update access to unintended fields, potentially impacting the password field for user accounts. This has been addressed in version 11.1.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-19T17:15:15.800


Instruction: Please provide detailed information about CVE-2025-0893

CVE:CVE-2025-0893
Description:Symantec Diagnostic Tool (SymDiag), prior to 3.0.79, may be susceptible to a Privilege Escalation vulnerability.
published:2025-02-19T18:15:24.127


Instruction: Please provide detailed information about CVE-2025-1118

CVE:CVE-2025-1118
Description:A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attacker may leverage this in order to extract signatures, salts, and other sensitive information from the memory.
published:2025-02-19T18:15:24.280


Instruction: Please provide detailed information about CVE-2025-24806

CVE:CVE-2025-24806
Description:Authelia is an open-source authentication and authorization server providing two-factor authentication and single sign-on (SSO) for applications via a web portal. If users are allowed to sign in via both username and email the regulation system treats these as separate login events. This leads to the regulation limitations being effectively doubled assuming an attacker using brute-force to find a user password. It's important to note that due to the effective operation of regulation where no user-facing sign of their regulation ban being visible either via timing or via API responses, it's effectively impossible to determine if a failure occurs due to a bad username password combination, or a effective ban blocking the attempt which heavily mitigates any form of brute-force. This occurs because the records and counting process for this system uses the method utilized for sign in rather than the effective username attribute. This has a minimal impact on account security, this impact is increased naturally in scenarios when there is no two-factor authentication required and weak passwords are used. This makes it a bit easier to brute-force a password. A patch for this issue has been applied to versions 4.38.19, and 4.39.0. Users are advised to upgrade. Users unable to upgrade should 1. Not heavily modify the default settings in a way that ends up with shorter or less frequent regulation bans. The default settings effectively mitigate any potential for this issue to be exploited. and 2. Disable the ability for users to login via an email address.
published:2025-02-19T18:15:24.467


Instruction: Please provide detailed information about CVE-2025-0624

CVE:CVE-2025-0624
Description:A flaw was found in grub2. During the network boot process, when trying to search for the configuration file, grub copies data from a user controlled environment variable into an internal buffer using the grub_strcpy() function. During this step, it fails to consider the environment variable length when allocating the internal buffer, resulting in an out-of-bounds write. If correctly exploited, this issue may result in remote code execution through the same network segment grub is searching for the boot information, which can be used to by-pass secure boot protections.
published:2025-02-19T19:15:15.120


Instruction: Please provide detailed information about CVE-2025-0677

CVE:CVE-2025-0677
Description:A flaw was found in grub2. When performing a symlink lookup, the grub's UFS module checks the inode's data size to allocate the internal buffer to read the file content, however, it fails to check if the symlink data size has overflown. When this occurs, grub_malloc() may be called with a smaller value than needed. When further reading the data from the disk into the buffer, the grub_ufs_lookup_symlink() function will write past the end of the allocated size. An attack can leverage this by crafting a malicious filesystem, and as a result, it will corrupt data stored in the heap, allowing for arbitrary code execution used to by-pass secure boot mechanisms.
published:2025-02-19T19:15:15.280


Instruction: Please provide detailed information about CVE-2025-25196

CVE:CVE-2025-25196
Description:OpenFGA is a high-performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar. OpenFGA < v1.8.4 (Helm chart < openfga-0.2.22, docker < v.1.8.4) are vulnerable to authorization bypass when certain Check and ListObject calls are executed. Users on OpenFGA v1.8.4 or previous, specifically under the following conditions are affected by this authorization bypass vulnerability: 1. Calling Check API or ListObjects with a model that has a relation directly assignable to both public access AND userset with the same type. 2. A type bound public access tuple is assigned to an object. 3. userset tuple is not assigned to the same object. and 4. Check request's user field is a userset that has the same type as the type bound public access tuple's user type. Users are advised to upgrade to v1.8.5 which is backwards compatible. There are no known workarounds for this vulnerability.
published:2025-02-19T21:15:15.577


Instruction: Please provide detailed information about CVE-2025-27090

CVE:CVE-2025-27090
Description:Sliver is an open source cross-platform adversary emulation/red team framework, it can be used by organizations of all sizes to perform security testing. The reverse port forwarding in sliver teamserver allows the implant to open a reverse tunnel on the sliver teamserver without verifying if the operator instructed the implant to do so. The only impact that has been shown is the exposure of the server's IP address to a third party. This issue has been addressed in version 1.5.43 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-19T22:15:24.247


Instruction: Please provide detailed information about CVE-2025-21355

CVE:CVE-2025-21355
Description:Missing Authentication for Critical Function in Microsoft Bing allows an unauthorized attacker to execute code over a network
published:2025-02-19T23:15:12.963


Instruction: Please provide detailed information about CVE-2025-24989

CVE:CVE-2025-24989
Description:An improper access control vulnerability in Power Pages allows an unauthorized attacker to elevate privileges over a network potentially bypassing the user registration control. This vulnerability has already been mitigated in the service and all affected customers have been notified. This update addressed the registration control bypass. Affected customers have been given instructions on reviewing their sites for potential exploitation and clean up methods. If you've not been notified this vulnerability does not affect you.
published:2025-02-19T23:15:15.167


Instruction: Please provide detailed information about CVE-2025-25942

CVE:CVE-2025-25942
Description:An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the mp4fragment tool when processing invalid files. Specifically, memory allocated in SampleArray::SampleArray in Mp4Fragment.cpp is not properly released.
published:2025-02-19T23:15:15.310


Instruction: Please provide detailed information about CVE-2025-25943

CVE:CVE-2025-25943
Description:Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the AP4_Stz2Atom::AP4_Stz2Atom component located in Ap4Stz2Atom.cpp.
published:2025-02-19T23:15:15.417


Instruction: Please provide detailed information about CVE-2025-25944

CVE:CVE-2025-25944
Description:Buffer Overflow vulnerability in Bento4 v.1.6.0-641 allows a local attacker to execute arbitrary code via the Ap4RtpAtom.cpp, specifically in AP4_RtpAtom::AP4_RtpAtom, during the execution of mp4fragment with a crafted MP4 input file.
published:2025-02-19T23:15:15.530


Instruction: Please provide detailed information about CVE-2025-25945

CVE:CVE-2025-25945
Description:An issue in Bento4 v1.6.0-641 allows an attacker to obtain sensitive information via the the Mp4Fragment.cpp and in AP4_DescriptorFactory::CreateDescriptorFromStream at Ap4DescriptorFactory.cpp.
published:2025-02-19T23:15:15.630


Instruction: Please provide detailed information about CVE-2025-25946

CVE:CVE-2025-25946
Description:An issue in Bento4 v1.6.0-641 allows an attacker to cause a memory leak via Ap4Marlin.cpp and Ap4Processor.cpp, specifically in AP4_MarlinIpmpEncryptingProcessor::Initialize and AP4_Processor::Process, during the execution of mp4encrypt with a specially crafted MP4 input file.
published:2025-02-19T23:15:15.743


Instruction: Please provide detailed information about CVE-2025-25947

CVE:CVE-2025-25947
Description:An issue in Bento4 v1.6.0-641 allows an attacker to trigger a segmentation fault via Ap4Atom.cpp, specifically in AP4_AtomParent::RemoveChild, during the execution of mp4encrypt with a specially crafted MP4 input file.
published:2025-02-19T23:15:15.850


Instruction: Please provide detailed information about CVE-2025-27092

CVE:CVE-2025-27092
Description:GHOSTS is an open source user simulation framework for cyber experimentation, simulation, training, and exercise. A path traversal vulnerability was discovered in GHOSTS version 8.0.0.0 that allows an attacker to access files outside of the intended directory through the photo retrieval endpoint. The vulnerability exists in the /api/npcs/{id}/photo endpoint, which is designed to serve profile photos for NPCs (Non-Player Characters) but fails to properly validate and sanitize file paths. When an NPC is created with a specially crafted photoLink value containing path traversal sequences (../, ..\, etc.), the application processes these sequences without proper sanitization. This allows an attacker to traverse directory structures and access files outside of the intended photo directory, potentially exposing sensitive system files. The vulnerability is particularly severe because it allows reading arbitrary files from the server's filesystem with the permissions of the web application process, which could include configuration files, credentials, or other sensitive data. This issue has been addressed in version 8.2.7.90 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-19T23:15:15.957


Instruction: Please provide detailed information about CVE-2025-0112

CVE:CVE-2025-0112
Description:A problem with a detection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices enables a user with Windows non-administrative privileges to disable the agent. This vulnerability can also be leveraged by malware to disable the Cortex XDR agent and then perform malicious activity.
published:2025-02-20T00:15:20.640


Instruction: Please provide detailed information about CVE-2025-1222

CVE:CVE-2025-1222
Description:An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
published:2025-02-20T01:15:09.707


Instruction: Please provide detailed information about CVE-2025-1223

CVE:CVE-2025-1223
Description:An attacker can gain application privileges in order to perform limited modification and/or read arbitrary data in Citrix Secure Access Client for Mac
published:2025-02-20T01:15:09.837


Instruction: Please provide detailed information about CVE-2025-1293

CVE:CVE-2025-1293
Description:Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
published:2025-02-20T01:15:09.950


Instruction: Please provide detailed information about CVE-2025-1492

CVE:CVE-2025-1492
Description:Bundle Protocol and CBOR dissector crashes in Wireshark 4.4.0 to 4.4.3 and 4.2.0 to 4.2.10 allows denial of service via packet injection or crafted capture file
published:2025-02-20T02:15:38.553


Instruction: Please provide detailed information about CVE-2025-23020

CVE:CVE-2025-23020
Description:An issue was discovered in Kwik before 0.10.1. A hash collision vulnerability (in the hash table used to manage connections) allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).
published:2025-02-20T03:15:12.630


Instruction: Please provide detailed information about CVE-2025-24946

CVE:CVE-2025-24946
Description:The hash table used to manage connections in picoquic before b80fd3f uses a weak hash function, allowing remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs).
published:2025-02-20T03:15:12.800


Instruction: Please provide detailed information about CVE-2025-24947

CVE:CVE-2025-24947
Description:A hash collision vulnerability (in the hash table used to manage connections) in LSQUIC (aka LiteSpeed QUIC) before 4.2.0 allows remote attackers to cause a considerable CPU load on the server (a Hash DoS attack) by initiating connections with colliding Source Connection IDs (SCIDs). This is caused by XXH32 usage.
published:2025-02-20T03:15:12.943


Instruction: Please provide detailed information about CVE-2025-27218

CVE:CVE-2025-27218
Description:Sitecore Experience Manager (XM) and Experience Platform (XP) 10.4 before KB1002844 allow remote code execution through insecure deserialization.
published:2025-02-20T05:15:15.270


Instruction: Please provide detailed information about CVE-2025-26856

CVE:CVE-2025-26856
Description:Improper neutralization of special elements used in an OS command ('OS Command Injection') issue exists in UD-LT2 firmware Ver.1.00.008_SE and earlier. If an attacker logs in to the affected product with an administrative account and manipulates requests for a certain screen operation, an arbitrary OS command may be executed. This vulnerability was reported on a different screen operation from CVE-2025-20617.
published:2025-02-20T06:15:21.673


Instruction: Please provide detailed information about CVE-2025-0897

CVE:CVE-2025-0897
Description:The Modal Window – create popup modal window plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'iframeBox' shortcode in all versions up to, and including, 6.1.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-20T09:15:09.750


Instruction: Please provide detailed information about CVE-2025-1064

CVE:CVE-2025-1064
Description:The Login/Signup Popup ( Inline Form + Woocommerce ) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's xoo_el_action shortcode in all versions up to, and including, 2.8.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-20T09:15:09.903


Instruction: Please provide detailed information about CVE-2025-0866

CVE:CVE-2025-0866
Description:The Legoeso PDF Manager plugin for WordPress is vulnerable to time-based SQL Injection via the ‘checkedVals’ parameter in all versions up to, and including, 1.2.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Author-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-02-20T10:15:11.980


Instruction: Please provide detailed information about CVE-2025-1328

CVE:CVE-2025-1328
Description:The Typed JS: A typewriter style animation plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘typespeed’ parameter in all versions up to, and including, 1.2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-20T10:15:12.337


Instruction: Please provide detailed information about CVE-2025-1483

CVE:CVE-2025-1483
Description:The LTL Freight Quotes – GlobalTranz Edition plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the engtz_wd_save_dropship AJAX endpoint in all versions up to, and including, 2.3.12. This makes it possible for unauthenticated attackers to update the drop shipping settings.
published:2025-02-20T10:15:12.537


Instruction: Please provide detailed information about CVE-2025-0868

CVE:CVE-2025-0868
Description:A vulnerability, that could result in Remote Code Execution (RCE), has been found in DocsGPT. Due to improper parsing of JSON data using eval() an unauthorized attacker could send arbitrary Python code to be executed via /api/remote endpoint.  This issue affects DocsGPT: from 0.8.1 through 0.12.0.
published:2025-02-20T12:15:10.893


Instruction: Please provide detailed information about CVE-2025-1043

CVE:CVE-2025-1043
Description:The Embed Any Document – Embed PDF, Word, PowerPoint and Excel Files plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 2.7.5 via the 'embeddoc' shortcode. This makes it possible for authenticated attackers, with Contributor-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
published:2025-02-20T12:15:11.030


Instruction: Please provide detailed information about CVE-2025-21105

CVE:CVE-2025-21105
Description:Dell RecoverPoint for Virtual Machines 6.0.X contains a command execution vulnerability. A Low privileged malicious user with local access could potentially exploit this vulnerability by running the specific binary and perform any administrative action permitted by it resulting in shutting down the server, modifying the configuration leading to gain access to unauthorized data.
published:2025-02-20T12:15:11.233


Instruction: Please provide detailed information about CVE-2025-21106

CVE:CVE-2025-21106
Description:Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the system.
published:2025-02-20T12:15:11.373


Instruction: Please provide detailed information about CVE-2025-1039

CVE:CVE-2025-1039
Description:The Lenix Elementor Leads addon plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a URL form field in all versions up to, and including, 1.8.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-20T13:15:08.387


Instruction: Please provide detailed information about CVE-2025-20059

CVE:CVE-2025-20059
Description:Relative Path Traversal vulnerability in Ping Identity PingAM Java Policy Agent allows Parameter Injection.This issue affects PingAM Java Policy Agent: through 5.10.3, through 2023.11.1, through 2024.9.
published:2025-02-20T15:15:13.957


Instruction: Please provide detailed information about CVE-2025-0161

CVE:CVE-2025-0161
Description:IBM Security Verify Access Appliance 10.0.0.0 through 10.0.0.9 and 11.0.0.0 could allow a local user to execute arbitrary code due to improper restrictions on code generation.
published:2025-02-20T16:15:36.333


Instruction: Please provide detailed information about CVE-2025-26304

CVE:CVE-2025-26304
Description:A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.
published:2025-02-20T17:15:12.260


Instruction: Please provide detailed information about CVE-2025-26305

CVE:CVE-2025-26305
Description:A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
published:2025-02-20T17:15:12.377


Instruction: Please provide detailed information about CVE-2025-26306

CVE:CVE-2025-26306
Description:A memory leak has been identified in the readSizedString function in util/read.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted file.
published:2025-02-20T17:15:12.490


Instruction: Please provide detailed information about CVE-2025-26307

CVE:CVE-2025-26307
Description:A memory leak has been identified in the parseSWF_IMPORTASSETS2 function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
published:2025-02-20T17:15:12.607


Instruction: Please provide detailed information about CVE-2025-26308

CVE:CVE-2025-26308
Description:A memory leak has been identified in the parseSWF_FILTERLIST function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
published:2025-02-20T17:15:12.730


Instruction: Please provide detailed information about CVE-2025-26309

CVE:CVE-2025-26309
Description:A memory leak has been identified in the parseSWF_DEFINESCENEANDFRAMEDATA function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
published:2025-02-20T17:15:12.853


Instruction: Please provide detailed information about CVE-2025-26310

CVE:CVE-2025-26310
Description:Multiple memory leaks have been identified in the ABC file parsing functions (parseABC_CONSTANT_POOL and `parseABC_FILE) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted ABC file.
published:2025-02-20T17:15:12.967


Instruction: Please provide detailed information about CVE-2025-26311

CVE:CVE-2025-26311
Description:Multiple memory leaks have been identified in the clip actions parsing functions (parseSWF_CLIPACTIONS and parseSWF_CLIPACTIONRECORD) in util/parser.c of libming v0.4.8, which allow attackers to cause a denial of service via a crafted SWF file.
published:2025-02-20T17:15:13.087


Instruction: Please provide detailed information about CVE-2025-1258

CVE:CVE-2025-1258
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-02-20T18:15:26.217


Instruction: Please provide detailed information about CVE-2025-25968

CVE:CVE-2025-25968
Description:DDSN Interactive cm3 Acora CMS version 10.1.1 contains an improper access control vulnerability. An editor-privileged user can access sensitive information, such as system administrator credentials, by force browsing the endpoint and exploiting the 'file' parameter. By referencing specific files (e.g., cm3.xml), attackers can bypass access controls, leading to account takeover and potential privilege escalation.
published:2025-02-20T18:15:26.570


Instruction: Please provide detailed information about CVE-2025-25973

CVE:CVE-2025-25973
Description:A stored Cross Site Scripting vulnerability in the "related recommendations" feature in Ppress v.0.0.9 allows a remote attacker to execute arbitrary code via a crafted script to the article.title, article.category, and article.tags parameters.
published:2025-02-20T18:15:26.713


Instruction: Please provide detailed information about CVE-2025-27091

CVE:CVE-2025-27091
Description:OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger a heap overflow. This vulnerability is due to a race condition between a Sequence Parameter Set (SPS) memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer (NAL) unit memory usage. An attacker could exploit this vulnerability by crafting a malicious bitstream and tricking a victim user into processing an arbitrary video containing the malicious bistream. An exploit could allow the attacker to cause an unexpected crash in the victim's user decoding client and, possibly, perform arbitrary commands on the victim's host by abusing the heap overflow. This vulnerability affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability.  ### For more information  If you have any questions or comments about this advisory: * [Open an issue in cisco/openh264](https://github.com/cisco/openh264/issues) * Email Cisco Open Source Security ([oss-security@cisco.com](mailto:oss-security@cisco.com)) and Cisco PSIRT ([psirt@cisco.com](mailto:psirt@cisco.com))  ### Credits:  * **Research:** Octavian Guzu and Andrew Calvano of Meta * **Fix ideation:** Philipp Hancke and Shyam Sadhwani of Meta * **Fix implementation:** Benzheng Zhang (@BenzhengZhang) * **Release engineering:** Benzheng Zhang (@BenzhengZhang)
published:2025-02-20T18:15:26.850


Instruction: Please provide detailed information about CVE-2025-26618

CVE:CVE-2025-26618
Description:Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang. Packet size is not verified properly for SFTP packets. As a result when multiple SSH packets (conforming to max SSH packet size) are received by ssh, they might be combined into an SFTP packet which will exceed the max allowed packet size and potentially cause large amount of memory to be allocated. Note that situation described above can only happen for successfully authenticated users after completing the SSH handshake. This issue has been patched in OTP versions 27.2.4, 26.2.5.9, and 25.3.2.18. There are no known workarounds for this vulnerability.
published:2025-02-20T19:15:11.953


Instruction: Please provide detailed information about CVE-2025-27096

CVE:CVE-2025-27096
Description:WeGIA is a Web Manager for Institutions with a focus on Portuguese language. A SQL Injection vulnerability was discovered in the WeGIA application, personalizacao_upload.php endpoint. This vulnerability allow an authorized attacker to execute arbitrary SQL queries, allowing access to sensitive information. This issue has been addressed in version 3.2.14 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-20T19:15:12.157


Instruction: Please provide detailed information about CVE-2025-0352

CVE:CVE-2025-0352
Description:Rapid Response Monitoring My Security Account App utilizes an API that could be exploited by an attacker to modify request data, potentially causing the API to return information about other users.
published:2025-02-20T20:15:46.383


Instruction: Please provide detailed information about CVE-2025-1265

CVE:CVE-2025-1265
Description:An OS command injection vulnerability exists in Vinci Protocol Analyzer that could allow an attacker to escalate privileges and perform code execution on affected system.
published:2025-02-20T20:15:46.537


Instruction: Please provide detailed information about CVE-2025-24893

CVE:CVE-2025-24893
Description:XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Any guest can perform arbitrary remote code execution through a request to `SolrSearch`. This impacts the confidentiality, integrity and availability of the whole XWiki installation. To reproduce on an instance, without being logged in, go to `<host>/xwiki/bin/get/Main/SolrSearch?media=rss&text=%7D%7D%7D%7B%7Basync%20async%3Dfalse%7D%7D%7B%7Bgroovy%7D%7Dprintln%28"Hello%20from"%20%2B%20"%20search%20text%3A"%20%2B%20%2823%20%2B%2019%29%29%7B%7B%2Fgroovy%7D%7D%7B%7B%2Fasync%7D%7D%20`. If there is an output, and the title of the RSS feed contains `Hello from search text:42`, then the instance is vulnerable. This vulnerability has been patched in XWiki 15.10.11, 16.4.1 and 16.5.0RC1. Users are advised to upgrade. Users unable to upgrade may edit `Main.SolrSearchMacros` in `SolrSearchMacros.xml` on line 955 to match the `rawResponse` macro in `macros.vm#L2824` with a content type of `application/xml`, instead of simply outputting the content of the feed.
published:2025-02-20T20:15:46.697


Instruction: Please provide detailed information about CVE-2025-25299

CVE:CVE-2025-25299
Description:CKEditor 5 is a modern JavaScript rich-text editor with an MVC architecture. During a recent internal audit, a Cross-Site Scripting (XSS) vulnerability was discovered in the CKEditor 5 real-time collaboration package. This vulnerability affects user markers, which represent users' positions within the document. It can lead to unauthorized JavaScript code execution, which might happen with a very specific editor and token endpoint configuration. This vulnerability affects only installations with Real-time collaborative editing enabled. The problem has been recognized and patched. The fix is available in version 44.2.1 (and above). Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-20T20:15:46.853


Instruction: Please provide detailed information about CVE-2025-27097

CVE:CVE-2025-27097
Description:GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. When a user transforms on the root level or single source with transforms, and the client sends the same query with different variables, the initial variables are used in all following requests until the cache evicts DocumentNode. If a token is sent via variables, the following requests will act like the same token is sent even if the following requests have different tokens. This can cause a short memory leak but it won't grow per each request but per different operation until the cache evicts DocumentNode by LRU mechanism.
published:2025-02-20T21:15:26.227


Instruction: Please provide detailed information about CVE-2025-27098

CVE:CVE-2025-27098
Description:GraphQL Mesh is a GraphQL Federation framework and gateway for both GraphQL Federation and non-GraphQL Federation subgraphs, non-GraphQL services, such as REST and gRPC, and also databases such as MongoDB, MySQL, and PostgreSQL. Missing check vulnerability in the static file handler allows any client to access the files in the server's file system. When `staticFiles` is set in the `serve` settings in the configuration file, the following handler doesn't check if `absolutePath` is still under the directory provided as `staticFiles`. Users have two options to fix vulnerability; 1. Update `@graphql-mesh/cli` to a version higher than `0.82.21`, and if you use `@graphql-mesh/http`, update it to a version higher than `0.3.18` 2. Remove `staticFiles` option from the configuration, and use other solutions to serve static files.
published:2025-02-20T21:15:26.370


Instruction: Please provide detailed information about CVE-2025-25958

CVE:CVE-2025-25958
Description:Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.
published:2025-02-20T22:15:31.390


Instruction: Please provide detailed information about CVE-2025-25960

CVE:CVE-2025-25960
Description:Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator.
published:2025-02-20T22:15:31.493


Instruction: Please provide detailed information about CVE-2025-22973

CVE:CVE-2025-22973
Description:An issue in QiboSoft QiboCMS X1.0 allows a remote attacker to obtain sensitive information via the http_curl() function in the '/application/common. php' file that directly retrieves the URL request response content.
published:2025-02-20T23:15:12.120


Instruction: Please provide detailed information about CVE-2025-25662

CVE:CVE-2025-25662
Description:Tenda O4 V3.0 V1.0.0.10(2936) is vulnerable to Buffer Overflow in the function SafeSetMacFilter of the file /goform/setMacFilterList via the argument remark/type/time.
published:2025-02-20T23:15:12.233


Instruction: Please provide detailed information about CVE-2025-25663

CVE:CVE-2025-25663
Description:A vulnerability was found in Tenda AC8V4 V16.03.34.06. Affected is the function SUB_0046AC38 of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow.
published:2025-02-20T23:15:12.350


Instruction: Please provide detailed information about CVE-2025-25664

CVE:CVE-2025-25664
Description:Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_49E098 function.
published:2025-02-20T23:15:12.453


Instruction: Please provide detailed information about CVE-2025-25667

CVE:CVE-2025-25667
Description:Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the urls parameter in the function get_parentControl_list_Info.
published:2025-02-20T23:15:12.560


Instruction: Please provide detailed information about CVE-2025-25668

CVE:CVE-2025-25668
Description:Tenda AC8V4 V16.03.34.06 was discovered to contain a stack overflow via the shareSpeed parameter in the sub_47D878 function.
published:2025-02-20T23:15:12.660


Instruction: Please provide detailed information about CVE-2025-25674

CVE:CVE-2025-25674
Description:Tenda AC10 V1.0 V15.03.06.23 is vulnerable to Buffer Overflow in form_fast_setting_wifi_set via the parameter ssid.
published:2025-02-20T23:15:12.767


Instruction: Please provide detailed information about CVE-2025-25675

CVE:CVE-2025-25675
Description:Tenda AC10 V1.0 V15.03.06.23 has a command injection vulnerablility located in the formexeCommand function. The str variable receives the cmdinput parameter from a POST request and is later assigned to the cmd_buf variable, which is directly used in the doSystemCmd function, causing an arbitrary command execution.
published:2025-02-20T23:15:12.870


Instruction: Please provide detailed information about CVE-2025-25676

CVE:CVE-2025-25676
Description:Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the list parameter in the formwrlSSIDset function.
published:2025-02-20T23:15:12.977


Instruction: Please provide detailed information about CVE-2025-25678

CVE:CVE-2025-25678
Description:Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the funcpara1 parameter in the formSetCfm function.
published:2025-02-20T23:15:13.077


Instruction: Please provide detailed information about CVE-2025-25679

CVE:CVE-2025-25679
Description:Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterSet function.
published:2025-02-20T23:15:13.183


Instruction: Please provide detailed information about CVE-2025-25957

CVE:CVE-2025-25957
Description:Cross Site Scripting vulnerabilities in Xunruicms v.4.6.3 and before allows a remote attacker to escalate privileges via a crafted script.
published:2025-02-20T23:15:13.280


Instruction: Please provide detailed information about CVE-2025-27088

CVE:CVE-2025-27088
Description:oxyno-zeta/s3-proxy is an aws s3 proxy written in go. In affected versions a Reflected Cross-site Scripting (XSS) vulnerability enables attackers to create malicious URLs that, when visited, inject scripts into the web application. This can lead to session hijacking or phishing attacks on a trusted domain, posing a moderate risk to all users. It's possible to inject html elements, including scripts through the folder-list template. The affected template allows users to interact with the URL path provided by the `Request.URL.Path` variable, which is then rendered directly into the HTML without proper sanitization or escaping. This can be abused by attackers who craft a malicious URL containing injected HTML or JavaScript. When users visit such a URL, the malicious script will be executed in the user's context. This issue has been addressed in version 4.18.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-20T23:15:13.397


Instruction: Please provide detailed information about CVE-2025-27100

CVE:CVE-2025-27100
Description:lakeFS is an open-source tool that transforms your object storage into a Git-like repository. In affected versions an authenticated user can crash lakeFS by exhausting server memory.  This is an authenticated denial-of-service issue. This problem has been patched in version 1.50.0. Users on versions 1.49.1 and below are affected. Users are advised to upgrade. Users unable to upgrade should either set the environment variable `LAKEFS_BLOCKSTORE_S3_DISABLE_PRE_SIGNED_MULTIPART` to `true` or configure the `disable_pre_signed_multipart` key to true in their config yaml.
published:2025-02-21T00:15:09.250


Instruction: Please provide detailed information about CVE-2025-1001

CVE:CVE-2025-1001
Description:Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.
published:2025-02-21T01:15:09.533


Instruction: Please provide detailed information about CVE-2025-1406

CVE:CVE-2025-1406
Description:The Newpost Catch plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's npc shortcode in all versions up to, and including, 1.3.19 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-21T04:15:10.347


Instruction: Please provide detailed information about CVE-2025-1407

CVE:CVE-2025-1407
Description:The AMO Team Showcase plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's amoteam_skills shortcode in all versions up to, and including, 1.1.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-21T04:15:10.510


Instruction: Please provide detailed information about CVE-2025-0726

CVE:CVE-2025-0726
Description:In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before  version 6.4.2, an attacker can cause a denial of service by specially  crafted packets. The core issue is missing closing of a file in case of  an error condition, resulting in the 404 error for each further file  request. Users can work-around the issue by disabling the PUT request  support.
published:2025-02-21T08:15:28.417


Instruction: Please provide detailed information about CVE-2025-0727

CVE:CVE-2025-0727
Description:In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before  version 6.4.2, an attacker can cause an integer underflow and a  subsequent denial of service by writing a very large file, by specially  crafted packets with Content-Length in one packet smaller than the data  request size of the other packet. A possible workaround is to disable  HTTP PUT support.
published:2025-02-21T09:15:09.010


Instruction: Please provide detailed information about CVE-2025-0728

CVE:CVE-2025-0728
Description:In NetX HTTP server functionality of Eclipse ThreadX NetX Duo before  version 6.4.2, an attacker can cause an integer underflow and a  subsequent denial of service by writing a very large file, by specially  crafted packets with Content-Length smaller than the data request size. A  possible workaround is to disable HTTP PUT support.
published:2025-02-21T09:15:10.077


Instruction: Please provide detailed information about CVE-2025-1410

CVE:CVE-2025-1410
Description:The Events Calendar Made Simple – Pie Calendar plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's piecal shortcode in all versions up to, and including, 1.2.5 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-21T09:15:10.200


Instruction: Please provide detailed information about CVE-2025-1470

CVE:CVE-2025-1470
Description:In Eclipse OMR, from the initial contribution to version 0.4.0, some OMR internal port library and utilities consumers of z/OS atoe functions do not check their return values for NULL memory pointers or for memory allocation failures.  This can lead to NULL pointer dereference crashes.  Beginning in version 0.5.0, internal OMR consumers of atoe functions handle NULL return values and memory allocation failures correctly.
published:2025-02-21T10:15:11.243


Instruction: Please provide detailed information about CVE-2025-1471

CVE:CVE-2025-1471
Description:In Eclipse OMR versions 0.2.0 to 0.4.0, some of the z/OS atoe print functions use a constant length buffer for string conversion. If the input format string and arguments are larger than the buffer size then buffer overflow occurs.  Beginning in version 0.5.0, the conversion buffers are sized correctly and checked appropriately to prevent buffer overflows.
published:2025-02-21T10:15:11.413


Instruction: Please provide detailed information about CVE-2025-1402

CVE:CVE-2025-1402
Description:The Event Tickets and Registration plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'ajax_ticket_delete' function in all versions up to, and including, 5.19.1.1. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary Attendee tickets.
published:2025-02-21T12:15:30.607


Instruction: Please provide detailed information about CVE-2025-1489

CVE:CVE-2025-1489
Description:The WP-Appbox plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's appbox shortcode in all versions up to, and including, 4.5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-21T12:15:30.740


Instruction: Please provide detailed information about CVE-2025-1535

CVE:CVE-2025-1535
Description:A vulnerability was found in Baiyi Cloud Asset Management System 8.142.100.161. It has been classified as critical. This affects an unknown part of the file /wuser/admin.ticket.close.php. The manipulation of the argument ticket_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T12:15:30.877


Instruction: Please provide detailed information about CVE-2025-26794

CVE:CVE-2025-26794
Description:Exim 4.98 before 4.98.1, when SQLite hints and ETRN serialization are used, allows remote SQL injection.
published:2025-02-21T13:15:11.687


Instruction: Please provide detailed information about CVE-2025-0838

CVE:CVE-2025-0838
Description:There exists a heap buffer overflow vulnerable in Abseil-cpp. The sized constructors, reserve(), and rehash() methods of absl::{flat,node}hash{set,map} did not impose an upper bound on their size argument. As a result, it was possible for a caller to pass a very large size that would cause an integer overflow when computing the size of the container's backing store, and a subsequent out-of-bounds memory write. Subsequent accesses to the container might also access out-of-bounds memory. We recommend upgrading past commit 5a0e2cb5e3958dd90bb8569a2766622cb74d90c1
published:2025-02-21T15:15:11.890


Instruction: Please provide detailed information about CVE-2025-1536

CVE:CVE-2025-1536
Description:A vulnerability was found in Raisecom Multi-Service Intelligent Gateway up to 20250208. It has been declared as critical. This vulnerability affects unknown code of the file /vpn/vpn_template_style.php of the component Request Parameter Handler. The manipulation of the argument stylenum leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T15:15:12.270


Instruction: Please provide detailed information about CVE-2025-1537

CVE:CVE-2025-1537
Description:A vulnerability was found in Harpia DiagSystem 12. It has been rated as critical. This issue affects some unknown processing of the file /diagsystem/PACS/atualatendimento_jpeg.php. The manipulation of the argument codexame leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T15:15:12.460


Instruction: Please provide detailed information about CVE-2025-1538

CVE:CVE-2025-1538
Description:A vulnerability classified as critical was found in D-Link DAP-1320 1.00. Affected by this vulnerability is the function set_ws_action of the file /dws/api/. The manipulation leads to heap-based buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-02-21T15:15:12.630


Instruction: Please provide detailed information about CVE-2025-1539

CVE:CVE-2025-1539
Description:A vulnerability, which was classified as critical, has been found in D-Link DAP-1320 1.00. Affected by this issue is the function replace_special_char of the file /storagein.pd-XXXXXX. The manipulation leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-02-21T15:15:12.830


Instruction: Please provide detailed information about CVE-2025-1543

CVE:CVE-2025-1543
Description:A vulnerability, which was classified as problematic, has been found in iteachyou Dreamer CMS 4.1.3. This issue affects some unknown processing of the file /resource/js/ueditor-1.4.3.3. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T16:15:32.787


Instruction: Please provide detailed information about CVE-2025-1544

CVE:CVE-2025-1544
Description:A vulnerability, which was classified as critical, was found in dingfanzu CMS up to 20250210. Affected is an unknown function of the file /ajax/loadShopInfo.php. The manipulation of the argument shopId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T16:15:32.953


Instruction: Please provide detailed information about CVE-2025-26013

CVE:CVE-2025-26013
Description:An issue in Loggrove v.1.0 allows a remote attacker to obtain sensitive information via the read.py component.
published:2025-02-21T16:15:33.313


Instruction: Please provide detailed information about CVE-2025-1403

CVE:CVE-2025-1403
Description:Qiskit SDK 0.45.0 through 1.2.4 could allow a remote attacker to cause a denial of service using a maliciously crafted QPY file containing a malformed symengine serialization stream which can cause a segfault within the symengine library.
published:2025-02-21T17:15:13.437


Instruction: Please provide detailed information about CVE-2025-1546

CVE:CVE-2025-1546
Description:A vulnerability has been found in BDCOM Behavior Management and Auditing System up to 20250210 and classified as critical. Affected by this vulnerability is the function log_operate_clear of the file /webui/modules/log/operate.mds. The manipulation of the argument start_code leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T17:15:13.710


Instruction: Please provide detailed information about CVE-2025-1548

CVE:CVE-2025-1548
Description:A vulnerability was found in iteachyou Dreamer CMS 4.1.3. It has been declared as problematic. This vulnerability affects unknown code of the file /admin/archives/edit. The manipulation of the argument editorValue/answer/content leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T17:15:13.897


Instruction: Please provide detailed information about CVE-2025-25505

CVE:CVE-2025-25505
Description:Tenda AC6 15.03.05.16_multi is vulnerable to Buffer Overflow in the sub_452A4 function.
published:2025-02-21T17:15:14.333


Instruction: Please provide detailed information about CVE-2025-25507

CVE:CVE-2025-25507
Description:There is a RCE vulnerability in Tenda AC6 15.03.05.16_multi. In the formexeCommand function, the parameter cmdinput will cause remote command execution.
published:2025-02-21T17:15:14.453


Instruction: Please provide detailed information about CVE-2025-25510

CVE:CVE-2025-25510
Description:Tenda AC8 V16.03.34.06 is vulnerable to Buffer Overflow in the get_parentControl_list_Info function.
published:2025-02-21T17:15:14.567


Instruction: Please provide detailed information about CVE-2025-26014

CVE:CVE-2025-26014
Description:A Remote Code Execution (RCE) vulnerability in Loggrove v.1.0 allows a remote attacker to execute arbitrary code via the path parameter.
published:2025-02-21T17:15:14.680


Instruction: Please provide detailed information about CVE-2025-25765

CVE:CVE-2025-25765
Description:MRCMS v3.1.2 was discovered to contain an arbitrary file write vulnerability via the component /file/save.do.
published:2025-02-21T18:16:12.420


Instruction: Please provide detailed information about CVE-2025-25766

CVE:CVE-2025-25766
Description:An arbitrary file upload vulnerability in the component /file/savefile.do of MRCMS v3.1.2 allows attackers to execute arbitrary code via uploading a crafted .jsp file.
published:2025-02-21T18:16:12.647


Instruction: Please provide detailed information about CVE-2025-25875

CVE:CVE-2025-25875
Description:A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /message.php. The attack can use SQL injection to obtain sensitive data.
published:2025-02-21T18:16:12.873


Instruction: Please provide detailed information about CVE-2025-25876

CVE:CVE-2025-25876
Description:A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data.
published:2025-02-21T18:16:13.090


Instruction: Please provide detailed information about CVE-2025-25877

CVE:CVE-2025-25877
Description:A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /admin.php. The attack can use SQL injection to obtain sensitive data.
published:2025-02-21T18:16:13.320


Instruction: Please provide detailed information about CVE-2025-25878

CVE:CVE-2025-25878
Description:A vulnerability was found in ITSourcecode Simple ChatBox up to 1.0. This vulnerability affects unknown code of the file /del.php. The attack can use SQL injection to obtain sensitive data.
published:2025-02-21T18:16:13.547


Instruction: Please provide detailed information about CVE-2025-25604

CVE:CVE-2025-25604
Description:Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the vif_disable function in mtkwifi.lua.
published:2025-02-21T19:15:14.027


Instruction: Please provide detailed information about CVE-2025-25605

CVE:CVE-2025-25605
Description:Totolink X5000R V9.1.0u.6369_B20230113 is vulnerable to command injection via the apcli_wps_gen_pincode function in mtkwifi.lua.
published:2025-02-21T19:15:14.147


Instruction: Please provide detailed information about CVE-2025-25767

CVE:CVE-2025-25767
Description:A vertical privilege escalation vulnerability in the component /controller/UserController.java of MRCMS v3.1.2 allows attackers to arbitrarily delete users via a crafted request.
published:2025-02-21T19:15:14.253


Instruction: Please provide detailed information about CVE-2025-25768

CVE:CVE-2025-25768
Description:MRCMS v3.1.2 was discovered to contain a server-side template injection (SSTI) vulnerability in the component \servlet\DispatcherServlet.java. This vulnerability allows attackers to execute arbitrary code via a crafted payload.
published:2025-02-21T19:15:14.363


Instruction: Please provide detailed information about CVE-2025-25769

CVE:CVE-2025-25769
Description:Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /controller/UserController.java.
published:2025-02-21T19:15:14.473


Instruction: Please provide detailed information about CVE-2025-25770

CVE:CVE-2025-25770
Description:Wangmarket v4.10 to v5.0 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /agency/AgencyUserController.java.
published:2025-02-21T19:15:14.587


Instruction: Please provide detailed information about CVE-2025-25772

CVE:CVE-2025-25772
Description:A Cross-Site Request Forgery (CSRF) in the component /back/UserController.java of Jspxcms v9.0 to v9.5 allows attackers to arbitrarily add Administrator accounts via a crafted request.
published:2025-02-21T19:15:14.690


Instruction: Please provide detailed information about CVE-2025-1555

CVE:CVE-2025-1555
Description:A vulnerability classified as critical was found in hzmanyun Education and Training System 3.1.1. This vulnerability affects the function saveImage. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-21T21:15:13.703


Instruction: Please provide detailed information about CVE-2025-25282

CVE:CVE-2025-25282
Description:RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine based on deep document understanding. An authenticated user can exploit the Insecure Direct Object Reference (IDOR) vulnerability that may lead to unauthorized cross-tenant access (list tenant user accounts, add user account into other tenant). Unauthorized cross-tenant access: list user from other tenant (e.g., via GET /<tenant_id>/user/list), add user account to other tenant (POST /<tenant_id>/user). This issue has not yet been patched. Users are advised to reach out to the project maintainers to coordinate a fix.
published:2025-02-21T21:15:23.590


Instruction: Please provide detailed information about CVE-2025-26622

CVE:CVE-2025-26622
Description:vyper is a Pythonic Smart Contract Language for the EVM. Vyper `sqrt()` builtin uses the babylonian method to calculate square roots of decimals. Unfortunately, improper handling of the oscillating final states may lead to sqrt incorrectly returning rounded up results. This issue is being addressed and a fix is expected in version 0.4.1. Users are advised to upgrade as soon as the patched release is available. There are no known workarounds for this vulnerability.
published:2025-02-21T22:15:13.447


Instruction: Please provide detailed information about CVE-2025-27104

CVE:CVE-2025-27104
Description:vyper is a Pythonic Smart Contract Language for the EVM. Multiple evaluation of a single expression is possible in the iterator target of a for loop. While the iterator expression cannot produce multiple writes, it can consume side effects produced in the loop body (e.g. read a storage variable updated in the loop body) and thus lead to unexpected program behavior. Specifically, reads in iterators which contain an ifexp (e.g. `for s: uint256 in ([read(), read()] if True else [])`) may interleave reads with writes in the loop body. Vyper for loops allow two kinds of iterator targets, namely the `range()` builtin and an iterable type, like SArray and DArray. During codegen, iterable lists are required to not produce any side-effects (in the following code, `range_scope` forces `iter_list` to be parsed in a constant context, which is checked against `is_constant`). However, this does not prevent the iterator from consuming side effects provided by the body of the loop. For SArrays on the other hand, `iter_list` is instantiated in the body of a `repeat` ir, so it can be evaluated several times. This issue is being addressed and is expected to be available in version 0.4.1. Users are advised to upgrade as soon as the patched release is available. There are no known workarounds for this vulnerability.
published:2025-02-21T22:15:13.773


Instruction: Please provide detailed information about CVE-2025-27105

CVE:CVE-2025-27105
Description:vyper is a Pythonic Smart Contract Language for the EVM. Vyper handles AugAssign statements by first caching the target location to avoid double evaluation. However, in the case when target is an access to a DynArray and the rhs modifies the array, the cached target will evaluate first, and the bounds check will not be re-evaluated during the write portion of the statement. This issue has been addressed in version 0.4.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-21T22:15:13.910