Instruction: Please provide detailed information about CVE-2025-24804

CVE:CVE-2025-24804
Description:Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. According to Apple's documentation for bundle ID's, it must contain only alphanumeric characters (A–Z, a–z, and 0–9), hyphens (-), and periods (.). However, an attacker can manually modify this value in the `Info.plist` file and add special characters to the `<key>CFBundleIdentifier</key>` value. When the application parses the wrong characters in the bundle ID, it encounters an error. As a result, it will not display content and will throw a 500 error instead. The only way to make the pages work again is to manually remove the malicious application from the system. This issue has been addressed in version 4.3.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-05T19:15:46.350


Instruction: Please provide detailed information about CVE-2025-24805

CVE:CVE-2025-24805
Description:Mobile Security Framework (MobSF) is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework. A local user with minimal privileges is able to make use of an access token for materials for scopes which it should not be accepted. This issue has been addressed in version 4.3.1 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-05T19:15:46.487


Instruction: Please provide detailed information about CVE-2025-1066

CVE:CVE-2025-1066
Description:OpenPLC_V3 contains an arbitrary file upload vulnerability, which could be leveraged for malvertising or phishing campaigns.
published:2025-02-06T00:15:27.760


Instruction: Please provide detailed information about CVE-2025-0799

CVE:CVE-2025-0799
Description:IBM App Connect enterprise 12.0.1.0 through 12.0.12.10 and 13.0.1.0 through 13.0.2.1 could allow an authenticated user to write to an arbitrary file on the system during bar configuration deployment due to improper pathname limitations on restricted directories.
published:2025-02-06T01:15:09.580


Instruction: Please provide detailed information about CVE-2025-0522

CVE:CVE-2025-0522
Description:The LikeBot  WordPress plugin through 0.85 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
published:2025-02-06T06:15:30.357


Instruction: Please provide detailed information about CVE-2025-22890

CVE:CVE-2025-22890
Description:Execution with unnecessary privileges issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.
published:2025-02-06T07:15:17.113


Instruction: Please provide detailed information about CVE-2025-20094

CVE:CVE-2025-20094
Description:Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary code may be executed with SYSTEM privilege.
published:2025-02-06T08:15:29.837


Instruction: Please provide detailed information about CVE-2025-22894

CVE:CVE-2025-22894
Description:Unprotected Windows messaging channel ('Shatter') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker sends a specially crafted message to the specific process of the Windows system where the product is running, arbitrary files in the system may be altered. As a result, an arbitrary DLL may be executed with SYSTEM privilege.
published:2025-02-06T08:15:30.027


Instruction: Please provide detailed information about CVE-2025-23236

CVE:CVE-2025-23236
Description:Buffer overflow vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker performs a specific operation, SYSTEM privilege of the Windows system where the product is running may be obtained.
published:2025-02-06T08:15:30.170


Instruction: Please provide detailed information about CVE-2025-24483

CVE:CVE-2025-24483
Description:NULL pointer dereference vulnerability exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.
published:2025-02-06T08:15:30.327


Instruction: Please provide detailed information about CVE-2025-24845

CVE:CVE-2025-24845
Description:Improper neutralization of argument delimiters in a command ('Argument Injection') issue exists in Defense Platform Home Edition Ver.3.9.51.x and earlier. If an attacker provides specially crafted data to the specific process of the Windows system where the product is running, the system may cause a Blue Screen of Death (BSOD), and as a result, cause a denial-of-service (DoS) condition.
published:2025-02-06T08:15:30.673


Instruction: Please provide detailed information about CVE-2025-0859

CVE:CVE-2025-0859
Description:The Post and Page Builder by BoldGrid – Visual Drag and Drop Editor plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.27.6 via the template_via_url() function. This makes it possible for authenticated attackers, with Contributor-level access and above, to read the contents of arbitrary files on the server, which can contain sensitive information.
published:2025-02-06T10:15:08.340


Instruction: Please provide detailed information about CVE-2025-0982

CVE:CVE-2025-0982
Description:Sandbox escape in the JavaScript Task feature of Google Cloud Application Integration allows an actor to execute arbitrary unsandboxed code via crafted JavaScript code executed by the Rhino engine. Effective January 24, 2025, Application Integration will no longer support Rhino as the JavaScript execution engine. No further fix actions are needed.
published:2025-02-06T12:15:27.267


Instruction: Please provide detailed information about CVE-2025-1074

CVE:CVE-2025-1074
Description:A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. Affected is the function logout of the file /en/?mylogout of the component URL Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure. They are aware about it and are working on resolving it.
published:2025-02-06T14:15:30.050


Instruction: Please provide detailed information about CVE-2025-1076

CVE:CVE-2025-1076
Description:A Stored Cross-Site Scripting (Stored XSS) vulnerability has been found in the Holded application. This vulnerability could allow an attacker to store a JavaScript payload within the editable ‘name’ and ‘icon’ parameters of the Activities functionality.
published:2025-02-06T14:15:30.287


Instruction: Please provide detailed information about CVE-2025-0994

CVE:CVE-2025-0994
Description:Trimble Cityworks versions prior to 15.8.9 and Cityworks with office companion versions prior to 23.10 are vulnerable to a deserialization vulnerability. This could allow an authenticated user to perform a remote code execution attack against a customer’s Microsoft Internet Information Services (IIS) web server.
published:2025-02-06T16:15:41.493


Instruction: Please provide detailed information about CVE-2025-1078

CVE:CVE-2025-1078
Description:A vulnerability has been found in AppHouseKitchen AlDente Charge Limiter up to 1.29 on macOS and classified as critical. This vulnerability affects the function shouldAcceptNewConnection of the file com.apphousekitchen.aldente-pro.helper of the component XPC Service. The manipulation leads to improper authorization. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. Upgrading to version 1.30 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about this disclosure and acted very professional.
published:2025-02-06T17:15:21.040


Instruction: Please provide detailed information about CVE-2025-22866

CVE:CVE-2025-22866
Description:Due to the usage of a variable time instruction in the assembly implementation of an internal function, a small number of bits of secret scalars are leaked on the ppc64le architecture. Due to the way this function is used, we do not believe this leakage is enough to allow recovery of the private key when P-256 is used in any well known protocols.
published:2025-02-06T17:15:21.410


Instruction: Please provide detailed information about CVE-2025-22867

CVE:CVE-2025-22867
Description:On Darwin, building a Go module which contains CGO can trigger arbitrary code execution when using the Apple version of ld, due to usage of the @executable_path, @loader_path, or @rpath special values in a "#cgo LDFLAGS" directive. This issue only affected go1.24rc2.
published:2025-02-06T18:15:32.543


Instruction: Please provide detailed information about CVE-2025-23217

CVE:CVE-2025-23217
Description:mitmproxy is a interactive TLS-capable intercepting HTTP proxy for penetration testers and software developers and mitmweb is a web-based interface for mitmproxy. In mitmweb 11.1.1 and below, a malicious client can use mitmweb's proxy server (bound to `*:8080` by default) to access mitmweb's internal API (bound to `127.0.0.1:8081` by default). In other words, while the cannot access the API directly, they can access the API through the proxy. An attacker may be able to escalate this SSRF-style access to remote code execution. The mitmproxy and mitmdump tools are unaffected. Only mitmweb is affected. This vulnerability has been fixed in mitmproxy 11.1.2 and above. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-06T18:15:32.667


Instruction: Please provide detailed information about CVE-2025-24981

CVE:CVE-2025-24981
Description:MDC is a tool to take regular Markdown and write documents interacting deeply with a Vue component. In affected versions unsafe parsing logic of the URL from markdown can lead to arbitrary JavaScript code due to a bypass to the existing guards around the `javascript:` protocol scheme in the URL. The parsing logic implement in `props.ts` maintains a deny-list approach to filtering potential malicious payload. It does so by matching protocol schemes like `javascript:` and others. These security guards can be bypassed by an adversarial that provides JavaScript URLs with HTML entities encoded via hex string. Users who consume this library and perform markdown parsing from unvalidated sources could result in rendering vulnerable XSS anchor links. This vulnerability has been addressed in version 0.13.3 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-06T18:15:32.847


Instruction: Please provide detailed information about CVE-2025-22992

CVE:CVE-2025-22992
Description:A SQL Injection vulnerability exists in the /feed/insert.json endpoint of the Emoncms project >= 11.6.9. The vulnerability is caused by improper handling of user-supplied input in the data query parameter, allowing attackers to execute arbitrary SQL commands under specific conditions.
published:2025-02-06T19:15:19.970


Instruction: Please provide detailed information about CVE-2025-24786

CVE:CVE-2025-24786
Description:WhoDB is an open source database management tool. While the application only displays Sqlite3 databases present in the directory `/db`, there is no path traversal prevention in place. This allows an unauthenticated attacker to open any Sqlite3 database present on the host machine that the application is running on. Affected versions of WhoDB allow users to connect to Sqlite3 databases. By default, the databases must be present in `/db/` (or alternatively `./tmp/` if development mode is enabled).  If no databases are present in the default directory, the UI indicates that the user is unable to open any databases. The database file is an user-controlled value. This value is used in `.Join()` with the default directory, in order to get the full path of the database file to open. No checks are performed whether the database file that is eventually opened actually resides in the default directory `/db`. This allows an attacker to use path traversal (`../../`) in order to open any Sqlite3 database present on the system. This issue has been addressed in version 0.45.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-06T19:15:20.067


Instruction: Please provide detailed information about CVE-2025-24787

CVE:CVE-2025-24787
Description:WhoDB is an open source database management tool. In affected versions the application is vulnerable to parameter injection in database connection strings, which allows an attacker to read local files on the machine the application is running on. The application uses string concatenation to build database connection URIs which are then passed to corresponding libraries responsible for setting up the database connections. This string concatenation is done unsafely and without escaping or encoding the user input. This allows an user, in many cases, to inject arbitrary parameters into the URI string. These parameters can be potentially dangerous depending on the libraries used. One of these dangerous parameters is `allowAllFiles` in the library `github.com/go-sql-driver/mysql`. Should this be set to `true`, the library enables running the `LOAD DATA LOCAL INFILE` query on any file on the host machine (in this case, the machine that WhoDB is running on). By injecting `&allowAllFiles=true` into the connection URI and connecting to any MySQL server (such as an attacker-controlled one), the attacker is able to read local files. This issue has been addressed in version 0.45.0 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-06T19:15:20.213


Instruction: Please provide detailed information about CVE-2025-22936

CVE:CVE-2025-22936
Description:An issue in Smartcom Bulgaria AD Smartcom Ralink CPE/WiFi router SAM-4G1G-TT-W-VC, SAM-4F1F-TT-W-A1 allows a remote attacker to obtain sensitive information via the Weak default WiFi password generation algorithm in WiFi routers.
published:2025-02-06T20:15:40.460


Instruction: Please provide detailed information about CVE-2025-23093

CVE:CVE-2025-23093
Description:The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager through V10 R1.54.1 and V11 through R0.22.1 could allow an authenticated attacker to conduct a privilege escalation attack due to the execution of a resource with unnecessary privileges. A successful exploit could allow an attacker to execute arbitrary commands with elevated privileges.
published:2025-02-06T20:15:40.587


Instruction: Please provide detailed information about CVE-2025-0158

CVE:CVE-2025-0158
Description:IBM EntireX 11.1 could allow a local user to cause a denial of service due to an unhandled error and fault isolation.
published:2025-02-06T21:15:21.923


Instruction: Please provide detailed information about CVE-2025-1004

CVE:CVE-2025-1004
Description:Certain HP LaserJet Pro printers may potentially experience a denial of service when a user sends a raw JPEG file to the printer via IPP (Internet Printing Protocol).
published:2025-02-06T21:15:22.247


Instruction: Please provide detailed information about CVE-2025-1081

CVE:CVE-2025-1081
Description:A vulnerability was found in Bharti Airtel Xstream Fiber up to 20250123. It has been rated as problematic. This issue affects some unknown processing of the component WiFi Password Handler. The manipulation leads to use of weak credentials. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to change the configuration settings. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-06T21:15:23.120


Instruction: Please provide detailed information about CVE-2025-23094

CVE:CVE-2025-23094
Description:The Platform component of Mitel OpenScape 4000 and OpenScape 4000 Manager V11 R0.22.0 through V11 R0.22.1, V10 R1.54.0 through V10 R1.54.1, and V10 R1.42.6 and earlier could allow an unauthenticated attacker to conduct a command injection attack due to insufficient parameter sanitization. A successful exploit could allow an attacker to execute arbitrary commands within the same privilege level as the web access process.
published:2025-02-06T21:15:23.477


Instruction: Please provide detailed information about CVE-2025-1082

CVE:CVE-2025-1082
Description:A vulnerability classified as problematic has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected is an unknown function of the file /api/admin/question/edit of the component Exam Edit Handler. The manipulation of the argument title/content leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-06T23:15:08.140


Instruction: Please provide detailed information about CVE-2025-1083

CVE:CVE-2025-1083
Description:A vulnerability classified as problematic was found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this vulnerability is an unknown functionality of the component CORS Handler. The manipulation leads to permissive cross-domain policy with untrusted domains. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-06T23:15:08.350


Instruction: Please provide detailed information about CVE-2025-21177

CVE:CVE-2025-21177
Description:Server-Side Request Forgery (SSRF) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network.
published:2025-02-06T23:15:08.573


Instruction: Please provide detailed information about CVE-2025-21253

CVE:CVE-2025-21253
Description:Microsoft Edge for IOS and Android Spoofing Vulnerability
published:2025-02-06T23:15:08.737


Instruction: Please provide detailed information about CVE-2025-21267

CVE:CVE-2025-21267
Description:Microsoft Edge (Chromium-based) Spoofing Vulnerability
published:2025-02-06T23:15:08.893


Instruction: Please provide detailed information about CVE-2025-21279

CVE:CVE-2025-21279
Description:Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
published:2025-02-06T23:15:09.043


Instruction: Please provide detailed information about CVE-2025-21283

CVE:CVE-2025-21283
Description:Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
published:2025-02-06T23:15:09.213


Instruction: Please provide detailed information about CVE-2025-21342

CVE:CVE-2025-21342
Description:Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
published:2025-02-06T23:15:09.363


Instruction: Please provide detailed information about CVE-2025-21404

CVE:CVE-2025-21404
Description:Microsoft Edge (Chromium-based) Spoofing Vulnerability
published:2025-02-06T23:15:09.700


Instruction: Please provide detailed information about CVE-2025-21408

CVE:CVE-2025-21408
Description:Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
published:2025-02-06T23:15:09.827


Instruction: Please provide detailed information about CVE-2025-0674

CVE:CVE-2025-0674
Description:Multiple Elber products are affected by an authentication bypass  vulnerability which allows unauthorized access to the password  management functionality. Attackers can exploit this issue by  manipulating the endpoint to overwrite any user's password within the  system. This grants them unauthorized administrative access to protected  areas of the application, compromising the device's system security.
published:2025-02-07T00:15:27.017


Instruction: Please provide detailed information about CVE-2025-0675

CVE:CVE-2025-0675
Description:Multiple Elber products suffer from an unauthenticated device configuration and client-side hidden functionality disclosure.
published:2025-02-07T00:15:28.030


Instruction: Please provide detailed information about CVE-2025-1084

CVE:CVE-2025-1084
Description:A vulnerability, which was classified as problematic, has been found in Mindskip xzs-mysql 学之思开源考试系统 3.9.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-07T00:15:28.180


Instruction: Please provide detailed information about CVE-2025-1085

CVE:CVE-2025-1085
Description:A vulnerability, which was classified as problematic, was found in Animati PACS up to 1.24.12.09.03. This affects an unknown part of the file /login. The manipulation of the argument p leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-07T01:15:07.930


Instruction: Please provide detailed information about CVE-2025-1061

CVE:CVE-2025-1061
Description:The Nextend Social Login Pro plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.1.16. This is due to insufficient verification on the user being supplied during the Apple OAuth authenticate request through the plugin. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the email.
published:2025-02-07T02:15:29.587


Instruction: Please provide detailed information about CVE-2025-1086

CVE:CVE-2025-1086
Description:A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerability affects unknown code of the file /static/. The manipulation leads to path traversal: '../filedir'. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-07T02:15:30.523


Instruction: Please provide detailed information about CVE-2025-22402

CVE:CVE-2025-22402
Description:Dell Update Manager Plugin, version(s) 1.5.0 through 1.6.0, contain(s) an Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
published:2025-02-07T03:15:12.287


Instruction: Please provide detailed information about CVE-2025-1072

CVE:CVE-2025-1072
Description:A Denial of Service (DoS) issue has been discovered in GitLab CE/EE affecting all versions starting from 7.14.1 prior to 17.3.7, 17.4 prior to 17.4.4, and 17.5 prior to 17.5.2. A denial of service could occur upon importing maliciously crafted content using the Fogbugz importer.
published:2025-02-07T04:15:07.737


Instruction: Please provide detailed information about CVE-2025-23085

CVE:CVE-2025-23085
Description:A memory leak could occur when a remote peer abruptly closes the socket without sending a GOAWAY notification. Additionally, if an invalid header was detected by nghttp2, causing the connection to be terminated by the peer, the same leak was triggered. This flaw could lead to increased memory consumption and potential denial of service under certain conditions.

 This vulnerability affects HTTP/2 Server users on Node.js v18.x, v20.x, v22.x and v23.x.
published:2025-02-07T07:15:15.810


Instruction: Please provide detailed information about CVE-2025-22880

CVE:CVE-2025-22880
Description:Delta Electronics CNCSoft-G2 lacks proper validation of the length of user-supplied data prior to copying it to a fixed-length heap-based buffer. If a target visits a malicious page or opens a malicious file an attacker can leverage this vulnerability to execute code in the context of the current process.
published:2025-02-07T08:15:28.737


Instruction: Please provide detailed information about CVE-2025-1077

CVE:CVE-2025-1077
Description:A security vulnerability has been identified in the IBL Software Engineering Visual Weather and derived products (NAMIS, Aero Weather, Satellite Weather). The vulnerability is present in the Product Delivery Service (PDS) component in specific server configurations where the PDS pipeline utilizes the IPDS pipeline with Message Editor Output Filters enabled.  A remote unauthenticated  attacker can exploit this vulnerability to send unauthenticated requests to execute the IPDS pipeline with specially crafted Form Properties, enabling remote execution of arbitrary Python code. This vulnerability could lead to a full system compromise of the affected server, particularly if Visual Weather services are run under a privileged user account—contrary to the documented installation best practices.    Upgrade to the patched versions 7.3.10 (or higher), 8.6.0 (or higher).
published:2025-02-07T09:15:08.380


Instruction: Please provide detailed information about CVE-2025-0302

CVE:CVE-2025-0302
Description:in OpenHarmony v4.1.2 and prior versions allow a local attacker cause DOS through integer overflow.
published:2025-02-07T10:15:11.203


Instruction: Please provide detailed information about CVE-2025-0303

CVE:CVE-2025-0303
Description:in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through buffer overflow.
published:2025-02-07T10:15:11.410


Instruction: Please provide detailed information about CVE-2025-0304

CVE:CVE-2025-0304
Description:in OpenHarmony v4.1.2 and prior versions allow a local attacker cause the common permission is upgraded to root and sensitive information leak through use after free.
published:2025-02-07T10:15:11.587


Instruction: Please provide detailed information about CVE-2025-25071

CVE:CVE-2025-25071
Description:Cross-Site Request Forgery (CSRF) vulnerability in topplugins Vignette Ads allows Stored XSS. This issue affects Vignette Ads: from n/a through 0.2.
published:2025-02-07T10:15:11.840


Instruction: Please provide detailed information about CVE-2025-25072

CVE:CVE-2025-25072
Description:Cross-Site Request Forgery (CSRF) vulnerability in thunderbax WP Admin Custom Page allows Stored XSS. This issue affects WP Admin Custom Page: from n/a through 1.5.0.
published:2025-02-07T10:15:12.023


Instruction: Please provide detailed information about CVE-2025-25073

CVE:CVE-2025-25073
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Vasilis Triantafyllou Easy WP Tiles allows Stored XSS. This issue affects Easy WP Tiles: from n/a through 1.
published:2025-02-07T10:15:12.197


Instruction: Please provide detailed information about CVE-2025-25074

CVE:CVE-2025-25074
Description:Cross-Site Request Forgery (CSRF) vulnerability in Nirmal Kumar Ram WP Social Stream allows Stored XSS. This issue affects WP Social Stream: from n/a through 1.1.
published:2025-02-07T10:15:12.370


Instruction: Please provide detailed information about CVE-2025-25075

CVE:CVE-2025-25075
Description:Cross-Site Request Forgery (CSRF) vulnerability in Venugopal Show notice or message on admin area allows Stored XSS. This issue affects Show notice or message on admin area: from n/a through 2.0.
published:2025-02-07T10:15:12.530


Instruction: Please provide detailed information about CVE-2025-25076

CVE:CVE-2025-25076
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in nicholaswilson Graceful Email Obfuscation allows Stored XSS. This issue affects Graceful Email Obfuscation: from n/a through 0.2.2.
published:2025-02-07T10:15:12.697


Instruction: Please provide detailed information about CVE-2025-25077

CVE:CVE-2025-25077
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in dugbug Easy Chart Builder for WordPress allows Stored XSS. This issue affects Easy Chart Builder for WordPress: from n/a through 1.3.
published:2025-02-07T10:15:12.883


Instruction: Please provide detailed information about CVE-2025-25078

CVE:CVE-2025-25078
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Andrew Norcross Google Earth Embed allows Stored XSS. This issue affects Google Earth Embed: from n/a through 1.0.
published:2025-02-07T10:15:13.080


Instruction: Please provide detailed information about CVE-2025-25079

CVE:CVE-2025-25079
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Garrett Grimm Simple Select All Text Box allows Stored XSS. This issue affects Simple Select All Text Box: from n/a through 3.2.
published:2025-02-07T10:15:13.250


Instruction: Please provide detailed information about CVE-2025-25080

CVE:CVE-2025-25080
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in gubbigubbi Kona Gallery Block allows Stored XSS. This issue affects Kona Gallery Block: from n/a through 1.7.
published:2025-02-07T10:15:13.440


Instruction: Please provide detailed information about CVE-2025-25081

CVE:CVE-2025-25081
Description:Missing Authorization vulnerability in DeannaS Embed RSS allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Embed RSS: from n/a through 3.1.
published:2025-02-07T10:15:13.613


Instruction: Please provide detailed information about CVE-2025-25082

CVE:CVE-2025-25082
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Max Chirkov FlexIDX Home Search allows Stored XSS. This issue affects FlexIDX Home Search: from n/a through 2.1.2.
published:2025-02-07T10:15:13.793


Instruction: Please provide detailed information about CVE-2025-25085

CVE:CVE-2025-25085
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in matt_mcbrien WP SimpleWeather allows Stored XSS. This issue affects WP SimpleWeather: from n/a through 0.2.5.
published:2025-02-07T10:15:13.980


Instruction: Please provide detailed information about CVE-2025-25088

CVE:CVE-2025-25088
Description:Cross-Site Request Forgery (CSRF) vulnerability in blackus3r WP Keyword Monitor allows Stored XSS. This issue affects WP Keyword Monitor: from n/a through 1.0.5.
published:2025-02-07T10:15:14.260


Instruction: Please provide detailed information about CVE-2025-25091

CVE:CVE-2025-25091
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in zackdesign NextGen Cooliris Gallery allows Stored XSS. This issue affects NextGen Cooliris Gallery: from n/a through 0.7.
published:2025-02-07T10:15:14.440


Instruction: Please provide detailed information about CVE-2025-25093

CVE:CVE-2025-25093
Description:Cross-Site Request Forgery (CSRF) vulnerability in paulswarthout Child Themes Helper allows Path Traversal. This issue affects Child Themes Helper: from n/a through 2.2.7.
published:2025-02-07T10:15:14.623


Instruction: Please provide detailed information about CVE-2025-25094

CVE:CVE-2025-25094
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Amitythemes.com Breaking News Ticker allows Stored XSS. This issue affects Breaking News Ticker: from n/a through 2.4.4.
published:2025-02-07T10:15:14.797


Instruction: Please provide detailed information about CVE-2025-25095

CVE:CVE-2025-25095
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in reverbnationdev ReverbNation Widgets allows Stored XSS. This issue affects ReverbNation Widgets: from n/a through 2.1.
published:2025-02-07T10:15:14.977


Instruction: Please provide detailed information about CVE-2025-25096

CVE:CVE-2025-25096
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in titusbicknell RSS in Page allows Stored XSS. This issue affects RSS in Page: from n/a through 2.9.1.
published:2025-02-07T10:15:15.143


Instruction: Please provide detailed information about CVE-2025-25097

CVE:CVE-2025-25097
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kwiliarty External Video For Everybody allows Stored XSS. This issue affects External Video For Everybody: from n/a through 2.1.1.
published:2025-02-07T10:15:15.327


Instruction: Please provide detailed information about CVE-2025-25098

CVE:CVE-2025-25098
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Zack Katz Links in Captions allows Stored XSS. This issue affects Links in Captions: from n/a through 1.2.
published:2025-02-07T10:15:15.500


Instruction: Please provide detailed information about CVE-2025-25101

CVE:CVE-2025-25101
Description:Cross-Site Request Forgery (CSRF) vulnerability in MetricThemes Munk Sites allows Cross Site Request Forgery. This issue affects Munk Sites: from n/a through 1.0.7.
published:2025-02-07T10:15:15.670


Instruction: Please provide detailed information about CVE-2025-25103

CVE:CVE-2025-25103
Description:Cross-Site Request Forgery (CSRF) vulnerability in bnielsen Indeed API allows Cross Site Request Forgery. This issue affects Indeed API: from n/a through 0.5.
published:2025-02-07T10:15:15.850


Instruction: Please provide detailed information about CVE-2025-25104

CVE:CVE-2025-25104
Description:Cross-Site Request Forgery (CSRF) vulnerability in mraliende URL-Preview-Box allows Cross Site Request Forgery. This issue affects URL-Preview-Box: from n/a through 1.20.
published:2025-02-07T10:15:16.027


Instruction: Please provide detailed information about CVE-2025-25105

CVE:CVE-2025-25105
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in coffeestudios Pop Up allows Stored XSS. This issue affects Pop Up: from n/a through 0.1.
published:2025-02-07T10:15:16.217


Instruction: Please provide detailed information about CVE-2025-25106

CVE:CVE-2025-25106
Description:Cross-Site Request Forgery (CSRF) vulnerability in FancyWP Starter Templates by FancyWP allows Cross Site Request Forgery. This issue affects Starter Templates by FancyWP: from n/a through 2.0.0.
published:2025-02-07T10:15:16.397


Instruction: Please provide detailed information about CVE-2025-25107

CVE:CVE-2025-25107
Description:Cross-Site Request Forgery (CSRF) vulnerability in sainwp OneStore Sites allows Cross Site Request Forgery. This issue affects OneStore Sites: from n/a through 0.1.1.
published:2025-02-07T10:15:16.570


Instruction: Please provide detailed information about CVE-2025-25110

CVE:CVE-2025-25110
Description:Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Kikfyre: from n/a through 2.1.8.
published:2025-02-07T10:15:16.747


Instruction: Please provide detailed information about CVE-2025-25111

CVE:CVE-2025-25111
Description:Cross-Site Request Forgery (CSRF) vulnerability in WP Spell Check WP Spell Check allows Cross Site Request Forgery. This issue affects WP Spell Check: from n/a through 9.21.
published:2025-02-07T10:15:16.910


Instruction: Please provide detailed information about CVE-2025-25116

CVE:CVE-2025-25116
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in sudipto Link to URL / Post allows Blind SQL Injection. This issue affects Link to URL / Post: from n/a through 1.3.
published:2025-02-07T10:15:17.083


Instruction: Please provide detailed information about CVE-2025-25117

CVE:CVE-2025-25117
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Polonski Smart Countdown FX allows Stored XSS. This issue affects Smart Countdown FX: from n/a through 1.5.5.
published:2025-02-07T10:15:17.267


Instruction: Please provide detailed information about CVE-2025-25120

CVE:CVE-2025-25120
Description:Missing Authorization vulnerability in Melodic Media Slide Banners allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Slide Banners: from n/a through 1.3.
published:2025-02-07T10:15:17.453


Instruction: Please provide detailed information about CVE-2025-25123

CVE:CVE-2025-25123
Description:Cross-Site Request Forgery (CSRF) vulnerability in xdark Easy Related Posts allows Stored XSS. This issue affects Easy Related Posts: from n/a through 2.0.2.
published:2025-02-07T10:15:17.640


Instruction: Please provide detailed information about CVE-2025-25125

CVE:CVE-2025-25125
Description:Cross-Site Request Forgery (CSRF) vulnerability in CyrilG Fyrebox Quizzes allows Stored XSS. This issue affects Fyrebox Quizzes: from n/a through 2.7.
published:2025-02-07T10:15:17.813


Instruction: Please provide detailed information about CVE-2025-25126

CVE:CVE-2025-25126
Description:Cross-Site Request Forgery (CSRF) vulnerability in zmseo ZMSEO allows Stored XSS. This issue affects ZMSEO: from n/a through 1.14.1.
published:2025-02-07T10:15:17.980


Instruction: Please provide detailed information about CVE-2025-25128

CVE:CVE-2025-25128
Description:Cross-Site Request Forgery (CSRF) vulnerability in orlandolac Facilita Form Tracker allows Stored XSS. This issue affects Facilita Form Tracker: from n/a through 1.0.
published:2025-02-07T10:15:18.140


Instruction: Please provide detailed information about CVE-2025-25135

CVE:CVE-2025-25135
Description:Cross-Site Request Forgery (CSRF) vulnerability in Victor Barkalov Custom Links On Admin Dashboard Toolbar allows Stored XSS. This issue affects Custom Links On Admin Dashboard Toolbar: from n/a through 3.3.
published:2025-02-07T10:15:18.320


Instruction: Please provide detailed information about CVE-2025-25136

CVE:CVE-2025-25136
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in shujahat21 Optimate Ads allows Stored XSS. This issue affects Optimate Ads: from n/a through 1.0.3.
published:2025-02-07T10:15:18.497


Instruction: Please provide detailed information about CVE-2025-25138

CVE:CVE-2025-25138
Description:Cross-Site Request Forgery (CSRF) vulnerability in Rishi On Page SEO + Whatsapp Chat Button allows Stored XSS. This issue affects On Page SEO + Whatsapp Chat Button: from n/a through 2.0.0.
published:2025-02-07T10:15:18.663


Instruction: Please provide detailed information about CVE-2025-25139

CVE:CVE-2025-25139
Description:Cross-Site Request Forgery (CSRF) vulnerability in Cynob IT Consultancy WP Custom Post RSS Feed allows Stored XSS. This issue affects WP Custom Post RSS Feed: from n/a through 1.0.0.
published:2025-02-07T10:15:18.837


Instruction: Please provide detailed information about CVE-2025-25140

CVE:CVE-2025-25140
Description:Cross-Site Request Forgery (CSRF) vulnerability in Scriptonite Simple User Profile allows Stored XSS. This issue affects Simple User Profile: from n/a through 1.9.
published:2025-02-07T10:15:19.020


Instruction: Please provide detailed information about CVE-2025-25141

CVE:CVE-2025-25141
Description:Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in zankover Fami Sales Popup allows PHP Local File Inclusion. This issue affects Fami Sales Popup: from n/a through 2.0.0.
published:2025-02-07T10:15:19.200


Instruction: Please provide detailed information about CVE-2025-25143

CVE:CVE-2025-25143
Description:Cross-Site Request Forgery (CSRF) vulnerability in ibasit GlobalQuran allows Cross Site Request Forgery. This issue affects GlobalQuran: from n/a through 1.0.
published:2025-02-07T10:15:19.383


Instruction: Please provide detailed information about CVE-2025-25144

CVE:CVE-2025-25144
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in theasys Theasys allows Stored XSS. This issue affects Theasys: from n/a through 1.0.1.
published:2025-02-07T10:15:19.553


Instruction: Please provide detailed information about CVE-2025-25145

CVE:CVE-2025-25145
Description:Cross-Site Request Forgery (CSRF) vulnerability in jordan.hatch Infusionsoft Analytics allows Cross Site Request Forgery. This issue affects Infusionsoft Analytics: from n/a through 2.0.
published:2025-02-07T10:15:19.730


Instruction: Please provide detailed information about CVE-2025-25146

CVE:CVE-2025-25146
Description:Cross-Site Request Forgery (CSRF) vulnerability in saleandro Songkick Concerts and Festivals allows Cross Site Request Forgery. This issue affects Songkick Concerts and Festivals: from n/a through 0.9.7.
published:2025-02-07T10:15:19.887


Instruction: Please provide detailed information about CVE-2025-25147

CVE:CVE-2025-25147
Description:Cross-Site Request Forgery (CSRF) vulnerability in Phillip.Gooch Auto SEO allows Stored XSS. This issue affects Auto SEO: from n/a through 2.5.6.
published:2025-02-07T10:15:20.063


Instruction: Please provide detailed information about CVE-2025-25148

CVE:CVE-2025-25148
Description:Cross-Site Request Forgery (CSRF) vulnerability in ElbowRobo Read More Copy Link allows Stored XSS. This issue affects Read More Copy Link: from n/a through 1.0.2.
published:2025-02-07T10:15:20.233


Instruction: Please provide detailed information about CVE-2025-25149

CVE:CVE-2025-25149
Description:Cross-Site Request Forgery (CSRF) vulnerability in Danillo Nunes Login-box allows Stored XSS. This issue affects Login-box: from n/a through 2.0.4.
published:2025-02-07T10:15:20.420


Instruction: Please provide detailed information about CVE-2025-25151

CVE:CVE-2025-25151
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes uListing allows SQL Injection. This issue affects uListing: from n/a through 2.1.6.
published:2025-02-07T10:15:20.593


Instruction: Please provide detailed information about CVE-2025-25152

CVE:CVE-2025-25152
Description:Cross-Site Request Forgery (CSRF) vulnerability in LukaszWiecek Smart DoFollow allows Stored XSS. This issue affects Smart DoFollow: from n/a through 1.0.2.
published:2025-02-07T10:15:20.770


Instruction: Please provide detailed information about CVE-2025-25153

CVE:CVE-2025-25153
Description:Cross-Site Request Forgery (CSRF) vulnerability in djjmz Simple Auto Tag allows Stored XSS. This issue affects Simple Auto Tag: from n/a through 1.1.
published:2025-02-07T10:15:20.953


Instruction: Please provide detailed information about CVE-2025-25154

CVE:CVE-2025-25154
Description:Cross-Site Request Forgery (CSRF) vulnerability in scweber Custom Comment Notifications allows Stored XSS. This issue affects Custom Comment Notifications: from n/a through 1.0.8.
published:2025-02-07T10:15:21.120


Instruction: Please provide detailed information about CVE-2025-25155

CVE:CVE-2025-25155
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in efreja Music Sheet Viewer allows Path Traversal. This issue affects Music Sheet Viewer: from n/a through 4.1.
published:2025-02-07T10:15:21.287


Instruction: Please provide detailed information about CVE-2025-25156

CVE:CVE-2025-25156
Description:Cross-Site Request Forgery (CSRF) vulnerability in Stanko Metodiev Quote Comments allows Stored XSS. This issue affects Quote Comments: from n/a through 2.2.1.
published:2025-02-07T10:15:21.457


Instruction: Please provide detailed information about CVE-2025-25159

CVE:CVE-2025-25159
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in robert_kolatzek WP doodlez allows Stored XSS. This issue affects WP doodlez: from n/a through 1.0.10.
published:2025-02-07T10:15:21.627


Instruction: Please provide detailed information about CVE-2025-25160

CVE:CVE-2025-25160
Description:Cross-Site Request Forgery (CSRF) vulnerability in Mark Barnes Style Tweaker allows Stored XSS. This issue affects Style Tweaker: from n/a through 0.11.
published:2025-02-07T10:15:21.797


Instruction: Please provide detailed information about CVE-2025-25163

CVE:CVE-2025-25163
Description:Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Zach Swetz Plugin A/B Image Optimizer allows Path Traversal. This issue affects Plugin A/B Image Optimizer: from n/a through 3.3.
published:2025-02-07T10:15:21.963


Instruction: Please provide detailed information about CVE-2025-25166

CVE:CVE-2025-25166
Description:Cross-Site Request Forgery (CSRF) vulnerability in gabrieldarezzo InLocation allows Stored XSS. This issue affects InLocation: from n/a through 1.8.
published:2025-02-07T10:15:22.123


Instruction: Please provide detailed information about CVE-2025-25167

CVE:CVE-2025-25167
Description:Missing Authorization vulnerability in blackandwhitedigital BookPress – For Book Authors allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects BookPress – For Book Authors: from n/a through 1.2.7.
published:2025-02-07T10:15:22.430


Instruction: Please provide detailed information about CVE-2025-25168

CVE:CVE-2025-25168
Description:Cross-Site Request Forgery (CSRF) vulnerability in blackandwhitedigital BookPress – For Book Authors allows Cross-Site Scripting (XSS). This issue affects BookPress – For Book Authors: from n/a through 1.2.7.
published:2025-02-07T10:15:22.600


Instruction: Please provide detailed information about CVE-2025-25069

CVE:CVE-2025-25069
Description:A Cross-Protocol Scripting vulnerability is found in Apache Kvrocks.  Since Kvrocks didn't detect if "Host:" or "POST" appears in RESP requests, a valid HTTP request can also be sent to Kvrocks as a valid RESP request  and trigger some database operations, which can be dangerous when  it is chained with SSRF.  It is similiar to CVE-2016-10517 in Redis.  This issue affects Apache Kvrocks: from the initial version to the latest version 2.11.0.  Users are recommended to upgrade to version 2.11.1, which fixes the issue.
published:2025-02-07T13:15:32.170


Instruction: Please provide detailed information about CVE-2025-1107

CVE:CVE-2025-1107
Description:Unverified password change vulnerability in Janto, versions prior to r12. This could allow an unauthenticated attacker to change another user's password without knowing their current password. To exploit the vulnerability, the attacker must create a specific POST request and send it to the endpoint ‘/public/cgi/Gateway.php’.
published:2025-02-07T14:15:48.343


Instruction: Please provide detailed information about CVE-2025-1108

CVE:CVE-2025-1108
Description:Insufficient data authenticity verification vulnerability in Janto, versions prior to r12. This allows an unauthenticated attacker to modify the content of emails sent to reset the password. To exploit the vulnerability, the attacker must create a POST request by injecting malicious content into the ‘Xml’ parameter on the ‘/public/cgi/Gateway.php’ endpoint.
published:2025-02-07T14:15:48.530


Instruction: Please provide detailed information about CVE-2025-1103

CVE:CVE-2025-1103
Description:A vulnerability, which was classified as problematic, was found in D-Link DIR-823X 240126/240802. This affects the function set_wifi_blacklists of the file /goform/set_wifi_blacklists of the component HTTP POST Request Handler. The manipulation of the argument macList leads to null pointer dereference. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-07T15:15:17.583


Instruction: Please provide detailed information about CVE-2025-1104

CVE:CVE-2025-1104
Description:A vulnerability has been found in D-Link DHP-W310AV 1.04 and classified as critical. This vulnerability affects unknown code. The manipulation leads to authentication bypass by spoofing. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-07T17:15:31.477


Instruction: Please provide detailed information about CVE-2025-0307

CVE:CVE-2025-0307
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-02-07T18:15:28.337


Instruction: Please provide detailed information about CVE-2025-1105

CVE:CVE-2025-1105
Description:A vulnerability was found in SiberianCMS 4.20.6. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /app/sae/design/desktop/flat of the component HTTP GET Request Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-07T18:15:28.433


Instruction: Please provide detailed information about CVE-2025-1106

CVE:CVE-2025-1106
Description:A vulnerability classified as critical has been found in CmsEasy 7.7.7.9. This affects the function deletedir_action/restore_action in the library lib/admin/database_admin.php. The manipulation leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-07T19:15:24.613


Instruction: Please provide detailed information about CVE-2025-24980

CVE:CVE-2025-24980
Description:pimcore/admin-ui-classic-bundle provides a Backend UI for Pimcore. In affected versions an error message discloses existing accounts and leads to user enumeration on the target via "Forgot password" function. No generic error message has been implemented. This issue has been addressed in version 1.7.4 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-07T20:15:33.933


Instruction: Please provide detailed information about CVE-2025-25183

CVE:CVE-2025-25183
Description:vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Maliciously constructed statements can lead to hash collisions, resulting in cache reuse, which can interfere with subsequent responses and cause unintended behavior. Prefix caching makes use of Python's built-in hash() function. As of Python 3.12, the behavior of hash(None) has changed to be a predictable constant value. This makes it more feasible that someone could try exploit hash collisions. The impact of a collision would be using cache that was generated using different content. Given knowledge of prompts in use and predictable hashing behavior, someone could intentionally populate the cache using a prompt known to collide with another prompt in use. This issue has been addressed in version 0.7.2 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-07T20:15:34.083


Instruction: Please provide detailed information about CVE-2025-1113

CVE:CVE-2025-1113
Description:A vulnerability was found in taisan tarzan-cms up to 1.0.0. It has been rated as critical. This issue affects the function upload of the file /admin#themes of the component Add Theme Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-07T22:15:14.283


Instruction: Please provide detailed information about CVE-2025-24366

CVE:CVE-2025-24366
Description:SFTPGo is an open source, event-driven file transfer solution. SFTPGo supports execution of a defined set of commands via SSH. Besides a set of default commands some optional commands can be activated, one of them being `rsync`. It is disabled in the default configuration and it is limited to the local filesystem, it does not work with cloud/remote storage backends. Due to missing sanitization of the client provided `rsync` command, an authenticated remote user can use some options of the rsync command to read or write files with the permissions of the SFTPGo server process. This issue was fixed in version v2.6.5 by checking the client provided arguments. Users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-07T22:15:14.463


Instruction: Please provide detailed information about CVE-2025-1114

CVE:CVE-2025-1114
Description:A vulnerability classified as problematic has been found in newbee-mall 1.0. Affected is the function save of the file /admin/categories/save of the component Add Category Page. The manipulation of the argument categoryName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
published:2025-02-07T23:15:14.840


Instruction: Please provide detailed information about CVE-2025-24028

CVE:CVE-2025-24028
Description:Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by differences between how Joplin's HTML sanitizer handles comments and how the browser handles comments. This affects both the Rich Text Editor and the Markdown viewer. However, unlike the Rich Text Editor, the Markdown viewer is `cross-origin isolated`, which prevents JavaScript from directly accessing functions/variables in the toplevel Joplin `window`. This issue is not present in Joplin 3.1.24 and may have been introduced in `9b50539`. This is an XSS vulnerability that impacts users that open untrusted notes in the Rich Text Editor. This vulnerability has been addressed in version 3.2.12 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-07T23:15:15.013


Instruction: Please provide detailed information about CVE-2025-25187

CVE:CVE-2025-25187
Description:Joplin is a free, open source note taking and to-do application, which can handle a large number of notes organised into notebooks. This vulnerability is caused by adding note titles to the document using React's `dangerouslySetInnerHTML`, without first escaping HTML entities. Joplin lacks a Content-Security-Policy with a restrictive `script-src`. This allows arbitrary JavaScript execution via inline `onclick`/`onload` event handlers in unsanitized HTML. Additionally, Joplin's main window is created with `nodeIntegration` set to `true`, allowing arbitrary JavaScript execution to result in arbitrary code execution. Anyone who 1) receives notes from unknown sources and 2) uses ctrl-p to search is impacted. This issue has been addressed in version 3.1.24 and all users are advised to upgrade. There are no known workarounds for this vulnerability.
published:2025-02-07T23:15:15.217


Instruction: Please provide detailed information about CVE-2025-1096

CVE:CVE-2025-1096
Description:Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-02-08T01:15:07.947


Instruction: Please provide detailed information about CVE-2025-1115

CVE:CVE-2025-1115
Description:A vulnerability classified as problematic was found in RT-Thread up to 5.1.0. Affected by this vulnerability is the function sys_device_close/sys_device_control/sys_device_find/sys_device_init/sys_device_open/sys_device_read/sys_device_register/sys_device_write/sys_event_delete/sys_event_recv/sys_event_send/sys_mb_delete/sys_mb_recv/sys_mb_send/sys_mb_send_wait/sys_mq_recv/sys_mq_send/sys_mq_urgent/sys_mutex_delete/sys_mutex_release/sys_mutex_take/sys_rt_timer_control/sys_rt_timer_delete/sys_rt_timer_start/sys_rt_timer_stop/sys_sem_delete/sys_sem_release/sys_sem_take/sys_shmat/sys_shmdt/sys_thread_create/sys_thread_delete/sys_thread_startup/sys_timer_delete/sys_timer_gettime/sys_timer_settime of the file rt-thread/components/lwp/lwp_syscall.c. The manipulation of the argument arg[0] leads to information disclosure. An attack has to be approached locally.
published:2025-02-08T10:15:20.997


Instruction: Please provide detailed information about CVE-2025-1116

CVE:CVE-2025-1116
Description:A vulnerability, which was classified as critical, has been found in Dreamvention Live AJAX Search Free up to 1.0.6 on OpenCart. Affected by this issue is the function searchresults/search of the file /?route=extension/live_search/module/live_search.searchresults. The manipulation of the argument keyword leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-08T12:15:39.660


Instruction: Please provide detailed information about CVE-2025-1117

CVE:CVE-2025-1117
Description:A vulnerability, which was classified as critical, was found in CoinRemitter 0.0.1/0.0.2 on OpenCart. This affects an unknown part. The manipulation of the argument coin leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 0.0.3 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-08T13:15:07.843


Instruction: Please provide detailed information about CVE-2025-0316

CVE:CVE-2025-0316
Description:The WP Directorybox Manager plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.5. This is due to incorrect authentication in the 'wp_dp_enquiry_agent_contact_form_submit_callback' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if they have access to the username.
published:2025-02-08T22:15:28.477


Instruction: Please provide detailed information about CVE-2025-0517

CVE:CVE-2025-0517
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-02-08T22:15:28.823


Instruction: Please provide detailed information about CVE-2025-0169

CVE:CVE-2025-0169
Description:The DWT - Directory & Listing WordPress Theme is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-08T23:15:08.653


Instruction: Please provide detailed information about CVE-2025-21684

CVE:CVE-2025-21684
Description:In the Linux kernel, the following vulnerability has been resolved:  gpio: xilinx: Convert gpio_lock to raw spinlock  irq_chip functions may be called in raw spinlock context. Therefore, we must also use a raw spinlock for our own internal locking.  This fixes the following lockdep splat:  [    5.349336] ============================= [    5.353349] [ BUG: Invalid wait context ] [    5.357361] 6.13.0-rc5+ #69 Tainted: G        W [    5.363031] ----------------------------- [    5.367045] kworker/u17:1/44 is trying to lock: [    5.371587] ffffff88018b02c0 (&chip->gpio_lock){....}-{3:3}, at: xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [    5.380079] other info that might help us debug this: [    5.385138] context-{5:5} [    5.387762] 5 locks held by kworker/u17:1/44: [    5.392123] #0: ffffff8800014958 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3204) [    5.402260] #1: ffffffc082fcbdd8 (deferred_probe_work){+.+.}-{0:0}, at: process_one_work (kernel/workqueue.c:3205) [    5.411528] #2: ffffff880172c900 (&dev->mutex){....}-{4:4}, at: __device_attach (drivers/base/dd.c:1006) [    5.419929] #3: ffffff88039c8268 (request_class#2){+.+.}-{4:4}, at: __setup_irq (kernel/irq/internals.h:156 kernel/irq/manage.c:1596) [    5.428331] #4: ffffff88039c80c8 (lock_class#2){....}-{2:2}, at: __setup_irq (kernel/irq/manage.c:1614) [    5.436472] stack backtrace: [    5.439359] CPU: 2 UID: 0 PID: 44 Comm: kworker/u17:1 Tainted: G        W          6.13.0-rc5+ #69 [    5.448690] Tainted: [W]=WARN [    5.451656] Hardware name: xlnx,zynqmp (DT) [    5.455845] Workqueue: events_unbound deferred_probe_work_func [    5.461699] Call trace: [    5.464147] show_stack+0x18/0x24 C [    5.467821] dump_stack_lvl (lib/dump_stack.c:123) [    5.471501] dump_stack (lib/dump_stack.c:130) [    5.474824] __lock_acquire (kernel/locking/lockdep.c:4828 kernel/locking/lockdep.c:4898 kernel/locking/lockdep.c:5176) [    5.478758] lock_acquire (arch/arm64/include/asm/percpu.h:40 kernel/locking/lockdep.c:467 kernel/locking/lockdep.c:5851 kernel/locking/lockdep.c:5814) [    5.482429] _raw_spin_lock_irqsave (include/linux/spinlock_api_smp.h:111 kernel/locking/spinlock.c:162) [    5.486797] xgpio_irq_unmask (drivers/gpio/gpio-xilinx.c:433 (discriminator 8)) [    5.490737] irq_enable (kernel/irq/internals.h:236 kernel/irq/chip.c:170 kernel/irq/chip.c:439 kernel/irq/chip.c:432 kernel/irq/chip.c:345) [    5.494060] __irq_startup (kernel/irq/internals.h:241 kernel/irq/chip.c:180 kernel/irq/chip.c:250) [    5.497645] irq_startup (kernel/irq/chip.c:270) [    5.501143] __setup_irq (kernel/irq/manage.c:1807) [    5.504728] request_threaded_irq (kernel/irq/manage.c:2208)
published:2025-02-09T12:15:29.623


Instruction: Please provide detailed information about CVE-2025-21685

CVE:CVE-2025-21685
Description:In the Linux kernel, the following vulnerability has been resolved:  platform/x86: lenovo-yoga-tab2-pro-1380-fastcharger: fix serdev race  The yt2_1380_fc_serdev_probe() function calls devm_serdev_device_open() before setting the client ops via serdev_device_set_client_ops(). This ordering can trigger a NULL pointer dereference in the serdev controller's receive_buf handler, as it assumes serdev->ops is valid when SERPORT_ACTIVE is set.  This is similar to the issue fixed in commit 5e700b384ec1 ("platform/chrome: cros_ec_uart: properly fix race condition") where devm_serdev_device_open() was called before fully initializing the device.  Fix the race by ensuring client ops are set before enabling the port via devm_serdev_device_open().  Note, serdev_device_set_baudrate() and serdev_device_set_flow_control() calls should be after the devm_serdev_device_open() call.
published:2025-02-09T12:15:29.737


Instruction: Please provide detailed information about CVE-2025-1099

CVE:CVE-2025-1099
Description:This vulnerability exists in Tapo C500 Wi-Fi camera due to hard-coded RSA private key embedded within the device firmware. An attacker with physical access could exploit this vulnerability to obtain cryptographic private keys which can then be used to perform impersonation, data decryption and man in the middle attacks on the targeted device.
published:2025-02-10T11:15:21.147


Instruction: Please provide detailed information about CVE-2025-25247

CVE:CVE-2025-25247
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Felix Webconsole.  This issue affects Apache Felix Webconsole 4.x up to 4.9.8 and 5.x up to 5.0.8.  Users are recommended to upgrade to version 4.9.10 or 5.0.10 or higher, which fixes the issue.
published:2025-02-10T12:15:29.557


Instruction: Please provide detailed information about CVE-2025-1175

CVE:CVE-2025-1175
Description:Reflected Cross-Site Scripting (XSS) vulnerability in Kelio Visio 1, Kelio Visio X7 and Kelio Visio X4, in versions between 3.2C and 5.1K. This vulnerability could allow an attacker to execute a JavaScript payload by making a POST request and injecting malicious code into the editable ‘username’ parameter of the ‘/PageLoginVisio.do’ endpoint.
published:2025-02-10T13:15:26.593


Instruction: Please provide detailed information about CVE-2025-1147

CVE:CVE-2025-1147
Description:A vulnerability has been found in GNU Binutils 2.43 and classified as problematic. Affected by this vulnerability is the function __sanitizer::internal_strlen of the file binutils/nm.c of the component nm. The manipulation of the argument const leads to buffer overflow. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-02-10T14:15:29.643


Instruction: Please provide detailed information about CVE-2025-1148

CVE:CVE-2025-1148
Description:A vulnerability was found in GNU Binutils 2.43 and classified as problematic. Affected by this issue is the function link_order_scan of the file ld/ldelfgen.c of the component ld. The manipulation leads to memory leak. The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
published:2025-02-10T14:15:29.927


Instruction: Please provide detailed information about CVE-2025-1193

CVE:CVE-2025-1193
Description:Improper host validation in the certificate validation component in Devolutions Remote Desktop Manager on 2024.3.19 and earlier on Windows allows an attacker to intercept and modify encrypted communications via a man-in-the-middle attack  by presenting a certificate for a different host.
published:2025-02-10T14:15:30.107


Instruction: Please provide detailed information about CVE-2025-1149

CVE:CVE-2025-1149
Description:A vulnerability was found in GNU Binutils 2.43. It has been classified as problematic. This affects the function xstrdup of the file libiberty/xmalloc.c of the component ld. The manipulation leads to memory leak. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
published:2025-02-10T15:15:13.093


Instruction: Please provide detailed information about CVE-2025-21686

CVE:CVE-2025-21686
Description:In the Linux kernel, the following vulnerability has been resolved:  io_uring/rsrc: require cloned buffers to share accounting contexts  When IORING_REGISTER_CLONE_BUFFERS is used to clone buffers from uring instance A to uring instance B, where A and B use different MMs for accounting, the accounting can go wrong: If uring instance A is closed before uring instance B, the pinned memory counters for uring instance B will be decremented, even though the pinned memory was originally accounted through uring instance A; so the MM of uring instance B can end up with negative locked memory.
published:2025-02-10T16:15:38.100


Instruction: Please provide detailed information about CVE-2025-21687

CVE:CVE-2025-21687
Description:In the Linux kernel, the following vulnerability has been resolved:  vfio/platform: check the bounds of read/write syscalls  count and offset are passed from user space and not checked, only offset is capped to 40 bits, which can be used to read/write out of bounds of the device.
published:2025-02-10T16:15:38.207


Instruction: Please provide detailed information about CVE-2025-21688

CVE:CVE-2025-21688
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/v3d: Assign job pointer to NULL before signaling the fence  In commit e4b5ccd392b9 ("drm/v3d: Ensure job pointer is set to NULL after job completion"), we introduced a change to assign the job pointer to NULL after completing a job, indicating job completion.  However, this approach created a race condition between the DRM scheduler workqueue and the IRQ execution thread. As soon as the fence is signaled in the IRQ execution thread, a new job starts to be executed. This results in a race condition where the IRQ execution thread sets the job pointer to NULL simultaneously as the `run_job()` function assigns a new job to the pointer.  This race condition can lead to a NULL pointer dereference if the IRQ execution thread sets the job pointer to NULL after `run_job()` assigns it to the new job. When the new job completes and the GPU emits an interrupt, `v3d_irq()` is triggered, potentially causing a crash.  [  466.310099] Unable to handle kernel NULL pointer dereference at virtual address 00000000000000c0 [  466.318928] Mem abort info: [  466.321723]   ESR = 0x0000000096000005 [  466.325479]   EC = 0x25: DABT (current EL), IL = 32 bits [  466.330807]   SET = 0, FnV = 0 [  466.333864]   EA = 0, S1PTW = 0 [  466.337010]   FSC = 0x05: level 1 translation fault [  466.341900] Data abort info: [  466.344783]   ISV = 0, ISS = 0x00000005, ISS2 = 0x00000000 [  466.350285]   CM = 0, WnR = 0, TnD = 0, TagAccess = 0 [  466.355350]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0 [  466.360677] user pgtable: 4k pages, 39-bit VAs, pgdp=0000000089772000 [  466.367140] [00000000000000c0] pgd=0000000000000000, p4d=0000000000000000, pud=0000000000000000 [  466.375875] Internal error: Oops: 0000000096000005 [#1] PREEMPT SMP [  466.382163] Modules linked in: rfcomm snd_seq_dummy snd_hrtimer snd_seq snd_seq_device algif_hash algif_skcipher af_alg bnep binfmt_misc vc4 snd_soc_hdmi_codec drm_display_helper cec brcmfmac_wcc spidev rpivid_hevc(C) drm_client_lib brcmfmac hci_uart drm_dma_helper pisp_be btbcm brcmutil snd_soc_core aes_ce_blk v4l2_mem2mem bluetooth aes_ce_cipher snd_compress videobuf2_dma_contig ghash_ce cfg80211 gf128mul snd_pcm_dmaengine videobuf2_memops ecdh_generic sha2_ce ecc videobuf2_v4l2 snd_pcm v3d sha256_arm64 rfkill videodev snd_timer sha1_ce libaes gpu_sched snd videobuf2_common sha1_generic drm_shmem_helper mc rp1_pio drm_kms_helper raspberrypi_hwmon spi_bcm2835 gpio_keys i2c_brcmstb rp1 raspberrypi_gpiomem rp1_mailbox rp1_adc nvmem_rmem uio_pdrv_genirq uio i2c_dev drm ledtrig_pattern drm_panel_orientation_quirks backlight fuse dm_mod ip_tables x_tables ipv6 [  466.458429] CPU: 0 UID: 1000 PID: 2008 Comm: chromium Tainted: G         C         6.13.0-v8+ #18 [  466.467336] Tainted: [C]=CRAP [  466.470306] Hardware name: Raspberry Pi 5 Model B Rev 1.0 (DT) [  466.476157] pstate: 404000c9 (nZcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [  466.483143] pc : v3d_irq+0x118/0x2e0 [v3d] [  466.487258] lr : __handle_irq_event_percpu+0x60/0x228 [  466.492327] sp : ffffffc080003ea0 [  466.495646] x29: ffffffc080003ea0 x28: ffffff80c0c94200 x27: 0000000000000000 [  466.502807] x26: ffffffd08dd81d7b x25: ffffff80c0c94200 x24: ffffff8003bdc200 [  466.509969] x23: 0000000000000001 x22: 00000000000000a7 x21: 0000000000000000 [  466.517130] x20: ffffff8041bb0000 x19: 0000000000000001 x18: 0000000000000000 [  466.524291] x17: ffffffafadfb0000 x16: ffffffc080000000 x15: 0000000000000000 [  466.531452] x14: 0000000000000000 x13: 0000000000000000 x12: 0000000000000000 [  466.538613] x11: 0000000000000000 x10: 0000000000000000 x9 : ffffffd08c527eb0 [  466.545777] x8 : 0000000000000000 x7 : 0000000000000000 x6 : 0000000000000000 [  466.552941] x5 : ffffffd08c4100d0 x4 : ffffffafadfb0000 x3 : ffffffc080003f70 [  466.560102] x2 : ffffffc0829e8058 x1 : 0000000000000001 x0 : 0000000000000000 [  466.567263] Call trace: [  466.569711]  v3d_irq+0x118/0x2e0 [v3d] (P) [  466. ---truncated---
published:2025-02-10T16:15:38.323


Instruction: Please provide detailed information about CVE-2025-21689

CVE:CVE-2025-21689
Description:In the Linux kernel, the following vulnerability has been resolved:  USB: serial: quatech2: fix null-ptr-deref in qt2_process_read_urb()  This patch addresses a null-ptr-deref in qt2_process_read_urb() due to an incorrect bounds check in the following:         if (newport > serial->num_ports) {                dev_err(&port->dev,                        "%s - port change to invalid port: %i\n",                        __func__, newport);                break;        }  The condition doesn't account for the valid range of the serial->port buffer, which is from 0 to serial->num_ports - 1. When newport is equal to serial->num_ports, the assignment of "port" in the following code is out-of-bounds and NULL:         serial_priv->current_port = newport;        port = serial->port[serial_priv->current_port];  The fix checks if newport is greater than or equal to serial->num_ports indicating it is out-of-bounds.
published:2025-02-10T16:15:38.447


Instruction: Please provide detailed information about CVE-2025-21690

CVE:CVE-2025-21690
Description:In the Linux kernel, the following vulnerability has been resolved:  scsi: storvsc: Ratelimit warning logs to prevent VM denial of service  If there's a persistent error in the hypervisor, the SCSI warning for failed I/O can flood the kernel log and max out CPU utilization, preventing troubleshooting from the VM side. Ratelimit the warning so it doesn't DoS the VM.
published:2025-02-10T16:15:38.553


Instruction: Please provide detailed information about CVE-2025-21691

CVE:CVE-2025-21691
Description:In the Linux kernel, the following vulnerability has been resolved:  cachestat: fix page cache statistics permission checking  When the 'cachestat()' system call was added in commit cf264e1329fb ("cachestat: implement cachestat syscall"), it was meant to be a much more convenient (and performant) version of mincore() that didn't need mapping things into the user virtual address space in order to work.  But it ended up missing the "check for writability or ownership" fix for mincore(), done in commit 134fca9063ad ("mm/mincore.c: make mincore() more conservative").  This just adds equivalent logic to 'cachestat()', modified for the file context (rather than vma).
published:2025-02-10T16:15:38.660


Instruction: Please provide detailed information about CVE-2025-21692


Instruction: Please provide detailed information about CVE-2025-21693

CVE:CVE-2025-21693
Description:In the Linux kernel, the following vulnerability has been resolved:  mm: zswap: properly synchronize freeing resources during CPU hotunplug  In zswap_compress() and zswap_decompress(), the per-CPU acomp_ctx of the current CPU at the beginning of the operation is retrieved and used throughout.  However, since neither preemption nor migration are disabled, it is possible that the operation continues on a different CPU.  If the original CPU is hotunplugged while the acomp_ctx is still in use, we run into a UAF bug as some of the resources attached to the acomp_ctx are freed during hotunplug in zswap_cpu_comp_dead() (i.e.  acomp_ctx.buffer, acomp_ctx.req, or acomp_ctx.acomp).  The problem was introduced in commit 1ec3b5fe6eec ("mm/zswap: move to use crypto_acomp API for hardware acceleration") when the switch to the crypto_acomp API was made.  Prior to that, the per-CPU crypto_comp was retrieved using get_cpu_ptr() which disables preemption and makes sure the CPU cannot go away from under us.  Preemption cannot be disabled with the crypto_acomp API as a sleepable context is needed.  Use the acomp_ctx.mutex to synchronize CPU hotplug callbacks allocating and freeing resources with compression/decompression paths.  Make sure that acomp_ctx.req is NULL when the resources are freed.  In the compression/decompression paths, check if acomp_ctx.req is NULL after acquiring the mutex (meaning the CPU was offlined) and retry on the new CPU.  The initialization of acomp_ctx.mutex is moved from the CPU hotplug callback to the pool initialization where it belongs (where the mutex is allocated).  In addition to adding clarity, this makes sure that CPU hotplug cannot reinitialize a mutex that is already locked by compression/decompression.  Previously a fix was attempted by holding cpus_read_lock() [1].  This would have caused a potential deadlock as it is possible for code already holding the lock to fall into reclaim and enter zswap (causing a deadlock).  A fix was also attempted using SRCU for synchronization, but Johannes pointed out that synchronize_srcu() cannot be used in CPU hotplug notifiers [2].  Alternative fixes that were considered/attempted and could have worked: - Refcounting the per-CPU acomp_ctx. This involves complexity in   handling the race between the refcount dropping to zero in   zswap_[de]compress() and the refcount being re-initialized when the   CPU is onlined. - Disabling migration before getting the per-CPU acomp_ctx [3], but   that's discouraged and is a much bigger hammer than needed, and could   result in subtle performance issues.  [1]https://lkml.kernel.org/20241219212437.2714151-1-yosryahmed@google.com/ [2]https://lkml.kernel.org/20250107074724.1756696-2-yosryahmed@google.com/ [3]https://lkml.kernel.org/20250107222236.2715883-2-yosryahmed@google.com/  [yosryahmed@google.com: remove comment]   Link: https://lkml.kernel.org/r/CAJD7tkaxS1wjn+swugt8QCvQ-rVF5RZnjxwPGX17k8x9zSManA@mail.gmail.com
published:2025-02-10T16:15:38.883


Instruction: Please provide detailed information about CVE-2025-24031

CVE:CVE-2025-24031
Description:PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. In versions 0.6.12 and prior, the pam_pkcs11 module segfaults when a user presses ctrl-c/ctrl-d when they are asked for a PIN. When a user enters no PIN at all, `pam_get_pwd` will never initialize the password buffer pointer and as such `cleanse` will try to dereference an uninitialized pointer. On my system this pointer happens to have the value 3 most of the time when running sudo and as such it will segfault. The most likely impact to a system affected by this issue is an availability impact due to a daemon that uses PAM crashing. As of time of publication, a patch for the issue is unavailable.
published:2025-02-10T16:15:38.990


Instruction: Please provide detailed information about CVE-2025-24032

CVE:CVE-2025-24032
Description:PAM-PKCS#11 is a Linux-PAM login module that allows a X.509 certificate based user login. Prior to version 0.6.13, if cert_policy is set to none (the default value), then pam_pkcs11 will only check if the user is capable of logging into the token. An attacker may create a different token with the user's public data (e.g. the user's certificate) and a PIN known to the attacker. If no signature with the private key is required, then the attacker may now login as user with that created token. The default to *not* check the private key's signature has been changed with commit commi6638576892b59a99389043c90a1e7dd4d783b921, so that all versions starting with pam_pkcs11-0.6.0 should be affected. As a workaround, in `pam_pkcs11.conf`, set at least `cert_policy = signature;`.
published:2025-02-10T16:15:39.153


Instruction: Please provide detailed information about CVE-2025-24892

CVE:CVE-2025-24892
Description:OpenProject is open-source, web-based project management software. In versions prior to 15.2.1, the application fails to properly sanitize user input before displaying it in the Group Management section. Groups created with HTML script tags are not properly escaped before rendering them in a project. The issue has been resolved in OpenProject version 15.2.1. Those who are unable to upgrade may apply the patch manually.
published:2025-02-10T16:15:39.310


Instruction: Please provide detailed information about CVE-2025-25186

CVE:CVE-2025-25186
Description:Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Starting in version 0.3.2 and prior to versions 0.3.8, 0.4.19, and 0.5.6, there is a possibility for denial of service by memory exhaustion in `net-imap`'s response parser.  At any time while the client is connected, a malicious server can send  can send highly compressed `uid-set` data which is automatically read by the client's receiver thread. The response parser uses `Range#to_a` to convert the `uid-set` data into arrays of integers, with no limitation on the expanded size of the ranges. Versions 0.3.8, 0.4.19, 0.5.6, and higher fix this issue. Additional details for proper configuration of fixed versions and backward compatibility are available in the GitHub Security Advisory.
published:2025-02-10T16:15:39.457


Instruction: Please provide detailed information about CVE-2025-1150

CVE:CVE-2025-1150
Description:A vulnerability was found in GNU Binutils 2.43. It has been declared as problematic. This vulnerability affects the function bfd_malloc of the file libbfd.c of the component ld. The manipulation leads to memory leak. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
published:2025-02-10T17:15:18.517


Instruction: Please provide detailed information about CVE-2025-1151

CVE:CVE-2025-1151
Description:A vulnerability was found in GNU Binutils 2.43. It has been rated as problematic. This issue affects the function xmemdup of the file xmemdup.c of the component ld. The manipulation leads to memory leak. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
published:2025-02-10T17:15:18.713


Instruction: Please provide detailed information about CVE-2025-1152

CVE:CVE-2025-1152
Description:A vulnerability classified as problematic has been found in GNU Binutils 2.43. Affected is the function xstrdup of the file xstrdup.c of the component ld. The manipulation leads to memory leak. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. The code maintainer explains: "I'm not going to commit some of the leak fixes I've been working on to the 2.44 branch due to concern that would destabilise ld. All of the reported leaks in this bugzilla have been fixed on binutils master."
published:2025-02-10T18:15:34.043


Instruction: Please provide detailed information about CVE-2025-25188

CVE:CVE-2025-25188
Description:Hickory DNS is a Rust based DNS client, server, and resolver. A vulnerability present starting in version 0.8.0 and prior to versions 0.24.3 and 0.25.0-alpha.5 impacts Hickory DNS users relying on DNSSEC verification in the client library, stub resolver, or recursive resolver. The DNSSEC validation routines treat entire RRsets of DNSKEY records as trusted once they have established trust in only one of the DNSKEYs. As a result, if a zone includes a DNSKEY with a public key that matches a configured trust anchor, all keys in that zone will be trusted to authenticate other records in the zone. There is a second variant of this vulnerability involving DS records, where an authenticated DS record covering one DNSKEY leads to trust in signatures made by an unrelated DNSKEY in the same zone. Versions 0.24.3 and 0.25.0-alpha.5 fix the issue.
published:2025-02-10T18:15:35.827


Instruction: Please provide detailed information about CVE-2025-1153

CVE:CVE-2025-1153
Description:A vulnerability classified as problematic was found in GNU Binutils 2.43/2.44. Affected by this vulnerability is the function bfd_set_format of the file format.c. The manipulation leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. Upgrading to version 2.45 is able to address this issue. The identifier of the patch is 8d97c1a53f3dc9fd8e1ccdb039b8a33d50133150. It is recommended to upgrade the affected component.
published:2025-02-10T19:15:39.900


Instruction: Please provide detailed information about CVE-2025-24200

CVE:CVE-2025-24200
Description:An authorization issue was addressed with improved state management. This issue is fixed in iPadOS 17.7.5, iOS 18.3.1 and iPadOS 18.3.1. A physical attack may disable USB Restricted Mode on a locked device. Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.
published:2025-02-10T19:15:40.107


Instruction: Please provide detailed information about CVE-2025-1154

CVE:CVE-2025-1154
Description:A vulnerability, which was classified as critical, has been found in xxyopen Novel up to 3.4.1. Affected by this issue is some unknown functionality of the file /api/front/search/books. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-02-10T20:15:42.173


Instruction: Please provide detailed information about CVE-2025-1155

CVE:CVE-2025-1155
Description:A vulnerability, which was classified as problematic, was found in Webkul QloApps 1.6.1. This affects an unknown part of the file /stores of the component Your Location Search. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. It is planned to remove this page in the long term.
published:2025-02-10T20:15:42.360


Instruction: Please provide detailed information about CVE-2025-24016

CVE:CVE-2025-24016
Description:Wazuh is a free and open source platform used for threat prevention, detection, and response. Starting in version 4.4.0 and prior to version 4.9.1, an unsafe deserialization vulnerability allows for remote code execution on Wazuh servers. DistributedAPI parameters are a serialized as JSON and deserialized using `as_wazuh_object` (in `framework/wazuh/core/cluster/common.py`). If an attacker manages to inject an unsanitized dictionary in DAPI request/response, they can forge an unhandled exception (`__unhandled_exc__`) to evaluate arbitrary python code. The vulnerability can be triggered by anybody with API access (compromised dashboard or Wazuh servers in the cluster) or, in certain configurations, even by a compromised agent. Version 4.9.1 contains a fix.
published:2025-02-10T20:15:42.540


Instruction: Please provide detailed information about CVE-2025-1002

CVE:CVE-2025-1002
Description:MicroDicom DICOM Viewer version 2024.03  fails to adequately verify the update server's certificate, which could make it possible for attackers in a privileged network position to alter network traffic and carry out a machine-in-the-middle (MITM) attack. This allows the attackers to modify the server's response and deliver a malicious update to the user.
published:2025-02-10T21:15:21.830


Instruction: Please provide detailed information about CVE-2025-1156

CVE:CVE-2025-1156
Description:A vulnerability has been found in Pix Software Vivaz 6.0.10 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login. The manipulation of the argument usuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-10T21:15:22.133


Instruction: Please provide detailed information about CVE-2025-1157

CVE:CVE-2025-1157
Description:A vulnerability was found in Allims lab.online up to 20250201 and classified as critical. This issue affects some unknown processing of the file /model/model_recuperar_senha.php. The manipulation of the argument recuperacao leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-10T21:15:22.300


Instruction: Please provide detailed information about CVE-2025-1158

CVE:CVE-2025-1158
Description:A vulnerability was found in ESAFENET CDG 5.6.3.154.205_20250114. It has been classified as critical. Affected is an unknown function of the file addPolicyToSafetyGroup.jsp. The manipulation of the argument safetyGroupId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-02-10T22:15:37.080


Instruction: Please provide detailed information about CVE-2025-1159

CVE:CVE-2025-1159
Description:A vulnerability was found in CampCodes School Management Software 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /academic-calendar. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-10T22:15:37.257


Instruction: Please provide detailed information about CVE-2025-24970

CVE:CVE-2025-24970
Description:Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of such a packet in all cases which can lead to a native crash. Version 4.1.118.Final contains a patch. As workaround its possible to either disable the usage of the native SSLEngine or change the code manually.
published:2025-02-10T22:15:38.057


Instruction: Please provide detailed information about CVE-2025-25189

CVE:CVE-2025-25189
Description:The ZOO-Project is an open source processing platform. A reflected Cross-Site Scripting vulnerability exists in the ZOO-Project Web Processing Service (WPS) publish.py CGI script prior to commit 7a5ae1a. The script reflects user input from the `jobid` parameter in its HTTP response without proper HTML encoding or sanitization. When a victim visits a specially crafted URL pointing to this endpoint, arbitrary JavaScript code can be executed in their browser context. The vulnerability occurs because the CGI script directly outputs the query string parameters into the HTML response without escaping HTML special characters. An attacker can inject malicious JavaScript code through the `jobid` parameter which will be executed when rendered by the victim's browser. Commit 7a5ae1a contains a fix for the issue.
published:2025-02-10T22:15:38.190


Instruction: Please provide detailed information about CVE-2025-25190

CVE:CVE-2025-25190
Description:The ZOO-Project is an open source processing platform. The ZOO-Project Web Processing Service (WPS) Server contains a Cross-Site Scripting (XSS) vulnerability in its EchoProcess service prior to commit 7a5ae1a. The vulnerability exists because the EchoProcess service directly reflects user input in its output without proper sanitization when handling complex inputs.The service accepts various input formats including XML, JSON, and SVG, and returns the content based on the requested MIME type. When processing SVG content and returning it with the image/svg+xml MIME type, the server fails to sanitize potentially malicious JavaScript in attributes like onload, allowing arbitrary JavaScript execution in the victim's browser context. This vulnerability is particularly dangerous because it exists in a service specifically designed to echo back user input, and the lack of proper sanitization in combination with SVG handling creates a reliable XSS vector. Commit 7a5ae1a contains a fix for the issue.
published:2025-02-10T22:15:38.320


Instruction: Please provide detailed information about CVE-2025-25193

CVE:CVE-2025-25193
Description:Netty, an asynchronous, event-driven network application framework, has a vulnerability in versions up to and including 4.1.118.Final. An unsafe reading of environment file could potentially cause a denial of service in Netty. When loaded on an Windows application, Netty attempts to load a file that does not exist. If an attacker creates such a large file, the Netty application crash. A similar issue was previously reported as CVE-2024-47535. This issue was fixed, but the fix was incomplete in that null-bytes were not counted against the input limit. Commit d1fbda62d3a47835d3fb35db8bd42ecc205a5386 contains an updated fix.
published:2025-02-10T22:15:38.450


Instruction: Please provide detailed information about CVE-2025-1160

CVE:CVE-2025-1160
Description:A vulnerability was found in SourceCodester Employee Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file index.php. The manipulation of the argument username/password leads to use of default credentials. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-10T23:15:15.387


Instruction: Please provide detailed information about CVE-2025-1162

CVE:CVE-2025-1162
Description:A vulnerability classified as critical has been found in code-projects Job Recruitment 1.0. This affects an unknown part of the file /\_parse/load\_user-profile.php. The manipulation of the argument userhash leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-10T23:15:15.553


Instruction: Please provide detailed information about CVE-2025-25194

CVE:CVE-2025-25194
Description:Lemmy, a link aggregator and forum for the fediverse, is vulnerable to server-side request forgery via a dependency on activitypub_federation, a framework for ActivityPub federation in Rust. This vulnerability, which is present in versions 0.6.2 and prior of activitypub_federation and versions 0.19.8 and prior of Lemmy, allows a user to bypass any predefined hardcoded URL path or security anti-Localhost mechanism and perform an arbitrary GET request to any Host, Port and URL using a Webfinger Request. As of time of publication, a fix has not been made available.
published:2025-02-10T23:15:16.067


Instruction: Please provide detailed information about CVE-2025-1163

CVE:CVE-2025-1163
Description:A vulnerability classified as critical was found in code-projects Vehicle Parking Management System 1.0. This vulnerability affects the function login of the component Authentication. The manipulation of the argument username leads to stack-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used.
published:2025-02-11T00:15:29.230


Instruction: Please provide detailed information about CVE-2025-1164

CVE:CVE-2025-1164
Description:A vulnerability, which was classified as problematic, has been found in code-projects Police FIR Record Management System 1.0. This issue affects some unknown processing of the component Add Record Handler. The manipulation leads to stack-based buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used.
published:2025-02-11T00:15:29.403


Instruction: Please provide detailed information about CVE-2025-0054

CVE:CVE-2025-0054
Description:SAP NetWeaver Application Server Java does not sufficiently handle user input, resulting in a stored cross-site scripting vulnerability. The application allows attackers with basic user privileges to store a Javascript payload on the server, which could be later executed in the victim's web browser. With this the attacker might be able to read or modify information associated with the vulnerable web page.
published:2025-02-11T01:15:09.650


Instruction: Please provide detailed information about CVE-2025-0064

CVE:CVE-2025-0064
Description:Under specific conditions, the Central Management Console of the SAP BusinessObjects Business Intelligence platform allows an attacker with admin rights to generate or retrieve a secret passphrase, enabling them to impersonate any user in the system. This results in a high impact on confidentiality and integrity, with no impact on availability.
published:2025-02-11T01:15:09.803


Instruction: Please provide detailed information about CVE-2025-1165

CVE:CVE-2025-1165
Description:A vulnerability, which was classified as critical, was found in Lumsoft ERP 8. Affected is the function DoUpload/DoWebUpload of the file /Api/FileUploadApi.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-11T01:15:09.947


Instruction: Please provide detailed information about CVE-2025-23187

CVE:CVE-2025-23187
Description:Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an unauthenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability.
published:2025-02-11T01:15:10.117


Instruction: Please provide detailed information about CVE-2025-23189

CVE:CVE-2025-23189
Description:Due to missing authorization check in an RFC enabled function module in transaction SDCCN, an authenticated attacker could generate technical meta-data. This leads to a low impact on integrity. There is no impact on confidentiality or availability
published:2025-02-11T01:15:10.263