Instruction: Please provide detailed information about CVE-2025-22447

CVE:CVE-2025-22447
Description:Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege.
published:2025-03-06T04:15:25.377


Instruction: Please provide detailed information about CVE-2025-24864

CVE:CVE-2025-24864
Description:Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited, a non-administrative user on the remote PC may execute an arbitrary OS command with LocalSystem privilege.
published:2025-03-06T04:15:25.713


Instruction: Please provide detailed information about CVE-2025-1979

CVE:CVE-2025-1979
Description:Versions of the package ray before 2.43.0 are vulnerable to Insertion of Sensitive Information into Log File where the redis password is being logged in the standard logging. If the redis password is passed as an argument, it will be logged and could potentially leak the password.

This is only exploitable if:

1) Logging is enabled;

2) Redis is using password authentication;

3) Those logs are accessible to an attacker, who can reach that redis instance.

**Note:**

It is recommended that anyone who is running in this configuration should update to the latest version of Ray, then rotate their redis password.
published:2025-03-06T05:15:16.213


Instruction: Please provide detailed information about CVE-2025-20903

CVE:CVE-2025-20903
Description:Improper access control in SecSettingsIntelligence prior to SMR Mar-2025 Release 1 allows local attackers to launch privileged activities. User interaction is required for triggering this vulnerability.
published:2025-03-06T05:15:16.977


Instruction: Please provide detailed information about CVE-2025-20908

CVE:CVE-2025-20908
Description:Use of insufficiently random values in Auracast prior to SMR Mar-2025 Release 1 allows adjacent attackers to access Auracast broadcasting.
published:2025-03-06T05:15:17.150


Instruction: Please provide detailed information about CVE-2025-20909

CVE:CVE-2025-20909
Description:Use of implicit intent for sensitive communication in Settings prior to SMR Mar-2025 Release 1 allows local attackers to access sensitive information.
published:2025-03-06T05:15:17.307


Instruction: Please provide detailed information about CVE-2025-20910

CVE:CVE-2025-20910
Description:Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery.
published:2025-03-06T05:15:17.480


Instruction: Please provide detailed information about CVE-2025-20911

CVE:CVE-2025-20911
Description:Improper access control in sem_wifi service prior to SMR Mar-2025 Release 1 allows privileged local attackers to update MAC address of Galaxy Watch.
published:2025-03-06T05:15:17.653


Instruction: Please provide detailed information about CVE-2025-20912

CVE:CVE-2025-20912
Description:Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch.
published:2025-03-06T05:15:17.860


Instruction: Please provide detailed information about CVE-2025-20913

CVE:CVE-2025-20913
Description:Out-of-bounds read in applying binary of drawing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.037


Instruction: Please provide detailed information about CVE-2025-20914

CVE:CVE-2025-20914
Description:Out-of-bounds read in applying binary of hand writing content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.210


Instruction: Please provide detailed information about CVE-2025-20915

CVE:CVE-2025-20915
Description:Out-of-bounds read in applying binary of voice content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.387


Instruction: Please provide detailed information about CVE-2025-20916

CVE:CVE-2025-20916
Description:Out-of-bounds read in reading string of SPen in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.527


Instruction: Please provide detailed information about CVE-2025-20917

CVE:CVE-2025-20917
Description:Out-of-bounds read in applying binary of pdf content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.683


Instruction: Please provide detailed information about CVE-2025-20918

CVE:CVE-2025-20918
Description:Out-of-bounds read in applying extra data of base content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:18.883


Instruction: Please provide detailed information about CVE-2025-20919

CVE:CVE-2025-20919
Description:Out-of-bounds read in applying binary of video content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:19.050


Instruction: Please provide detailed information about CVE-2025-20920

CVE:CVE-2025-20920
Description:Out-of-bounds read in action link data in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:19.203


Instruction: Please provide detailed information about CVE-2025-20921

CVE:CVE-2025-20921
Description:Out-of-bounds read in applying binary of text content in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:19.347


Instruction: Please provide detailed information about CVE-2025-20922

CVE:CVE-2025-20922
Description:Out-of-bounds read in appending text paragraph in Samsung Notes prior to version 4.4.26.71 allows attackers to read out-of-bounds memory.
published:2025-03-06T05:15:19.533


Instruction: Please provide detailed information about CVE-2025-20923

CVE:CVE-2025-20923
Description:Improper access control in Galaxy Wearable prior to version 2.2.61.24112961 allows local attackers to launch arbitrary activity with Galaxy Wearable privilege.
published:2025-03-06T05:15:19.690


Instruction: Please provide detailed information about CVE-2025-20924

CVE:CVE-2025-20924
Description:Improper access control in Samsung Notes prior to version 4.4.26.71 allows physical attackers to access data across multiple user profiles.
published:2025-03-06T05:15:19.870


Instruction: Please provide detailed information about CVE-2025-20925

CVE:CVE-2025-20925
Description:Out-of-bounds read in applying binary of text data in Samsung Notes prior to version 4.4.26.71 allows local attackers to potentially read memory.
published:2025-03-06T05:15:20.093


Instruction: Please provide detailed information about CVE-2025-20926

CVE:CVE-2025-20926
Description:Improper export of Android application components in My Files prior to version 15.0.07.5 in Android 14 allows local attackers to access files with My Files' privilege.
published:2025-03-06T05:15:20.383


Instruction: Please provide detailed information about CVE-2025-20927

CVE:CVE-2025-20927
Description:Out-of-bounds read in parsing image data in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.
published:2025-03-06T05:15:20.547


Instruction: Please provide detailed information about CVE-2025-20928

CVE:CVE-2025-20928
Description:Out-of-bounds read in parsing wbmp image in Samsung Notes prior to vaersion 4.4.26.71 allows local attackers to access out-of-bounds memory.
published:2025-03-06T05:15:20.703


Instruction: Please provide detailed information about CVE-2025-20929

CVE:CVE-2025-20929
Description:Out-of-bounds write in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code.
published:2025-03-06T05:15:20.900


Instruction: Please provide detailed information about CVE-2025-20930

CVE:CVE-2025-20930
Description:Out-of-bounds read in parsing jpeg image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.
published:2025-03-06T05:15:21.063


Instruction: Please provide detailed information about CVE-2025-20931

CVE:CVE-2025-20931
Description:Out-of-bounds write in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to execute arbitrary code.
published:2025-03-06T05:15:21.210


Instruction: Please provide detailed information about CVE-2025-20932

CVE:CVE-2025-20932
Description:Out-of-bounds read in parsing rle of bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to혻read out-of-bounds memory.
published:2025-03-06T05:15:21.440


Instruction: Please provide detailed information about CVE-2025-20933

CVE:CVE-2025-20933
Description:Out-of-bounds read in parsing bmp image in Samsung Notes prior to version 4.4.26.71 allows local attackers to read out-of-bounds memory.
published:2025-03-06T05:15:21.607


Instruction: Please provide detailed information about CVE-2025-22623

CVE:CVE-2025-22623
Description:Ad Inserter - Ad Manager and AdSense Ads 2.8.0 was found to be vulnerable. The web application dynamically generates web content without validating the source of the potentially untrusted data in myapp/includes/dst/dst.php.
published:2025-03-06T05:15:21.790


Instruction: Please provide detailed information about CVE-2025-1540

CVE:CVE-2025-1540
Description:An issue has been discovered in GitLab CE/EE for Self-Managed and Dedicated instances affecting all versions from 17.5 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2. It was possible for a user added as an External to read and clone internal projects under certain circumstances."
published:2025-03-06T09:15:26.317


Instruction: Please provide detailed information about CVE-2025-1672

CVE:CVE-2025-1672
Description:The Notibar – Notification Bar for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.1.5 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfiltered_html has been disabled.
published:2025-03-06T10:15:11.897


Instruction: Please provide detailed information about CVE-2025-1383

CVE:CVE-2025-1383
Description:The Podlove Podcast Publisher plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.2. This is due to missing or incorrect nonce validation on the ajax_transcript_delete() function. This makes it possible for unauthenticated attackers to delete arbitrary episode transcripts via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-03-06T12:15:35.937


Instruction: Please provide detailed information about CVE-2025-1666

CVE:CVE-2025-1666
Description:The Cookie banner plugin for WordPress – Cookiebot CMP by Usercentrics plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the send_uninstall_survey() function in all versions up to, and including, 4.4.1. This makes it possible for authenticated attackers, with Subscriber-level access and above, to submit the uninstall survey on behalf of a website.
published:2025-03-06T12:15:36.117


Instruction: Please provide detailed information about CVE-2025-1696

CVE:CVE-2025-1696
Description:A vulnerability exists in Docker Desktop prior to version 4.39.0 that could lead to the unintentional disclosure of sensitive information via application logs. In affected versions, proxy configuration data—potentially including sensitive details—was written to log files in clear text whenever an HTTP GET request was made through a proxy. An attacker with read access to these logs could obtain the proxy information and leverage it for further attacks or unauthorized access. Starting with version 4.39.0, Docker Desktop no longer logs the proxy string, thereby mitigating this risk.
published:2025-03-06T12:15:36.293


Instruction: Please provide detailed information about CVE-2025-2045

CVE:CVE-2025-2045
Description:Improper authorization in GitLab EE affecting all versions from 17.7 prior to 17.7.6, 17.8 prior to 17.8.4, 17.9 prior to 17.9.1  allow users with limited permissions to access to potentially sensitive project analytics data.
published:2025-03-06T13:15:12.553


Instruction: Please provide detailed information about CVE-2025-0877

CVE:CVE-2025-0877
Description:Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in AtaksAPP Reservation Management System allows Cross-Site Scripting (XSS).This issue affects Reservation Management System: before 4.2.3.
published:2025-03-06T14:15:36.107


Instruction: Please provide detailed information about CVE-2025-25450

CVE:CVE-2025-25450
Description:An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the deactivation of the activated second factor to the /session endpoint
published:2025-03-06T15:15:17.443


Instruction: Please provide detailed information about CVE-2025-25451

CVE:CVE-2025-25451
Description:An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a physically proximate attacker to escalate privileges via the "2fa_authorized" Local Storage key
published:2025-03-06T15:15:17.553


Instruction: Please provide detailed information about CVE-2025-25452

CVE:CVE-2025-25452
Description:An issue in TAAGSOLUTIONS GmbH MyTaag v.2024-11-24 and before allows a remote attacker to escalate privileges via the "/user" endpoint
published:2025-03-06T15:15:17.667


Instruction: Please provide detailed information about CVE-2025-2029

CVE:CVE-2025-2029
Description:A vulnerability was found in MicroDicom DICOM Viewer 2025.1 Build 3321. It has been classified as critical. Affected is an unknown function of the file mDicom.exe. The manipulation leads to memory corruption. The attack needs to be approached locally. It is recommended to upgrade the affected component. The vendor quickly confirmed the existence of the vulnerability and fixed it in the latest beta.
published:2025-03-06T15:15:17.943


Instruction: Please provide detailed information about CVE-2025-2030

CVE:CVE-2025-2030
Description:A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform up to 20250224. It has been rated as critical. Affected by this issue is some unknown functionality of the file /security/addUser.jsp. The manipulation of the argument groupId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-06T15:15:18.127


Instruction: Please provide detailed information about CVE-2025-21825

CVE:CVE-2025-21825
Description:In the Linux kernel, the following vulnerability has been resolved:  bpf: Cancel the running bpf_timer through kworker for PREEMPT_RT  During the update procedure, when overwrite element in a pre-allocated htab, the freeing of old_element is protected by the bucket lock. The reason why the bucket lock is necessary is that the old_element has already been stashed in htab->extra_elems after alloc_htab_elem() returns. If freeing the old_element after the bucket lock is unlocked, the stashed element may be reused by concurrent update procedure and the freeing of old_element will run concurrently with the reuse of the old_element. However, the invocation of check_and_free_fields() may acquire a spin-lock which violates the lockdep rule because its caller has already held a raw-spin-lock (bucket lock). The following warning will be reported when such race happens:    BUG: scheduling while atomic: test_progs/676/0x00000003   3 locks held by test_progs/676:   #0: ffffffff864b0240 (rcu_read_lock_trace){....}-{0:0}, at: bpf_prog_test_run_syscall+0x2c0/0x830   #1: ffff88810e961188 (&htab->lockdep_key){....}-{2:2}, at: htab_map_update_elem+0x306/0x1500   #2: ffff8881f4eac1b8 (&base->softirq_expiry_lock){....}-{2:2}, at: hrtimer_cancel_wait_running+0xe9/0x1b0   Modules linked in: bpf_testmod(O)   Preemption disabled at:   [<ffffffff817837a3>] htab_map_update_elem+0x293/0x1500   CPU: 0 UID: 0 PID: 676 Comm: test_progs Tainted: G ... 6.12.0+ #11   Tainted: [W]=WARN, [O]=OOT_MODULE   Hardware name: QEMU Standard PC (i440FX + PIIX, 1996)...   Call Trace:   <TASK>   dump_stack_lvl+0x57/0x70   dump_stack+0x10/0x20   __schedule_bug+0x120/0x170   __schedule+0x300c/0x4800   schedule_rtlock+0x37/0x60   rtlock_slowlock_locked+0x6d9/0x54c0   rt_spin_lock+0x168/0x230   hrtimer_cancel_wait_running+0xe9/0x1b0   hrtimer_cancel+0x24/0x30   bpf_timer_delete_work+0x1d/0x40   bpf_timer_cancel_and_free+0x5e/0x80   bpf_obj_free_fields+0x262/0x4a0   check_and_free_fields+0x1d0/0x280   htab_map_update_elem+0x7fc/0x1500   bpf_prog_9f90bc20768e0cb9_overwrite_cb+0x3f/0x43   bpf_prog_ea601c4649694dbd_overwrite_timer+0x5d/0x7e   bpf_prog_test_run_syscall+0x322/0x830   __sys_bpf+0x135d/0x3ca0   __x64_sys_bpf+0x75/0xb0   x64_sys_call+0x1b5/0xa10   do_syscall_64+0x3b/0xc0   entry_SYSCALL_64_after_hwframe+0x4b/0x53   ...   </TASK>  It seems feasible to break the reuse and refill of per-cpu extra_elems into two independent parts: reuse the per-cpu extra_elems with bucket lock being held and refill the old_element as per-cpu extra_elems after the bucket lock is unlocked. However, it will make the concurrent overwrite procedures on the same CPU return unexpected -E2BIG error when the map is full.  Therefore, the patch fixes the lock problem by breaking the cancelling of bpf_timer into two steps for PREEMPT_RT: 1) use hrtimer_try_to_cancel() and check its return value 2) if the timer is running, use hrtimer_cancel() through a kworker to    cancel it again Considering that the current implementation of hrtimer_cancel() will try to acquire a being held softirq_expiry_lock when the current timer is running, these steps above are reasonable. However, it also has downside. When the timer is running, the cancelling of the timer is delayed when releasing the last map uref. The delay is also fixable (e.g., break the cancelling of bpf timer into two parts: one part in locked scope, another one in unlocked scope), it can be revised later if necessary.  It is a bit hard to decide the right fix tag. One reason is that the problem depends on PREEMPT_RT which is enabled in v6.12. Considering the softirq_expiry_lock lock exists since v5.4 and bpf_timer is introduced in v5.15, the bpf_timer commit is used in the fixes tag and an extra depends-on tag is added to state the dependency on PREEMPT_RT.  Depends-on: v6.12+ with PREEMPT_RT enabled
published:2025-03-06T16:15:54.753


Instruction: Please provide detailed information about CVE-2025-21826

CVE:CVE-2025-21826
Description:In the Linux kernel, the following vulnerability has been resolved:  netfilter: nf_tables: reject mismatching sum of field_len with set key length  The field length description provides the length of each separated key field in the concatenation, each field gets rounded up to 32-bits to calculate the pipapo rule width from pipapo_init(). The set key length provides the total size of the key aligned to 32-bits.  Register-based arithmetics still allows for combining mismatching set key length and field length description, eg. set key length 10 and field description [ 5, 4 ] leading to pipapo width of 12.
published:2025-03-06T16:15:54.863


Instruction: Please provide detailed information about CVE-2025-21827

CVE:CVE-2025-21827
Description:In the Linux kernel, the following vulnerability has been resolved:  Bluetooth: btusb: mediatek: Add locks for usb_driver_claim_interface()  The documentation for usb_driver_claim_interface() says that "the device lock" is needed when the function is called from places other than probe(). This appears to be the lock for the USB interface device. The Mediatek btusb code gets called via this path:    Workqueue: hci0 hci_power_on [bluetooth]   Call trace:    usb_driver_claim_interface    btusb_mtk_claim_iso_intf    btusb_mtk_setup    hci_dev_open_sync    hci_power_on    process_scheduled_works    worker_thread    kthread  With the above call trace the device lock hasn't been claimed. Claim it.  Without this fix, we'd sometimes see the error "Failed to claim iso interface". Sometimes we'd even see worse errors, like a NULL pointer dereference (where `intf->dev.driver` was NULL) with a trace like:    Call trace:    usb_suspend_both    usb_runtime_suspend    __rpm_callback    rpm_suspend    pm_runtime_work    process_scheduled_works  Both errors appear to be fixed with the proper locking.
published:2025-03-06T16:15:54.967


Instruction: Please provide detailed information about CVE-2025-21828

CVE:CVE-2025-21828
Description:In the Linux kernel, the following vulnerability has been resolved:  wifi: mac80211: don't flush non-uploaded STAs  If STA state is pre-moved to AUTHORIZED (such as in IBSS scenarios) and insertion fails, the station is freed. In this case, the driver never knew about the station, so trying to flush it is unexpected and may crash.  Check if the sta was uploaded to the driver before and fix this.
published:2025-03-06T16:15:55.070


Instruction: Please provide detailed information about CVE-2025-2031

CVE:CVE-2025-2031
Description:A vulnerability classified as critical has been found in ChestnutCMS up to 1.5.2. This affects the function uploadFile of the file /dev-api/cms/file/upload. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T16:15:55.727


Instruction: Please provide detailed information about CVE-2025-0337

CVE:CVE-2025-0337
Description:ServiceNow has addressed an authorization bypass vulnerability that was identified in the Washington release of the Now Platform. This vulnerability, if exploited, potentially could enable an authenticated user to access unauthorized data stored within the Now Platform that the user otherwise would not be entitled to access.   This issue is addressed in the listed patches and family release, which have been made available to hosted and self-hosted customers, as well as partners.
published:2025-03-06T17:15:22.303


Instruction: Please provide detailed information about CVE-2025-21829

CVE:CVE-2025-21829
Description:In the Linux kernel, the following vulnerability has been resolved:  RDMA/rxe: Fix the warning "__rxe_cleanup+0x12c/0x170 [rdma_rxe]"  The Call Trace is as below: "   <TASK>   ? show_regs.cold+0x1a/0x1f   ? __rxe_cleanup+0x12c/0x170 [rdma_rxe]   ? __warn+0x84/0xd0   ? __rxe_cleanup+0x12c/0x170 [rdma_rxe]   ? report_bug+0x105/0x180   ? handle_bug+0x46/0x80   ? exc_invalid_op+0x19/0x70   ? asm_exc_invalid_op+0x1b/0x20   ? __rxe_cleanup+0x12c/0x170 [rdma_rxe]   ? __rxe_cleanup+0x124/0x170 [rdma_rxe]   rxe_destroy_qp.cold+0x24/0x29 [rdma_rxe]   ib_destroy_qp_user+0x118/0x190 [ib_core]   rdma_destroy_qp.cold+0x43/0x5e [rdma_cm]   rtrs_cq_qp_destroy.cold+0x1d/0x2b [rtrs_core]   rtrs_srv_close_work.cold+0x1b/0x31 [rtrs_server]   process_one_work+0x21d/0x3f0   worker_thread+0x4a/0x3c0   ? process_one_work+0x3f0/0x3f0   kthread+0xf0/0x120   ? kthread_complete_and_exit+0x20/0x20   ret_from_fork+0x22/0x30   </TASK> " When too many rdma resources are allocated, rxe needs more time to handle these rdma resources. Sometimes with the current timeout, rxe can not release the rdma resources correctly.  Compared with other rdma drivers, a bigger timeout is used.
published:2025-03-06T17:15:22.820


Instruction: Please provide detailed information about CVE-2025-21830

CVE:CVE-2025-21830
Description:In the Linux kernel, the following vulnerability has been resolved:  landlock: Handle weird files  A corrupted filesystem (e.g. bcachefs) might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files.
published:2025-03-06T17:15:22.943


Instruction: Please provide detailed information about CVE-2025-21831

CVE:CVE-2025-21831
Description:In the Linux kernel, the following vulnerability has been resolved:  PCI: Avoid putting some root ports into D3 on TUXEDO Sirius Gen1  commit 9d26d3a8f1b0 ("PCI: Put PCIe ports into D3 during suspend") sets the policy that all PCIe ports are allowed to use D3.  When the system is suspended if the port is not power manageable by the platform and won't be used for wakeup via a PME this sets up the policy for these ports to go into D3hot.  This policy generally makes sense from an OSPM perspective but it leads to problems with wakeup from suspend on the TUXEDO Sirius 16 Gen 1 with a specific old BIOS. This manifests as a system hang.  On the affected Device + BIOS combination, add a quirk for the root port of the problematic controller to ensure that these root ports are not put into D3hot at suspend.  This patch is based on    https://lore.kernel.org/linux-pci/20230708214457.1229-2-mario.limonciello@amd.com  but with the added condition both in the documentation and in the code to apply only to the TUXEDO Sirius 16 Gen 1 with a specific old BIOS and only the affected root ports.
published:2025-03-06T17:15:23.060


Instruction: Please provide detailed information about CVE-2025-21832

CVE:CVE-2025-21832
Description:In the Linux kernel, the following vulnerability has been resolved:  block: don't revert iter for -EIOCBQUEUED  blkdev_read_iter() has a few odd checks, like gating the position and count adjustment on whether or not the result is bigger-than-or-equal to zero (where bigger than makes more sense), and not checking the return value of blkdev_direct_IO() before doing an iov_iter_revert(). The latter can lead to attempting to revert with a negative value, which when passed to iov_iter_revert() as an unsigned value will lead to throwing a WARN_ON() because unroll is bigger than MAX_RW_COUNT.  Be sane and don't revert for -EIOCBQUEUED, like what is done in other spots.
published:2025-03-06T17:15:23.177


Instruction: Please provide detailed information about CVE-2025-21833

CVE:CVE-2025-21833
Description:In the Linux kernel, the following vulnerability has been resolved:  iommu/vt-d: Avoid use of NULL after WARN_ON_ONCE  There is a WARN_ON_ONCE to catch an unlikely situation when domain_remove_dev_pasid can't find the `pasid`. In case it nevertheless happens we must avoid using a NULL pointer.
published:2025-03-06T17:15:23.293


Instruction: Please provide detailed information about CVE-2025-21834

CVE:CVE-2025-21834
Description:In the Linux kernel, the following vulnerability has been resolved:  seccomp: passthrough uretprobe systemcall without filtering  When attaching uretprobes to processes running inside docker, the attached process is segfaulted when encountering the retprobe.  The reason is that now that uretprobe is a system call the default seccomp filters in docker block it as they only allow a specific set of known syscalls. This is true for other userspace applications which use seccomp to control their syscall surface.  Since uretprobe is a "kernel implementation detail" system call which is not used by userspace application code directly, it is impractical and there's very little point in forcing all userspace applications to explicitly allow it in order to avoid crashing tracked processes.  Pass this systemcall through seccomp without depending on configuration.  Note: uretprobe is currently only x86_64 and isn't expected to ever be supported in i386.  [kees: minimized changes for easier backporting, tweaked commit log]
published:2025-03-06T17:15:23.397


Instruction: Please provide detailed information about CVE-2025-2032

CVE:CVE-2025-2032
Description:A vulnerability classified as problematic was found in ChestnutCMS 1.5.2. This vulnerability affects the function renameFile of the file /cms/file/rename. The manipulation of the argument rename leads to path traversal. The exploit has been disclosed to the public and may be used.
published:2025-03-06T17:15:24.297


Instruction: Please provide detailed information about CVE-2025-2033

CVE:CVE-2025-2033
Description:A vulnerability, which was classified as critical, was found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /user_dashboard/view_donor.php. The manipulation of the argument donor_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T17:15:24.490


Instruction: Please provide detailed information about CVE-2025-2034

CVE:CVE-2025-2034
Description:A vulnerability has been found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php?cid=1. The manipulation of the argument classname/capacity/classtiming leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T18:15:43.230


Instruction: Please provide detailed information about CVE-2025-2035

CVE:CVE-2025-2035
Description:A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /customer_register.php. The manipulation of the argument name leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T18:15:43.457


Instruction: Please provide detailed information about CVE-2025-24796

CVE:CVE-2025-24796
Description:Collabora Online is a collaborative online office suite based on LibreOffice. Macro support is disabled by default in Collabora Online, but can be enabled by an administrator. Collabora Online typically hosts each document instance within a jail and is allowed to download content from locations controlled by the net.lok_allow configuration option, which by default include the private IP ranges to enable access to the local network. If enabled, macros were allowed run executable binaries. By combining an ability to host executables, typically in the local network, in an allowed accessible location, with a macro enabled Collabora Online, it was then possible to install arbitrary binaries within the jail and execute them. These executables are restricted to the same jail file system and user as the document instance but can be used to bypass the additional limits on what network hosts are accessible and provide more flexibility as a platform for further attempts. This is issue is fixed in 24.04.12.4, 23.05.19, 22.05.25 and later macros.
published:2025-03-06T19:15:26.953


Instruction: Please provide detailed information about CVE-2025-25191

CVE:CVE-2025-25191
Description:Group-Office is an enterprise CRM and groupware tool. This Stored XSS vulnerability exists where user input in the Name field is not properly sanitized before being stored. This vulnerability is fixed in 6.8.100.
published:2025-03-06T19:15:27.113


Instruction: Please provide detailed information about CVE-2025-25294

CVE:CVE-2025-25294
Description:Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. In all Envoy Gateway versions prior to 1.2.7 and 1.3.1 a default Envoy Proxy access log configuration is used. This format is vulnerable to log injection attacks. If the attacker uses a specially crafted user-agent which performs json injection, then he could add and overwrite fields to the access log. This vulnerability is fixed in 1.3.1 and 1.2.7. One can overwrite the old text based default format with JSON formatter by modifying the "EnvoyProxy.spec.telemetry.accessLog" setting.
published:2025-03-06T19:15:27.267


Instruction: Please provide detailed information about CVE-2025-25361

CVE:CVE-2025-25361
Description:An arbitrary file upload vulnerability in the component /cms/CmsWebFileAdminController.java of PublicCMS v4.0.202406 allows attackers to execute arbitrary code via uploading a crafted svg or xml file.
published:2025-03-06T19:15:27.410


Instruction: Please provide detailed information about CVE-2025-25381

CVE:CVE-2025-25381
Description:Incorrect access control in the KSRTC AWATAR app of Karnataka State Road Transport Corporation v1.3.0 allows to view sensitive information such as usernames and passwords.
published:2025-03-06T19:15:27.500


Instruction: Please provide detailed information about CVE-2025-26167

CVE:CVE-2025-26167
Description:Buffalo LS520D 4.53 is vulnerable to Arbitrary file read, which allows unauthenticated attackers to access the NAS web UI and read arbitrary internal files.
published:2025-03-06T19:15:27.593


Instruction: Please provide detailed information about CVE-2025-26699

CVE:CVE-2025-26699
Description:An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20. The django.utils.text.wrap() method and wordwrap template filter are subject to a potential denial-of-service attack when used with very long strings.
published:2025-03-06T19:15:27.683


Instruction: Please provide detailed information about CVE-2025-27506

CVE:CVE-2025-27506
Description:NocoDB is software for building databases as spreadsheets. The API endpoint related to the password reset function is vulnerable to Reflected Cross-Site-Scripting. The endpoint /api/v1/db/auth/password/reset/:tokenId is vulnerable to Reflected Cross-Site-Scripting. The flaw occurs due to implementation of the client-side template engine ejs, specifically on file resetPassword.ts where the template is using the insecure function “<%-“, which is rendered by the function renderPasswordReset. This vulnerability is fixed in 0.258.0.
published:2025-03-06T19:15:27.833


Instruction: Please provide detailed information about CVE-2025-27509

CVE:CVE-2025-27509
Description:fleetdm/fleet is an open source device management, built on osquery. In vulnerable versions of Fleet, an attacker could craft a specially-formed SAML response to forge authentication assertions, provision a new administrative user account if Just-In-Time (JIT) provisioning is enabled, or create new accounts tied to forged assertions if f MDM enrollment is enabled. This vulnerability is fixed in 4.64.2, 4.63.2, 4.62.4, and 4.58.1.
published:2025-03-06T19:15:27.973


Instruction: Please provide detailed information about CVE-2025-27600

CVE:CVE-2025-27600
Description:FastGPT is a knowledge-based platform built on the LLMs. Since the web crawling plug-in does not perform intranet IP verification, an attacker can initiate an intranet IP request, causing the system to initiate a request through the intranet and potentially obtain some private data on the intranet. This issue is fixed in 4.9.0.
published:2025-03-06T19:15:28.117


Instruction: Please provide detailed information about CVE-2025-2036

CVE:CVE-2025-2036
Description:A vulnerability was found in s-a-zhd Ecommerce-Website-using-PHP 1.0. It has been classified as critical. This affects an unknown part of the file details.php. The manipulation of the argument pro_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T19:15:28.373


Instruction: Please provide detailed information about CVE-2025-2037

CVE:CVE-2025-2037
Description:A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /user_dashboard/delete_requester.php. The manipulation of the argument requester_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T19:15:28.540


Instruction: Please provide detailed information about CVE-2025-25497

CVE:CVE-2025-25497
Description:An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of server-side validation. This vulnerability enables account ownership reassignment to or away from any user.
published:2025-03-06T20:15:38.290


Instruction: Please provide detailed information about CVE-2025-2038

CVE:CVE-2025-2038
Description:A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /upload/. The manipulation leads to exposure of information through directory listing. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T20:15:38.583


Instruction: Please provide detailed information about CVE-2025-2039

CVE:CVE-2025-2039
Description:A vulnerability classified as critical has been found in code-projects Blood Bank Management System 1.0. Affected is an unknown function of the file /admin/delete_members.php. The manipulation of the argument member_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T20:15:38.753


Instruction: Please provide detailed information about CVE-2025-2040

CVE:CVE-2025-2040
Description:A vulnerability classified as critical was found in zhijiantianya ruoyi-vue-pro 2.4.1. Affected by this vulnerability is an unknown functionality of the file /admin-api/bpm/model/deploy. The manipulation leads to improper neutralization of special elements used in a template engine. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T20:15:38.920


Instruction: Please provide detailed information about CVE-2025-25763

CVE:CVE-2025-25763
Description:crmeb CRMEB-KY v5.4.0 and before has a SQL Injection vulnerability at getRead() in /system/SystemDatabackupServices.php
published:2025-03-06T21:15:15.020


Instruction: Please provide detailed information about CVE-2025-2041

CVE:CVE-2025-2041
Description:A vulnerability, which was classified as critical, has been found in s-a-zhd Ecommerce-Website-using-PHP 1.0. Affected by this issue is some unknown functionality of the file /shop.php. The manipulation of the argument p_cat leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T21:15:16.220


Instruction: Please provide detailed information about CVE-2025-2042

CVE:CVE-2025-2042
Description:A vulnerability has been found in huang-yk student-manage 1.0 and classified as problematic. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T21:15:16.397


Instruction: Please provide detailed information about CVE-2025-2043

CVE:CVE-2025-2043
Description:A vulnerability was found in LinZhaoguan pb-cms 1.0.0 and classified as critical. This issue affects some unknown processing of the file /admin#themes of the component Add New Topic Handler. The manipulation of the argument Topic Key leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T22:15:35.773


Instruction: Please provide detailed information about CVE-2025-2044

CVE:CVE-2025-2044
Description:A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/delete_bloodGroup.php. The manipulation of the argument blood_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T22:15:35.957


Instruction: Please provide detailed information about CVE-2025-2046

CVE:CVE-2025-2046
Description:A vulnerability was found in SourceCodester Best Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/print1.php. The manipulation of the argument id leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T22:15:36.117


Instruction: Please provide detailed information about CVE-2025-27598

CVE:CVE-2025-27598
Description:ImageSharp is a 2D graphics API. An Out-of-bounds Write vulnerability has been found in the ImageSharp gif decoder, allowing attackers to cause a crash using a specially crafted gif. This can potentially lead to denial of service. The problem has been patched. All users are advised to upgrade to v3.1.7 or v2.1.10.
published:2025-03-06T23:15:12.183


Instruction: Please provide detailed information about CVE-2025-2047

CVE:CVE-2025-2047
Description:A vulnerability was found in PHPGurukul Art Gallery Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /search.php. The manipulation of the argument search leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T23:15:12.343


Instruction: Please provide detailed information about CVE-2025-2049

CVE:CVE-2025-2049
Description:A vulnerability classified as problematic has been found in code-projects Blood Bank System 1.0. Affected is an unknown function of the file AB+.php. The manipulation of the argument Bloodname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-06T23:15:12.523


Instruction: Please provide detailed information about CVE-2025-1121

CVE:CVE-2025-1121
Description:Privilege escalation in Installer and Recovery image handling in Google ChromeOS 123.0.6312.112 on device allows an attacker with physical access to gain root code execution and potentially unenroll enterprise-managed devices via a specially crafted recovery image.
published:2025-03-07T00:15:34.360


Instruction: Please provide detailed information about CVE-2025-2050

CVE:CVE-2025-2050
Description:A vulnerability classified as critical was found in PHPGurukul User Registration & Login and User Management System 3.3. Affected by this vulnerability is an unknown functionality of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T00:15:35.243


Instruction: Please provide detailed information about CVE-2025-2051

CVE:CVE-2025-2051
Description:A vulnerability has been found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /search-visitor.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T01:15:12.963


Instruction: Please provide detailed information about CVE-2025-2052

CVE:CVE-2025-2052
Description:A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /forgot-password.php. The manipulation of the argument contactno leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T01:15:13.173


Instruction: Please provide detailed information about CVE-2025-2053

CVE:CVE-2025-2053
Description:A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /visitor-detail.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T01:15:13.373


Instruction: Please provide detailed information about CVE-2025-0748

CVE:CVE-2025-0748
Description:The Homey theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.4.3. This is due to missing or incorrect nonce validation on the 'homey_verify_user_manually' function. This makes it possible for unauthenticated attackers to update verify an user via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-03-07T02:15:37.667


Instruction: Please provide detailed information about CVE-2025-0749

CVE:CVE-2025-0749
Description:The Homey theme for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.4.3. This is due to the 'verification_id' value being set to empty, and the not empty check is missing in the dashboard user profile page. This makes it possible for unauthenticated attackers to log in to the first verified user.
published:2025-03-07T02:15:37.820


Instruction: Please provide detailed information about CVE-2025-2054

CVE:CVE-2025-2054
Description:A vulnerability was found in code-projects Blood Bank Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit_state.php. The manipulation of the argument state_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T02:15:38.060


Instruction: Please provide detailed information about CVE-2025-2057

CVE:CVE-2025-2057
Description:A vulnerability, which was classified as critical, was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/about-us.php. The manipulation of the argument pagedes leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T02:15:38.237


Instruction: Please provide detailed information about CVE-2025-2058

CVE:CVE-2025-2058
Description:A vulnerability has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/search.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T02:15:38.413


Instruction: Please provide detailed information about CVE-2025-2059

CVE:CVE-2025-2059
Description:A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/booking-details.php. The manipulation of the argument ambulanceregnum leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T02:15:38.600


Instruction: Please provide detailed information about CVE-2025-26708

CVE:CVE-2025-26708
Description:There is a configuration defect vulnerability in ZTELink 5.4.9 for iOS. This vulnerability is caused by a flaw in the WiFi parameter configuration of the ZTELink. An attacker can obtain unauthorized access to the WiFi service.
published:2025-03-07T03:15:33.307


Instruction: Please provide detailed information about CVE-2025-2060

CVE:CVE-2025-2060
Description:A vulnerability was found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. It has been classified as critical. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T03:15:33.457


Instruction: Please provide detailed information about CVE-2025-2061

CVE:CVE-2025-2061
Description:A vulnerability was found in code-projects Online Ticket Reservation System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /passenger.php. The manipulation of the argument name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T03:15:33.630


Instruction: Please provide detailed information about CVE-2025-2062

CVE:CVE-2025-2062
Description:A vulnerability classified as critical has been found in projectworlds Life Insurance Management System 1.0. Affected is an unknown function of the file /clientStatus.php. The manipulation of the argument client_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T04:15:08.933


Instruction: Please provide detailed information about CVE-2025-2063

CVE:CVE-2025-2063
Description:A vulnerability classified as critical was found in projectworlds Life Insurance Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /deleteNominee.php. The manipulation of the argument nominee_id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T04:15:10.060


Instruction: Please provide detailed information about CVE-2025-2064

CVE:CVE-2025-2064
Description:A vulnerability, which was classified as critical, has been found in projectworlds Life Insurance Management System 1.0. Affected by this issue is some unknown functionality of the file /deletePayment.php. The manipulation of the argument recipt_no leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T04:15:10.247


Instruction: Please provide detailed information about CVE-2025-2065

CVE:CVE-2025-2065
Description:A vulnerability, which was classified as critical, was found in projectworlds Life Insurance Management System 1.0. This affects an unknown part of the file /editAgent.php. The manipulation of the argument agent_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T04:15:10.447


Instruction: Please provide detailed information about CVE-2025-2066

CVE:CVE-2025-2066
Description:A vulnerability has been found in projectworlds Life Insurance Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /updateAgent.php. The manipulation of the argument agent_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T05:15:17.293


Instruction: Please provide detailed information about CVE-2025-2067

CVE:CVE-2025-2067
Description:A vulnerability was found in projectworlds Life Insurance Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T05:15:17.527


Instruction: Please provide detailed information about CVE-2025-27795

CVE:CVE-2025-27795
Description:ReadJXLImage in JXL in GraphicsMagick before 1.3.46 lacks image dimension resource limits.
published:2025-03-07T06:15:33.273


Instruction: Please provide detailed information about CVE-2025-27796

CVE:CVE-2025-27796
Description:ReadWPGImage in WPG in GraphicsMagick before 1.3.46 mishandles palette buffer allocation, resulting in out-of-bounds access to heap memory in ReadBlob.
published:2025-03-07T06:15:35.620


Instruction: Please provide detailed information about CVE-2025-1475

CVE:CVE-2025-1475
Description:The WPCOM Member plugin for WordPress is vulnerable to authentication bypass in all versions up to, and including, 1.7.5. This is due to insufficient verification on the 'user_phone' parameter when logging in. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, if SMS login is enabled.
published:2025-03-07T07:15:23.343


Instruction: Please provide detailed information about CVE-2025-0863

CVE:CVE-2025-0863
Description:The Flexmls® IDX Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'idx_frame' shortcode in all versions up to, and including, 3.14.27 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-07T08:15:40.827


Instruction: Please provide detailed information about CVE-2025-1309

CVE:CVE-2025-1309
Description:The UiPress lite | Effortless custom dashboards, admin themes and pages plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the uip_save_form_as_option() function in all versions up to, and including, 3.5.04. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
published:2025-03-07T08:15:42.017


Instruction: Please provide detailed information about CVE-2025-26331

CVE:CVE-2025-26331
Description:Dell ThinOS 2411 and prior, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution.
published:2025-03-07T08:15:43.040


Instruction: Please provide detailed information about CVE-2025-27816

CVE:CVE-2025-27816
Description:A vulnerability was discovered in the Arctera InfoScale 7.0 through 8.0.2 where a .NET remoting endpoint can be exploited due to the insecure deserialization of potentially untrusted messages. The vulnerability is present in the Windows Plugin_Host service, which runs on all the servers where InfoScale is installed. The service is used only when applications are configured for Disaster Recovery (DR) using the DR wizard. Disabling the Plugin_Host service manually will eliminate the vulnerability.
published:2025-03-07T08:15:44.527


Instruction: Please provide detailed information about CVE-2025-0959

CVE:CVE-2025-0959
Description:The Eventer - WordPress Event & Booking Manager Plugin plugin for WordPress is vulnerable to SQL Injection via the reg_id parameter in all versions up to, and including, 3.9.9.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-03-07T09:15:16.153


Instruction: Please provide detailed information about CVE-2025-1315

CVE:CVE-2025-1315
Description:The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.
published:2025-03-07T09:15:16.313


Instruction: Please provide detailed information about CVE-2025-21835

CVE:CVE-2025-21835
Description:In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: f_midi: fix MIDI Streaming descriptor lengths  While the MIDI jacks are configured correctly, and the MIDIStreaming endpoint descriptors are filled with the correct information, bNumEmbMIDIJack and bLength are set incorrectly in these descriptors.  This does not matter when the numbers of in and out ports are equal, but when they differ the host will receive broken descriptors with uninitialized stack memory leaking into the descriptor for whichever value is smaller.  The precise meaning of "in" and "out" in the port counts is not clearly defined and can be confusing.  But elsewhere the driver consistently uses this to match the USB meaning of IN and OUT viewed from the host, so that "in" ports send data to the host and "out" ports receive data from it.
published:2025-03-07T09:15:16.473


Instruction: Please provide detailed information about CVE-2025-21836

CVE:CVE-2025-21836
Description:In the Linux kernel, the following vulnerability has been resolved:  io_uring/kbuf: reallocate buf lists on upgrade  IORING_REGISTER_PBUF_RING can reuse an old struct io_buffer_list if it was created for legacy selected buffer and has been emptied. It violates the requirement that most of the field should stay stable after publish. Always reallocate it instead.
published:2025-03-07T09:15:16.600


Instruction: Please provide detailed information about CVE-2025-21837

CVE:CVE-2025-21837
Description:In the Linux kernel, the following vulnerability has been resolved:  io_uring/uring_cmd: unconditionally copy SQEs at prep time  This isn't generally necessary, but conditions have been observed where SQE data is accessed from the original SQE after prep has been done and outside of the initial issue. Opcode prep handlers must ensure that any SQE related data is stable beyond the prep phase, but uring_cmd is a bit special in how it handles the SQE which makes it susceptible to reading stale data. If the application has reused the SQE before the original completes, then that can lead to data corruption.  Down the line we can relax this again once uring_cmd has been sanitized a bit, and avoid unnecessarily copying the SQE.
published:2025-03-07T09:15:16.710


Instruction: Please provide detailed information about CVE-2025-21838

CVE:CVE-2025-21838
Description:In the Linux kernel, the following vulnerability has been resolved:  usb: gadget: core: flush gadget workqueue after device removal  device_del() can lead to new work being scheduled in gadget->work workqueue. This is observed, for example, with the dwc3 driver with the following call stack:   device_del()     gadget_unbind_driver()       usb_gadget_disconnect_locked()         dwc3_gadget_pullup() 	  dwc3_gadget_soft_disconnect() 	    usb_gadget_set_state() 	      schedule_work(&gadget->work)  Move flush_work() after device_del() to ensure the workqueue is cleaned up.
published:2025-03-07T09:15:16.810


Instruction: Please provide detailed information about CVE-2025-21839

CVE:CVE-2025-21839
Description:In the Linux kernel, the following vulnerability has been resolved:  KVM: x86: Load DR6 with guest value only before entering .vcpu_run() loop  Move the conditional loading of hardware DR6 with the guest's DR6 value out of the core .vcpu_run() loop to fix a bug where KVM can load hardware with a stale vcpu->arch.dr6.  When the guest accesses a DR and host userspace isn't debugging the guest, KVM disables DR interception and loads the guest's values into hardware on VM-Enter and saves them on VM-Exit.  This allows the guest to access DRs at will, e.g. so that a sequence of DR accesses to configure a breakpoint only generates one VM-Exit.  For DR0-DR3, the logic/behavior is identical between VMX and SVM, and also identical between KVM_DEBUGREG_BP_ENABLED (userspace debugging the guest) and KVM_DEBUGREG_WONT_EXIT (guest using DRs), and so KVM handles loading DR0-DR3 in common code, _outside_ of the core kvm_x86_ops.vcpu_run() loop.  But for DR6, the guest's value doesn't need to be loaded into hardware for KVM_DEBUGREG_BP_ENABLED, and SVM provides a dedicated VMCB field whereas VMX requires software to manually load the guest value, and so loading the guest's value into DR6 is handled by {svm,vmx}_vcpu_run(), i.e. is done _inside_ the core run loop.  Unfortunately, saving the guest values on VM-Exit is initiated by common x86, again outside of the core run loop.  If the guest modifies DR6 (in hardware, when DR interception is disabled), and then the next VM-Exit is a fastpath VM-Exit, KVM will reload hardware DR6 with vcpu->arch.dr6 and clobber the guest's actual value.  The bug shows up primarily with nested VMX because KVM handles the VMX preemption timer in the fastpath, and the window between hardware DR6 being modified (in guest context) and DR6 being read by guest software is orders of magnitude larger in a nested setup.  E.g. in non-nested, the VMX preemption timer would need to fire precisely between #DB injection and the #DB handler's read of DR6, whereas with a KVM-on-KVM setup, the window where hardware DR6 is "dirty" extends all the way from L1 writing DR6 to VMRESUME (in L1).      L1's view:     ==========     <L1 disables DR interception>            CPU 0/KVM-7289    [023] d....  2925.640961: kvm_entry: vcpu 0  A:  L1 Writes DR6            CPU 0/KVM-7289    [023] d....  2925.640963: <hack>: Set DRs, DR6 = 0xffff0ff1   B:        CPU 0/KVM-7289    [023] d....  2925.640967: kvm_exit: vcpu 0 reason EXTERNAL_INTERRUPT intr_info 0x800000ec   D: L1 reads DR6, arch.dr6 = 0            CPU 0/KVM-7289    [023] d....  2925.640969: <hack>: Sync DRs, DR6 = 0xffff0ff0             CPU 0/KVM-7289    [023] d....  2925.640976: kvm_entry: vcpu 0     L2 reads DR6, L1 disables DR interception            CPU 0/KVM-7289    [023] d....  2925.640980: kvm_exit: vcpu 0 reason DR_ACCESS info1 0x0000000000000216            CPU 0/KVM-7289    [023] d....  2925.640983: kvm_entry: vcpu 0             CPU 0/KVM-7289    [023] d....  2925.640983: <hack>: Set DRs, DR6 = 0xffff0ff0      L2 detects failure            CPU 0/KVM-7289    [023] d....  2925.640987: kvm_exit: vcpu 0 reason HLT     L1 reads DR6 (confirms failure)            CPU 0/KVM-7289    [023] d....  2925.640990: <hack>: Sync DRs, DR6 = 0xffff0ff0      L0's view:     ==========     L2 reads DR6, arch.dr6 = 0           CPU 23/KVM-5046    [001] d....  3410.005610: kvm_exit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216           CPU 23/KVM-5046    [001] .....  3410.005610: kvm_nested_vmexit: vcpu 23 reason DR_ACCESS info1 0x0000000000000216      L2 => L1 nested VM-Exit           CPU 23/KVM-5046    [001] .....  3410.005610: kvm_nested_vmexit_inject: reason: DR_ACCESS ext_inf1: 0x0000000000000216            CPU 23/KVM-5046    [001] d....  3410.005610: kvm_entry: vcpu 23           CPU 23/KVM-5046    [001] d....  3410.005611: kvm_exit: vcpu 23 reason VMREAD           CPU 23/KVM-5046    [001] d....  3410.005611: kvm_entry: vcpu 23           CPU 23/KVM-5046    [001] d....  3410. ---truncated---
published:2025-03-07T09:15:16.923


Instruction: Please provide detailed information about CVE-2025-21840

CVE:CVE-2025-21840
Description:In the Linux kernel, the following vulnerability has been resolved:  thermal/netlink: Prevent userspace segmentation fault by adjusting UAPI header  The intel-lpmd tool [1], which uses the THERMAL_GENL_ATTR_CPU_CAPABILITY attribute to receive HFI events from kernel space, encounters a segmentation fault after commit 1773572863c4 ("thermal: netlink: Add the commands and the events for the thresholds").  The issue arises because the THERMAL_GENL_ATTR_CPU_CAPABILITY raw value was changed while intel_lpmd still uses the old value.  Although intel_lpmd can be updated to check the THERMAL_GENL_VERSION and use the appropriate THERMAL_GENL_ATTR_CPU_CAPABILITY value, the commit itself is questionable.  The commit introduced a new element in the middle of enum thermal_genl_attr, which affects many existing attributes and introduces potential risks and unnecessary maintenance burdens for userspace thermal netlink event users.  Solve the issue by moving the newly introduced THERMAL_GENL_ATTR_TZ_PREV_TEMP attribute to the end of the enum thermal_genl_attr. This ensures that all existing thermal generic netlink attributes remain unaffected.  [ rjw: Subject edits ]
published:2025-03-07T09:15:17.033


Instruction: Please provide detailed information about CVE-2025-21841

CVE:CVE-2025-21841
Description:In the Linux kernel, the following vulnerability has been resolved:  cpufreq/amd-pstate: Fix cpufreq_policy ref counting  amd_pstate_update_limits() takes a cpufreq_policy reference but doesn't decrement the refcount in one of the exit paths, fix that.
published:2025-03-07T09:15:17.137


Instruction: Please provide detailed information about CVE-2025-21842

CVE:CVE-2025-21842
Description:In the Linux kernel, the following vulnerability has been resolved:  amdkfd: properly free gang_ctx_bo when failed to init user queue  The destructor of a gtt bo is declared as void amdgpu_amdkfd_free_gtt_mem(struct amdgpu_device *adev, void **mem_obj); Which takes void** as the second parameter.  GCC allows passing void* to the function because void* can be implicitly casted to any other types, so it can pass compiling.  However, passing this void* parameter into the function's execution process(which expects void** and dereferencing void**) will result in errors.
published:2025-03-07T09:15:17.237


Instruction: Please provide detailed information about CVE-2025-21843

CVE:CVE-2025-21843
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/panthor: avoid garbage value in panthor_ioctl_dev_query()  'priorities_info' is uninitialized, and the uninitialized value is copied to user object when calling PANTHOR_UOBJ_SET(). Using memset to initialize 'priorities_info' to avoid this garbage value problem.
published:2025-03-07T09:15:17.343


Instruction: Please provide detailed information about CVE-2025-1768

CVE:CVE-2025-1768
Description:The SEO Plugin by Squirrly SEO plugin for WordPress is vulnerable to blind SQL Injection via the 'search' parameter in all versions up to, and including, 12.4.05 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-03-07T11:15:15.653


Instruction: Please provide detailed information about CVE-2025-1886

CVE:CVE-2025-1886
Description:Pass-Back vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to discover stored SMTP credentials.
published:2025-03-07T11:15:15.843


Instruction: Please provide detailed information about CVE-2025-1887

CVE:CVE-2025-1887
Description:SMB forced authentication vulnerability in versions prior to 2025.35.000 of Sage 200 Spain. This vulnerability allows an authenticated attacker with administrator privileges to obtain NTLMv2-SSP Hash by changing any of the paths to a UNC path pointing to a server controlled by the attacker.
published:2025-03-07T11:15:16.040


Instruction: Please provide detailed information about CVE-2025-2084

CVE:CVE-2025-2084
Description:A vulnerability was found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /search-report.php of the component Search Report Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T12:15:34.260


Instruction: Please provide detailed information about CVE-2025-2085

CVE:CVE-2025-2085
Description:A vulnerability classified as problematic has been found in StarSea99 starsea-mall 1.0. This affects an unknown part of the file /admin/carousels/save. The manipulation of the argument redirectUrl leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T12:15:35.270


Instruction: Please provide detailed information about CVE-2025-2086

CVE:CVE-2025-2086
Description:A vulnerability classified as problematic was found in StarSea99 starsea-mall 1.0. This vulnerability affects unknown code of the file /admin/indexConfigs/update. The manipulation of the argument redirectUrl leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T14:15:37.850


Instruction: Please provide detailed information about CVE-2025-2087

CVE:CVE-2025-2087
Description:A vulnerability, which was classified as problematic, has been found in StarSea99 starsea-mall 1.0. This issue affects some unknown processing of the file /admin/goods/update. The manipulation of the argument goodsName leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T14:15:38.030


Instruction: Please provide detailed information about CVE-2025-2088

CVE:CVE-2025-2088
Description:A vulnerability, which was classified as critical, was found in PHPGurukul Pre-School Enrollment System up to 1.0. Affected is an unknown function of the file /admin/profile.php. The manipulation of the argument fullname/emailid/mobileNumber leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T15:15:14.833


Instruction: Please provide detailed information about CVE-2025-2089

CVE:CVE-2025-2089
Description:A vulnerability has been found in StarSea99 starsea-mall 1.0/2.X and classified as critical. Affected by this vulnerability is the function updateUserInfo of the file /personal/updateInfo of the component com.siro.mall.controller.mall.UserController. The manipulation of the argument userId leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T15:15:15.033


Instruction: Please provide detailed information about CVE-2025-2090

CVE:CVE-2025-2090
Description:A vulnerability was found in PHPGurukul Pre-School Enrollment System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/add-subadmin.php of the component Sub Admin Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T15:15:15.220


Instruction: Please provide detailed information about CVE-2025-25617

CVE:CVE-2025-25617
Description:Incorrect Access Control in Unifiedtransform 2.X leads to Privilege Escalation allowing teachers to create syllabus.
published:2025-03-07T16:15:38.543


Instruction: Please provide detailed information about CVE-2025-27152

CVE:CVE-2025-27152
Description:axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if baseURL is set, axios sends the request to the specified absolute URL, potentially causing SSRF and credential leakage. This issue impacts both server-side and client-side usage of axios. This issue is fixed in 1.8.2.
published:2025-03-07T16:15:38.773


Instruction: Please provide detailed information about CVE-2025-27518

CVE:CVE-2025-27518
Description:Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. An insecure CORS configuration in the Cognita backend server allows arbitrary websites to send cross site requests to the application. This vulnerability is fixed in commit 75079c3d3cf376381489b9a82ee46c69024e1a15.
published:2025-03-07T16:15:39.187


Instruction: Please provide detailed information about CVE-2025-27519

CVE:CVE-2025-27519
Description:Cognita is a RAG (Retrieval Augmented Generation) Framework for building modular, open source applications for production by TrueFoundry. A path traversal issue exists at /v1/internal/upload-to-local-directory which is enabled when the Local env variable is set to true, such as when Cognita is setup using Docker. Because the docker environment sets up the backend uvicorn server with auto reload enabled, when an attacker overwrites the /app/backend/__init__.py file, the file will automatically be reloaded and executed. This allows an attacker to get remote code execution in the context of the Docker container. This vulnerability is fixed in commit a78bd065e05a1b30a53a3386cc02e08c317d2243.
published:2025-03-07T16:15:39.623


Instruction: Please provide detailed information about CVE-2025-27597

CVE:CVE-2025-27597
Description:Vue I18n is the internationalization plugin for Vue.js. @intlify/message-resolver and @intlify/vue-i18n-core are vulnerable to Prototype Pollution through the entry function: handleFlatJson. An attacker can supply a payload with Object.prototype setter to introduce or modify properties within the global prototype chain, causing denial of service (DoS) a the minimum consequence. Moreover, the consequences of this vulnerability can escalate to other injection-based attacks, depending on how the library integrates within the application. For instance, if the polluted property propagates to sensitive Node.js APIs (e.g., exec, eval), it could enable an attacker to execute arbitrary commands within the application's context.
published:2025-03-07T16:15:39.893


Instruction: Please provide detailed information about CVE-2025-27603

CVE:CVE-2025-27603
Description:XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. A user that doesn't have programming rights can execute arbitrary code due to an unescaped translation when creating a page using the Migration Page template. This vulnerability is fixed in 1.2.0.
published:2025-03-07T16:15:40.037


Instruction: Please provide detailed information about CVE-2025-0162

CVE:CVE-2025-0162
Description:IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability to expose sensitive information or consume memory resources.
published:2025-03-07T17:15:21.110


Instruction: Please provide detailed information about CVE-2025-27604

CVE:CVE-2025-27604
Description:XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which might contain sensitive information. This vulnerability is fixed in 1.11.7.
published:2025-03-07T17:15:22.290


Instruction: Please provide detailed information about CVE-2025-27607

CVE:CVE-2025-27607
Description:Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party. If the package was claimed, it would allow them RCE on any Python JSON Logger user who installed the development dependencies on Python 3.13 (e.g. pip install python-json-logger[dev]). This issue has been resolved with 3.3.0.
published:2025-03-07T17:15:22.433


Instruction: Please provide detailed information about CVE-2025-26643

CVE:CVE-2025-26643
Description:The UI performs the wrong action in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
published:2025-03-07T19:15:37.180


Instruction: Please provide detailed information about CVE-2025-2024

CVE:CVE-2025-2024
Description:Trimble SketchUp SKP File Parsing Uninitialized Variable Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.  The specific flaw exists within the parsing of SKP files. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this vulnerability to execute code in the context of the current process. Was ZDI-CAN-25210.
published:2025-03-07T20:15:39.023


Instruction: Please provide detailed information about CVE-2025-27822

CVE:CVE-2025-27822
Description:An issue was discovered in the Masquerade module before 1.x-1.0.1 for Backdrop CMS. It allows people to temporarily switch to another user account. The module provides a "Masquerade as admin" permission to restrict people (who can masquerade) from switching to an account with administrative privileges. This permission is not always honored and may allow non-administrative users to masquerade as an administrator. This vulnerability is mitigated by the fact that an attacker must have a role with the "Masquerade as user" permission.
published:2025-03-07T22:15:37.927


Instruction: Please provide detailed information about CVE-2025-27823

CVE:CVE-2025-27823
Description:An issue was discovered in the Mail Disguise module before 1.x-1.0.5 for Backdrop CMS. It enables a website to obfuscate email addresses, and should prevent spambots from collecting them. The module doesn't sufficiently validate the data attribute value on links, potentially leading to a Cross Site Scripting (XSS) vulnerability. This is mitigated by the fact an attacker must be able to insert link (<a>) HTML elements containing data attributes into the page.
published:2025-03-07T22:15:38.073


Instruction: Please provide detailed information about CVE-2025-27824

CVE:CVE-2025-27824
Description:An XSS issue was discovered in the Link iframe formatter module before 1.x-1.1.1 for Backdrop CMS. It doesn't sufficiently sanitize input before displaying results to the screen. This vulnerability is mitigated by the fact that an attacker must have the ability to create content containing an iFrame field.
published:2025-03-07T22:15:38.220


Instruction: Please provide detailed information about CVE-2025-27825

CVE:CVE-2025-27825
Description:An XSS issue was discovered in the Bootstrap 5 Lite theme before 1.x-1.0.3 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.
published:2025-03-07T22:15:38.380


Instruction: Please provide detailed information about CVE-2025-27826

CVE:CVE-2025-27826
Description:An XSS issue was discovered in the Bootstrap Lite theme before 1.x-1.4.5 for Backdrop CMS. It doesn't sufficiently sanitize certain class names.
published:2025-03-07T22:15:38.527


Instruction: Please provide detailed information about CVE-2025-2093

CVE:CVE-2025-2093
Description:A vulnerability was found in PHPGurukul Online Library Management System 3.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /change-password.php. The manipulation of the argument email/phone number leads to weak password recovery. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-03-07T22:15:38.680


Instruction: Please provide detailed information about CVE-2025-2094

CVE:CVE-2025-2094
Description:A vulnerability was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. It has been rated as critical. Affected by this issue is the function setWiFiExtenderConfig of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument apcliKey/key leads to os command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T22:15:38.850


Instruction: Please provide detailed information about CVE-2025-2095

CVE:CVE-2025-2095
Description:A vulnerability classified as critical has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This affects the function setDmzCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument ip leads to os command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T22:15:39.023


Instruction: Please provide detailed information about CVE-2025-2096

CVE:CVE-2025-2096
Description:A vulnerability classified as critical was found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This vulnerability affects the function setRebootScheCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mode/week/minute/recHour leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T22:15:39.187


Instruction: Please provide detailed information about CVE-2025-2097

CVE:CVE-2025-2097
Description:A vulnerability, which was classified as critical, has been found in TOTOLINK EX1800T 9.1.0cu.2112_B20220316. This issue affects the function setRptWizardCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument loginpass leads to stack-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-07T23:15:16.263


Instruction: Please provide detailed information about CVE-2025-27839

CVE:CVE-2025-27839
Description:operations/attestation/AttestationTask.kt in the Tangem SDK before 5.18.3 for Android has a logic flow in offline wallet attestation (genuineness check) that causes verification results to be disregarded during the first scan of a card. Exploitation may not have been possible.
published:2025-03-08T00:15:38.340


Instruction: Please provide detailed information about CVE-2025-1261

CVE:CVE-2025-1261
Description:The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to DOM-Based Stored Cross-Site Scripting via the plugin's Countdown widget in all versions up to, and including, 2.8.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. NOTE: This vulnerability exists due to an incomplete fix for CVE-2024-3307.
published:2025-03-08T02:15:34.147


Instruction: Please provide detailed information about CVE-2025-1481

CVE:CVE-2025-1481
Description:The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_backup() function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export arbitrary options.
published:2025-03-08T03:15:37.237


Instruction: Please provide detailed information about CVE-2025-1504

CVE:CVE-2025-1504
Description:The Post Lockdown plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 4.0.2 via the 'pl_autocomplete' AJAX action due to insufficient restrictions on which posts can be included. This makes it possible for authenticated attackers, with Subscriber-level access and above, to extract data from password protected, private, or draft posts that they should not have access to.
published:2025-03-08T03:15:37.393


Instruction: Please provide detailed information about CVE-2025-0177

CVE:CVE-2025-0177
Description:The Javo Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.0.0.080. This is due to the plugin allowing users who are registering new accounts to set their own role. This makes it possible for unauthenticated attackers to gain elevated privileges by creating an account with the administrator role.
published:2025-03-08T09:15:31.420


Instruction: Please provide detailed information about CVE-2025-1287

CVE:CVE-2025-1287
Description:The The Plus Addons for Elementor – Elementor Addons, Page Templates, Widgets, Mega Menu, WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown, Syntax Highlighter, and Page Scroll widgets in all versions up to, and including, 6.2.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-08T09:15:31.590


Instruction: Please provide detailed information about CVE-2025-1322

CVE:CVE-2025-1322
Description:The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 16.26.10 via the 'feed' shortcode due to insufficient restrictions on which posts can be included. This makes it possible for unauthenticated attackers to view data from password protected, private, or draft posts that they should not have access to.
published:2025-03-08T10:15:10.583


Instruction: Please provide detailed information about CVE-2025-1323

CVE:CVE-2025-1323
Description:The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to SQL Injection via the 'databeat' parameter in all versions up to, and including, 16.26.10 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-03-08T10:15:11.003


Instruction: Please provide detailed information about CVE-2025-1324

CVE:CVE-2025-1324
Description:The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'public-form' shortcode in all versions up to, and including, 16.26.10 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-08T10:15:11.217


Instruction: Please provide detailed information about CVE-2025-1325

CVE:CVE-2025-1325
Description:The WP-Recall – Registration, Profile, Commerce & More plugin for WordPress is vulnerable to arbitrary shortcode execution due to a missing capability check on the 'rcl_preview_post' AJAX endpoint in all versions up to, and including, 16.26.10. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute arbitrary shortcodes.
published:2025-03-08T10:15:11.427


Instruction: Please provide detailed information about CVE-2025-1783

CVE:CVE-2025-1783
Description:The Gallery Styles plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Gallery Block in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-08T10:15:11.647


Instruction: Please provide detailed information about CVE-2025-1664

CVE:CVE-2025-1664
Description:The Essential Blocks – Page Builder Gutenberg Blocks, Patterns & Templates plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Parallax slider in all versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-08T12:15:36.010


Instruction: Please provide detailed information about CVE-2025-27840

CVE:CVE-2025-27840
Description:Espressif ESP32 chips allow 29 hidden HCI commands, such as 0xFC02 (Write memory).
published:2025-03-08T20:15:36.027


Instruction: Please provide detailed information about CVE-2025-2112

CVE:CVE-2025-2112
Description:A vulnerability was found in user-xiangpeng yaoqishan up to a47fec4a31cbd13698c592dfdc938c8824dd25e4. It has been declared as critical. Affected by this vulnerability is the function getMediaLisByFilter of the file cn/javaex/yaoqishan/service/media_info/MediaInfoService.java. The manipulation of the argument typeId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-08T22:15:36.443


Instruction: Please provide detailed information about CVE-2025-2113

CVE:CVE-2025-2113
Description:A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been rated as critical. Affected by this issue is some unknown functionality of the component Esqueceu a senha. The manipulation of the argument txtCPF leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-03-09T03:15:34.137


Instruction: Please provide detailed information about CVE-2025-2114

CVE:CVE-2025-2114
Description:A vulnerability, which was classified as problematic, has been found in Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7. This issue affects some unknown processing of the file /WebPages/Adm/OperatorStop.asp of the component Reset Password Interface. The manipulation of the argument OperId leads to improper authorization. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T05:15:30.270


Instruction: Please provide detailed information about CVE-2025-1362

CVE:CVE-2025-1362
Description:The URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce WordPress plugin through 9.0.2 does not have CSRF checks in some bulk actions, which could allow attackers to make logged in admins perform unwanted actions, such as deleting customers via CSRF attacks
published:2025-03-09T06:15:10.323


Instruction: Please provide detailed information about CVE-2025-1363

CVE:CVE-2025-1363
Description:The URL Shortener | Conversion Tracking  | AB Testing  | WooCommerce WordPress plugin through 9.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
published:2025-03-09T06:15:11.733


Instruction: Please provide detailed information about CVE-2025-1382

CVE:CVE-2025-1382
Description:The Contact Us By Lord Linus WordPress plugin through 2.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack.
published:2025-03-09T06:15:11.837


Instruction: Please provide detailed information about CVE-2025-2115

CVE:CVE-2025-2115
Description:A vulnerability, which was classified as critical, was found in zzskzy Warehouse Refinement Management System 3.1. Affected is the function ProcessRequest of the file /AcceptZip.ashx. The manipulation of the argument file leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T06:15:11.933


Instruction: Please provide detailed information about CVE-2025-2116

CVE:CVE-2025-2116
Description:A vulnerability has been found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /newsedit/newsedit/xy/imageProxy.do of the component File Protocol Handler. The manipulation of the argument xyImgUrl leads to server-side request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T07:15:10.003


Instruction: Please provide detailed information about CVE-2025-2117

CVE:CVE-2025-2117
Description:A vulnerability was found in Beijing Founder Electronics Founder Enjoys All-Media Acquisition and Editing System 3.0 and classified as critical. Affected by this issue is the function electricDocList of the file /newsedit/report/reportCenter.do. The manipulation of the argument fvID/catID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T08:15:10.533


Instruction: Please provide detailed information about CVE-2025-2118

CVE:CVE-2025-2118
Description:A vulnerability was found in Quantico Tecnologia PRMV 6.48. It has been classified as critical. This affects an unknown part of the file /admin/login.php of the component Login Endpoint. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-09T09:15:11.240


Instruction: Please provide detailed information about CVE-2025-2119

CVE:CVE-2025-2119
Description:A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been declared as problematic. This vulnerability affects unknown code of the component Device Registration Handler. The manipulation leads to use of default credentials. It is possible to launch the attack on the physical device. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T09:15:12.560


Instruction: Please provide detailed information about CVE-2025-2120

CVE:CVE-2025-2120
Description:A vulnerability was found in Thinkware Car Dashcam F800 Pro up to 20250226. It has been rated as problematic. This issue affects some unknown processing of the file /tmp/hostapd.conf of the component Configuration File Handler. The manipulation leads to cleartext storage in a file or on disk. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T11:15:35.023


Instruction: Please provide detailed information about CVE-2025-2121

CVE:CVE-2025-2121
Description:A vulnerability classified as critical has been found in Thinkware Car Dashcam F800 Pro up to 20250226. Affected is an unknown function of the component File Storage. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-09T11:15:36.647


Instruction: Please provide detailed information about CVE-2025-27636

CVE:CVE-2025-27636
Description:Bypass/Injection vulnerability in Apache Camel components under particular conditions.  This issue affects Apache Camel: from 4.10.0 through <= 4.10.1, from 4.8.0 through <= 4.8.4, from 3.10.0 through <= 3.22.3.  Users are recommended to upgrade to version 4.10.2 for 4.10.x LTS, 4.8.5 for 4.8.x LTS and 3.22.4 for 3.x releases.    This vulnerability is present in Camel's default incoming header filter, that allows an attacker to include Camel specific  headers that for some Camel components can alter the behaviours such as the camel-bean component, to call another method  on the bean, than was coded in the application. In the camel-jms component, then a malicious header can be used to send  the message to another queue (on the same broker) than was coded in the application. This could also be seen by using the camel-exec component     The attacker would need to inject custom headers, such as HTTP protocols. So if you have Camel applications that are  directly connected to the internet via HTTP, then an attacker could include malicious HTTP headers in the HTTP requests  that are send to the Camel application.     All the known Camel HTTP component such as camel-servlet, camel-jetty, camel-undertow, camel-platform-http, and camel-netty-http would be vulnerable out of the box.  In these conditions an attacker could be able to forge a Camel header name and make the bean component invoking other methods in the same bean.  In terms of usage of the default header filter strategy the list of components using that is:      *  camel-activemq   *  camel-activemq6   *  camel-amqp   *  camel-aws2-sqs   *  camel-azure-servicebus   *  camel-cxf-rest   *  camel-cxf-soap   *  camel-http   *  camel-jetty   *  camel-jms   *  camel-kafka   *  camel-knative   *  camel-mail   *  camel-nats   *  camel-netty-http   *  camel-platform-http   *  camel-rest   *  camel-sjms   *  camel-spring-rabbitmq   *  camel-stomp   *  camel-tahu   *  camel-undertow   *  camel-xmpp       The vulnerability arises due to a bug in the default filtering mechanism that only blocks headers starting with "Camel", "camel", or "org.apache.camel.".    Mitigation: You can easily work around this in your Camel applications by removing the headers in your Camel routes. There are many ways of doing this, also globally or per route. This means you could use the removeHeaders EIP, to filter out anything like "cAmel, cAMEL" etc, or in general everything not starting with "Camel", "camel" or "org.apache.camel.".
published:2025-03-09T13:15:34.403