Instruction: Please provide detailed information about CVE-2025-21805

CVE:CVE-2025-21805
Description:In the Linux kernel, the following vulnerability has been resolved:  RDMA/rtrs: Add missing deinit() call  A warning is triggered when repeatedly connecting and disconnecting the rnbd:  list_add corruption. prev->next should be next (ffff88800b13e480), but was ffff88801ecd1338. (prev=ffff88801ecd1340).  WARNING: CPU: 1 PID: 36562 at lib/list_debug.c:32 __list_add_valid_or_report+0x7f/0xa0  Workqueue: ib_cm cm_work_handler [ib_cm]  RIP: 0010:__list_add_valid_or_report+0x7f/0xa0   ? __list_add_valid_or_report+0x7f/0xa0   ib_register_event_handler+0x65/0x93 [ib_core]   rtrs_srv_ib_dev_init+0x29/0x30 [rtrs_server]   rtrs_ib_dev_find_or_add+0x124/0x1d0 [rtrs_core]   __alloc_path+0x46c/0x680 [rtrs_server]   ? rtrs_rdma_connect+0xa6/0x2d0 [rtrs_server]   ? rcu_is_watching+0xd/0x40   ? __mutex_lock+0x312/0xcf0   ? get_or_create_srv+0xad/0x310 [rtrs_server]   ? rtrs_rdma_connect+0xa6/0x2d0 [rtrs_server]   rtrs_rdma_connect+0x23c/0x2d0 [rtrs_server]   ? __lock_release+0x1b1/0x2d0   cma_cm_event_handler+0x4a/0x1a0 [rdma_cm]   cma_ib_req_handler+0x3a0/0x7e0 [rdma_cm]   cm_process_work+0x28/0x1a0 [ib_cm]   ? _raw_spin_unlock_irq+0x2f/0x50   cm_req_handler+0x618/0xa60 [ib_cm]   cm_work_handler+0x71/0x520 [ib_cm]  Commit 667db86bcbe8 ("RDMA/rtrs: Register ib event handler") introduced a new element .deinit but never used it at all. Fix it by invoking the `deinit()` to appropriately unregister the IB event handler.
published:2025-02-27T20:16:03.127


Instruction: Please provide detailed information about CVE-2025-21806

CVE:CVE-2025-21806
Description:In the Linux kernel, the following vulnerability has been resolved:  net: let net.core.dev_weight always be non-zero  The following problem was encountered during stability test:  (NULL net_device): NAPI poll function process_backlog+0x0/0x530 \ 	returned 1, exceeding its budget of 0. ------------[ cut here ]------------ list_add double add: new=ffff88905f746f48, prev=ffff88905f746f48, \ 	next=ffff88905f746e40. WARNING: CPU: 18 PID: 5462 at lib/list_debug.c:35 \ 	__list_add_valid_or_report+0xf3/0x130 CPU: 18 UID: 0 PID: 5462 Comm: ping Kdump: loaded Not tainted 6.13.0-rc7+ RIP: 0010:__list_add_valid_or_report+0xf3/0x130 Call Trace: ? __warn+0xcd/0x250 ? __list_add_valid_or_report+0xf3/0x130 enqueue_to_backlog+0x923/0x1070 netif_rx_internal+0x92/0x2b0 __netif_rx+0x15/0x170 loopback_xmit+0x2ef/0x450 dev_hard_start_xmit+0x103/0x490 __dev_queue_xmit+0xeac/0x1950 ip_finish_output2+0x6cc/0x1620 ip_output+0x161/0x270 ip_push_pending_frames+0x155/0x1a0 raw_sendmsg+0xe13/0x1550 __sys_sendto+0x3bf/0x4e0 __x64_sys_sendto+0xdc/0x1b0 do_syscall_64+0x5b/0x170 entry_SYSCALL_64_after_hwframe+0x76/0x7e  The reproduction command is as follows:   sysctl -w net.core.dev_weight=0   ping 127.0.0.1  This is because when the napi's weight is set to 0, process_backlog() may return 0 and clear the NAPI_STATE_SCHED bit of napi->state, causing this napi to be re-polled in net_rx_action() until __do_softirq() times out. Since the NAPI_STATE_SCHED bit has been cleared, napi_schedule_rps() can be retriggered in enqueue_to_backlog(), causing this issue.  Making the napi's weight always non-zero solves this problem.  Triggering this issue requires system-wide admin (setting is not namespaced).
published:2025-02-27T20:16:03.220


Instruction: Please provide detailed information about CVE-2025-21807

CVE:CVE-2025-21807
Description:In the Linux kernel, the following vulnerability has been resolved:  block: fix queue freeze vs limits lock order in sysfs store methods  queue_attr_store() always freezes a device queue before calling the attribute store operation. For attributes that control queue limits, the store operation will also lock the queue limits with a call to queue_limits_start_update(). However, some drivers (e.g. SCSI sd) may need to issue commands to a device to obtain limit values from the hardware with the queue limits locked. This creates a potential ABBA deadlock situation if a user attempts to modify a limit (thus freezing the device queue) while the device driver starts a revalidation of the device queue limits.  Avoid such deadlock by not freezing the queue before calling the ->store_limit() method in struct queue_sysfs_entry and instead use the queue_limits_commit_update_frozen helper to freeze the queue after taking the limits lock.  This also removes taking the sysfs lock for the store_limit method as it doesn't protect anything here, but creates even more nesting. Hopefully it will go away from the actual sysfs methods entirely soon.  (commit log adapted from a similar patch from  Damien Le Moal)
published:2025-02-27T20:16:03.317


Instruction: Please provide detailed information about CVE-2025-21808

CVE:CVE-2025-21808
Description:In the Linux kernel, the following vulnerability has been resolved:  net: xdp: Disallow attaching device-bound programs in generic mode  Device-bound programs are used to support RX metadata kfuncs. These kfuncs are driver-specific and rely on the driver context to read the metadata. This means they can't work in generic XDP mode. However, there is no check to disallow such programs from being attached in generic mode, in which case the metadata kfuncs will be called in an invalid context, leading to crashes.  Fix this by adding a check to disallow attaching device-bound programs in generic mode.
published:2025-02-27T20:16:03.410


Instruction: Please provide detailed information about CVE-2025-21809

CVE:CVE-2025-21809
Description:In the Linux kernel, the following vulnerability has been resolved:  rxrpc, afs: Fix peer hash locking vs RCU callback  In its address list, afs now retains pointers to and refs on one or more rxrpc_peer objects.  The address list is freed under RCU and at this time, it puts the refs on those peers.  Now, when an rxrpc_peer object runs out of refs, it gets removed from the peer hash table and, for that, rxrpc has to take a spinlock.  However, it is now being called from afs's RCU cleanup, which takes place in BH context - but it is just taking an ordinary spinlock.  The put may also be called from non-BH context, and so there exists the possibility of deadlock if the BH-based RCU cleanup happens whilst the hash spinlock is held.  This led to the attached lockdep complaint.  Fix this by changing spinlocks of rxnet->peer_hash_lock back to BH-disabling locks.      ================================     WARNING: inconsistent lock state     6.13.0-rc5-build2+ #1223 Tainted: G            E     --------------------------------     inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage.     swapper/1/0 [HC0[0]:SC1[1]:HE1:SE0] takes:     ffff88810babe228 (&rxnet->peer_hash_lock){+.?.}-{3:3}, at: rxrpc_put_peer+0xcb/0x180     {SOFTIRQ-ON-W} state was registered at:       mark_usage+0x164/0x180       __lock_acquire+0x544/0x990       lock_acquire.part.0+0x103/0x280       _raw_spin_lock+0x2f/0x40       rxrpc_peer_keepalive_worker+0x144/0x440       process_one_work+0x486/0x7c0       process_scheduled_works+0x73/0x90       worker_thread+0x1c8/0x2a0       kthread+0x19b/0x1b0       ret_from_fork+0x24/0x40       ret_from_fork_asm+0x1a/0x30     irq event stamp: 972402     hardirqs last  enabled at (972402): [<ffffffff8244360e>] _raw_spin_unlock_irqrestore+0x2e/0x50     hardirqs last disabled at (972401): [<ffffffff82443328>] _raw_spin_lock_irqsave+0x18/0x60     softirqs last  enabled at (972300): [<ffffffff810ffbbe>] handle_softirqs+0x3ee/0x430     softirqs last disabled at (972313): [<ffffffff810ffc54>] __irq_exit_rcu+0x44/0x110      other info that might help us debug this:      Possible unsafe locking scenario:            CPU0            ----       lock(&rxnet->peer_hash_lock);       <Interrupt>         lock(&rxnet->peer_hash_lock);       *** DEADLOCK ***     1 lock held by swapper/1/0:      #0: ffffffff83576be0 (rcu_callback){....}-{0:0}, at: rcu_lock_acquire+0x7/0x30      stack backtrace:     CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G            E      6.13.0-rc5-build2+ #1223     Tainted: [E]=UNSIGNED_MODULE     Hardware name: ASUS All Series/H97-PLUS, BIOS 2306 10/09/2014     Call Trace:      <IRQ>      dump_stack_lvl+0x57/0x80      print_usage_bug.part.0+0x227/0x240      valid_state+0x53/0x70      mark_lock_irq+0xa5/0x2f0      mark_lock+0xf7/0x170      mark_usage+0xe1/0x180      __lock_acquire+0x544/0x990      lock_acquire.part.0+0x103/0x280      _raw_spin_lock+0x2f/0x40      rxrpc_put_peer+0xcb/0x180      afs_free_addrlist+0x46/0x90 [kafs]      rcu_do_batch+0x2d2/0x640      rcu_core+0x2f7/0x350      handle_softirqs+0x1ee/0x430      __irq_exit_rcu+0x44/0x110      irq_exit_rcu+0xa/0x30      sysvec_apic_timer_interrupt+0x7f/0xa0      </IRQ>
published:2025-02-27T20:16:03.497


Instruction: Please provide detailed information about CVE-2025-21810

CVE:CVE-2025-21810
Description:In the Linux kernel, the following vulnerability has been resolved:  driver core: class: Fix wild pointer dereferences in API class_dev_iter_next()  There are a potential wild pointer dereferences issue regarding APIs class_dev_iter_(init|next|exit)(), as explained by below typical usage:  // All members of @iter are wild pointers. struct class_dev_iter iter;  // class_dev_iter_init(@iter, @class, ...) checks parameter @class for // potential class_to_subsys() error, and it returns void type and does // not initialize its output parameter @iter, so caller can not detect // the error and continues to invoke class_dev_iter_next(@iter) even if // @iter still contains wild pointers. class_dev_iter_init(&iter, ...);  // Dereference these wild pointers in @iter here once suffer the error. while (dev = class_dev_iter_next(&iter)) { ... };  // Also dereference these wild pointers here. class_dev_iter_exit(&iter);  Actually, all callers of these APIs have such usage pattern in kernel tree. Fix by: - Initialize output parameter @iter by memset() in class_dev_iter_init()   and give callers prompt by pr_crit() for the error. - Check if @iter is valid in class_dev_iter_next().
published:2025-02-27T20:16:03.587


Instruction: Please provide detailed information about CVE-2025-21811

CVE:CVE-2025-21811
Description:In the Linux kernel, the following vulnerability has been resolved:  nilfs2: protect access to buffers with no active references  nilfs_lookup_dirty_data_buffers(), which iterates through the buffers attached to dirty data folios/pages, accesses the attached buffers without locking the folios/pages.  For data cache, nilfs_clear_folio_dirty() may be called asynchronously when the file system degenerates to read only, so nilfs_lookup_dirty_data_buffers() still has the potential to cause use after free issues when buffers lose the protection of their dirty state midway due to this asynchronous clearing and are unintentionally freed by try_to_free_buffers().  Eliminate this race issue by adjusting the lock section in this function.
published:2025-02-27T20:16:03.680


Instruction: Please provide detailed information about CVE-2025-21812

CVE:CVE-2025-21812
Description:In the Linux kernel, the following vulnerability has been resolved:  ax25: rcu protect dev->ax25_ptr  syzbot found a lockdep issue [1].  We should remove ax25 RTNL dependency in ax25_setsockopt()  This should also fix a variety of possible UAF in ax25.  [1]  WARNING: possible circular locking dependency detected 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Not tainted ------------------------------------------------------ syz.5.1818/12806 is trying to acquire lock:  ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: ax25_setsockopt+0xa55/0xe90 net/ax25/af_ax25.c:680  but task is already holding lock:  ffff8880617ac258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1618 [inline]  ffff8880617ac258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x209/0xe90 net/ax25/af_ax25.c:574  which lock already depends on the new lock.  the existing dependency chain (in reverse order) is:  -> #1 (sk_lock-AF_AX25){+.+.}-{0:0}:         lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849         lock_sock_nested+0x48/0x100 net/core/sock.c:3642         lock_sock include/net/sock.h:1618 [inline]         ax25_kill_by_device net/ax25/af_ax25.c:101 [inline]         ax25_device_event+0x24d/0x580 net/ax25/af_ax25.c:146         notifier_call_chain+0x1a5/0x3f0 kernel/notifier.c:85        __dev_notify_flags+0x207/0x400         dev_change_flags+0xf0/0x1a0 net/core/dev.c:9026         dev_ifsioc+0x7c8/0xe70 net/core/dev_ioctl.c:563         dev_ioctl+0x719/0x1340 net/core/dev_ioctl.c:820         sock_do_ioctl+0x240/0x460 net/socket.c:1234         sock_ioctl+0x626/0x8e0 net/socket.c:1339         vfs_ioctl fs/ioctl.c:51 [inline]         __do_sys_ioctl fs/ioctl.c:906 [inline]         __se_sys_ioctl+0xf5/0x170 fs/ioctl.c:892         do_syscall_x64 arch/x86/entry/common.c:52 [inline]         do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83        entry_SYSCALL_64_after_hwframe+0x77/0x7f  -> #0 (rtnl_mutex){+.+.}-{4:4}:         check_prev_add kernel/locking/lockdep.c:3161 [inline]         check_prevs_add kernel/locking/lockdep.c:3280 [inline]         validate_chain+0x18ef/0x5920 kernel/locking/lockdep.c:3904         __lock_acquire+0x1397/0x2100 kernel/locking/lockdep.c:5226         lock_acquire+0x1ed/0x550 kernel/locking/lockdep.c:5849         __mutex_lock_common kernel/locking/mutex.c:585 [inline]         __mutex_lock+0x1ac/0xee0 kernel/locking/mutex.c:735         ax25_setsockopt+0xa55/0xe90 net/ax25/af_ax25.c:680         do_sock_setsockopt+0x3af/0x720 net/socket.c:2324         __sys_setsockopt net/socket.c:2349 [inline]         __do_sys_setsockopt net/socket.c:2355 [inline]         __se_sys_setsockopt net/socket.c:2352 [inline]         __x64_sys_setsockopt+0x1ee/0x280 net/socket.c:2352         do_syscall_x64 arch/x86/entry/common.c:52 [inline]         do_syscall_64+0xf3/0x230 arch/x86/entry/common.c:83        entry_SYSCALL_64_after_hwframe+0x77/0x7f  other info that might help us debug this:   Possible unsafe locking scenario:         CPU0                    CPU1        ----                    ----   lock(sk_lock-AF_AX25);                                lock(rtnl_mutex);                                lock(sk_lock-AF_AX25);   lock(rtnl_mutex);   *** DEADLOCK ***  1 lock held by syz.5.1818/12806:   #0: ffff8880617ac258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: lock_sock include/net/sock.h:1618 [inline]   #0: ffff8880617ac258 (sk_lock-AF_AX25){+.+.}-{0:0}, at: ax25_setsockopt+0x209/0xe90 net/ax25/af_ax25.c:574  stack backtrace: CPU: 1 UID: 0 PID: 12806 Comm: syz.5.1818 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 Call Trace:  <TASK>   __dump_stack lib/dump_stack.c:94 [inline]   dump_stack_lvl+0x241/0x360 lib/dump_stack.c:120   print_circular_bug+0x13a/0x1b0 kernel/locking/lockdep.c:2074   check_noncircular+0x36a/0x4a0 kernel/locking/lockdep.c:2206   check_prev_add kernel/locking/lockdep.c:3161 [inline]   check_prevs_add kernel/lockin ---truncated---
published:2025-02-27T20:16:03.783


Instruction: Please provide detailed information about CVE-2025-21813

CVE:CVE-2025-21813
Description:In the Linux kernel, the following vulnerability has been resolved:  timers/migration: Fix off-by-one root mis-connection  Before attaching a new root to the old root, the children counter of the new root is checked to verify that only the upcoming CPU's top group have been connected to it. However since the recently added commit b729cc1ec21a ("timers/migration: Fix another race between hotplug and idle entry/exit") this check is not valid anymore because the old root is pre-accounted as a child to the new root. Therefore after connecting the upcoming CPU's top group to the new root, the children count to be expected must be 2 and not 1 anymore.  This omission results in the old root to not be connected to the new root. Then eventually the system may run with more than one top level, which defeats the purpose of a single idle migrator.  Also the old root is pre-accounted but not connected upon the new root creation. But it can be connected to the new root later on. Therefore the old root may be accounted twice to the new root. The propagation of such overcommit can end up creating a double final top-level root with a groupmask incorrectly initialized. Although harmless given that the final top level roots will never have a parent to walk up to, this oddity opportunistically reported the core issue:    WARNING: CPU: 8 PID: 0 at kernel/time/timer_migration.c:543 tmigr_requires_handle_remote   CPU: 8 UID: 0 PID: 0 Comm: swapper/8   RIP: 0010:tmigr_requires_handle_remote   Call Trace:    <IRQ>    ? tmigr_requires_handle_remote    ? hrtimer_run_queues    update_process_times    tick_periodic    tick_handle_periodic    __sysvec_apic_timer_interrupt    sysvec_apic_timer_interrupt   </IRQ>  Fix the problem by taking the old root into account in the children count of the new root so the connection is not omitted.  Also warn when more than one top level group exists to better detect similar issues in the future.
published:2025-02-27T20:16:03.883


Instruction: Please provide detailed information about CVE-2025-21814

CVE:CVE-2025-21814
Description:In the Linux kernel, the following vulnerability has been resolved:  ptp: Ensure info->enable callback is always set  The ioctl and sysfs handlers unconditionally call the ->enable callback. Not all drivers implement that callback, leading to NULL dereferences. Example of affected drivers: ptp_s390.c, ptp_vclock.c and ptp_mock.c.  Instead use a dummy callback if no better was specified by the driver.
published:2025-02-27T20:16:03.973


Instruction: Please provide detailed information about CVE-2025-21815

CVE:CVE-2025-21815
Description:In the Linux kernel, the following vulnerability has been resolved:  mm/compaction: fix UBSAN shift-out-of-bounds warning  syzkaller reported a UBSAN shift-out-of-bounds warning of (1UL << order) in isolate_freepages_block().  The bogus compound_order can be any value because it is union with flags.  Add back the MAX_PAGE_ORDER check to fix the warning.
published:2025-02-27T20:16:04.063


Instruction: Please provide detailed information about CVE-2025-21816

CVE:CVE-2025-21816
Description:In the Linux kernel, the following vulnerability has been resolved:  hrtimers: Force migrate away hrtimers queued after CPUHP_AP_HRTIMERS_DYING  hrtimers are migrated away from the dying CPU to any online target at the CPUHP_AP_HRTIMERS_DYING stage in order not to delay bandwidth timers handling tasks involved in the CPU hotplug forward progress.  However wakeups can still be performed by the outgoing CPU after CPUHP_AP_HRTIMERS_DYING. Those can result again in bandwidth timers being armed. Depending on several considerations (crystal ball power management based election, earliest timer already enqueued, timer migration enabled or not), the target may eventually be the current CPU even if offline. If that happens, the timer is eventually ignored.  The most notable example is RCU which had to deal with each and every of those wake-ups by deferring them to an online CPU, along with related workarounds:  _ e787644caf76 (rcu: Defer RCU kthreads wakeup when CPU is dying) _ 9139f93209d1 (rcu/nocb: Fix RT throttling hrtimer armed from offline CPU) _ f7345ccc62a4 (rcu/nocb: Fix rcuog wake-up from offline softirq)  The problem isn't confined to RCU though as the stop machine kthread (which runs CPUHP_AP_HRTIMERS_DYING) reports its completion at the end of its work through cpu_stop_signal_done() and performs a wake up that eventually arms the deadline server timer:     WARNING: CPU: 94 PID: 588 at kernel/time/hrtimer.c:1086 hrtimer_start_range_ns+0x289/0x2d0    CPU: 94 UID: 0 PID: 588 Comm: migration/94 Not tainted    Stopper: multi_cpu_stop+0x0/0x120 <- stop_machine_cpuslocked+0x66/0xc0    RIP: 0010:hrtimer_start_range_ns+0x289/0x2d0    Call Trace:    <TASK>      start_dl_timer      enqueue_dl_entity      dl_server_start      enqueue_task_fair      enqueue_task      ttwu_do_activate      try_to_wake_up      complete      cpu_stopper_thread  Instead of providing yet another bandaid to work around the situation, fix it in the hrtimers infrastructure instead: always migrate away a timer to an online target whenever it is enqueued from an offline CPU.  This will also allow to revert all the above RCU disgraceful hacks.
published:2025-02-27T20:16:04.150


Instruction: Please provide detailed information about CVE-2025-21817

CVE:CVE-2025-21817
Description:In the Linux kernel, the following vulnerability has been resolved:  block: mark GFP_NOIO around sysfs ->store()  sysfs ->store is called with queue freezed, meantime we have several ->store() callbacks(update_nr_requests, wbt, scheduler) to allocate memory with GFP_KERNEL which may run into direct reclaim code path, then potential deadlock can be caused.  Fix the issue by marking NOIO around sysfs ->store()
published:2025-02-27T20:16:04.243


Instruction: Please provide detailed information about CVE-2025-21818

CVE:CVE-2025-21818
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-02-27T20:16:04.330


Instruction: Please provide detailed information about CVE-2025-21819

CVE:CVE-2025-21819
Description:In the Linux kernel, the following vulnerability has been resolved:  Revert "drm/amd/display: Use HW lock mgr for PSR1"  This reverts commit a2b5a9956269 ("drm/amd/display: Use HW lock mgr for PSR1")  Because it may cause system hang while connect with two edp panel.
published:2025-02-27T20:16:04.430


Instruction: Please provide detailed information about CVE-2025-21820

CVE:CVE-2025-21820
Description:In the Linux kernel, the following vulnerability has been resolved:  tty: xilinx_uartps: split sysrq handling  lockdep detects the following circular locking dependency:  CPU 0                      CPU 1 ========================== ============================ cdns_uart_isr()            printk()   uart_port_lock(port)       console_lock() 			     cdns_uart_console_write()                                if (!port->sysrq)                                  uart_port_lock(port)   uart_handle_break()     port->sysrq = ...   uart_handle_sysrq_char()     printk()       console_lock()  The fixed commit attempts to avoid this situation by only taking the port lock in cdns_uart_console_write if port->sysrq unset. However, if (as shown above) cdns_uart_console_write runs before port->sysrq is set, then it will try to take the port lock anyway. This may result in a deadlock.  Fix this by splitting sysrq handling into two parts. We use the prepare helper under the port lock and defer handling until we release the lock.
published:2025-02-27T20:16:04.520


Instruction: Please provide detailed information about CVE-2025-21821

CVE:CVE-2025-21821
Description:In the Linux kernel, the following vulnerability has been resolved:  fbdev: omap: use threaded IRQ for LCD DMA  When using touchscreen and framebuffer, Nokia 770 crashes easily with:      BUG: scheduling while atomic: irq/144-ads7846/82/0x00010000     Modules linked in: usb_f_ecm g_ether usb_f_rndis u_ether libcomposite configfs omap_udc ohci_omap ohci_hcd     CPU: 0 UID: 0 PID: 82 Comm: irq/144-ads7846 Not tainted 6.12.7-770 #2     Hardware name: Nokia 770     Call trace:      unwind_backtrace from show_stack+0x10/0x14      show_stack from dump_stack_lvl+0x54/0x5c      dump_stack_lvl from __schedule_bug+0x50/0x70      __schedule_bug from __schedule+0x4d4/0x5bc      __schedule from schedule+0x34/0xa0      schedule from schedule_preempt_disabled+0xc/0x10      schedule_preempt_disabled from __mutex_lock.constprop.0+0x218/0x3b4      __mutex_lock.constprop.0 from clk_prepare_lock+0x38/0xe4      clk_prepare_lock from clk_set_rate+0x18/0x154      clk_set_rate from sossi_read_data+0x4c/0x168      sossi_read_data from hwa742_read_reg+0x5c/0x8c      hwa742_read_reg from send_frame_handler+0xfc/0x300      send_frame_handler from process_pending_requests+0x74/0xd0      process_pending_requests from lcd_dma_irq_handler+0x50/0x74      lcd_dma_irq_handler from __handle_irq_event_percpu+0x44/0x130      __handle_irq_event_percpu from handle_irq_event+0x28/0x68      handle_irq_event from handle_level_irq+0x9c/0x170      handle_level_irq from generic_handle_domain_irq+0x2c/0x3c      generic_handle_domain_irq from omap1_handle_irq+0x40/0x8c      omap1_handle_irq from generic_handle_arch_irq+0x28/0x3c      generic_handle_arch_irq from call_with_stack+0x1c/0x24      call_with_stack from __irq_svc+0x94/0xa8     Exception stack(0xc5255da0 to 0xc5255de8)     5da0: 00000001 c22fc620 00000000 00000000 c08384a8 c106fc00 00000000 c240c248     5dc0: c113a600 c3f6ec30 00000001 00000000 c22fc620 c5255df0 c22fc620 c0279a94     5de0: 60000013 ffffffff      __irq_svc from clk_prepare_lock+0x4c/0xe4      clk_prepare_lock from clk_get_rate+0x10/0x74      clk_get_rate from uwire_setup_transfer+0x40/0x180      uwire_setup_transfer from spi_bitbang_transfer_one+0x2c/0x9c      spi_bitbang_transfer_one from spi_transfer_one_message+0x2d0/0x664      spi_transfer_one_message from __spi_pump_transfer_message+0x29c/0x498      __spi_pump_transfer_message from __spi_sync+0x1f8/0x2e8      __spi_sync from spi_sync+0x24/0x40      spi_sync from ads7846_halfd_read_state+0x5c/0x1c0      ads7846_halfd_read_state from ads7846_irq+0x58/0x348      ads7846_irq from irq_thread_fn+0x1c/0x78      irq_thread_fn from irq_thread+0x120/0x228      irq_thread from kthread+0xc8/0xe8      kthread from ret_from_fork+0x14/0x28  As a quick fix, switch to a threaded IRQ which provides a stable system.
published:2025-02-27T20:16:04.613


Instruction: Please provide detailed information about CVE-2025-21822

CVE:CVE-2025-21822
Description:In the Linux kernel, the following vulnerability has been resolved:  ptp: vmclock: Set driver data before its usage  If vmclock_ptp_register() fails during probing, vmclock_remove() is called to clean up the ptp clock and misc device. It uses dev_get_drvdata() to access the vmclock state. However the driver data is not yet set at this point.  Assign the driver data earlier.
published:2025-02-27T20:16:04.707


Instruction: Please provide detailed information about CVE-2025-21823

CVE:CVE-2025-21823
Description:In the Linux kernel, the following vulnerability has been resolved:  batman-adv: Drop unmanaged ELP metric worker  The ELP worker needs to calculate new metric values for all neighbors "reachable" over an interface. Some of the used metric sources require locks which might need to sleep. This sleep is incompatible with the RCU list iterator used for the recorded neighbors. The initial approach to work around of this problem was to queue another work item per neighbor and then run this in a new context.  Even when this solved the RCU vs might_sleep() conflict, it has a major problems: Nothing was stopping the work item in case it is not needed anymore - for example because one of the related interfaces was removed or the batman-adv module was unloaded - resulting in potential invalid memory accesses.  Directly canceling the metric worker also has various problems:  * cancel_work_sync for a to-be-deactivated interface is called with   rtnl_lock held. But the code in the ELP metric worker also tries to use   rtnl_lock() - which will never return in this case. This also means that   cancel_work_sync would never return because it is waiting for the worker   to finish. * iterating over the neighbor list for the to-be-deactivated interface is   currently done using the RCU specific methods. Which means that it is   possible to miss items when iterating over it without the associated   spinlock - a behaviour which is acceptable for a periodic metric check   but not for a cleanup routine (which must "stop" all still running   workers)  The better approch is to get rid of the per interface neighbor metric worker and handle everything in the interface worker. The original problems are solved by:  * creating a list of neighbors which require new metric information inside   the RCU protected context, gathering the metric according to the new list   outside the RCU protected context * only use rcu_trylock inside metric gathering code to avoid a deadlock   when the cancel_delayed_work_sync is called in the interface removal code   (which is called with the rtnl_lock held)
published:2025-02-27T20:16:04.793


Instruction: Please provide detailed information about CVE-2025-21824

CVE:CVE-2025-21824
Description:In the Linux kernel, the following vulnerability has been resolved:  gpu: host1x: Fix a use of uninitialized mutex  commit c8347f915e67 ("gpu: host1x: Fix boot regression for Tegra") caused a use of uninitialized mutex leading to below warning when CONFIG_DEBUG_MUTEXES and CONFIG_DEBUG_LOCK_ALLOC are enabled.  [   41.662843] ------------[ cut here ]------------ [   41.663012] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [   41.663035] WARNING: CPU: 4 PID: 794 at kernel/locking/mutex.c:587 __mutex_lock+0x670/0x878 [   41.663458] Modules linked in: rtw88_8822c(+) bluetooth(+) rtw88_pci rtw88_core mac80211 aquantia libarc4 crc_itu_t cfg80211 tegra194_cpufreq dwmac_tegra(+) arm_dsu_pmu stmmac_platform stmmac pcs_xpcs rfkill at24 host1x(+) tegra_bpmp_thermal ramoops reed_solomon fuse loop nfnetlink xfs mmc_block rpmb_core ucsi_ccg ina3221 crct10dif_ce xhci_tegra ghash_ce lm90 sha2_ce sha256_arm64 sha1_ce sdhci_tegra pwm_fan sdhci_pltfm sdhci gpio_keys rtc_tegra cqhci mmc_core phy_tegra_xusb i2c_tegra tegra186_gpc_dma i2c_tegra_bpmp spi_tegra114 dm_mirror dm_region_hash dm_log dm_mod [   41.665078] CPU: 4 UID: 0 PID: 794 Comm: (udev-worker) Not tainted 6.11.0-29.31_1538613708.el10.aarch64+debug #1 [   41.665838] Hardware name: NVIDIA NVIDIA Jetson AGX Orin Developer Kit/Jetson, BIOS 36.3.0-gcid-35594366 02/26/2024 [   41.672555] pstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [   41.679636] pc : __mutex_lock+0x670/0x878 [   41.683834] lr : __mutex_lock+0x670/0x878 [   41.688035] sp : ffff800084b77090 [   41.691446] x29: ffff800084b77160 x28: ffffdd4bebf7b000 x27: ffffdd4be96b1000 [   41.698799] x26: 1fffe0002308361c x25: 1ffff0001096ee18 x24: 0000000000000000 [   41.706149] x23: 0000000000000000 x22: 0000000000000002 x21: ffffdd4be6e3c7a0 [   41.713500] x20: ffff800084b770f0 x19: ffff00011841b1e8 x18: 0000000000000000 [   41.720675] x17: 0000000000000000 x16: 0000000000000000 x15: 0720072007200720 [   41.728023] x14: 0000000000000000 x13: 0000000000000001 x12: ffff6001a96eaab3 [   41.735375] x11: 1fffe001a96eaab2 x10: ffff6001a96eaab2 x9 : ffffdd4be4838bbc [   41.742723] x8 : 00009ffe5691554e x7 : ffff000d4b755593 x6 : 0000000000000001 [   41.749985] x5 : ffff000d4b755590 x4 : 1fffe0001d88f001 x3 : dfff800000000000 [   41.756988] x2 : 0000000000000000 x1 : 0000000000000000 x0 : ffff0000ec478000 [   41.764251] Call trace: [   41.766695]  __mutex_lock+0x670/0x878 [   41.770373]  mutex_lock_nested+0x2c/0x40 [   41.774134]  host1x_intr_start+0x54/0xf8 [host1x] [   41.778863]  host1x_runtime_resume+0x150/0x228 [host1x] [   41.783935]  pm_generic_runtime_resume+0x84/0xc8 [   41.788485]  __rpm_callback+0xa0/0x478 [   41.792422]  rpm_callback+0x15c/0x1a8 [   41.795922]  rpm_resume+0x698/0xc08 [   41.799597]  __pm_runtime_resume+0xa8/0x140 [   41.803621]  host1x_probe+0x810/0xbc0 [host1x] [   41.807909]  platform_probe+0xcc/0x1a8 [   41.811845]  really_probe+0x188/0x800 [   41.815347]  __driver_probe_device+0x164/0x360 [   41.819810]  driver_probe_device+0x64/0x1a8 [   41.823834]  __driver_attach+0x180/0x490 [   41.827773]  bus_for_each_dev+0x104/0x1a0 [   41.831797]  driver_attach+0x44/0x68 [   41.835296]  bus_add_driver+0x23c/0x4e8 [   41.839235]  driver_register+0x15c/0x3a8 [   41.843170]  __platform_register_drivers+0xa4/0x208 [   41.848159]  tegra_host1x_init+0x4c/0xff8 [host1x] [   41.853147]  do_one_initcall+0xd4/0x380 [   41.856997]  do_init_module+0x1dc/0x698 [   41.860758]  load_module+0xc70/0x1300 [   41.864435]  __do_sys_init_module+0x1a8/0x1d0 [   41.868721]  __arm64_sys_init_module+0x74/0xb0 [   41.873183]  invoke_syscall.constprop.0+0xdc/0x1e8 [   41.877997]  do_el0_svc+0x154/0x1d0 [   41.881671]  el0_svc+0x54/0x140 [   41.884820]  el0t_64_sync_handler+0x120/0x130 [   41.889285]  el0t_64_sync+0x1a4/0x1a8 [   41.892960] irq event stamp: 69737 [   41.896370] hardirqs last  enabled at (69737): [<ffffdd4be6d7768c>] _raw_spin_unlock_irqrestore+0x44/0xe8 [   41.905739] hardirqs last disabled at (69736): ---truncated---
published:2025-02-27T20:16:04.890


Instruction: Please provide detailed information about CVE-2025-22952

CVE:CVE-2025-22952
Description:elestio memos v0.23.0 is vulnerable to Server-Side Request Forgery (SSRF) due to insufficient validation of user-supplied URLs, which can be exploited to perform SSRF attacks.
published:2025-02-27T20:16:04.983


Instruction: Please provide detailed information about CVE-2025-25570

CVE:CVE-2025-25570
Description:Vue Vben Admin 2.10.1 allows unauthorized login to the backend due to an issue with hardcoded credentials.
published:2025-02-27T22:15:38.707


Instruction: Please provide detailed information about CVE-2025-25730

CVE:CVE-2025-25730
Description:An issue in Motorola Mobility Droid Razr HD (Model XT926) System Version: 9.18.94.XT926.Verizon.en.US allows physically proximate unauthorized attackers to access USB debugging, leading to control of the host device itself.
published:2025-02-27T22:15:38.820


Instruction: Please provide detailed information about CVE-2025-26264

CVE:CVE-2025-26264
Description:GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerability within its Notification Settings feature. An authenticated attacker with "System Settings" privileges in ASWeb can exploit this flaw to execute arbitrary commands on the server, leading to a full system compromise.
published:2025-02-27T22:15:38.947


Instruction: Please provide detailed information about CVE-2025-26325

CVE:CVE-2025-26325
Description:ShopXO 6.4.0 is vulnerable to File Upload in ThemeDataService.php.
published:2025-02-27T22:15:39.057


Instruction: Please provide detailed information about CVE-2025-24832

CVE:CVE-2025-24832
Description:Arbitrary file overwrite during home directory recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM (Linux) before build 1.8.4.866, Acronis Backup plugin for cPanel & WHM (Linux) before build 1.9.1.892, Acronis Backup extension for Plesk (Linux) before build 1.8.7.615.
published:2025-02-27T23:15:37.310


Instruction: Please provide detailed information about CVE-2025-1681

CVE:CVE-2025-1681
Description:The Cardealer theme for WordPress is vulnerable to unauthorized modification of data and loss of data due to a missing capability check and missing filename sanitization on the demo theme scheme AJAX functions in versions up to, and including, 1.6.4. This makes it possible for authenticated attackers, with subscriber-level access and above, to change or delete arbitrary css and js files.
published:2025-02-28T00:15:35.950


Instruction: Please provide detailed information about CVE-2025-1682

CVE:CVE-2025-1682
Description:The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to missing capability check on the 'save_settings' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to modify the default user role.
published:2025-02-28T00:15:36.100


Instruction: Please provide detailed information about CVE-2025-1687

CVE:CVE-2025-1687
Description:The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. This is due to missing nonce validation on the 'update_user_profile' function. This makes it possible for unauthenticated attackers to update the user email and password via a forged request, granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-02-28T00:15:36.240


Instruction: Please provide detailed information about CVE-2025-25477

CVE:CVE-2025-25477
Description:A host header injection vulnerability in SysPass 3.2x allows an attacker to load malicious JS files from an arbitrary domain which would be executed in the victim's browser.
published:2025-02-28T00:15:36.380


Instruction: Please provide detailed information about CVE-2025-25727

CVE:CVE-2025-25727
Description:Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to store passwords in cleartext.
published:2025-02-28T00:15:36.530


Instruction: Please provide detailed information about CVE-2025-25728

CVE:CVE-2025-25728
Description:Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 were discovered to send communications to the update API in plaintext, allowing attackers to access sensitive information via a man-in-the-middle attack.
published:2025-02-28T00:15:36.680


Instruction: Please provide detailed information about CVE-2025-25729

CVE:CVE-2025-25729
Description:An information disclosure vulnerability in Bosscomm IF740 Firmware versions:11001.7078 & v11001.0000 and System versions: 6.25 & 6.00 allows attackers to obtain hardcoded cleartext credentials via the update or boot process.
published:2025-02-28T00:15:36.827


Instruction: Please provide detailed information about CVE-2025-0823

CVE:CVE-2025-0823
Description:IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 and 12.0.0 through 12.0.4 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences (/../) to view arbitrary files on the system.
published:2025-02-28T03:15:10.510


Instruction: Please provide detailed information about CVE-2025-0975

CVE:CVE-2025-0975
Description:IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD console could allow an authenticated user to execute code due to improper neutralization of escape characters.
published:2025-02-28T03:15:10.653


Instruction: Please provide detailed information about CVE-2025-23225

CVE:CVE-2025-23225
Description:IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.
published:2025-02-28T03:15:10.807


Instruction: Please provide detailed information about CVE-2025-1744

CVE:CVE-2025-1744
Description:Out-of-bounds Write vulnerability in radareorg radare2 allows   heap-based buffer over-read or buffer overflow.This issue affects radare2: before <5.9.9.
published:2025-02-28T04:15:09.603


Instruction: Please provide detailed information about CVE-2025-0801

CVE:CVE-2025-0801
Description:The RateMyAgent Official plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4.0. This is due to missing or incorrect nonce validation on the 'rma-settings-wizard'. This makes it possible for unauthenticated attackers to update the plugin's API key via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-02-28T05:15:33.683


Instruction: Please provide detailed information about CVE-2025-1505

CVE:CVE-2025-1505
Description:The Advanced AJAX Product Filters plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.6.8.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-02-28T05:15:33.923


Instruction: Please provide detailed information about CVE-2025-1757

CVE:CVE-2025-1757
Description:The WordPress Portfolio Builder – Portfolio Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'pfhub_portfolio' and 'pfhub_portfolio_portfolio' shortcodes in all versions up to, and including, 1.1.7 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T05:15:34.097


Instruction: Please provide detailed information about CVE-2025-1506

CVE:CVE-2025-1506
Description:The Wp Social Login and Register Social Counter plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 3.1.0. This is due to missing or incorrect nonce validation on the counter_access_key_setup() function. This makes it possible for unauthenticated attackers to update social login provider settings via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-02-28T06:15:25.557


Instruction: Please provide detailed information about CVE-2025-1511

CVE:CVE-2025-1511
Description:The User Registration & Membership – Custom Registration Form, Login Form, and User Profile plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 4.0.4 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
published:2025-02-28T06:15:25.750


Instruction: Please provide detailed information about CVE-2025-1513

CVE:CVE-2025-1513
Description:The Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery – Upload, Vote, Sell via PayPal or Stripe, Social Share Buttons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Name and Comment field when commenting on photo gallery entries in all versions up to, and including, 26.0.0.1 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T06:15:25.937


Instruction: Please provide detailed information about CVE-2025-0764

CVE:CVE-2025-0764
Description:The wpForo Forum plugin for WordPress is vulnerable to arbitrary file read due to insufficient input validation in the 'update' method of the 'Members' class in all versions up to, and including, 2.4.1. This makes it possible for authenticated attackers, with subscriber-level privileges or higher, to read arbitrary files on the server.
published:2025-02-28T07:15:33.863


Instruction: Please provide detailed information about CVE-2025-1405

CVE:CVE-2025-1405
Description:The Product Catalog Simple plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's show_products shortcode in all versions up to, and including, 1.7.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T07:15:34.063


Instruction: Please provide detailed information about CVE-2025-1571

CVE:CVE-2025-1571
Description:The Exclusive Addons for Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Animated Text and Image Comparison Widgets in all versions up to, and including, 2.7.6 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T07:15:34.227


Instruction: Please provide detailed information about CVE-2025-1572

CVE:CVE-2025-1572
Description:The KiviCare – Clinic & Patient Management System (EHR) plugin for WordPress is vulnerable to SQL Injection via the ‘u_id’ parameter in all versions up to, and including, 3.6.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with doctor-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-02-28T08:15:35.810


Instruction: Please provide detailed information about CVE-2025-1413

CVE:CVE-2025-1413
Description:DaVinci Resolve on MacOS was found to be installed with incorrect file permissions (rwxrwxrwx). This is inconsistent with standard macOS security practices, where applications should have drwxr-xr-x permissions. Incorrect permissions allow for Dylib Hijacking. Guest account, other users and applications can exploit this vulnerability for privilege escalation. This issue affects DaVinci Resolve on MacOS in versions before 19.1.3.
published:2025-02-28T09:15:11.850


Instruction: Please provide detailed information about CVE-2025-1560

CVE:CVE-2025-1560
Description:The WOW Entrance Effects (WEE!) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wee' shortcode in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T09:15:12.040


Instruction: Please provide detailed information about CVE-2025-1570

CVE:CVE-2025-1570
Description:The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 8.1. This is due to the directorist_generate_password_reset_pin_code() and reset_user_password() functions not having enough controls to prevent a successful brute force attack of the OTP to change a password, or verify that a password reset request came from an authorized user. This makes it possible for unauthenticated attackers to generate and brute force an OTP that makes it possible to change any users passwords, including an administrator.
published:2025-02-28T09:15:12.203


Instruction: Please provide detailed information about CVE-2025-1662

CVE:CVE-2025-1662
Description:The URL Media Uploader plugin for WordPress is vulnerable to Server-Side Request Forgery in all versions up to, and including, 1.0.0 via the 'url_media_uploader_url_upload' action. This makes it possible for authenticated attackers, with author-level access and above, to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.
published:2025-02-28T09:15:12.373


Instruction: Please provide detailed information about CVE-2025-22491

CVE:CVE-2025-22491
Description:The user input was not sanitized on Reporting Hierarchy Management page of Foreseer Reporting Software (FRS) application which could lead into execution of arbitrary JavaScript in a browser context for all the interacting users. This security issue has been patched in the latest version 1.5.100 of the FRS.
published:2025-02-28T09:15:12.540


Instruction: Please provide detailed information about CVE-2025-22492

CVE:CVE-2025-22492
Description:The connection string visible to users with access to FRSCore database on Foreseer Reporting Software (FRS) VM, this string can be used for gaining administrative access to the 4crXref database. This vulnerability has been resolved in the latest version 1.5.100 of FRS.
published:2025-02-28T09:15:12.680


Instruction: Please provide detailed information about CVE-2025-1300

CVE:CVE-2025-1300
Description:CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy.   The CodeChecker web server contains an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL. This results in bypassing the protections against CVE-2021-28861, leading to the same open redirect pathway.  This issue affects CodeChecker: through 6.24.5.
published:2025-02-28T13:15:27.043


Instruction: Please provide detailed information about CVE-2025-1319

CVE:CVE-2025-1319
Description:The Site Mailer – SMTP Replacement, Email API Deliverability & Email Log plugin for WordPress is vulnerable to Stored Cross-Site Scripting in all versions up to, and including, 1.2.3 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-28T13:15:27.267


Instruction: Please provide detailed information about CVE-2025-22270

CVE:CVE-2025-22270
Description:An attacker with access to the Administration panel, specifically the "Role Management" tab, can inject code by adding a new role in the "name" field. It should be noted, however, that the risk of exploiting vulnerability is reduced due to the required additional error that allows bypassing the Content-Security-Policy policy, which mitigates JS code execution while still allowing HTML injection.   This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.
published:2025-02-28T13:15:27.447


Instruction: Please provide detailed information about CVE-2025-22271

CVE:CVE-2025-22271
Description:The application or its infrastructure allows for IP address spoofing by providing its own value in the "X-Forwarded-For" header. Thus, the action logging mechanism in the application loses accountability   This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.
published:2025-02-28T13:15:27.630


Instruction: Please provide detailed information about CVE-2025-22272

CVE:CVE-2025-22272
Description:In the "/EPMUI/ModalDlgHandler.ashx?value=showReadonlyDlg" endpoint, it is possible to inject code in the "modalDlgMsgInternal" parameter via POST, which is then executed in the browser. The risk of exploiting vulnerability is reduced due to the required additional bypassing the Content-Security-Policy policy   This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.
published:2025-02-28T13:15:27.770


Instruction: Please provide detailed information about CVE-2025-22273

CVE:CVE-2025-22273
Description:Application does not limit the number or frequency of user interactions, such as the number of incoming requests. At the "/EPMUI/VfManager.asmx/ChangePassword" endpoint it is possible to perform a brute force attack on the current password in use.   This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.
published:2025-02-28T13:15:27.927


Instruction: Please provide detailed information about CVE-2025-22274

CVE:CVE-2025-22274
Description:It is possible to inject HTML code into the page content using the "content" field in the "Application definition" page.   This issue affects CyberArk Endpoint Privilege Manager in SaaS version 24.7.1. The status of other versions is unknown. After multiple attempts to contact the vendor we did not receive any answer.
published:2025-02-28T13:15:28.067


Instruction: Please provide detailed information about CVE-2025-1746

CVE:CVE-2025-1746
Description:Cross-Site Scripting vulnerability in OpenCart versions prior to 4.1.0. This vulnerability allows an attacker to execute JavaScript code in the victim's browser by sending the victim a malicious URL using the search in the /product/search endpoint. This vulnerability could be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
published:2025-02-28T14:15:34.943


Instruction: Please provide detailed information about CVE-2025-1747

CVE:CVE-2025-1747
Description:HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/login.
published:2025-02-28T14:15:35.480


Instruction: Please provide detailed information about CVE-2025-1748

CVE:CVE-2025-1748
Description:HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/register.
published:2025-02-28T14:15:35.617


Instruction: Please provide detailed information about CVE-2025-1749

CVE:CVE-2025-1749
Description:HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/voucher.
published:2025-02-28T14:15:35.760


Instruction: Please provide detailed information about CVE-2025-1776

CVE:CVE-2025-1776
Description:Cross-Site Scripting (XSS) vulnerability in Soteshop, versions prior to 8.3.4, which could allow remote attackers to execute arbitrary code via the ‘query’ parameter in /app-google-custom-search/searchResults. This vulnerability can be exploited to steal sensitive user data, such as session cookies, or to perform actions on behalf of the user.
published:2025-02-28T14:15:35.943


Instruction: Please provide detailed information about CVE-2025-25916

CVE:CVE-2025-25916
Description:wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \coreframe\app\member\admin\group.php.
published:2025-02-28T15:15:13.613


Instruction: Please provide detailed information about CVE-2025-26326

CVE:CVE-2025-26326
Description:A vulnerability was identified in the NVDA Remote (version 2.6.4) and Tele NVDA Remote (version 2025.3.3) remote connection add-ons, which allows an attacker to obtain total control of the remote system by guessing a weak password. The problem occurs because these add-ons accept any password entered by the user and do not have an additional authentication or computer verification mechanism. Tests indicate that more than 1,000 systems use easy-to-guess passwords, many with less than 4 to 6 characters, including common sequences. This allows brute force attacks or trial-and-error attempts by malicious invaders. The vulnerability can be exploited by a remote attacker who knows or can guess the password used in the connection. As a result, the attacker gains complete access to the affected system and can execute commands, modify files, and compromise user security.
published:2025-02-28T15:15:13.743


Instruction: Please provide detailed information about CVE-2025-25461

CVE:CVE-2025-25461
Description:A Stored Cross-Site Scripting (XSS) vulnerability exists in SeedDMS 6.0.29. A user or rogue admin with the "Add Category" permission can inject a malicious XSS payload into the category name field. When a document is subsequently associated with this category, the payload is stored on the server and rendered without proper sanitization or output encoding. This results in the XSS payload executing in the browser of any user who views the document.
published:2025-02-28T16:15:39.387


Instruction: Please provide detailed information about CVE-2025-26047

CVE:CVE-2025-26047
Description:Loggrove v1.0 is vulnerable to SQL Injection in the read.py file.
published:2025-02-28T16:15:40.020


Instruction: Please provide detailed information about CVE-2025-26263

CVE:CVE-2025-26263
Description:GeoVision ASManager Windows desktop application with the version 6.1.2.0 or less (fixed in 6.2.0), is vulnerable to credentials disclosure due to improper memory handling in the ASManagerService.exe process.
published:2025-02-28T16:15:40.127


Instruction: Please provide detailed information about CVE-2025-27400

CVE:CVE-2025-27400
Description:Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Versions prior to 20.12.3 and 20.13.1 contain a vulnerability that allows script execution in the admin panel which could lead to cross-site scripting against authenticated admin users. The attack requires an admin user with configuration access, so in practicality it is not very likely to be useful given that a user with this level of access is probably already a full admin. Versions 20.12.3 and 20.13.1 contain a patch for the issue.
published:2025-02-28T16:15:40.237


Instruction: Please provide detailed information about CVE-2025-0985

CVE:CVE-2025-0985
Description:IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD   stores potentially sensitive information in environment variables that could be obtained by a local user.
published:2025-02-28T17:15:15.937


Instruction: Please provide detailed information about CVE-2025-20049

CVE:CVE-2025-20049
Description:The Dario Health portal service application is vulnerable to XSS, which could allow an attacker to obtain sensitive information.
published:2025-02-28T17:15:16.277


Instruction: Please provide detailed information about CVE-2025-20060

CVE:CVE-2025-20060
Description:An attacker could expose cross-user personal identifiable information (PII) and personal health information transmitted to the Android device via the Dario Health application database.
published:2025-02-28T17:15:16.440


Instruction: Please provide detailed information about CVE-2025-23405

CVE:CVE-2025-23405
Description:Unauthenticated log effects metrics gathering incident response efforts and potentially exposes risk of injection attacks (ex log injection).
published:2025-02-28T17:15:16.637


Instruction: Please provide detailed information about CVE-2025-24316

CVE:CVE-2025-24316
Description:The Dario Health Internet-based server infrastructure is vulnerable due to exposure of development environment details, which could lead to unsafe functionality.
published:2025-02-28T17:15:16.790


Instruction: Please provide detailed information about CVE-2025-24318

CVE:CVE-2025-24318
Description:Cookie policy is observable via built-in browser tools. In the presence of XSS, this could lead to full session compromise.
published:2025-02-28T17:15:16.937


Instruction: Please provide detailed information about CVE-2025-24843

CVE:CVE-2025-24843
Description:Insecure file retrieval process that facilitates potential for file manipulation to affect product stability and confidentiality, integrity, authenticity, and attestation of stored data.
published:2025-02-28T17:15:17.103


Instruction: Please provide detailed information about CVE-2025-24849

CVE:CVE-2025-24849
Description:Lack of encryption in transit for cloud infrastructure facilitating potential for sensitive data manipulation or exposure.
published:2025-02-28T17:15:17.253


Instruction: Please provide detailed information about CVE-2025-25430

CVE:CVE-2025-25430
Description:Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the configname parameter on the /cbi_addcert.htm page.
published:2025-02-28T18:15:28.263


Instruction: Please provide detailed information about CVE-2025-25431

CVE:CVE-2025-25431
Description:Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the The ssid key of wifi_data parameter on the /captive_portal.htm page.
published:2025-02-28T18:15:28.407


Instruction: Please provide detailed information about CVE-2025-27408

CVE:CVE-2025-27408
Description:Manifest offers users a one-file micro back end. Prior to version 4.9.2, Manifest employs a weak password hashing implementation that uses SHA3 without a salt. This exposes user passwords to a higher risk of being cracked if an attacker gains access to the database. Without the use of a salt, identical passwords across multiple users will result in the same hash, making it easier for attackers to identify and exploit patterns, thereby accelerating the cracking process. Version 4.9.2 fixes the issue.
published:2025-02-28T18:15:28.983


Instruction: Please provide detailed information about CVE-2025-0159

CVE:CVE-2025-0159
Description:IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1) could allow a remote attacker to bypass RPCAdapter endpoint authentication by sending a specifically crafted HTTP request.
published:2025-02-28T19:15:36.243


Instruction: Please provide detailed information about CVE-2025-0160

CVE:CVE-2025-0160
Description:IBM FlashSystem (IBM Storage Virtualize (8.5.0.0 through 8.5.0.13, 8.5.1.0, 8.5.2.0 through 8.5.2.3, 8.5.3.0 through 8.5.3.1, 8.5.4.0, 8.6.0.0 through 8.6.0.5, 8.6.1.0, 8.6.2.0 through 8.6.2.1, 8.6.3.0, 8.7.0.0 through 8.7.0.2, 8.7.1.0, 8.7.2.0 through 8.7.2.1)  could allow a remote attacker with access to the system to execute arbitrary Java code due to improper restrictions in the RPCAdapter service.
published:2025-02-28T19:15:36.393


Instruction: Please provide detailed information about CVE-2025-1795

CVE:CVE-2025-1795
Description:During an address list folding when a separating comma ends up on a folded line and that line is to be unicode-encoded then the separator itself is also unicode-encoded. Expected behavior is that the separating comma remains a plan comma. This can result in the address header being misinterpreted by some mail servers.
published:2025-02-28T19:15:36.550


Instruction: Please provide detailed information about CVE-2025-25428

CVE:CVE-2025-25428
Description:TRENDnet TEW-929DRU 1.0.0.10 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root.
published:2025-02-28T19:15:36.773


Instruction: Please provide detailed information about CVE-2025-25429

CVE:CVE-2025-25429
Description:Trendnet TEW-929DRU 1.0.0.10 contains a Stored Cross-site Scripting (XSS) vulnerability via the r_name variable inside the have_same_name function on the /addschedule.htm page.
published:2025-02-28T19:15:36.883


Instruction: Please provide detailed information about CVE-2025-25609

CVE:CVE-2025-25609
Description:TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_ipv6 parameter in the formIpv6Setup interface of /bin/boa
published:2025-02-28T19:15:36.993


Instruction: Please provide detailed information about CVE-2025-25610

CVE:CVE-2025-25610
Description:TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the static_gw parameter in the formIpv6Setup interface of /bin/boa.
published:2025-02-28T19:15:37.107


Instruction: Please provide detailed information about CVE-2025-25635

CVE:CVE-2025-25635
Description:TOTOlink A3002R V1.1.1-B20200824.0128 contains a buffer overflow vulnerability. The vulnerability arises from the improper input validation of the pppoe_dns1 parameter in the formIpv6Setup interface of /bin/boa.
published:2025-02-28T19:15:37.223


Instruction: Please provide detailed information about CVE-2025-0769

CVE:CVE-2025-0769
Description:PixelYourSite - Your smart PIXEL (TAG) and API Manager 10.1.1.1 was found to be vulnerable. Unvalidated user input is used directly in an unserialize function in myapp/modules/facebook/facebook-server-a sync-task.php.
published:2025-02-28T20:15:46.440


Instruction: Please provide detailed information about CVE-2025-27410

CVE:CVE-2025-27410
Description:PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerable to path traversal in the TAR entry's name, allowing an attacker to overwrite any file on the system with their content. By overwriting an included `.js` file and restarting the container, this allows for Remote Code Execution as an administrator. The remote code execution occurs because any user with the `backups:create` and `backups:update` (only administrators by default) is able to overwrite any file on the system. Version 1.2.0 fixes the issue.
published:2025-02-28T21:15:27.677


Instruction: Please provide detailed information about CVE-2025-27413

CVE:CVE-2025-27413
Description:PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality allows an administrator to import raw data into the database, including Path Traversal (`../`) sequences. This is problematic for the template update functionality as it uses the path from the database to write arbitrary content to, potentially overwriting source code to achieve Remote Code Execution. Any user with the `backups:create`, `backups:update` and `templates:update` permissions (only administrators by default) can write arbitrary content to anywhere on the filesystem. By overwriting source code, it is possible to achieve Remote Code Execution. Version 1.2.0 fixes the issue.
published:2025-02-28T21:15:27.820


Instruction: Please provide detailed information about CVE-2025-27414

CVE:CVE-2025-27414
Description:MinIO is a high performance object storage. Starting in RELEASE.2024-06-06T09-36-42Z and prior to  RELEASE.2025-02-28T09-55-16Z, a bug in evaluating the trust of the SSH key used in an SFTP connection to MinIO allows authentication bypass and unauthorized data access. On a MinIO server with SFTP access configured and using LDAP as an external identity provider, MinIO supports SSH key based authentication for SFTP connections when the user has the `sshPublicKey` attribute set in their LDAP server. The server trusts the client's key only when the public key is the same as the `sshPublicKey` attribute. Due to the bug, when the user has no `sshPublicKey` property in LDAP, the server ends up trusting the key allowing the client to perform any FTP operations allowed by the MinIO access policies associated with the LDAP user (or any of their groups). Three requirements must be met in order to exploit the vulnerability. First, the MinIO server must be configured to allow SFTP access and use LDAP as an external identity provider. Second, the attacker must have knowledge of an LDAP username that does not have the `sshPublicKey` property set. Third, such an LDAP username or one of their groups must also have some MinIO access policy configured. When this bug is successfully exploited, the attacker can perform any FTP operations (i.e. reading, writing, deleting and listing objects) allowed by the access policy associated with the LDAP user account (and their groups). Version 1.2.0 fixes the issue.
published:2025-02-28T21:15:27.957


Instruction: Please provide detailed information about CVE-2025-26466

CVE:CVE-2025-26466
Description:A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only freed when the server/client key exchange has finished. A malicious client may keep sending such packages, leading to an uncontrolled increase in memory consumption on the server side. Consequently, the server may become unavailable, resulting in a denial of service attack.
published:2025-02-28T22:15:40.080


Instruction: Please provide detailed information about CVE-2025-25379

CVE:CVE-2025-25379
Description:Cross Site Request Forgery vulnerability in 07FLYCMS v.1.3.9 allows a remote attacker to execute arbitrary code via the id parameter of the del.html component.
published:2025-02-28T23:15:10.790


Instruction: Please provide detailed information about CVE-2025-25476

CVE:CVE-2025-25476
Description:A stored cross-site scripting (XSS) vulnerability in SysPass 3.2.x allows a malicious user with elevated privileges to execute arbitrary Javascript code by specifying a malicious XSS payload as a notification type or notification component.
published:2025-02-28T23:15:11.063


Instruction: Please provide detailed information about CVE-2025-25478

CVE:CVE-2025-25478
Description:The account file upload functionality in Syspass 3.2.x fails to properly handle special characters in filenames. This mismanagement leads to the disclosure of the web application s source code, exposing sensitive information such as the database password.
published:2025-02-28T23:15:11.170


Instruction: Please provide detailed information about CVE-2025-25723

CVE:CVE-2025-25723
Description:Buffer Overflow vulnerability in GPAC version 2.5 allows a local attacker to execute arbitrary code.
published:2025-02-28T23:15:11.280


Instruction: Please provide detailed information about CVE-2025-1803

CVE:CVE-2025-1803
Description:Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This candidate was issued in error. Notes: All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-03-01T01:15:28.077


Instruction: Please provide detailed information about CVE-2025-27416

CVE:CVE-2025-27416
Description:Scratch-Coding-Hut.github.io is the website for Coding Hut. The website as of 28 February 2025 contained a sign in with scratch username and password form. Any user who used the sign in page would be susceptible to any other user signing into their account. As of time of publication, a fix is not available but work on a fix is underway. As a workaround, users should avoid signing in.
published:2025-03-01T01:15:28.857


Instruction: Please provide detailed information about CVE-2025-23115

CVE:CVE-2025-23115
Description:A Use After Free vulnerability on UniFi Protect Cameras could allow a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras management network.
published:2025-03-01T03:15:23.263


Instruction: Please provide detailed information about CVE-2025-23116

CVE:CVE-2025-23116
Description:An Authentication Bypass vulnerability on UniFi Protect Application with Auto-Adopt Bridge Devices enabled could allow a malicious actor with access to UniFi Protect Cameras adjacent network to take control of UniFi Protect Cameras.
published:2025-03-01T03:15:23.370


Instruction: Please provide detailed information about CVE-2025-23117

CVE:CVE-2025-23117
Description:An Insufficient Firmware Update Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.
published:2025-03-01T03:15:23.473


Instruction: Please provide detailed information about CVE-2025-23118

CVE:CVE-2025-23118
Description:An Improper Certificate Validation vulnerability could allow an authenticated malicious actor with access to UniFi Protect Cameras adjacent network to make unsupported changes to the camera system.
published:2025-03-01T03:15:23.557


Instruction: Please provide detailed information about CVE-2025-23119

CVE:CVE-2025-23119
Description:An Improper Neutralization of Escape Sequences vulnerability could allow an Authentication Bypass with a Remote Code Execution (RCE) by a malicious actor with access to UniFi Protect Cameras adjacent network.
published:2025-03-01T03:15:23.660


Instruction: Please provide detailed information about CVE-2025-1780

CVE:CVE-2025-1780
Description:The BuddyPress WooCommerce My Account Integration. Create WooCommerce Member Pages plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the wc4bp_delete_page() function in all versions up to, and including, 3.4.25. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update the plugins page setting.
published:2025-03-01T04:15:09.713


Instruction: Please provide detailed information about CVE-2025-0820

CVE:CVE-2025-0820
Description:The Clicface Trombi plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘nom’ parameter in all versions up to, and including, 2.08 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-01T05:15:15.953


Instruction: Please provide detailed information about CVE-2025-27554

CVE:CVE-2025-27554
Description:ToDesktop before 2024-10-03, as used by Cursor before 2024-10-03 and other applications, allows remote attackers to execute arbitrary commands on the build server (e.g., read secrets from the desktopify config.prod.json file), and consequently deploy updates to any app, via a postinstall script in package.json. No exploitation occurred.
published:2025-03-01T06:15:34.693


Instruction: Please provide detailed information about CVE-2025-1459

CVE:CVE-2025-1459
Description:The Page Builder by SiteOrigin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Embedded Video(PB) widget in all versions up to, and including, 2.31.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-01T07:15:10.980


Instruction: Please provide detailed information about CVE-2025-1502

CVE:CVE-2025-1502
Description:The IP2Location Redirection plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'download_ip2location_redirection_backup' AJAX action in all versions up to, and including, 1.33.3. This makes it possible for unauthenticated attackers to download the plugin's settings.
published:2025-03-01T07:15:11.183


Instruction: Please provide detailed information about CVE-2025-1730

CVE:CVE-2025-1730
Description:The Simple Download Counter plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 2.0 via the 'simple_download_counter_download_handler'. This makes it possible for authenticated attackers, with Author-level access and above, to extract sensitive data including any local file on the server, such as wp-config.php or /etc/passwd.
published:2025-03-01T07:15:11.380


Instruction: Please provide detailed information about CVE-2025-1564

CVE:CVE-2025-1564
Description:The SetSail Membership plugin for WordPress is vulnerable to  in all versions up to, and including, 1.0.3. This is due to the plugin not properly verifying a users identity through the social login. This makes it possible for unauthenticated attackers to log in as any user, including administrators and take over access to their account.
published:2025-03-01T08:15:34.007


Instruction: Please provide detailed information about CVE-2025-1638

CVE:CVE-2025-1638
Description:The Alloggio Membership plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity through the alloggio_membership_init_rest_api_facebook_login and alloggio_membership_init_rest_api_google_login functions. This makes it possible for unauthenticated attackers to log in as any user, including administrators, without knowing a password.
published:2025-03-01T08:15:34.167


Instruction: Please provide detailed information about CVE-2025-1671

CVE:CVE-2025-1671
Description:The Academist Membership plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.1.6. This is due to the academist_membership_check_facebook_user() function not properly verifying a user's identity prior to authenticating them. This makes it possible for unauthenticated attackers to log in as any user, including site administrators.
published:2025-03-01T08:15:34.320


Instruction: Please provide detailed information about CVE-2025-1291

CVE:CVE-2025-1291
Description:The Gutenberg Blocks with AI by Kadence WP – Page Builder Features plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘icon’ parameter in all versions up to, and including, 3.4.9 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-01T09:15:09.710


Instruction: Please provide detailed information about CVE-2025-1786

CVE:CVE-2025-1786
Description:A vulnerability was found in rizinorg rizin up to 0.7.4. It has been rated as critical. This issue affects the function msf_stream_directory_free in the library /librz/bin/pdb/pdb.c. The manipulation of the argument -P leads to buffer overflow. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. Upgrading to version 0.8.0 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-03-01T10:15:11.683


Instruction: Please provide detailed information about CVE-2025-1404

CVE:CVE-2025-1404
Description:The Secure Copy Content Protection and Content Locking plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ays_sccp_reports_user_search() function in all versions up to, and including, 4.4.7. This makes it possible for unauthenticated attackers to retrieve a list of registered user emails.
published:2025-03-01T12:15:34.310


Instruction: Please provide detailed information about CVE-2025-1491

CVE:CVE-2025-1491
Description:The WP Posts Carousel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘auto_play_timeout’ parameter in all versions up to, and including, 1.3.7 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-01T13:15:10.750


Instruction: Please provide detailed information about CVE-2025-1788

CVE:CVE-2025-1788
Description:A vulnerability, which was classified as critical, was found in rizinorg rizin up to 0.8.0. This affects the function rz_utf8_encode in the library /librz/util/utf8.c. The manipulation leads to heap-based buffer overflow. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
published:2025-03-01T13:15:11.797


Instruction: Please provide detailed information about CVE-2025-1791

CVE:CVE-2025-1791
Description:A vulnerability has been found in Zorlan SkyCaiji 2.9 and classified as critical. This vulnerability affects the function fileAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument save_data leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-01T14:15:34.520


Instruction: Please provide detailed information about CVE-2025-1797

CVE:CVE-2025-1797
Description:A vulnerability, which was classified as critical, has been found in Hunan Zhonghe Baiyi Information Technology Baiyiyun Asset Management and Operations System up to 20250217. Affected by this issue is some unknown functionality of the file /wuser/anyUserBoundHouse.php. The manipulation of the argument huid leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-01T15:15:11.573


Instruction: Please provide detailed information about CVE-2025-1799

CVE:CVE-2025-1799
Description:A vulnerability, which was classified as critical, was found in Zorlan SkyCaiji 2.9. This affects the function previewAction of the file vendor/skycaiji/app/admin/controller/Tool.php. The manipulation of the argument data leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-01T18:15:34.803


Instruction: Please provide detailed information about CVE-2025-1800

CVE:CVE-2025-1800
Description:A vulnerability has been found in D-Link DAR-7000 3.2 and classified as critical. This vulnerability affects the function get_ip_addr_details of the file /view/vpn/sxh_vpn/sxh_vpnlic.php of the component HTTP POST Request Handler. The manipulation of the argument ethname leads to command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-01T18:15:34.983


Instruction: Please provide detailed information about CVE-2025-1804

CVE:CVE-2025-1804
Description:A vulnerability was found in Blizzard Battle.Net up to 2.39.0.15212 on Windows and classified as critical. Affected by this issue is some unknown functionality in the library profapi.dll. The manipulation leads to uncontrolled search path. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The vendor assigns this issue a low risk level.
published:2025-03-01T19:15:10.660


Instruction: Please provide detailed information about CVE-2025-1806

CVE:CVE-2025-1806
Description:A vulnerability, which was classified as problematic, has been found in Eastnets PaymentSafe 2.5.26.0. Affected by this issue is some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.5.27.0 is able to address this issue.
published:2025-03-02T00:15:33.980


Instruction: Please provide detailed information about CVE-2025-1807

CVE:CVE-2025-1807
Description:A vulnerability, which was classified as problematic, was found in Eastnets PaymentSafe 2.5.26.0. This affects an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the argument Title leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.5.27.0 is able to address this issue.
published:2025-03-02T00:15:34.160


Instruction: Please provide detailed information about CVE-2025-1808

CVE:CVE-2025-1808
Description:A vulnerability has been found in Pixsoft E-Saphira 1.7.24 and classified as critical. This vulnerability affects unknown code of the file /servlet?act=login&tipo=1 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T01:15:10.230


Instruction: Please provide detailed information about CVE-2025-25724

CVE:CVE-2025-25724
Description:list_item_verbose in tar/util.c in libarchive through 3.7.7 does not check an strftime return value, which can lead to a denial of service or unspecified other impact via a crafted TAR archive that is read with a verbose value of 2. For example, the 100-byte buffer may not be sufficient for a custom locale.
published:2025-03-02T02:15:36.603


Instruction: Please provide detailed information about CVE-2025-25725

CVE:CVE-2025-25725
Description:Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-25724. Reason: This candidate is a reservation duplicate of CVE-2025-25724. Notes: All CVE users should reference CVE-2025-25724 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-03-02T02:15:36.760


Instruction: Please provide detailed information about CVE-2025-25726

CVE:CVE-2025-25726
Description:Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2024-53427. Reason: This candidate is a reservation duplicate of CVE-2024-53427. Notes: All CVE users should reference CVE-2024-53427 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-03-02T02:15:36.850


Instruction: Please provide detailed information about CVE-2025-1809

CVE:CVE-2025-1809
Description:A vulnerability was found in Pixsoft Sol up to 7.6.6c and classified as critical. This issue affects some unknown processing of the file /pix_projetos/servlet?act=login&submit=1&evento=0&pixrnd=0125021816444195731041 of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T06:15:22.057


Instruction: Please provide detailed information about CVE-2025-1810

CVE:CVE-2025-1810
Description:A vulnerability was found in Pixsoft Vivaz 6.0.11. It has been classified as problematic. Affected is an unknown function of the file /servlet?act=login&submit=1&evento=0&pixrnd=0125021817031859360231 of the component Login Endpoint. The manipulation of the argument sistema leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T07:15:10.160


Instruction: Please provide detailed information about CVE-2025-1811

CVE:CVE-2025-1811
Description:A vulnerability was found in AT Software Solutions ATSVD up to 3.4.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /login.aspx of the component Login Endpoint. The manipulation of the argument txtUsuario leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 3.4.2 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-03-02T09:15:09.843


Instruction: Please provide detailed information about CVE-2025-1812

CVE:CVE-2025-1812
Description:A vulnerability classified as critical has been found in zj1983 zz up to 2024-08. Affected is the function GetUserOrg of the file com/futvan/z/framework/core/SuperZ.java. The manipulation of the argument userId leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T09:15:10.903


Instruction: Please provide detailed information about CVE-2025-1813

CVE:CVE-2025-1813
Description:A vulnerability classified as problematic was found in zj1983 zz up to 2024-08. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T10:15:09.947


Instruction: Please provide detailed information about CVE-2025-1814

CVE:CVE-2025-1814
Description:A vulnerability, which was classified as critical, has been found in Tenda AC6 15.03.05.16. Affected by this issue is some unknown functionality of the file /goform/WifiExtraSet. The manipulation of the argument wpapsk_crypto leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-02T11:15:10.133


Instruction: Please provide detailed information about CVE-2025-1815

CVE:CVE-2025-1815
Description:A vulnerability, which was classified as critical, was found in pbrong hrms up to 1.0.1. This affects the function HrmsDB of the file \resource\resource.go. The manipulation of the argument user_cookie leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-02T12:15:36.507


Instruction: Please provide detailed information about CVE-2025-1816

CVE:CVE-2025-1816
Description:A vulnerability classified as problematic has been found in FFmpeg up to 6e26f57f672b05e7b8b052007a83aef99dc81ccb. This affects the function audio_element_obu of the file libavformat/iamf_parse.c of the component IAMF File Handler. The manipulation of the argument num_parameters leads to memory leak. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of the patch is 0526535cd58444dd264e810b2f3348b4d96cff3b. It is recommended to apply a patch to fix this issue.
published:2025-03-02T14:15:34.123


Instruction: Please provide detailed information about CVE-2025-1817

CVE:CVE-2025-1817
Description:A vulnerability classified as problematic was found in Mini-Tmall up to 20250211. This vulnerability affects unknown code of the file /admin of the component Admin Name Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-02T15:15:11.773


Instruction: Please provide detailed information about CVE-2025-0895

CVE:CVE-2025-0895
Description:IBM Cognos Analytics Mobile 1.1 for Android could allow a user with physical access to the device, to obtain sensitive information from debugging code log messages.
published:2025-03-02T16:15:35.410


Instruction: Please provide detailed information about CVE-2025-1818

CVE:CVE-2025-1818
Description:A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. This issue affects some unknown processing of the file src/main/java/com/futvan/z/system/zfile/ZfileAction.upload. The manipulation of the argument file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T16:15:35.563


Instruction: Please provide detailed information about CVE-2025-1819

CVE:CVE-2025-1819
Description:A vulnerability, which was classified as critical, was found in Tenda AC7 1200M 15.03.06.44. Affected is the function TendaTelnet of the file /goform/telnet. The manipulation of the argument lan_ip leads to os command injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-02T17:15:11.483


Instruction: Please provide detailed information about CVE-2025-1820

CVE:CVE-2025-1820
Description:A vulnerability has been found in zj1983 zz up to 2024-8 and classified as critical. Affected by this vulnerability is the function getOaWid of the file src/main/java/com/futvan/z/system/zworkflow/ZworkflowAction.java. The manipulation of the argument tableId leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T17:15:11.677


Instruction: Please provide detailed information about CVE-2025-1821

CVE:CVE-2025-1821
Description:A vulnerability was found in zj1983 zz up to 2024-8 and classified as critical. Affected by this issue is the function getUserOrgForUserId of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument userID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T19:15:10.547


Instruction: Please provide detailed information about CVE-2025-1829

CVE:CVE-2025-1829
Description:A vulnerability was found in TOTOLINK X18 9.1.0cu.2024_B20220329. It has been declared as critical. This vulnerability affects the function setMtknatCfg of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument mtkhnatEnable leads to os command injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T19:15:10.723


Instruction: Please provide detailed information about CVE-2025-1830

CVE:CVE-2025-1830
Description:A vulnerability was found in zj1983 zz up to 2024-8. It has been rated as problematic. This issue affects some unknown processing of the component Customer Information Handler. The manipulation of the argument Customer Name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T20:15:33.767


Instruction: Please provide detailed information about CVE-2025-1831

CVE:CVE-2025-1831
Description:A vulnerability classified as critical has been found in zj1983 zz up to 2024-8. Affected is the function GetDBUser of the file src/main/java/com/futvan/z/system/zorg/ZorgAction.java. The manipulation of the argument user_id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T20:15:34.577


Instruction: Please provide detailed information about CVE-2025-1832

CVE:CVE-2025-1832
Description:A vulnerability classified as critical was found in zj1983 zz up to 2024-8. Affected by this vulnerability is the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T21:15:10.110


Instruction: Please provide detailed information about CVE-2025-1833

CVE:CVE-2025-1833
Description:A vulnerability, which was classified as critical, has been found in zj1983 zz up to 2024-8. Affected by this issue is the function sendNotice of the file src/main/java/com/futvan/z/erp/customer_notice/Customer_noticeAction.java of the component HTTP Request Handler. The manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T22:15:34.820


Instruction: Please provide detailed information about CVE-2025-1834

CVE:CVE-2025-1834
Description:A vulnerability, which was classified as critical, was found in zj1983 zz up to 2024-8. This affects an unknown part of the file /resolve. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T22:15:34.997


Instruction: Please provide detailed information about CVE-2025-1835

CVE:CVE-2025-1835
Description:A vulnerability has been found in osuuu LightPicture 1.2.2 and classified as critical. This vulnerability affects the function upload of the file /app/controller/Api.php. The manipulation of the argument file leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-02T23:15:10.477


Instruction: Please provide detailed information about CVE-2025-1836

CVE:CVE-2025-1836
Description:A vulnerability was found in Incorta 2023.4.3. It has been classified as problematic. Affected is an unknown function of the component Edit Insight Handler. The manipulation of the argument Service Name leads to csv injection. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-02T23:15:10.993


Instruction: Please provide detailed information about CVE-2025-1840

CVE:CVE-2025-1840
Description:A vulnerability was found in ESAFENET CDG 5.6.3.154.205. It has been rated as critical. Affected by this issue is some unknown functionality of the file /CDGServer3/workflowE/useractivate/updateorg.jsp. The manipulation of the argument flowId leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T00:15:42.857


Instruction: Please provide detailed information about CVE-2025-1841

CVE:CVE-2025-1841
Description:A vulnerability classified as critical has been found in ESAFENET CDG 5.6.3.154.205. This affects an unknown part of the file /CDGServer3/logManagement/ClientSortLog.jsp. The manipulation of the argument startDate/endDate leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-03T00:15:43.033


Instruction: Please provide detailed information about CVE-2025-27579

CVE:CVE-2025-27579
Description:In Bitaxe ESP-Miner before 2.5.0 with AxeOS, one can use an /api/system CSRF attack to update the payout address (aka stratumUser) for a Bitaxe Bitcoin miner, or change the frequency and voltage settings.
published:2025-03-03T00:15:43.210


Instruction: Please provide detailed information about CVE-2025-1842

CVE:CVE-2025-1842
Description:A vulnerability classified as problematic was found in FITSTATS Technologies AthleteMonitoring up to 20250302. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-03-03T01:15:10.023