Instruction: Please provide detailed information about CVE-2025-3339

CVE:CVE-2025-3339
Description:A vulnerability classified as critical was found in codeprojects Online Restaurant Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user_update.php. The manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T06:15:40.823


Instruction: Please provide detailed information about CVE-2025-3340

CVE:CVE-2025-3340
Description:A vulnerability, which was classified as critical, has been found in codeprojects Online Restaurant Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/combo_update.php. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T07:15:39.067


Instruction: Please provide detailed information about CVE-2025-3341

CVE:CVE-2025-3341
Description:A vulnerability, which was classified as critical, was found in codeprojects Online Restaurant Management System 1.0. This affects an unknown part of the file /admin/reservation_view.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T07:15:39.573


Instruction: Please provide detailed information about CVE-2025-3342

CVE:CVE-2025-3342
Description:A vulnerability has been found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/payment_save.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T08:15:13.910


Instruction: Please provide detailed information about CVE-2025-3343

CVE:CVE-2025-3343
Description:A vulnerability was found in codeprojects Online Restaurant Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/reservation_update.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T08:15:14.120


Instruction: Please provide detailed information about CVE-2025-30473

CVE:CVE-2025-30473
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow Common SQL Provider.  When using the partition clause in SQLTableCheckOperator as parameter (which was a recommended pattern), Authenticated UI User could inject arbitrary SQL command when triggering DAG exposing partition_clause to the user. This allowed the DAG Triggering user to escalate privileges to execute those arbitrary commands which they normally would not have.   This issue affects Apache Airflow Common SQL Provider: before 1.24.1.  Users are recommended to upgrade to version 1.24.1, which fixes the issue.
published:2025-04-07T09:15:16.667


Instruction: Please provide detailed information about CVE-2025-3344

CVE:CVE-2025-3344
Description:A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/assign_save.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T09:15:16.850


Instruction: Please provide detailed information about CVE-2025-3345

CVE:CVE-2025-3345
Description:A vulnerability was found in codeprojects Online Restaurant Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/combo.php. The manipulation of the argument del leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T09:15:17.047


Instruction: Please provide detailed information about CVE-2025-3346

CVE:CVE-2025-3346
Description:A vulnerability was found in Tenda AC7 15.03.06.44. It has been rated as critical. Affected by this issue is the function formSetPPTPServer of the file /goform/SetPptpServerCfg. The manipulation of the argument pptp_server_start_ip/pptp_server_end_ip leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T10:15:15.153


Instruction: Please provide detailed information about CVE-2025-3347

CVE:CVE-2025-3347
Description:A vulnerability classified as critical has been found in code-projects Patient Record Management System 1.0. This affects an unknown part of the file /dental_pending.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T10:15:16.700


Instruction: Please provide detailed information about CVE-2025-21421

CVE:CVE-2025-21421
Description:Memory corruption while processing escape code in API.
published:2025-04-07T11:15:50.360


Instruction: Please provide detailed information about CVE-2025-21423

CVE:CVE-2025-21423
Description:Memory corruption occurs when handling client calls to EnableTestMode through an Escape call.
published:2025-04-07T11:15:50.533


Instruction: Please provide detailed information about CVE-2025-21425

CVE:CVE-2025-21425
Description:Memory corruption may occur due top improper access control in HAB process.
published:2025-04-07T11:15:50.697


Instruction: Please provide detailed information about CVE-2025-21428

CVE:CVE-2025-21428
Description:Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request from the AP to establish a TSpec session.
published:2025-04-07T11:15:50.870


Instruction: Please provide detailed information about CVE-2025-21429

CVE:CVE-2025-21429
Description:Memory corruption occurs while connecting a STA to an AP and initiating an ADD TS request.
published:2025-04-07T11:15:51.047


Instruction: Please provide detailed information about CVE-2025-21430

CVE:CVE-2025-21430
Description:Transient DOS while connecting STA to AP and initiating ADD TS request from AP to establish TSpec session.
published:2025-04-07T11:15:51.220


Instruction: Please provide detailed information about CVE-2025-21431

CVE:CVE-2025-21431
Description:Information disclosure may be there when a guest VM is connected.
published:2025-04-07T11:15:51.440


Instruction: Please provide detailed information about CVE-2025-21434

CVE:CVE-2025-21434
Description:Transient DOS may occur while parsing EHT operation IE or EHT capability IE.
published:2025-04-07T11:15:51.600


Instruction: Please provide detailed information about CVE-2025-21435

CVE:CVE-2025-21435
Description:Transient DOS may occur while parsing extended IE in beacon.
published:2025-04-07T11:15:51.783


Instruction: Please provide detailed information about CVE-2025-21436

CVE:CVE-2025-21436
Description:Memory corruption may occur while initiating two IOCTL calls simultaneously to create processes from two different threads.
published:2025-04-07T11:15:51.970


Instruction: Please provide detailed information about CVE-2025-21437

CVE:CVE-2025-21437
Description:Memory corruption while processing memory map or unmap IOCTL operations simultaneously.
published:2025-04-07T11:15:52.123


Instruction: Please provide detailed information about CVE-2025-21438

CVE:CVE-2025-21438
Description:Memory corruption while IOCTL call is invoked from user-space to read board data.
published:2025-04-07T11:15:52.290


Instruction: Please provide detailed information about CVE-2025-21439

CVE:CVE-2025-21439
Description:Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer.
published:2025-04-07T11:15:52.457


Instruction: Please provide detailed information about CVE-2025-21440

CVE:CVE-2025-21440
Description:Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
published:2025-04-07T11:15:52.613


Instruction: Please provide detailed information about CVE-2025-21441

CVE:CVE-2025-21441
Description:Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
published:2025-04-07T11:15:52.777


Instruction: Please provide detailed information about CVE-2025-21442

CVE:CVE-2025-21442
Description:Memory corruption while transmitting packet mapping information with invalid header payload size.
published:2025-04-07T11:15:52.933


Instruction: Please provide detailed information about CVE-2025-21443

CVE:CVE-2025-21443
Description:Memory corruption while processing message content in eAVB.
published:2025-04-07T11:15:53.087


Instruction: Please provide detailed information about CVE-2025-21447

CVE:CVE-2025-21447
Description:Memory corruption may occur while processing device IO control call for session control.
published:2025-04-07T11:15:53.243


Instruction: Please provide detailed information about CVE-2025-21448

CVE:CVE-2025-21448
Description:Transient DOS may occur while parsing SSID in action frames.
published:2025-04-07T11:15:53.397


Instruction: Please provide detailed information about CVE-2025-3348

CVE:CVE-2025-3348
Description:A vulnerability classified as critical was found in code-projects Patient Record Management System 1.0. This vulnerability affects unknown code of the file /edit_dpatient.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T11:15:53.607


Instruction: Please provide detailed information about CVE-2025-3349

CVE:CVE-2025-3349
Description:A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component SYST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T11:15:53.807


Instruction: Please provide detailed information about CVE-2025-0050

CVE:CVE-2025-0050
Description:Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in Arm Ltd Bifrost GPU Userspace Driver, Arm Ltd Valhall GPU Userspace Driver, Arm Ltd Arm 5th Gen GPU Architecture Userspace Driver allows a non-privileged user process to make valid GPU processing operations, including via WebGL or WebGPU, to access a limited amount outside of buffer bounds.This issue affects Bifrost GPU Userspace Driver: from r0p0 through r49p2, from r50p0 through r51p0; Valhall GPU Userspace Driver: from r19p0 through r49p2, from r50p0 through r53p0; Arm 5th Gen GPU Architecture Userspace Driver: from r41p0 through r49p2, from r50p0 through r53p0.
published:2025-04-07T12:15:15.360


Instruction: Please provide detailed information about CVE-2025-3350

CVE:CVE-2025-3350
Description:A vulnerability, which was classified as critical, was found in PHPGurukul Old Age Home Management System 1.0. Affected is an unknown function of the file /admin/view-enquiry.php. The manipulation of the argument viewid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T12:15:16.100


Instruction: Please provide detailed information about CVE-2025-3351

CVE:CVE-2025-3351
Description:A vulnerability has been found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation of the argument Username leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T12:15:16.380


Instruction: Please provide detailed information about CVE-2025-3352

CVE:CVE-2025-3352
Description:A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/edit-scdetails.php. The manipulation of the argument contnum leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T13:15:42.643


Instruction: Please provide detailed information about CVE-2025-3353

CVE:CVE-2025-3353
Description:A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T13:15:43.313


Instruction: Please provide detailed information about CVE-2025-3359

CVE:CVE-2025-3359
Description:A flaw was found in GNUPlot. A segmentation fault via IO_str_init_static_internal may jeopardize the environment.
published:2025-04-07T13:15:43.510


Instruction: Please provide detailed information about CVE-2025-3360

CVE:CVE-2025-3360
Description:A flaw was found in GLib. An integer overflow and buffer under-read occur when parsing a long invalid ISO 8601 timestamp with the g_date_time_new_from_iso8601() function.
published:2025-04-07T13:15:43.687


Instruction: Please provide detailed information about CVE-2025-27686

CVE:CVE-2025-27686
Description:Dell Unisphere for PowerMax, version(s) prior to 10.2.0.9 and PowerMax version(s) prior to PowerMax 9.2.4.15, contain an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Script injection.
published:2025-04-07T14:15:24.210


Instruction: Please provide detailed information about CVE-2025-2251

CVE:CVE-2025-2251
Description:A security flaw exists in WildFly and JBoss Enterprise Application Platform (EAP) within the Enterprise JavaBeans (EJB) remote invocation mechanism. This vulnerability stems from untrusted data deserialization handled by JBoss Marshalling. This flaw allows an attacker to send a specially crafted serialized object, leading to remote code execution without requiring authentication.
published:2025-04-07T14:15:24.400


Instruction: Please provide detailed information about CVE-2025-30195

CVE:CVE-2025-30195
Description:An attacker can publish a zone containing specific Resource Record Sets. Processing and caching results for these sets can lead to an illegal memory accesses and crash of the Recursor, causing a denial of service.  The remedy is: upgrade to the patched 5.2.1 version.  We would like to thank Volodymyr Ilyin for bringing this issue to our attention.
published:2025-04-07T14:15:24.813


Instruction: Please provide detailed information about CVE-2025-3369

CVE:CVE-2025-3369
Description:A vulnerability was found in xxyopen Novel-Plus 5.1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /novel/friendLink/list. The manipulation of the argument sort leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T14:15:28.843


Instruction: Please provide detailed information about CVE-2025-3370

CVE:CVE-2025-3370
Description:A vulnerability classified as critical has been found in PHPGurukul Men Salon Management System 1.0. This affects an unknown part of the file /admin/admin-profile.php. The manipulation of the argument contactnumber leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-04-07T14:15:29.047


Instruction: Please provide detailed information about CVE-2025-30373

CVE:CVE-2025-30373
Description:Graylog is a free and open log management platform. Starting with 6.1, HTTP Inputs can be configured to check if a specified header is present and has a specified value to authenticate HTTP-based ingestion. Unfortunately, even though in cases of a missing header or a wrong value the correct HTTP response (401) is returned, the message will be ingested nonetheless. To mitigate the vulnerability, disable http-based inputs and allow only authenticated pull-based inputs. This vulnerability is fixed in 6.1.9.
published:2025-04-07T15:15:43.887


Instruction: Please provide detailed information about CVE-2025-31138

CVE:CVE-2025-31138
Description:tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where user-controlled inputs for element dimensions (width and height) were not properly validated. This allowed an attacker with direct access to the site's source code or a CMS plugin to set values like 100%;height:100%;position:fixed;, potentially covering the entire viewport and facilitating clickjacking attacks. An attacker with high privileges could exploit this vulnerability to overlay malicious UI elements on top of legitimate content, trick users into interacting with hidden elements (clickjacking), or disrupt the intended functionality and accessibility of the website. This vulnerability is fixed in 1.20.1.
published:2025-04-07T15:15:44.047


Instruction: Please provide detailed information about CVE-2025-31475

CVE:CVE-2025-31475
Description:tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js prior to 1.20.1, where the addOrUpdate function, used for applying custom texts, did not properly validate input. This allowed an attacker with direct access to the site's source code or a CMS plugin to manipulate JavaScript object prototypes, leading to potential security risks such as data corruption or unintended code execution. An attacker with high privileges could exploit this vulnerability to modify object prototypes, affecting core JavaScript behavior, cause application crashes or unexpected behavior, or potentially introduce further security vulnerabilities depending on the application's architecture. This vulnerability is fixed in 1.20.1.
published:2025-04-07T15:15:44.220


Instruction: Please provide detailed information about CVE-2025-31476

CVE:CVE-2025-31476
Description:tarteaucitron.js is a compliant and accessible cookie banner. A vulnerability was identified in tarteaucitron.js, allowing a user with high privileges (access to the site's source code or a CMS plugin) to enter a URL containing an insecure scheme such as javascript:alert(). Before the fix, URL validation was insufficient, which could allow arbitrary JavaScript execution if a user clicked on a malicious link. An attacker with high privileges could insert a link exploiting an insecure URL scheme, leading to execution of arbitrary JavaScript code, theft of sensitive data through phishing attacks, or modification of the user interface behavior. This vulnerability is fixed in 1.20.1.
published:2025-04-07T15:15:44.370


Instruction: Please provide detailed information about CVE-2025-32014

CVE:CVE-2025-32014
Description:estree-util-value-to-estree converts a JavaScript value to an ESTree expression. When generating an ESTree from a value with a property named __proto__, valueToEstree would generate an object that specifies a prototype instead. This vulnerability is fixed in 3.3.3.
published:2025-04-07T15:15:44.593


Instruction: Please provide detailed information about CVE-2025-3248

CVE:CVE-2025-3248
Description:Langflow versions prior to 1.3.0 are susceptible to code injection in  the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.
published:2025-04-07T15:15:44.897


Instruction: Please provide detailed information about CVE-2025-3371

CVE:CVE-2025-3371
Description:A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component DELETE Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T15:15:46.097


Instruction: Please provide detailed information about CVE-2025-3372

CVE:CVE-2025-3372
Description:A vulnerability, which was classified as critical, was found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component MKDIR Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T15:15:46.300


Instruction: Please provide detailed information about CVE-2025-28400

CVE:CVE-2025-28400
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the postID parameter in the edit method
published:2025-04-07T16:15:24.137


Instruction: Please provide detailed information about CVE-2025-28401

CVE:CVE-2025-28401
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the menuId parameter
published:2025-04-07T16:15:24.270


Instruction: Please provide detailed information about CVE-2025-28402

CVE:CVE-2025-28402
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobId parameter
published:2025-04-07T16:15:24.383


Instruction: Please provide detailed information about CVE-2025-28403

CVE:CVE-2025-28403
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method does not properly validate whether the requesting user has administrative privileges before allowing modifications to system configuration settings
published:2025-04-07T16:15:24.493


Instruction: Please provide detailed information about CVE-2025-28405

CVE:CVE-2025-28405
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the changeStatus method
published:2025-04-07T16:15:24.603


Instruction: Please provide detailed information about CVE-2025-28406

CVE:CVE-2025-28406
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the jobLogId parameter
published:2025-04-07T16:15:24.710


Instruction: Please provide detailed information about CVE-2025-28407

CVE:CVE-2025-28407
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the edit method of the /edit/{dictId} endpoint does not properly validate whether the requesting user has permission to modify the specified dictId
published:2025-04-07T16:15:24.827


Instruction: Please provide detailed information about CVE-2025-28408

CVE:CVE-2025-28408
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the selectDeptTree method of the /selectDeptTree/{deptId} endpoint does not properly validate the deptId parameter
published:2025-04-07T16:15:24.947


Instruction: Please provide detailed information about CVE-2025-28409

CVE:CVE-2025-28409
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the add method of the /add/{parentId} endpoint does not properly validate whether the requesting user has permission to add a menu item under the specified parentId
published:2025-04-07T16:15:25.057


Instruction: Please provide detailed information about CVE-2025-28410

CVE:CVE-2025-28410
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the cancelAuthUserAll method does not properly validate whether the requesting user has administrative privileges
published:2025-04-07T16:15:25.170


Instruction: Please provide detailed information about CVE-2025-28411

CVE:CVE-2025-28411
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the editSave method in /tool/gen/editSave
published:2025-04-07T16:15:25.300


Instruction: Please provide detailed information about CVE-2025-28412

CVE:CVE-2025-28412
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the /editSave method in SysNoticeController
published:2025-04-07T16:15:25.433


Instruction: Please provide detailed information about CVE-2025-28413

CVE:CVE-2025-28413
Description:An issue in RUoYi v.4.8.0 allows a remote attacker to escalate privileges via the SysDictTypeController component
published:2025-04-07T16:15:25.543


Instruction: Please provide detailed information about CVE-2025-3373

CVE:CVE-2025-3373
Description:A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this vulnerability is an unknown functionality of the component SITE CHMOD Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T16:15:27.340


Instruction: Please provide detailed information about CVE-2025-3374

CVE:CVE-2025-3374
Description:A vulnerability was found in PCMan FTP Server 2.0.7 and classified as critical. Affected by this issue is some unknown functionality of the component CCC Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T16:15:27.530


Instruction: Please provide detailed information about CVE-2025-3424

CVE:CVE-2025-3424
Description:The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the "Object Marshalling" technique, which allows an attacker to read internal files without any authentication. This is possible by crafting specific .NET Remoting URLs derived from information enumerated in the client-side configuration files.        This issue affects IntelliSpace Portal: 12 and prior.
published:2025-04-07T16:15:27.703


Instruction: Please provide detailed information about CVE-2025-3425

CVE:CVE-2025-3425
Description:The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the deserialization vulnerability. After analyzing the configuration files, we observed that the server had set the TypeFilterLevel to Full which is dangerous as it can potentially lead to remote code execution using deserialization. This issue affects IntelliSpace Portal: 12 and prior.
published:2025-04-07T16:15:27.963


Instruction: Please provide detailed information about CVE-2025-3375

CVE:CVE-2025-3375
Description:A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component CDUP Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T17:15:39.457


Instruction: Please provide detailed information about CVE-2025-3376

CVE:CVE-2025-3376
Description:A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. This vulnerability affects unknown code of the component CONF Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T17:15:39.680


Instruction: Please provide detailed information about CVE-2025-3426

CVE:CVE-2025-3426
Description:We observed that Intellispace Portal binaries doesn’t have any protection mechanisms to prevent reverse engineering. Specifically, the app’s code is not obfuscated, and no measures are in place to protect against decompilation, disassembly, or debugging. As a result, attackers can reverse-engineer the application to gain insights into its internal workings, which can potentially lead to the discovery of sensitive information, business logic flaws, and other vulnerabilities. Utilizing this flaw, the attacker was able to identify the Hardcoded credentials from PortalUsersDatabase.dll, which contains .NET remoting definition. Inside the namespace PortalUsersDatabase, the class Users contains the functions CreateAdmin and CreateService that are used to initialize accounts in the Portal service. Both CreateAdmin and CreateService functions contain a hardcoded encrypted password along with its respective salt that are set with the function SetInitialPasswordAndSalt. This issue affects IntelliSpace Portal: 12 and prior; Advanced Visualization Workspace: 15.
published:2025-04-07T17:15:40.073


Instruction: Please provide detailed information about CVE-2025-3377

CVE:CVE-2025-3377
Description:A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. This issue affects some unknown processing of the component ENC Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T18:15:45.733


Instruction: Please provide detailed information about CVE-2025-3378

CVE:CVE-2025-3378
Description:A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. Affected is an unknown function of the component EPRT Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T18:15:45.923


Instruction: Please provide detailed information about CVE-2025-3379

CVE:CVE-2025-3379
Description:A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. Affected by this vulnerability is an unknown functionality of the component EPSV Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T19:15:57.533


Instruction: Please provide detailed information about CVE-2025-3380

CVE:CVE-2025-3380
Description:A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. Affected by this issue is some unknown functionality of the component FEAT Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T19:15:57.747


Instruction: Please provide detailed information about CVE-2025-29087

CVE:CVE-2025-29087
Description:Sqlite 3.49.0 is susceptible to integer overflow through the concat function.
published:2025-04-07T20:15:20.253


Instruction: Please provide detailed information about CVE-2025-29478

CVE:CVE-2025-29478
Description:An issue in fluent-bit v.3.7.2 allows a local attacker to cause a denial of service via the cfl_list_size in cfl_list.h:165.
published:2025-04-07T20:15:20.373


Instruction: Please provide detailed information about CVE-2025-29479

CVE:CVE-2025-29479
Description:Buffer Overflow in hiredis 1.2.0 allows a local attacker to cause a denial of service via the sdscatlen function.
published:2025-04-07T20:15:20.490


Instruction: Please provide detailed information about CVE-2025-29480

CVE:CVE-2025-29480
Description:Buffer Overflow vulnerability in gdal 3.10.2 allows a local attacker to cause a denial of service via the OGRSpatialReference::Release function.
published:2025-04-07T20:15:20.607


Instruction: Please provide detailed information about CVE-2025-29481

CVE:CVE-2025-29481
Description:Buffer Overflow vulnerability in libbpf 1.5.0 allows a local attacker to execute arbitrary code via the bpf_object__init_prog` function of libbpf.
published:2025-04-07T20:15:20.720


Instruction: Please provide detailed information about CVE-2025-29482

CVE:CVE-2025-29482
Description:Buffer Overflow vulnerability in libheif 1.19.7 allows a local attacker to execute arbitrary code via the SAO (Sample Adaptive Offset) processing of libde265.
published:2025-04-07T20:15:20.847


Instruction: Please provide detailed information about CVE-2025-29594

CVE:CVE-2025-29594
Description:A vulnerability exists in the errorpage.php file of the CS2-WeaponPaints-Website v2.1.7 where user-controlled input is not adequately validated before being processed. Specifically, the $_GET['errorcode'] parameter can be manipulated to access unauthorized error codes, leading to Cross-Site Scripting (XSS) attacks and information disclosure.
published:2025-04-07T20:15:20.963


Instruction: Please provide detailed information about CVE-2025-29769

CVE:CVE-2025-29769
Description:libvips is a demand-driven, horizontally threaded image processing library.  The heifsave operation could incorrectly determine the presence of an alpha channel in an input when it was not possible to determine the colour interpretation, known internally within libvips as "multiband". There aren't many ways to create a "multiband" input, but it is possible with a well-crafted TIFF image. If a "multiband" TIFF input image had 4 channels and HEIF-based output was requested, this led to libvips creating a 3 channel HEIF image without an alpha channel but then attempting to write 4 channels of data. This caused a heap buffer overflow, which could crash the process. This vulnerability is fixed in 8.16.1.
published:2025-04-07T20:15:21.090


Instruction: Please provide detailed information about CVE-2025-3381

CVE:CVE-2025-3381
Description:A vulnerability, which was classified as critical, was found in zhangyanbo2007 youkefu 4.2.0. This affects an unknown part of the file WebIMController.java of the component File Upload. The manipulation of the argument ID leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T20:15:21.760


Instruction: Please provide detailed information about CVE-2025-3382

CVE:CVE-2025-3382
Description:A vulnerability has been found in joey-zhou xiaozhi-esp32-server-java up to a14fe8115842ee42ab5c7a51706b8a85db5200b7 and classified as critical. This vulnerability affects the function update of the file /api/user/update. The manipulation of the argument state leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
published:2025-04-07T20:15:21.943


Instruction: Please provide detailed information about CVE-2025-31496

CVE:CVE-2025-31496
Description:apollo-compiler is a query-based compiler for the GraphQL query language. Prior to 1.27.0, a vulnerability in Apollo Compiler allowed queries with deeply nested and reused named fragments to be prohibitively expensive to validate. Named fragments were being processed once per fragment spread in some cases during query validation, leading to exponential resource usage when deeply nested and reused fragments were involved. This could lead to excessive resource consumption and denial of service in applications. This vulnerability is fixed in 1.27.0.
published:2025-04-07T21:15:42.720


Instruction: Please provide detailed information about CVE-2025-32029

CVE:CVE-2025-32029
Description:ts-asn1-der is a collection of utility classes to encode ASN.1 data following DER rule. Incorrect number DER encoding can lead to denial on service for absolute values in the range 2**31 -- 2**32 - 1. The arithmetic in the numBitLen didn't take into account that values in this range could result in a negative result upon applying the >> operator, leading to an infinite loop. The issue is patched in version 1.0.4. If upgrading is not an option, the issue can be mitigated by validating inputs to Asn1Integer to ensure that they are not smaller than -2**31 + 1 and no larger than 2**31 - 1.
published:2025-04-07T21:15:42.880


Instruction: Please provide detailed information about CVE-2025-32030

CVE:CVE-2025-32030
Description:Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gateway allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically during named fragment expansion. Named fragments were being expanded once per fragment spread during query planning, leading to exponential resource usage when deeply nested and reused fragments were involved. This could lead to excessive resource consumption and denial of service. This has been remediated in @apollo/gateway version 2.10.1.
published:2025-04-07T21:15:43.037


Instruction: Please provide detailed information about CVE-2025-32031

CVE:CVE-2025-32031
Description:Apollo Gateway provides utilities for combining multiple GraphQL microservices into a single GraphQL endpoint. Prior to 2.10.1, a vulnerability in Apollo Gateway allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically due to internal optimizations being frequently bypassed. The query planner includes an optimization that significantly speeds up planning for applicable GraphQL selections. However, queries with deeply nested and reused named fragments can generate many selections where this optimization does not apply, leading to significantly longer planning times. Because the query planner does not enforce a timeout, a small number of such queries can render gateway inoperable. This could lead to excessive resource consumption and denial of service. This has been remediated in @apollo/gateway version 2.10.1.
published:2025-04-07T21:15:43.220


Instruction: Please provide detailed information about CVE-2025-32032

CVE:CVE-2025-32032
Description:The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. A vulnerability in Apollo Router allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically due to internal optimizations being frequently bypassed. The query planner includes an optimization that significantly speeds up planning for applicable GraphQL selections. However, queries with deeply nested and reused named fragments can generate many selections where this optimization does not apply, leading to significantly longer planning times. Because the query planner does not enforce a timeout, a small number of such queries can exhaust router's thread pool, rendering it inoperable. This could lead to excessive resource consumption and denial of service. This has been remediated in apollo-router versions 1.61.2 and 2.1.1.
published:2025-04-07T21:15:43.363


Instruction: Please provide detailed information about CVE-2025-32033

CVE:CVE-2025-32033
Description:The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1.61.2 and 2.1.1, the operation limits plugin uses unsigned 32-bit integers to track limit counters (e.g. for a query's height). If a counter exceeded the maximum value for this data type (4,294,967,295), it wrapped around to 0, unintentionally allowing queries to bypass configured thresholds. This could occur for large queries if the payload limit were sufficiently increased, but could also occur for small queries with deeply nested and reused named fragments. This has been remediated in apollo-router versions 1.61.2 and 2.1.1.
published:2025-04-07T21:15:43.527


Instruction: Please provide detailed information about CVE-2025-32034

CVE:CVE-2025-32034
Description:The Apollo Router Core is a configurable, high-performance graph router written in Rust to run a federated supergraph that uses Apollo Federation 2. Prior to 1.61.2 and 2.1.1, a vulnerability in Apollo Router allowed queries with deeply nested and reused named fragments to be prohibitively expensive to query plan, specifically during named fragment expansion. Named fragments were being expanded once per fragment spread during query planning, leading to exponential resource usage when deeply nested and reused fragments were involved. This could lead to excessive resource consumption and denial of service. This has been remediated in apollo-router versions 1.61.2 and 2.1.1.
published:2025-04-07T21:15:43.690


Instruction: Please provide detailed information about CVE-2025-3383

CVE:CVE-2025-3383
Description:A vulnerability was found in SourceCodester Web-based Pharmacy Product Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /search/search_sales.php. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T21:15:43.850


Instruction: Please provide detailed information about CVE-2025-3384

CVE:CVE-2025-3384
Description:A vulnerability was found in 1000 Projects Human Resource Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /controller/employee.php. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T21:15:44.053


Instruction: Please provide detailed information about CVE-2025-0942

CVE:CVE-2025-0942
Description:The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection.  This issue affects JPlatform before 10.0.6 and a  PatchPlugin release 10.0.6 was issued 2023-02-06.
published:2025-04-07T22:15:16.020


Instruction: Please provide detailed information about CVE-2025-32409

CVE:CVE-2025-32409
Description:Ratta SuperNote A6 X2 Nomad before December 2024 allows remote code execution because an arbitrary firmware image (signed with debug keys) can be sent to TCP port 60002, and placed into the correct image-update location as a consequence of both directory traversal and unintended handling of concurrency.
published:2025-04-07T22:15:16.963


Instruction: Please provide detailed information about CVE-2025-3385

CVE:CVE-2025-3385
Description:A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Classification Management Page. The manipulation of the argument Classification name leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T22:15:17.137


Instruction: Please provide detailed information about CVE-2025-3386

CVE:CVE-2025-3386
Description:A vulnerability was found in LinZhaoguan pb-cms 2.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /admin#links of the component Friendship Link Handler. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T22:15:17.337


Instruction: Please provide detailed information about CVE-2025-3387

CVE:CVE-2025-3387
Description:A vulnerability classified as problematic has been found in renrenio renren-security up to 5.4.0. This affects an unknown part of the component JSON Handler. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-04-07T23:15:43.530


Instruction: Please provide detailed information about CVE-2025-3388

CVE:CVE-2025-3388
Description:A vulnerability classified as problematic was found in hailey888 oa_system up to 2025.01.01. This vulnerability affects the function loginCheck of the file cn/gson/oasys/controller/login/LoginsController.java of the component Frontend. The manipulation of the argument Username leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
published:2025-04-07T23:15:44.033


Instruction: Please provide detailed information about CVE-2025-3389

CVE:CVE-2025-3389
Description:A vulnerability, which was classified as problematic, has been found in hailey888 oa_system up to 2025.01.01. This issue affects the function testMess of the file cn/gson/oasys/controller/inform/InformManageController.java of the component Backend. The manipulation of the argument menu leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
published:2025-04-08T00:15:15.793


Instruction: Please provide detailed information about CVE-2025-3390

CVE:CVE-2025-3390
Description:A vulnerability, which was classified as problematic, was found in hailey888 oa_system up to 2025.01.01. Affected is the function addandchangeday of the file cn/gson/oass/controller/daymanager/DaymanageController.java of the component Backend. The manipulation of the argument scheduleList leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available.
published:2025-04-08T00:15:15.993


Instruction: Please provide detailed information about CVE-2025-3391

CVE:CVE-2025-3391
Description:A vulnerability has been found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this vulnerability is the function outAddress of the file cn/gson/oass/controller/address/AddrController. java of the component Backend. The manipulation of the argument outtype leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.
published:2025-04-08T01:15:42.223


Instruction: Please provide detailed information about CVE-2025-2519

CVE:CVE-2025-2519
Description:The Sreamit theme for WordPress is vulnerable to arbitrary file downloads in all versions up to, and including, 4.0.1. This is due to insufficient file validation in the 'st_send_download_file' function. This makes it possible for authenticated attackers, with subscriber-level access and above, to download arbitrary files.
published:2025-04-08T02:15:19.283


Instruction: Please provide detailed information about CVE-2025-2525

CVE:CVE-2025-2525
Description:The Streamit theme for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the 'st_Authentication_Controller::edit_profile' function in all versions up to, and including, 4.0.1. This makes it possible for authenticated attackers, with subscriber-level and above permissions, to upload arbitrary files on the affected site's server which may make remote code execution possible.
published:2025-04-08T02:15:20.363


Instruction: Please provide detailed information about CVE-2025-2526

CVE:CVE-2025-2526
Description:The Streamit theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like email in the 'st_Authentication_Controller::edit_profile' function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
published:2025-04-08T02:15:20.523


Instruction: Please provide detailed information about CVE-2025-3361

CVE:CVE-2025-3361
Description:The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
published:2025-04-08T02:15:20.737


Instruction: Please provide detailed information about CVE-2025-3362

CVE:CVE-2025-3362
Description:The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
published:2025-04-08T02:15:20.913


Instruction: Please provide detailed information about CVE-2025-3363

CVE:CVE-2025-3363
Description:The web service of iSherlock from HGiga has an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the server.
published:2025-04-08T02:15:21.077


Instruction: Please provide detailed information about CVE-2025-3392

CVE:CVE-2025-3392
Description:A vulnerability was found in hailey888 oa_system up to 2025.01.01 and classified as problematic. Affected by this issue is the function Save of the file cn/gson/oasys/controller/mail/MailController.java of the component Backend. The manipulation of the argument MailNumberId leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
published:2025-04-08T02:15:21.227


Instruction: Please provide detailed information about CVE-2025-3393

CVE:CVE-2025-3393
Description:A vulnerability was found in mrcen springboot-ucan-admin up to 5f35162032cbe9288a04e429ef35301545143509. It has been classified as problematic. This affects an unknown part of the file /ucan-admin/index of the component Personal Settings Interface. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
published:2025-04-08T02:15:21.410


Instruction: Please provide detailed information about CVE-2025-3397

CVE:CVE-2025-3397
Description:A vulnerability classified as problematic has been found in YzmCMS 7.1. Affected is an unknown function of the file message.tpl. The manipulation of the argument gourl leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T02:15:21.597


Instruction: Please provide detailed information about CVE-2025-3398

CVE:CVE-2025-3398
Description:A vulnerability classified as critical was found in lenve VBlog up to 1.0.0. Affected by this vulnerability is the function configure of the file blogserver/src/main/java/org/sang/config/WebSecurityConfig.java. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T02:15:21.780


Instruction: Please provide detailed information about CVE-2025-3399

CVE:CVE-2025-3399
Description:A vulnerability, which was classified as critical, has been found in ESAFENET CDG 5.6.3.154.205_20250114. Affected by this issue is some unknown functionality of the file /pubinfo/updateNotice.jsp. The manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T02:15:21.980


Instruction: Please provide detailed information about CVE-2025-3400

CVE:CVE-2025-3400
Description:A vulnerability, which was classified as critical, was found in ESAFENET CDG 5.6.3.154.205_20250114. This affects an unknown part of the file /client/UnChkMailApplication.jsp. The manipulation of the argument typename leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T02:15:22.167


Instruction: Please provide detailed information about CVE-2025-32413

CVE:CVE-2025-32413
Description:Vulnerability-Lookup before 2.7.1 allows stored XSS via a user bio in website/web/views/user.py.
published:2025-04-08T03:15:14.723


Instruction: Please provide detailed information about CVE-2025-32414

CVE:CVE-2025-32414
Description:In libxml2 before 2.13.8 and 2.14.x before 2.14.2, out-of-bounds memory access can occur in the Python API (Python bindings) because of an incorrect return value. This occurs in xmlPythonFileRead and xmlPythonFileReadRaw because of a difference between bytes and characters.
published:2025-04-08T03:15:15.940


Instruction: Please provide detailed information about CVE-2025-3364

CVE:CVE-2025-3364
Description:The SSH service of PowerStation from HGiga has a Chroot Escape vulnerability, allowing attackers with root privileges to bypass chroot restrictions and access the entire file system.
published:2025-04-08T03:15:16.107


Instruction: Please provide detailed information about CVE-2025-3401

CVE:CVE-2025-3401
Description:A vulnerability has been found in ESAFENET CDG 5.6.3.154.205_20250114 and classified as critical. This vulnerability affects unknown code of the file /parameter/getLimitIPList.jsp. The manipulation of the argument noticeId leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T03:15:16.280


Instruction: Please provide detailed information about CVE-2025-3402

CVE:CVE-2025-3402
Description:A vulnerability was found in Seeyon Zhiyuan Interconnect FE Collaborative Office Platform 5.5.2 and classified as critical. This issue affects some unknown processing of the file /sysform/042/check.js%70. The manipulation of the argument Name leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T03:15:16.463


Instruction: Please provide detailed information about CVE-2025-3403

CVE:CVE-2025-3403
Description:A vulnerability was found in Vivotek NVR ND8422P, NVR ND9525P and NVR ND9541P 2.4.0.204/3.3.0.104/4.2.0.101. It has been classified as problematic. Affected is an unknown function of the component HTML Form Handler. The manipulation leads to inclusion of sensitive information in source code. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T03:15:16.670


Instruction: Please provide detailed information about CVE-2025-3405

CVE:CVE-2025-3405
Description:A vulnerability was found in FCJ Venture Builder appclientefiel 3.0.27. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /rest/cliente/ObterPedido/ of the component HTTP GET Request Handler. The manipulation of the argument ORDER_ID leads to improper control of resource identifiers. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T04:15:31.400


Instruction: Please provide detailed information about CVE-2025-3406

CVE:CVE-2025-3406
Description:A vulnerability was found in Nothings stb up to f056911. It has been classified as problematic. Affected is the function stbhw_build_tileset_from_image of the component Header Array Handler. The manipulation of the argument w leads to out-of-bounds read. It is possible to launch the attack remotely. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T04:15:31.647


Instruction: Please provide detailed information about CVE-2025-3407

CVE:CVE-2025-3407
Description:A vulnerability was found in Nothings stb up to f056911. It has been declared as critical. Affected by this vulnerability is the function stbhw_build_tileset_from_image. The manipulation of the argument h_count/v_count leads to out-of-bounds read. The attack can be launched remotely. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T04:15:31.877


Instruction: Please provide detailed information about CVE-2025-3408

CVE:CVE-2025-3408
Description:A vulnerability was found in Nothings stb up to f056911. It has been rated as critical. Affected by this issue is the function stb_dupreplace. The manipulation leads to integer overflow. The attack may be launched remotely. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T04:15:32.077


Instruction: Please provide detailed information about CVE-2025-20934

CVE:CVE-2025-20934
Description:Improper access control in Sticker Center prior to SMR Apr-2025 Release 1 allows local attackers to access image files with system privilege.
published:2025-04-08T05:15:37.790


Instruction: Please provide detailed information about CVE-2025-20935

CVE:CVE-2025-20935
Description:Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access files with system privilege. User interaction is required for triggering this vulnerability.
published:2025-04-08T05:15:37.923


Instruction: Please provide detailed information about CVE-2025-20936

CVE:CVE-2025-20936
Description:Improper access control in HDCP trustlet prior to SMR Apr-2025 Release 1 allows local attackers with shell privilege to escalate their privileges to root.
published:2025-04-08T05:15:38.043


Instruction: Please provide detailed information about CVE-2025-20938

CVE:CVE-2025-20938
Description:Improper access control in SamsungContacts prior to SMR Apr-2025 Release 1 allows local attackers to access protected data in SamsungContacts.
published:2025-04-08T05:15:38.170


Instruction: Please provide detailed information about CVE-2025-20939

CVE:CVE-2025-20939
Description:Improper authorization in wireless download protocol in Galaxy Watch prior to SMR Apr-2025 Release 1 allows physical attackers to update device unique identifier of Watch devices.
published:2025-04-08T05:15:38.293


Instruction: Please provide detailed information about CVE-2025-20940

CVE:CVE-2025-20940
Description:Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 allows local attackers to access provider in SDMHS.
published:2025-04-08T05:15:38.413


Instruction: Please provide detailed information about CVE-2025-20941

CVE:CVE-2025-20941
Description:Improper access control in InputManager to SMR Apr-2025 Release 1 allows local attackers to access the scancode of specific input device.
published:2025-04-08T05:15:38.550


Instruction: Please provide detailed information about CVE-2025-20942

CVE:CVE-2025-20942
Description:Improper Verification of Intent by Broadcast Receiver in DeviceIdService prior to SMR Apr-2025 Release 1 allows local attackers to reset OAID.
published:2025-04-08T05:15:38.670


Instruction: Please provide detailed information about CVE-2025-20943

CVE:CVE-2025-20943
Description:Out-of-bounds write in secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to cause memory corruption.
published:2025-04-08T05:15:38.787


Instruction: Please provide detailed information about CVE-2025-20944

CVE:CVE-2025-20944
Description:Out-of-bounds read in parsing audio data in libsavsac.so prior to SMR Apr-2025 Release 1 allows local attackers to read out-of-bounds memory.
published:2025-04-08T05:15:38.913


Instruction: Please provide detailed information about CVE-2025-20945

CVE:CVE-2025-20945
Description:Improper access control in Galaxy Watch prior to SMR Apr-2025 Release 1 allows local attackers to access sensitive information of Galaxy watch.
published:2025-04-08T05:15:39.037


Instruction: Please provide detailed information about CVE-2025-20946

CVE:CVE-2025-20946
Description:Improper handling of exceptional conditions in pairing specific bluetooth devices in Galaxy Watch Bluetooth pairing prior to SMR Apr-2025 Release 1 allows local attackers to pair with specific bluetooth devices without user interaction.
published:2025-04-08T05:15:39.160


Instruction: Please provide detailed information about CVE-2025-20947

CVE:CVE-2025-20947
Description:Improper handling of insufficient permission or privileges in ClipboardService prior to SMR Apr-2025 Release 1 allows local attackers to access image files across multiple users. User interaction is required for triggering this vulnerability.
published:2025-04-08T05:15:39.283


Instruction: Please provide detailed information about CVE-2025-20948

CVE:CVE-2025-20948
Description:Out-of-bounds read in enrollment with cdsp frame secfr trustlet prior to SMR Apr-2025 Release 1 allows local privileged attackers to read out-of-bounds memory.
published:2025-04-08T05:15:39.400


Instruction: Please provide detailed information about CVE-2025-20950

CVE:CVE-2025-20950
Description:Use of implicit intent for sensitive communication in SamsungNotes prior to version 4.4.26.45 allows local attackers to access sensitive information.
published:2025-04-08T05:15:39.527


Instruction: Please provide detailed information about CVE-2025-20951

CVE:CVE-2025-20951
Description:Improper verification of intent by broadcast receiver vulnerability in Galaxy Store prior to version 4.5.90.7 allows local attackers to write arbitrary files with the privilege of Galaxy Store.
published:2025-04-08T05:15:39.647


Instruction: Please provide detailed information about CVE-2025-2004

CVE:CVE-2025-2004
Description:The Simple WP Events plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpe_delete_file AJAX action in all versions up to, and including, 1.8.17. This makes it possible for unauthenticated attackers to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).
published:2025-04-08T05:15:39.767


Instruction: Please provide detailed information about CVE-2025-3409

CVE:CVE-2025-3409
Description:A vulnerability classified as critical has been found in Nothings stb up to f056911. This affects the function stb_include_string. The manipulation of the argument path_to_includes leads to stack-based buffer overflow. It is possible to initiate the attack remotely. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T05:15:40.050


Instruction: Please provide detailed information about CVE-2025-3410

CVE:CVE-2025-3410
Description:A vulnerability classified as critical was found in mymagicpower AIAS 20250308. This vulnerability affects unknown code of the file training_platform/train-platform/src/main/java/top/aias/training/controller/LocalStorageController.java. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T05:15:40.243


Instruction: Please provide detailed information about CVE-2025-3411

CVE:CVE-2025-3411
Description:A vulnerability, which was classified as critical, has been found in mymagicpower AIAS 20250308. This issue affects some unknown processing of the file 3_api_platform/api-platform/src/main/java/top/aias/platform/controller/AsrController.java. The manipulation of the argument url leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T05:15:40.423


Instruction: Please provide detailed information about CVE-2025-0361

CVE:CVE-2025-0361
Description:During an annual penetration test conducted on behalf of Axis Communications, Truesec discovered a flaw in the VAPIX Device Configuration framework that allowed for unauthenticated username enumeration through the VAPIX Device Configuration SSH Management API.
published:2025-04-08T06:15:44.540


Instruction: Please provide detailed information about CVE-2025-3412

CVE:CVE-2025-3412
Description:A vulnerability, which was classified as critical, was found in mymagicpower AIAS 20250308. Affected is an unknown function of the file 2_training_platform/train-platform/src/main/java/top/aias/training/controller/InferController.java. The manipulation of the argument url leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T06:15:44.970


Instruction: Please provide detailed information about CVE-2025-3413

CVE:CVE-2025-3413
Description:A vulnerability has been found in opplus springboot-admin up to a2d5310f44fd46780a8686456cf2f9001ab8f024 and classified as critical. Affected by this vulnerability is the function code of the file SysGeneratorController.java. The manipulation of the argument Tables leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. The vendor was contacted early about this disclosure but did not respond in any way.
published:2025-04-08T06:15:45.333


Instruction: Please provide detailed information about CVE-2025-3427

CVE:CVE-2025-3427
Description:The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'infill_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-04-08T07:15:42.740


Instruction: Please provide detailed information about CVE-2025-3428

CVE:CVE-2025-3428
Description:The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'coating_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-04-08T07:15:42.943


Instruction: Please provide detailed information about CVE-2025-3429

CVE:CVE-2025-3429
Description:The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'material_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-04-08T07:15:43.120


Instruction: Please provide detailed information about CVE-2025-3430

CVE:CVE-2025-3430
Description:The 3DPrint Lite plugin for WordPress is vulnerable to SQL Injection via the 'printer_text' parameter in all versions up to, and including, 2.1.3.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for unauthenticated attackers to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-04-08T07:15:43.303


Instruction: Please provide detailed information about CVE-2025-23186

CVE:CVE-2025-23186
Description:In certain conditions, SAP NetWeaver Application Server ABAP allows an authenticated attacker to craft a Remote Function Call (RFC) request to restricted destinations, which can be used to expose credentials for a remote service. These credentials can then be further exploited to completely compromise the remote service, potentially resulting in a significant impact on the confidentiality, integrity, and availability of the application.
published:2025-04-08T08:15:15.133


Instruction: Please provide detailed information about CVE-2025-26653

CVE:CVE-2025-26653
Description:SAP NetWeaver Application Server ABAP does not sufficiently encode user-controlled inputs, leading to Stored Cross-Site Scripting (XSS) vulnerability. This enables an attacker, without requiring any privileges, to inject malicious JavaScript into a website. When a user visits the compromised page, the injected script gets executed, potentially compromising the confidentiality and integrity within the scope of the victim�s browser. Availability is not impacted.
published:2025-04-08T08:15:15.710


Instruction: Please provide detailed information about CVE-2025-26654

CVE:CVE-2025-26654
Description:SAP Commerce Cloud (Public Cloud) does not allow to disable unencrypted HTTP (port 80) entirely, but instead allows a redirect from port 80 to 443 (HTTPS). As a result, Commerce normally communicates securely over HTTPS. However, the confidentiality and integrity of data sent on the first request before the redirect may be impacted if the client is configured to use HTTP and sends confidential data on the first request before the redirect.
published:2025-04-08T08:15:15.903


Instruction: Please provide detailed information about CVE-2025-26657

CVE:CVE-2025-26657
Description:SAP KMC WPC allows an unauthenticated attacker to remotely retrieve usernames by a simple parameter query which could expose sensitive information causing low impact on confidentiality of the application. This has no effect on integrity and availability.
published:2025-04-08T08:15:16.077


Instruction: Please provide detailed information about CVE-2025-27428

CVE:CVE-2025-27428
Description:Due to directory traversal vulnerability, an authorized attacker could gain access to some critical information by using RFC enabled function module. Upon successful exploitation, they could read files from any managed system connected to SAP Solution Manager, leading to high impact on confidentiality. There is no impact on integrity or availability.
published:2025-04-08T08:15:16.230


Instruction: Please provide detailed information about CVE-2025-27429

CVE:CVE-2025-27429
Description:SAP S/4HANA allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
published:2025-04-08T08:15:16.397


Instruction: Please provide detailed information about CVE-2025-27435

CVE:CVE-2025-27435
Description:Under specific conditions and prerequisites, an unauthenticated attacker could access customer coupon codes exposed in the URL parameters of the Coupon Campaign URL in SAP Commerce. This could allow the attacker to use the disclosed coupon code, hence posing a low impact on confidentiality and integrity of the application.
published:2025-04-08T08:15:16.550


Instruction: Please provide detailed information about CVE-2025-27437

CVE:CVE-2025-27437
Description:A Missing Authorization Check vulnerability exists in the Virus Scanner Interface of SAP NetWeaver Application Server ABAP. Because of this, an attacker authenticated as a non-administrative user can initiate a transaction, allowing them to access but not modify non-sensitive data without further authorization and with no effect on availability.
published:2025-04-08T08:15:16.697


Instruction: Please provide detailed information about CVE-2025-2882

CVE:CVE-2025-2882
Description:The GreenPay(tm) by Green.Money plugin for WordPress is vulnerable to Sensitive Information Exposure in versions between 3.0.0 and 3.0.9 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
published:2025-04-08T08:15:16.860


Instruction: Please provide detailed information about CVE-2025-30013

CVE:CVE-2025-30013
Description:SAP ERP BW Business Content is vulnerable to OS Command Injection through certain function modules. These function modules, when executed with elevated privileges, improperly handle user input, allowing attacker to inject arbitrary OS commands. This vulnerability allows the execution of unintended commands on the underlying system, posing a significant security risk to the confidentiality, integrity and availability of the application.
published:2025-04-08T08:15:17.023


Instruction: Please provide detailed information about CVE-2025-30014

CVE:CVE-2025-30014
Description:SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected.
published:2025-04-08T08:15:17.177


Instruction: Please provide detailed information about CVE-2025-30015

CVE:CVE-2025-30015
Description:Due to incorrect memory address handling in ABAP SQL of SAP NetWeaver and ABAP Platform (Application Server ABAP), an authenticated attacker with high privileges could execute certain forms of SQL queries leading to manipulation of content in the output variable. This vulnerability has a low impact on the confidentiality, integrity and the availability of the application.
published:2025-04-08T08:15:17.340


Instruction: Please provide detailed information about CVE-2025-30016

CVE:CVE-2025-30016
Description:SAP Financial Consolidation allows an unauthenticated attacker to gain unauthorized access to the Admin account. The vulnerability arises due to improper authentication mechanisms, due to which there is high impact on the Confidentiality, Integrity & Availability of the application.
published:2025-04-08T08:15:17.493


Instruction: Please provide detailed information about CVE-2025-30017

CVE:CVE-2025-30017
Description:Due to a missing authorization check, an authenticated attacker could upload a file as a template for solution documentation in SAP Solution Manager 7.1. After successful exploitation, an attacker can cause limited impact on the integrity and availability of the application.
published:2025-04-08T08:15:17.650


Instruction: Please provide detailed information about CVE-2025-31330

CVE:CVE-2025-31330
Description:SAP Landscape Transformation (SLT) allows an attacker with user privileges to exploit a vulnerability in the function module exposed via RFC. This flaw enables the injection of arbitrary ABAP code into the system, bypassing essential authorization checks. This vulnerability effectively functions as a backdoor, creating the risk of full system compromise, undermining the confidentiality, integrity and availability of the system.
published:2025-04-08T08:15:17.800


Instruction: Please provide detailed information about CVE-2025-31331

CVE:CVE-2025-31331
Description:SAP NetWeaver allows an attacker to bypass authorization checks, enabling them to view portions of ABAP code that would normally require additional validation. Once logged into the ABAP system, the attacker can run a specific transaction that exposes sensitive system code without proper authorization. This vulnerability compromises the confidentiality.
published:2025-04-08T08:15:17.977


Instruction: Please provide detailed information about CVE-2025-31332

CVE:CVE-2025-31332
Description:Due to insecure file permissions in SAP BusinessObjects Business Intelligence Platform, an attacker who has local access to the system could modify files potentially disrupting operations or cause service downtime hence leading to a high impact on integrity and availability. However, this vulnerability does not disclose any sensitive data.
published:2025-04-08T08:15:18.130


Instruction: Please provide detailed information about CVE-2025-31333

CVE:CVE-2025-31333
Description:SAP S4CORE OData meta-data property is vulnerable to data tampering, due to which entity set could be externally modified by an attacker causing low impact on integrity of the application. Confidentiality and availability is not impacted.
published:2025-04-08T08:15:18.287


Instruction: Please provide detailed information about CVE-2025-3431

CVE:CVE-2025-3431
Description:The ZoomSounds - WordPress Wave Audio Player with Playlist plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 6.91 via the 'dzsap_download' action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
published:2025-04-08T08:15:18.447


Instruction: Please provide detailed information about CVE-2025-22008

CVE:CVE-2025-22008
Description:In the Linux kernel, the following vulnerability has been resolved:  regulator: check that dummy regulator has been probed before using it  Due to asynchronous driver probing there is a chance that the dummy regulator hasn't already been probed when first accessing it.
published:2025-04-08T09:15:24.157


Instruction: Please provide detailed information about CVE-2025-22009

CVE:CVE-2025-22009
Description:In the Linux kernel, the following vulnerability has been resolved:  regulator: dummy: force synchronous probing  Sometimes I get a NULL pointer dereference at boot time in kobject_get() with the following call stack:  anatop_regulator_probe()  devm_regulator_register()   regulator_register()    regulator_resolve_supply()     kobject_get()  By placing some extra BUG_ON() statements I could verify that this is raised because probing of the 'dummy' regulator driver is not completed ('dummy_regulator_rdev' is still NULL).  In the JTAG debugger I can see that dummy_regulator_probe() and anatop_regulator_probe() can be run by different kernel threads (kworker/u4:*).  I haven't further investigated whether this can be changed or if there are other possibilities to force synchronization between these two probe routines.  On the other hand I don't expect much boot time penalty by probing the 'dummy' regulator synchronously.
published:2025-04-08T09:15:24.460


Instruction: Please provide detailed information about CVE-2025-22010

CVE:CVE-2025-22010
Description:In the Linux kernel, the following vulnerability has been resolved:  RDMA/hns: Fix soft lockup during bt pages loop  Driver runs a for-loop when allocating bt pages and mapping them with buffer pages. When a large buffer (e.g. MR over 100GB) is being allocated, it may require a considerable loop count. This will lead to soft lockup:          watchdog: BUG: soft lockup - CPU#27 stuck for 22s!         ...         Call trace:          hem_list_alloc_mid_bt+0x124/0x394 [hns_roce_hw_v2]          hns_roce_hem_list_request+0xf8/0x160 [hns_roce_hw_v2]          hns_roce_mtr_create+0x2e4/0x360 [hns_roce_hw_v2]          alloc_mr_pbl+0xd4/0x17c [hns_roce_hw_v2]          hns_roce_reg_user_mr+0xf8/0x190 [hns_roce_hw_v2]          ib_uverbs_reg_mr+0x118/0x290          watchdog: BUG: soft lockup - CPU#35 stuck for 23s!         ...         Call trace:          hns_roce_hem_list_find_mtt+0x7c/0xb0 [hns_roce_hw_v2]          mtr_map_bufs+0xc4/0x204 [hns_roce_hw_v2]          hns_roce_mtr_create+0x31c/0x3c4 [hns_roce_hw_v2]          alloc_mr_pbl+0xb0/0x160 [hns_roce_hw_v2]          hns_roce_reg_user_mr+0x108/0x1c0 [hns_roce_hw_v2]          ib_uverbs_reg_mr+0x120/0x2bc  Add a cond_resched() to fix soft lockup during these loops. In order not to affect the allocation performance of normal-size buffer, set the loop count of a 100GB MR as the threshold to call cond_resched().
published:2025-04-08T09:15:24.777


Instruction: Please provide detailed information about CVE-2025-22011

CVE:CVE-2025-22011
Description:In the Linux kernel, the following vulnerability has been resolved:  ARM: dts: bcm2711: Fix xHCI power-domain  During s2idle tests on the Raspberry CM4 the VPU firmware always crashes on xHCI power-domain resume:  root@raspberrypi:/sys/power# echo freeze > state [   70.724347] xhci_suspend finished [   70.727730] xhci_plat_suspend finished [   70.755624] bcm2835-power bcm2835-power: Power grafx off [   70.761127]  USB: Set power to 0  [   74.653040]  USB: Failed to set power to 1 (-110)  This seems to be caused because of the mixed usage of raspberrypi-power and bcm2835-power at the same time. So avoid the usage of the VPU firmware power-domain driver, which prevents the VPU crash.
published:2025-04-08T09:15:25.020


Instruction: Please provide detailed information about CVE-2025-22012

CVE:CVE-2025-22012
Description:In the Linux kernel, the following vulnerability has been resolved:  Revert "arm64: dts: qcom: sdm845: Affirm IDR0.CCTW on apps_smmu"  There are reports that the pagetable walker cache coherency is not a given across the spectrum of SDM845/850 devices, leading to lock-ups and resets. It works fine on some devices (like the Dragonboard 845c, but not so much on the Lenovo Yoga C630).  This unfortunately looks like a fluke in firmware development, where likely somewhere in the vast hypervisor stack, a change to accommodate for this was only introduced after the initial software release (which often serves as a baseline for products).  Revert the change to avoid additional guesswork around crashes.  This reverts commit 6b31a9744b8726c69bb0af290f8475a368a4b805.
published:2025-04-08T09:15:25.420


Instruction: Please provide detailed information about CVE-2025-22013

CVE:CVE-2025-22013
Description:In the Linux kernel, the following vulnerability has been resolved:  KVM: arm64: Unconditionally save+flush host FPSIMD/SVE/SME state  There are several problems with the way hyp code lazily saves the host's FPSIMD/SVE state, including:  * Host SVE being discarded unexpectedly due to inconsistent   configuration of TIF_SVE and CPACR_ELx.ZEN. This has been seen to   result in QEMU crashes where SVE is used by memmove(), as reported by   Eric Auger:    https://issues.redhat.com/browse/RHEL-68997  * Host SVE state is discarded *after* modification by ptrace, which was an   unintentional ptrace ABI change introduced with lazy discarding of SVE state.  * The host FPMR value can be discarded when running a non-protected VM,   where FPMR support is not exposed to a VM, and that VM uses   FPSIMD/SVE. In these cases the hyp code does not save the host's FPMR   before unbinding the host's FPSIMD/SVE/SME state, leaving a stale   value in memory.  Avoid these by eagerly saving and "flushing" the host's FPSIMD/SVE/SME state when loading a vCPU such that KVM does not need to save any of the host's FPSIMD/SVE/SME state. For clarity, fpsimd_kvm_prepare() is removed and the necessary call to fpsimd_save_and_flush_cpu_state() is placed in kvm_arch_vcpu_load_fp(). As 'fpsimd_state' and 'fpmr_ptr' should not be used, they are set to NULL; all uses of these will be removed in subsequent patches.  Historical problems go back at least as far as v5.17, e.g. erroneous assumptions about TIF_SVE being clear in commit:    8383741ab2e773a9 ("KVM: arm64: Get rid of host SVE tracking/saving")  ... and so this eager save+flush probably needs to be backported to ALL stable trees.
published:2025-04-08T09:15:25.643


Instruction: Please provide detailed information about CVE-2025-22014

CVE:CVE-2025-22014
Description:In the Linux kernel, the following vulnerability has been resolved:  soc: qcom: pdr: Fix the potential deadlock  When some client process A call pdr_add_lookup() to add the look up for the service and does schedule locator work, later a process B got a new server packet indicating locator is up and call pdr_locator_new_server() which eventually sets pdr->locator_init_complete to true which process A sees and takes list lock and queries domain list but it will timeout due to deadlock as the response will queued to the same qmi->wq and it is ordered workqueue and process B is not able to complete new server request work due to deadlock on list lock.  Fix it by removing the unnecessary list iteration as the list iteration is already being done inside locator work, so avoid it here and just call schedule_work() here.         Process A                        Process B                                       process_scheduled_works() pdr_add_lookup()                      qmi_data_ready_work()  process_scheduled_works()             pdr_locator_new_server()                                          pdr->locator_init_complete=true;    pdr_locator_work()     mutex_lock(&pdr->list_lock);       pdr_locate_service()                  mutex_lock(&pdr->list_lock);        pdr_get_domain_list()        pr_err("PDR: %s get domain list                txn wait failed: %d\n",                req->service_name,                ret);  Timeout error log due to deadlock:  "  PDR: tms/servreg get domain list txn wait failed: -110  PDR: service lookup for msm/adsp/sensor_pd:tms/servreg failed: -110 "  Thanks to Bjorn and Johan for letting me know that this commit also fixes an audio regression when using the in-kernel pd-mapper as that makes it easier to hit this race. [1]
published:2025-04-08T09:15:25.783


Instruction: Please provide detailed information about CVE-2025-22015

CVE:CVE-2025-22015
Description:In the Linux kernel, the following vulnerability has been resolved:  mm/migrate: fix shmem xarray update during migration  A shmem folio can be either in page cache or in swap cache, but not at the same time.  Namely, once it is in swap cache, folio->mapping should be NULL, and the folio is no longer in a shmem mapping.  In __folio_migrate_mapping(), to determine the number of xarray entries to update, folio_test_swapbacked() is used, but that conflates shmem in page cache case and shmem in swap cache case.  It leads to xarray multi-index entry corruption, since it turns a sibling entry to a normal entry during xas_store() (see [1] for a userspace reproduction).  Fix it by only using folio_test_swapcache() to determine whether xarray is storing swap cache entries or not to choose the right number of xarray entries to update.  [1] https://lore.kernel.org/linux-mm/Z8idPCkaJW1IChjT@casper.infradead.org/  Note: In __split_huge_page(), folio_test_anon() && folio_test_swapcache() is used to get swap_cache address space, but that ignores the shmem folio in swap cache case.  It could lead to NULL pointer dereferencing when a in-swap-cache shmem folio is split at __xa_store(), since !folio_test_anon() is true and folio->mapping is NULL.  But fortunately, its caller split_huge_page_to_list_to_order() bails out early with EBUSY when folio->mapping is NULL.  So no need to take care of it here.
published:2025-04-08T09:15:26.150


Instruction: Please provide detailed information about CVE-2025-22016

CVE:CVE-2025-22016
Description:In the Linux kernel, the following vulnerability has been resolved:  dpll: fix xa_alloc_cyclic() error handling  In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will be returned, which will cause IS_ERR() to be false. Which can lead to dereference not allocated pointer (pin).  Fix it by checking if err is lower than zero.  This wasn't found in real usecase, only noticed. Credit to Pierre.
published:2025-04-08T09:15:26.413


Instruction: Please provide detailed information about CVE-2025-22017

CVE:CVE-2025-22017
Description:In the Linux kernel, the following vulnerability has been resolved:  devlink: fix xa_alloc_cyclic() error handling  In case of returning 1 from xa_alloc_cyclic() (wrapping) ERR_PTR(1) will be returned, which will cause IS_ERR() to be false. Which can lead to dereference not allocated pointer (rel).  Fix it by checking if err is lower than zero.  This wasn't found in real usecase, only noticed. Credit to Pierre.
published:2025-04-08T09:15:26.557


Instruction: Please provide detailed information about CVE-2025-29999

CVE:CVE-2025-29999
Description:A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application searches for executable files in the application folder without proper validation.
 This could allow an attacker to execute arbitrary code with administrative privileges by placing a malicious executable in the same directory.
published:2025-04-08T09:15:27.053


Instruction: Please provide detailed information about CVE-2025-30000

CVE:CVE-2025-30000
Description:A vulnerability has been identified in Siemens License Server (SLS) (All versions < V4.3). The affected application does not properly restrict permissions of the users. This could allow a lowly-privileged attacker to escalate their privileges.
published:2025-04-08T09:15:27.340


Instruction: Please provide detailed information about CVE-2025-30280

CVE:CVE-2025-30280
Description:A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.21.0), Mendix Runtime V10.12 (All versions), Mendix Runtime V10.18 (All versions), Mendix Runtime V10.6 (All versions), Mendix Runtime V8 (All versions), Mendix Runtime V9 (All versions < V9.24.34). Affected applications allow for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application.
published:2025-04-08T09:15:27.793


Instruction: Please provide detailed information about CVE-2025-3064

CVE:CVE-2025-3064
Description:The WPFront User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.2.1. This is due to missing or incorrect nonce validation on the whitelist_options() function. This makes it possible for unauthenticated attackers to update the default role option that can be leveraged for privilege escalation via a forged request granted they can trick a site administrator into performing an action such as clicking on a link. This is only exploitable on multisite instances.
published:2025-04-08T09:15:28.140


Instruction: Please provide detailed information about CVE-2025-3432

CVE:CVE-2025-3432
Description:The AAWP Obfuscator plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'data-aawp-web' parameter in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Author-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-04-08T09:15:28.630


Instruction: Please provide detailed information about CVE-2025-3433

CVE:CVE-2025-3433
Description:The Advanced Advertising System plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.3.1. This is due to insufficient validation on the redirect url supplied via the 'redir' parameter. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them into performing an action.
published:2025-04-08T09:15:28.943


Instruction: Please provide detailed information about CVE-2025-3436

CVE:CVE-2025-3436
Description:The coreActivity: Activity Logging for WordPress plugin for WordPress is vulnerable to SQL Injection via the 'order' and 'orderby' parameters in all versions up to, and including, 2.7 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-04-08T09:15:29.300


Instruction: Please provide detailed information about CVE-2025-2807

CVE:CVE-2025-2807
Description:The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to arbitrary plugin installations due to a missing capability check in the mvl_setup_wizard_install_plugin() function in all versions up to, and including, 1.4.64. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate arbitrary plugins on the affected site's server which may make remote code execution possible.
published:2025-04-08T10:15:16.780


Instruction: Please provide detailed information about CVE-2025-2808

CVE:CVE-2025-2808
Description:The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Phone Number parameter in all versions up to, and including, 1.4.63 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-04-08T10:15:18.940


Instruction: Please provide detailed information about CVE-2025-2883

CVE:CVE-2025-2883
Description:The Accept SagePay Payments Using Contact Form 7 plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.0 through the publicly accessible phpinfo.php script. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed file.
published:2025-04-08T10:15:19.197


Instruction: Please provide detailed information about CVE-2025-3437

CVE:CVE-2025-3437
Description:The Motors – Car Dealership & Classified Listings Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on several functions in the ajax_actions.php file in all versions up to, and including, 1.4.66. This makes it possible for authenticated attackers, with Subscriber-level access and above, to execute several initial set-up actions.
published:2025-04-08T10:15:19.413


Instruction: Please provide detailed information about CVE-2025-29985

CVE:CVE-2025-29985
Description:Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
published:2025-04-08T11:15:42.707


Instruction: Please provide detailed information about CVE-2025-29986

CVE:CVE-2025-29986
Description:Dell Common Event Enabler, version(s) CEE 9.0.0.0, contain(s) an Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the Common Anti-Virus Agent (CAVA). An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
published:2025-04-08T11:15:44.033


Instruction: Please provide detailed information about CVE-2025-30166

CVE:CVE-2025-30166
Description:Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. An HTML injection issue allows users with access to the email sending functionality to inject arbitrary HTML code into emails sent via the admin interface, potentially leading to session cookie theft and the alteration of page content. The vulnerability was discovered in the /admin/email/send-test-email endpoint using the POST method. The vulnerable parameter is content, which permits the injection of arbitrary HTML code during the email sending process. While JavaScript code injection is blocked through filtering, HTML code injection remains possible. This vulnerability is fixed in 1.7.6.
published:2025-04-08T11:15:44.267


Instruction: Please provide detailed information about CVE-2025-2568

CVE:CVE-2025-2568
Description:The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the 'vayu_blocks_get_toggle_switch_values_callback' and 'vayu_blocks_save_toggle_switch_callback' function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in '_value'.
published:2025-04-08T12:15:15.760


Instruction: Please provide detailed information about CVE-2025-2876

CVE:CVE-2025-2876
Description:The MelaPress Login Security and MelaPress Login Security Premium plugins for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the 'monitor_admin_actions' function in version 2.1.0. This makes it possible for unauthenticated attackers to delete any user.
published:2025-04-08T12:15:16.820


Instruction: Please provide detailed information about CVE-2025-22855

CVE:CVE-2025-22855
Description:An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Fortinet FortiClient before 7.4.1 may allow the EMS administrator to send messages containing javascript code.
published:2025-04-08T14:15:32.690