Instruction: Please provide detailed information about CVE-2025-0506

CVE:CVE-2025-0506
Description:The Rise Blocks – A Complete Gutenberg Page Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the titleTag parameter in all versions up to, and including, 3.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-12T10:15:14.360


Instruction: Please provide detailed information about CVE-2025-1189

CVE:CVE-2025-1189
Description:A vulnerability, which was classified as critical, was found in 1000 Projects Attendance Tracking Management System 1.0. This affects an unknown part of the file /admin/chart1.php. The manipulation of the argument course_id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T10:15:14.540


Instruction: Please provide detailed information about CVE-2025-1190

CVE:CVE-2025-1190
Description:A vulnerability has been found in code-projects Job Recruitment 1.0 and classified as problematic. This vulnerability affects unknown code of the file /_parse/load_user-profile.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. Multiple parameters might be affected.
published:2025-02-12T10:15:14.740


Instruction: Please provide detailed information about CVE-2025-1191

CVE:CVE-2025-1191
Description:A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0 and classified as critical. This issue affects some unknown processing of the file /dashboard/approve-reject.php. The manipulation of the argument breject_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T11:15:08.480


Instruction: Please provide detailed information about CVE-2025-1192

CVE:CVE-2025-1192
Description:A vulnerability was found in SourceCodester Multi Restaurant Table Reservation System 1.0. It has been classified as critical. Affected is an unknown function of the file select-menu.php. The manipulation of the argument table leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T11:15:10.727


Instruction: Please provide detailed information about CVE-2025-1230

CVE:CVE-2025-1230
Description:Stored Cross-Site Scripting (XSS) vulnerability in Prestashop 8.1.7, due to the lack of proper validation of user input through ‘/<admin_directory>/index.php’, affecting the ‘link’ parameter. This vulnerability could allow a remote user to send a specially crafted query to an authenticated user and steal their cookie session details.
published:2025-02-12T11:15:11.230


Instruction: Please provide detailed information about CVE-2025-0511

CVE:CVE-2025-0511
Description:The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘name’ parameter in all versions up to, and including, 2.11.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-12T12:15:29.210


Instruction: Please provide detailed information about CVE-2025-1195

CVE:CVE-2025-1195
Description:A vulnerability, which was classified as problematic, has been found in code-projects Real Estate Property Management System 1.0. This issue affects some unknown processing of the file /Admin/EditCategory. The manipulation of the argument CategoryId leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T12:15:29.397


Instruction: Please provide detailed information about CVE-2025-1196

CVE:CVE-2025-1196
Description:A vulnerability, which was classified as problematic, was found in code-projects Real Estate Property Management System 1.0. Affected is an unknown function of the file /search.php. The manipulation of the argument PropertyName leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Other parameters might be affected as well.
published:2025-02-12T12:15:29.640


Instruction: Please provide detailed information about CVE-2025-1197

CVE:CVE-2025-1197
Description:A vulnerability has been found in code-projects Real Estate Property Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /_parse/load_user-profile.php. The manipulation of the argument userhash leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T13:15:08.983


Instruction: Please provide detailed information about CVE-2025-1199

CVE:CVE-2025-1199
Description:A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been classified as critical. This affects an unknown part of the file /admin/app/role_crud.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T13:15:09.537


Instruction: Please provide detailed information about CVE-2025-1100

CVE:CVE-2025-1100
Description:A CWE-259 "Use of Hard-coded Password" for the root account in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to execute arbitrary code with root privileges via SSH.
published:2025-02-12T14:15:31.647


Instruction: Please provide detailed information about CVE-2025-1101

CVE:CVE-2025-1101
Description:A CWE-204 "Observable Response Discrepancy" in the login page in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enumerate valid usernames via crafted HTTP requests.
published:2025-02-12T14:15:31.800


Instruction: Please provide detailed information about CVE-2025-1102

CVE:CVE-2025-1102
Description:A CWE-346 "Origin Validation Error" in the CORS configuration in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability via crafted URLs or HTTP requests.
published:2025-02-12T14:15:31.943


Instruction: Please provide detailed information about CVE-2025-1200

CVE:CVE-2025-1200
Description:A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been declared as critical. This vulnerability affects unknown code of the file /admin/app/slider_crud.php. The manipulation of the argument del_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T14:15:32.090


Instruction: Please provide detailed information about CVE-2025-1201

CVE:CVE-2025-1201
Description:A vulnerability was found in SourceCodester Best Church Management Software 1.1. It has been rated as critical. This issue affects some unknown processing of the file /admin/app/profile_crud.php. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected.
published:2025-02-12T14:15:32.297


Instruction: Please provide detailed information about CVE-2025-21694

CVE:CVE-2025-21694
Description:In the Linux kernel, the following vulnerability has been resolved:  fs/proc: fix softlockup in __read_vmcore (part 2)  Since commit 5cbcb62dddf5 ("fs/proc: fix softlockup in __read_vmcore") the number of softlockups in __read_vmcore at kdump time have gone down, but they still happen sometimes.  In a memory constrained environment like the kdump image, a softlockup is not just a harmless message, but it can interfere with things like RCU freeing memory, causing the crashdump to get stuck.  The second loop in __read_vmcore has a lot more opportunities for natural sleep points, like scheduling out while waiting for a data write to happen, but apparently that is not always enough.  Add a cond_resched() to the second loop in __read_vmcore to (hopefully) get rid of the softlockups.
published:2025-02-12T14:15:32.463


Instruction: Please provide detailed information about CVE-2025-21695

CVE:CVE-2025-21695
Description:In the Linux kernel, the following vulnerability has been resolved:  platform/x86: dell-uart-backlight: fix serdev race  The dell_uart_bl_serdev_probe() function calls devm_serdev_device_open() before setting the client ops via serdev_device_set_client_ops(). This ordering can trigger a NULL pointer dereference in the serdev controller's receive_buf handler, as it assumes serdev->ops is valid when SERPORT_ACTIVE is set.  This is similar to the issue fixed in commit 5e700b384ec1 ("platform/chrome: cros_ec_uart: properly fix race condition") where devm_serdev_device_open() was called before fully initializing the device.  Fix the race by ensuring client ops are set before enabling the port via devm_serdev_device_open().  Note, serdev_device_set_baudrate() and serdev_device_set_flow_control() calls should be after the devm_serdev_device_open() call.
published:2025-02-12T14:15:32.577


Instruction: Please provide detailed information about CVE-2025-21696

CVE:CVE-2025-21696
Description:In the Linux kernel, the following vulnerability has been resolved:  mm: clear uffd-wp PTE/PMD state on mremap()  When mremap()ing a memory region previously registered with userfaultfd as write-protected but without UFFD_FEATURE_EVENT_REMAP, an inconsistency in flag clearing leads to a mismatch between the vma flags (which have uffd-wp cleared) and the pte/pmd flags (which do not have uffd-wp cleared).  This mismatch causes a subsequent mprotect(PROT_WRITE) to trigger a warning in page_table_check_pte_flags() due to setting the pte to writable while uffd-wp is still set.  Fix this by always explicitly clearing the uffd-wp pte/pmd flags on any such mremap() so that the values are consistent with the existing clearing of VM_UFFD_WP.  Be careful to clear the logical flag regardless of its physical form; a PTE bit, a swap PTE bit, or a PTE marker.  Cover PTE, huge PMD and hugetlb paths.
published:2025-02-12T14:15:32.677


Instruction: Please provide detailed information about CVE-2025-21697

CVE:CVE-2025-21697
Description:In the Linux kernel, the following vulnerability has been resolved:  drm/v3d: Ensure job pointer is set to NULL after job completion  After a job completes, the corresponding pointer in the device must be set to NULL. Failing to do so triggers a warning when unloading the driver, as it appears the job is still active. To prevent this, assign the job pointer to NULL after completing the job, indicating the job has finished.
published:2025-02-12T14:15:32.787


Instruction: Please provide detailed information about CVE-2025-21698

CVE:CVE-2025-21698
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-02-12T14:15:32.900


Instruction: Please provide detailed information about CVE-2025-21699

CVE:CVE-2025-21699
Description:In the Linux kernel, the following vulnerability has been resolved:  gfs2: Truncate address space when flipping GFS2_DIF_JDATA flag  Truncate an inode's address space when flipping the GFS2_DIF_JDATA flag: depending on that flag, the pages in the address space will either use buffer heads or iomap_folio_state structs, and we cannot mix the two.
published:2025-02-12T14:15:33.020


Instruction: Please provide detailed information about CVE-2025-26339

CVE:CVE-2025-26339
Description:A CWE-306 "Missing Authentication for Critical Function" in maxtime/handleRoute.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to affect the device confidentiality, integrity, or availability in multiple unspecified ways via crafted HTTP requests.
published:2025-02-12T14:15:33.510


Instruction: Please provide detailed information about CVE-2025-26340

CVE:CVE-2025-26340
Description:A CWE-321 "Use of Hard-coded Cryptographic Key" in the JWT signing in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to bypass the authentication via crafted HTTP requests.
published:2025-02-12T14:15:33.650


Instruction: Please provide detailed information about CVE-2025-26341

CVE:CVE-2025-26341
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to reset arbitrary user passwords via crafted HTTP requests.
published:2025-02-12T14:15:33.857


Instruction: Please provide detailed information about CVE-2025-26342

CVE:CVE-2025-26342
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to create arbitrary users, including administrators, via crafted HTTP requests.
published:2025-02-12T14:15:33.990


Instruction: Please provide detailed information about CVE-2025-26343

CVE:CVE-2025-26343
Description:A CWE-1390 "Weak Authentication" in the PIN authentication mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to brute-force user PINs via multiple crafted HTTP requests.
published:2025-02-12T14:15:34.130


Instruction: Please provide detailed information about CVE-2025-26344

CVE:CVE-2025-26344
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/guest-mode/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable passwordless guest mode via crafted HTTP requests.
published:2025-02-12T14:15:34.273


Instruction: Please provide detailed information about CVE-2025-26345

CVE:CVE-2025-26345
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to edit user group permissions via crafted HTTP requests.
published:2025-02-12T14:15:34.407


Instruction: Please provide detailed information about CVE-2025-26346

CVE:CVE-2025-26346
Description:A CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')" in maxprofile/menu/model.lua (editUserGroupMenu endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to execute arbitrary SQL commands via crafted HTTP requests.
published:2025-02-12T14:15:34.547


Instruction: Please provide detailed information about CVE-2025-26347

CVE:CVE-2025-26347
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/menu/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to edit user permissions via crafted HTTP requests.
published:2025-02-12T14:15:34.687


Instruction: Please provide detailed information about CVE-2025-26348

CVE:CVE-2025-26348
Description:A CWE-89 "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')" in maxprofile/menu/model.lua (editUserMenu endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to execute arbitrary SQL commands via crafted HTTP requests.
published:2025-02-12T14:15:34.827


Instruction: Please provide detailed information about CVE-2025-26349

CVE:CVE-2025-26349
Description:A CWE-23 "Relative Path Traversal" in the file upload mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite arbitrary files via crafted HTTP requests.
published:2025-02-12T14:15:34.960


Instruction: Please provide detailed information about CVE-2025-26350

CVE:CVE-2025-26350
Description:A CWE-434 "Unrestricted Upload of File with Dangerous Type" in the template file uploads in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to upload malicious files via crafted HTTP requests.
published:2025-02-12T14:15:35.107


Instruction: Please provide detailed information about CVE-2025-26351

CVE:CVE-2025-26351
Description:A CWE-35 "Path Traversal" in the template download mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:35.270


Instruction: Please provide detailed information about CVE-2025-26352

CVE:CVE-2025-26352
Description:A CWE-35 "Path Traversal" in the template deletion mechanism in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:35.430


Instruction: Please provide detailed information about CVE-2025-26353

CVE:CVE-2025-26353
Description:A CWE-35 "Path Traversal" in maxtime/api/sql/sql.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:35.587


Instruction: Please provide detailed information about CVE-2025-26354

CVE:CVE-2025-26354
Description:A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:35.727


Instruction: Please provide detailed information about CVE-2025-26355

CVE:CVE-2025-26355
Description:A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to delete sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:35.870


Instruction: Please provide detailed information about CVE-2025-26356

CVE:CVE-2025-26356
Description:A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:36.017


Instruction: Please provide detailed information about CVE-2025-26357

CVE:CVE-2025-26357
Description:A CWE-35 "Path Traversal" in maxtime/api/database/database.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to read sensitive files via crafted HTTP requests.
published:2025-02-12T14:15:36.160


Instruction: Please provide detailed information about CVE-2025-26358

CVE:CVE-2025-26358
Description:A CWE-20 "Improper Input Validation" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests.
published:2025-02-12T14:15:36.297


Instruction: Please provide detailed information about CVE-2025-26359

CVE:CVE-2025-26359
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/accounts/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to reset user PINs via crafted HTTP requests.
published:2025-02-12T14:15:36.437


Instruction: Please provide detailed information about CVE-2025-26360

CVE:CVE-2025-26360
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/persistance/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to delete dashboards via crafted HTTP requests.
published:2025-02-12T14:15:36.577


Instruction: Please provide detailed information about CVE-2025-26361

CVE:CVE-2025-26361
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to factory reset the device via crafted HTTP requests.
published:2025-02-12T14:15:36.717


Instruction: Please provide detailed information about CVE-2025-26362

CVE:CVE-2025-26362
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to set an arbitrary authentication profile server via crafted HTTP requests.
published:2025-02-12T14:15:36.847


Instruction: Please provide detailed information about CVE-2025-26363

CVE:CVE-2025-26363
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable an authentication profile server via crafted HTTP requests.
published:2025-02-12T14:15:36.983


Instruction: Please provide detailed information about CVE-2025-26364

CVE:CVE-2025-26364
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable an authentication profile server via crafted HTTP requests.
published:2025-02-12T14:15:37.123


Instruction: Please provide detailed information about CVE-2025-26365

CVE:CVE-2025-26365
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to enable front panel authentication via crafted HTTP requests.
published:2025-02-12T14:15:37.267


Instruction: Please provide detailed information about CVE-2025-26366

CVE:CVE-2025-26366
Description:A CWE-306 "Missing Authentication for Critical Function" in maxprofile/setup/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an unauthenticated remote attacker to disable front panel authentication via crafted HTTP requests.
published:2025-02-12T14:15:37.397


Instruction: Please provide detailed information about CVE-2025-26367

CVE:CVE-2025-26367
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create arbitrary user groups via crafted HTTP requests.
published:2025-02-12T14:15:37.533


Instruction: Please provide detailed information about CVE-2025-26368

CVE:CVE-2025-26368
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove user groups via crafted HTTP requests.
published:2025-02-12T14:15:37.660


Instruction: Please provide detailed information about CVE-2025-26369

CVE:CVE-2025-26369
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add privileges to user groups via crafted HTTP requests.
published:2025-02-12T14:15:37.800


Instruction: Please provide detailed information about CVE-2025-26370

CVE:CVE-2025-26370
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove privileges from user groups via crafted HTTP requests.
published:2025-02-12T14:15:37.940


Instruction: Please provide detailed information about CVE-2025-26371

CVE:CVE-2025-26371
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to add users to groups via crafted HTTP requests.
published:2025-02-12T14:15:38.077


Instruction: Please provide detailed information about CVE-2025-26372

CVE:CVE-2025-26372
Description:A CWE-862 "Missing Authorization" in maxprofile/user-groups/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users from groups via crafted HTTP requests.
published:2025-02-12T14:15:38.227


Instruction: Please provide detailed information about CVE-2025-26373

CVE:CVE-2025-26373
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (user endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to enumerate users via crafted HTTP requests.
published:2025-02-12T14:15:38.360


Instruction: Please provide detailed information about CVE-2025-26374

CVE:CVE-2025-26374
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua (users endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to enumerate users via crafted HTTP requests.
published:2025-02-12T14:15:38.500


Instruction: Please provide detailed information about CVE-2025-26375

CVE:CVE-2025-26375
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to create users with arbitrary privileges via crafted HTTP requests.
published:2025-02-12T14:15:38.633


Instruction: Please provide detailed information about CVE-2025-26376

CVE:CVE-2025-26376
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to modify user data via crafted HTTP requests.
published:2025-02-12T14:15:38.777


Instruction: Please provide detailed information about CVE-2025-26377

CVE:CVE-2025-26377
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to remove users via crafted HTTP requests.
published:2025-02-12T14:15:38.933


Instruction: Please provide detailed information about CVE-2025-26378

CVE:CVE-2025-26378
Description:A CWE-862 "Missing Authorization" in maxprofile/users/routes.lua in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated (low-privileged) attacker to reset passwords, including the ones of administrator accounts, via crafted HTTP requests.
published:2025-02-12T14:15:39.163


Instruction: Please provide detailed information about CVE-2025-0376

CVE:CVE-2025-0376
Description:An XSS vulnerability exists in GitLab CE/EE affecting all versions from 13.3 prior to 17.6.5, 17.7 prior to 17.7.4 and 17.8 prior to 17.8.2 that allows an attacker to execute unauthorized actions via a change page.
published:2025-02-12T15:15:15.477


Instruction: Please provide detailed information about CVE-2025-1042

CVE:CVE-2025-1042
Description:An insecure direct object reference vulnerability in GitLab EE affecting all versions from 15.7 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to view repositories in an unauthorized way.
published:2025-02-12T15:15:16.230


Instruction: Please provide detailed information about CVE-2025-1202

CVE:CVE-2025-1202
Description:A vulnerability classified as critical has been found in SourceCodester Best Church Management Software 1.1. Affected is an unknown function of the file /admin/edit_slider.php. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T15:15:17.920


Instruction: Please provide detailed information about CVE-2025-1206

CVE:CVE-2025-1206
Description:A vulnerability was found in Codezips Gym Management System 1.0. It has been classified as critical. This affects an unknown part of the file /dashboard/admin/viewdetailroutine.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T15:15:18.093


Instruction: Please provide detailed information about CVE-2025-1212

CVE:CVE-2025-1212
Description:An information disclosure vulnerability in GitLab CE/EE affecting all versions from 8.3 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 allows an attacker to send a crafted request to a backend server to reveal sensitive information.
published:2025-02-12T15:15:18.290


Instruction: Please provide detailed information about CVE-2025-1244

CVE:CVE-2025-1244
Description:A command injection flaw was found in the text editor Emacs. It could allow a remote, unauthenticated attacker to execute arbitrary shell commands on a vulnerable system. Exploitation is possible by tricking users into visiting a specially crafted website or an HTTP URL with a redirect.
published:2025-02-12T15:15:18.430


Instruction: Please provide detailed information about CVE-2025-0332

CVE:CVE-2025-0332
Description:In Progress® Telerik® UI for WinForms, versions prior to 2025 Q1 (2025.1.211), using the improper limitation of a target path can lead to decompressing an archive's content into a restricted directory.
published:2025-02-12T16:15:42.703


Instruction: Please provide detailed information about CVE-2025-0516

CVE:CVE-2025-0516
Description:Improper Authorization in GitLab CE/EE affecting all versions from 17.7 prior to 17.7.4, 17.8 prior to 17.8.2 allow users with limited permissions to perform unauthorized actions on critical project data.
published:2025-02-12T16:15:42.883


Instruction: Please provide detailed information about CVE-2025-0556

CVE:CVE-2025-0556
Description:In Progress® Telerik® Report Server, versions prior to 2025 Q1 (11.0.25.211) when using the older .NET Framework implementation, communication of non-sensitive information between the service agent process and app host process occurs over an unencrypted tunnel, which can be subjected to local network traffic sniffing.
published:2025-02-12T16:15:43.030


Instruction: Please provide detailed information about CVE-2025-1207

CVE:CVE-2025-1207
Description:A vulnerability was found in phjounin TFTPD64 4.64. It has been declared as problematic. This vulnerability affects unknown code of the component DNS Handler. The manipulation leads to denial of service. The attack needs to be done within the local network. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-02-12T16:15:44.393


Instruction: Please provide detailed information about CVE-2025-1208

CVE:CVE-2025-1208
Description:A vulnerability was found in code-projects Wazifa System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /Profile.php. The manipulation of the argument postcontent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T16:15:44.613


Instruction: Please provide detailed information about CVE-2025-25349

CVE:CVE-2025-25349
Description:PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the costitem parameter.
published:2025-02-12T16:15:46.323


Instruction: Please provide detailed information about CVE-2025-25351

CVE:CVE-2025-25351
Description:PHPGurukul Daily Expense Tracker System v1.1 is vulnerable to SQL Injection in /dets/add-expense.php via the dateexpense parameter.
published:2025-02-12T16:15:46.453


Instruction: Please provide detailed information about CVE-2025-0919

CVE:CVE-2025-0919
Description:Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-0818. Reason: This candidate is a reservation duplicate of CVE-2025-0818. Notes: All CVE users should reference CVE-2025-0818 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-02-12T17:15:23.357


Instruction: Please provide detailed information about CVE-2025-0925

CVE:CVE-2025-0925
Description:Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2025-0818. Reason: This candidate is a reservation duplicate of CVE-2025-0818. Notes: All CVE users should reference CVE-2025-0818 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.
published:2025-02-12T17:15:23.437


Instruction: Please provide detailed information about CVE-2025-1209

CVE:CVE-2025-1209
Description:A vulnerability classified as problematic has been found in code-projects Wazifa System 1.0. Affected is the function searchuser of the file /search_resualts.php. The manipulation of the argument firstname/lastname leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. There is a typo in the affected file name.
published:2025-02-12T17:15:23.497


Instruction: Please provide detailed information about CVE-2025-1210

CVE:CVE-2025-1210
Description:A vulnerability classified as critical was found in code-projects Wazifa System 1.0. Affected by this vulnerability is an unknown functionality of the file /controllers/control.php. The manipulation of the argument to leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T17:15:23.673


Instruction: Please provide detailed information about CVE-2025-25182

CVE:CVE-2025-25182
Description:Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2 that allows authentication bypass to a Stroom system when configured with ALB and installed in a way that the application is accessible not through the ALB itself. This vulnerability may also allow for server-side request forgery which may lead to code execution or further privileges escalations when using the AWS metadata URL. This scenario assumes that Stroom must be configured to use ALB Authentication integration and the application is network accessible. The vulnerability has been fixed in versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2.
published:2025-02-12T17:15:23.857


Instruction: Please provide detailed information about CVE-2025-25184

CVE:CVE-2025-25184
Description:Rack provides an interface for developing web applications in Ruby. Prior to versions 2.2.11, 3.0.12, and 3.1.10, Rack::CommonLogger can be exploited by crafting input that includes newline characters to manipulate log entries. The supplied proof-of-concept demonstrates injecting malicious content into logs. When a user provides the authorization credentials via Rack::Auth::Basic, if success, the username will be put in env['REMOTE_USER'] and later be used by Rack::CommonLogger for logging purposes. The issue occurs when a server intentionally or unintentionally allows a user creation with the username contain CRLF and white space characters, or the server just want to log every login attempts. If an attacker enters a username with CRLF character, the logger will log the malicious username with CRLF characters into the logfile. Attackers can break log formats or insert fraudulent entries, potentially obscuring real activity or injecting malicious data into log files. Versions 2.2.11, 3.0.12, and 3.1.10 contain a fix.
published:2025-02-12T17:15:24.000


Instruction: Please provide detailed information about CVE-2025-25742

CVE:CVE-2025-25742
Description:D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the AccountPassword parameter in the SetSysEmailSettings module.
published:2025-02-12T17:15:24.150


Instruction: Please provide detailed information about CVE-2025-25743

CVE:CVE-2025-25743
Description:D-Link DIR-853 A1 FW1.20B07 was discovered to contain a command injection vulnerability in the SetVirtualServerSettings module.
published:2025-02-12T17:15:24.270


Instruction: Please provide detailed information about CVE-2025-25744

CVE:CVE-2025-25744
Description:D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetDynamicDNSSettings module.
published:2025-02-12T17:15:24.390


Instruction: Please provide detailed information about CVE-2025-25746

CVE:CVE-2025-25746
Description:D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the Password parameter in the SetWanSettings module.
published:2025-02-12T17:15:24.500


Instruction: Please provide detailed information about CVE-2025-1213

CVE:CVE-2025-1213
Description:A vulnerability was found in pihome-shc PiHome 1.77. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /index.php. The manipulation of the argument $_SERVER['PHP_SELF'] leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T18:15:22.180


Instruction: Please provide detailed information about CVE-2025-1214

CVE:CVE-2025-1214
Description:A vulnerability classified as critical has been found in pihome-shc PiHome 2.0. This affects an unknown part of the file /user_accounts.php?uid of the component Role-Based Access Control. The manipulation leads to missing authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-02-12T18:15:22.417


Instruction: Please provide detailed information about CVE-2025-25198

CVE:CVE-2025-25198
Description:mailcow: dockerized is an open source groupware/email suite based on docker. Prior to version 2025-01a, a vulnerability in mailcow's password reset functionality allows an attacker to manipulate the `Host HTTP` header to generate a password reset link pointing to an attacker-controlled domain. This can lead to account takeover if a user clicks the poisoned link. Version 2025-01a contains a patch. As a workaround, deactivate the password reset functionality by clearing `Notification email sender` and `Notification email subject` under System -> Configuration -> Options -> Password Settings.
published:2025-02-12T18:15:27.757


Instruction: Please provide detailed information about CVE-2025-25199

CVE:CVE-2025-25199
Description:go-crypto-winnative Go crypto backend for Windows using Cryptography API: Next Generation (CNG). Prior to commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41, calls to `cng.TLS1PRF` don't release the key handle, producing a small memory leak every time. Commit f49c8e1379ea4b147d5bff1b3be5b0ff45792e41 contains a fix for the issue. The fix is included in versions 1.23.6-2 and 1.22.12-2 of the Microsoft build of go, as well as in the pseudoversion 0.0.0-20250211154640-f49c8e1379ea of the `github.com/microsoft/go-crypto-winnative` Go package.
published:2025-02-12T18:15:27.933


Instruction: Please provide detailed information about CVE-2025-25200

CVE:CVE-2025-25200
Description:Koa is expressive middleware for Node.js using ES2017 async functions. Prior to versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3, Koa uses an evil regex to parse the `X-Forwarded-Proto` and `X-Forwarded-Host` HTTP headers. This can be exploited to carry out a Denial-of-Service attack. Versions 0.21.2, 1.7.1, 2.15.4, and 3.0.0-alpha.3 fix the issue.
published:2025-02-12T18:15:28.110


Instruction: Please provide detailed information about CVE-2025-25741

CVE:CVE-2025-25741
Description:D-Link DIR-853 A1 FW1.20B07 was discovered to contain a stack-based buffer overflow vulnerability via the IPv6_PppoePassword parameter in the SetIPv6PppoeSettings module.
published:2025-02-12T18:15:28.293


Instruction: Please provide detailed information about CVE-2025-0937

CVE:CVE-2025-0937
Description:Nomad Community and Nomad Enterprise ("Nomad") event stream configured with a wildcard namespace can bypass the ACL Policy allowing reads on other namespaces.
published:2025-02-12T19:15:09.687


Instruction: Please provide detailed information about CVE-2025-1146

CVE:CVE-2025-1146
Description:CrowdStrike uses industry-standard TLS (transport layer security) to secure communications from the Falcon sensor to the CrowdStrike cloud. CrowdStrike has identified a validation logic error in the Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor where our TLS connection routine to the CrowdStrike cloud can incorrectly process server certificate validation. This could allow an attacker with the ability to control network traffic to potentially conduct a man-in-the-middle (MiTM) attack. CrowdStrike identified this issue internally and released a security fix in all Falcon sensor for Linux, Falcon Kubernetes Admission Controller, and Falcon Container Sensor versions 7.06 and above.    CrowdStrike identified this issue through our longstanding, rigorous security review process, which has been continually strengthened with deeper source code analysis and ongoing program enhancements as part of our commitment to security resilience. CrowdStrike has no indication of any exploitation of this issue in the wild. CrowdStrike has leveraged its world class threat hunting and intelligence capabilities to actively monitor for signs of abuse or usage of this flaw and will continue to do so.    Windows and Mac sensors are not affected by this.
published:2025-02-12T19:15:09.840


Instruction: Please provide detailed information about CVE-2025-1215

CVE:CVE-2025-1215
Description:A vulnerability classified as problematic was found in vim up to 9.1.1096. This vulnerability affects unknown code of the file src/main.c. The manipulation of the argument --log leads to memory corruption. It is possible to launch the attack on the local host. Upgrading to version 9.1.1097 is able to address this issue. The patch is identified as c5654b84480822817bb7b69ebc97c174c91185e9. It is recommended to upgrade the affected component.
published:2025-02-12T19:15:10.230


Instruction: Please provide detailed information about CVE-2025-1216

CVE:CVE-2025-1216
Description:A vulnerability, which was classified as critical, has been found in ywoa up to 2024.07.03. This issue affects the function selectNoticeList of the file com/cloudweb/oa/mapper/xml/OaNoticeMapper.xml. The manipulation of the argument sort leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-12T19:15:10.427


Instruction: Please provide detailed information about CVE-2025-25201

CVE:CVE-2025-25201
Description:Nitrokey 3 Firmware is the the firmware of Nitrokey 3 USB keys. For release 1.8.0, and test releases with PIV enabled prior to 1.8.0, the PIV application could accept invalid keys for authentication of the admin key. This could lead to compromise of the integrity of the data stored in the application. An attacker without access to the proper administration key would be able to generate new keys and overwrite certificates. Such an attacker would not be able to read-out or extract existing private data, nor would they be able to gain access to cryptographic operations that would normally require PIN-based authentication. The issue is fixed in piv-authenticator 0.3.9, and in Nitrokey's firmware 1.8.1.
published:2025-02-12T19:15:21.570


Instruction: Please provide detailed information about CVE-2025-25205

CVE:CVE-2025-25205
Description:Audiobookshelf is a self-hosted audiobook and podcast server. Starting in version 2.17.0 and prior to version 2.19.1, a flaw in the authentication bypass logic allows unauthenticated requests to match certain unanchored regex patterns in the URL. Attackers can craft URLs containing substrings like "/api/items/1/cover" in a query parameter (?r=/api/items/1/cover) to partially bypass authentication or trigger server crashes under certain routes. This could lead to information disclosure of otherwise protected data and, in some cases, a complete denial of service (server crash) if downstream code expects an authenticated user object. Version 2.19.1 contains a patch for the issue.
published:2025-02-12T19:15:21.717


Instruction: Please provide detailed information about CVE-2025-25283

CVE:CVE-2025-25283
Description:parse-duraton is software that allows users to convert a human readable duration to milliseconds. Versions prior to 2.1.3 are vulnerable to an event loop delay due to the CPU-bound operation of resolving the provided string, from a 0.5ms and up to ~50ms per one operation, with a varying size from 0.01 MB and up to 4.3 MB respectively, and an out of memory that would crash a running Node.js application due to a string size of roughly 10 MB that utilizes unicode characters. Version 2.1.3 contains a patch.
published:2025-02-12T19:15:21.863


Instruction: Please provide detailed information about CVE-2025-25343

CVE:CVE-2025-25343
Description:Tenda AC6 V15.03.05.16 firmware has a buffer overflow vulnerability in the formexeCommand function.
published:2025-02-12T19:15:22.003


Instruction: Please provide detailed information about CVE-2025-1224

CVE:CVE-2025-1224
Description:A vulnerability classified as critical was found in ywoa up to 2024.07.03. This vulnerability affects the function listNameBySql of the file com/cloudweb/oa/mapper/xml/UserMapper.xml. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-12T20:15:40.030


Instruction: Please provide detailed information about CVE-2025-1225

CVE:CVE-2025-1225
Description:A vulnerability, which was classified as problematic, has been found in ywoa up to 2024.07.03. This issue affects the function extract of the file c-main/src/main/java/com/redmoon/weixin/aes/XMLParse.java of the component WXCallBack Interface. The manipulation leads to xml external entity reference. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-12T20:15:40.203


Instruction: Please provide detailed information about CVE-2025-0108

CVE:CVE-2025-0108
Description:An authentication bypass in the Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to bypass the authentication otherwise required by the PAN-OS management web interface and invoke certain PHP scripts. While invoking these PHP scripts does not enable remote code execution, it can negatively impact integrity and confidentiality of PAN-OS.  You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .  This issue does not affect Cloud NGFW or Prisma Access software.
published:2025-02-12T21:15:16.290


Instruction: Please provide detailed information about CVE-2025-0109

CVE:CVE-2025-0109
Description:An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files.   You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .  This issue does not affect Cloud NGFW or Prisma Access software.
published:2025-02-12T21:15:16.470


Instruction: Please provide detailed information about CVE-2025-0110

CVE:CVE-2025-0110
Description:A command injection vulnerability in the Palo Alto Networks PAN-OS OpenConfig plugin enables an authenticated administrator with the ability to make gNMI requests to the PAN-OS management web interface to bypass system restrictions and run arbitrary commands. The commands are run as the “__openconfig” user (which has the Device Administrator role) on the firewall.  You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .
published:2025-02-12T21:15:16.630


Instruction: Please provide detailed information about CVE-2025-0111

CVE:CVE-2025-0111
Description:An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.  You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended  best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .    This issue does not affect Cloud NGFW or Prisma Access software.
published:2025-02-12T21:15:16.793


Instruction: Please provide detailed information about CVE-2025-0113

CVE:CVE-2025-0113
Description:A problem with the network isolation mechanism of the Palo Alto Networks Cortex XDR Broker VM allows attackers unauthorized access to Docker containers from the host network used by Broker VM. This may allow access to read files sent for analysis and logs transmitted by the Cortex XDR Agent to the Cortex XDR server.
published:2025-02-12T21:15:16.950


Instruction: Please provide detailed information about CVE-2025-1226

CVE:CVE-2025-1226
Description:A vulnerability was found in ywoa up to 2024.07.03. It has been declared as critical. This vulnerability affects unknown code of the file /oa/setup/setup.jsp. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-12T21:15:20.470


Instruction: Please provide detailed information about CVE-2025-1227

CVE:CVE-2025-1227
Description:A vulnerability was found in ywoa up to 2024.07.03. It has been rated as critical. This issue affects the function selectList of the file com/cloudweb/oa/mapper/xml/AddressDao.xml. The manipulation leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2024.07.04 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-02-12T21:15:20.657


Instruction: Please provide detailed information about CVE-2025-1228

CVE:CVE-2025-1228
Description:A vulnerability classified as problematic has been found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected is an unknown function of the file /read/?page=1&logfile=LOG_Monitor of the component Logfile Update Handler. The manipulation of the argument path leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
published:2025-02-12T22:15:41.493


Instruction: Please provide detailed information about CVE-2025-1229

CVE:CVE-2025-1229
Description:A vulnerability classified as critical was found in olajowon Loggrove up to e428fac38cc480f011afcb1d8ce6c2bad378ddd6. Affected by this vulnerability is an unknown functionality of the file /read/?page=1&logfile=eee&match=. The manipulation of the argument path leads to os command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable.
published:2025-02-12T22:15:41.667


Instruction: Please provide detailed information about CVE-2025-20097

CVE:CVE-2025-20097
Description:Uncaught exception in OpenBMC Firmware for the Intel(R) Server M50FCP Family and Intel(R) Server D50DNP Family before version R01.02.0002 may allow an authenticated user to potentially enable denial of service via network access.
published:2025-02-12T22:15:41.850


Instruction: Please provide detailed information about CVE-2025-25286

CVE:CVE-2025-25286
Description:Crayfish is a collection of Islandora 8 microservices, one of which, Homarus, provides FFmpeg as a microservice. Prior to Crayfish version 4.1.0, remote code execution may be possible in web-accessible installations of Homarus in certain configurations. The issue has been patched in `islandora/crayfish:4.1.0`. Some workarounds are available. The exploit requires making a request against the Homarus's `/convert` endpoint; therefore, the ability to exploit is much reduced if the microservice is not directly accessible from the Internet, so: Prevent general access from the Internet from hitting Homarus. Alternatively or additionally, configure auth in Crayfish to be more strongly required, such that requests with `Authorization` headers that do not validate are rejected before the problematic CLI interpolation occurs.
published:2025-02-13T01:15:25.280


Instruction: Please provide detailed information about CVE-2025-0896

CVE:CVE-2025-0896
Description:Orthanc server prior to version 1.5.8 does not enable basic authentication by default when remote access is enabled. This could result in unauthorized access by an attacker.
published:2025-02-13T02:15:29.470


Instruction: Please provide detailed information about CVE-2025-1198

CVE:CVE-2025-1198
Description:An issue discovered in GitLab CE/EE affecting all versions from 16.11 prior to 17.6.5, 17.7 prior to 17.7.4, and 17.8 prior to 17.8.2 meant that long-lived connections in ActionCable potentially allowed revoked Personal Access Tokens access to streaming results.
published:2025-02-13T02:15:29.627


Instruction: Please provide detailed information about CVE-2025-0837

CVE:CVE-2025-0837
Description:The Puzzles theme for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 4.2.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-02-13T05:15:14.623


Instruction: Please provide detailed information about CVE-2025-0692

CVE:CVE-2025-0692
Description:The Simple Video Management System WordPress plugin through 1.0.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
published:2025-02-13T06:15:21.353


Instruction: Please provide detailed information about CVE-2025-1058

CVE:CVE-2025-1058
Description:CWE-494: Download of Code Without Integrity Check vulnerability exists that could render the device inoperable when malicious firmware is downloaded.
published:2025-02-13T06:15:21.480


Instruction: Please provide detailed information about CVE-2025-1059

CVE:CVE-2025-1059
Description:CWE-770: Allocation of Resources Without Limits or Throttling vulnerability exists that could cause communications to stop when malicious packets are sent to the webserver of the device.
published:2025-02-13T06:15:21.680


Instruction: Please provide detailed information about CVE-2025-1060

CVE:CVE-2025-1060
Description:CWE-319: Cleartext Transmission of Sensitive Information vulnerability exists that could result in the exposure of data when network traffic is being sniffed by an attacker.
published:2025-02-13T06:15:22.213


Instruction: Please provide detailed information about CVE-2025-1070

CVE:CVE-2025-1070
Description:CWE-434: Unrestricted Upload of File with Dangerous Type vulnerability exists that could render the device inoperable when a malicious file is downloaded.
published:2025-02-13T06:15:22.463


Instruction: Please provide detailed information about CVE-2025-0327

CVE:CVE-2025-0327
Description:CWE-269: Improper Privilege Management vulnerability exists for two services (of which one managing audit trail data and the other acting as server managing client request) that could cause a loss of Confidentiality, Integrity and Availability of engineering workstation when an attacker with standard privilege modifies the executable path of the windows services. To be exploited, services need to be restarted.
published:2025-02-13T07:15:10.570


Instruction: Please provide detailed information about CVE-2025-0661

CVE:CVE-2025-0661
Description:The DethemeKit For Elementor plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 2.36 via the duplicate_post() function due to insufficient restrictions on which posts can be duplicated. This makes it possible for authenticated attackers, with Contributor-level access and above, to extract data from password protected, private, draft, or scheduled posts that they should not have access to by duplicating the post.
published:2025-02-13T07:15:10.777


Instruction: Please provide detailed information about CVE-2025-0814

CVE:CVE-2025-0814
Description:CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the network services running on the product when malicious IEC61850-MMS packets are sent to the device. The core functionality of the breaker remains intact during the attack.
published:2025-02-13T07:15:10.973


Instruction: Please provide detailed information about CVE-2025-0815

CVE:CVE-2025-0815
Description:CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device.
published:2025-02-13T07:15:11.160


Instruction: Please provide detailed information about CVE-2025-0816

CVE:CVE-2025-0816
Description:CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device.
published:2025-02-13T07:15:11.353


Instruction: Please provide detailed information about CVE-2025-21700

CVE:CVE-2025-21700
Description:In the Linux kernel, the following vulnerability has been resolved:  net: sched: Disallow replacing of child qdisc from one parent to another  Lion Ackermann was able to create a UAF which can be abused for privilege escalation with the following script  Step 1. create root qdisc tc qdisc add dev lo root handle 1:0 drr  step2. a class for packet aggregation do demonstrate uaf tc class add dev lo classid 1:1 drr  step3. a class for nesting tc class add dev lo classid 1:2 drr  step4. a class to graft qdisc to tc class add dev lo classid 1:3 drr  step5. tc qdisc add dev lo parent 1:1 handle 2:0 plug limit 1024  step6. tc qdisc add dev lo parent 1:2 handle 3:0 drr  step7. tc class add dev lo classid 3:1 drr  step 8. tc qdisc add dev lo parent 3:1 handle 4:0 pfifo  step 9. Display the class/qdisc layout  tc class ls dev lo  class drr 1:1 root leaf 2: quantum 64Kb  class drr 1:2 root leaf 3: quantum 64Kb  class drr 3:1 root leaf 4: quantum 64Kb  tc qdisc ls  qdisc drr 1: dev lo root refcnt 2  qdisc plug 2: dev lo parent 1:1  qdisc pfifo 4: dev lo parent 3:1 limit 1000p  qdisc drr 3: dev lo parent 1:2  step10. trigger the bug <=== prevented by this patch tc qdisc replace dev lo parent 1:3 handle 4:0  step 11. Redisplay again the qdiscs/classes  tc class ls dev lo  class drr 1:1 root leaf 2: quantum 64Kb  class drr 1:2 root leaf 3: quantum 64Kb  class drr 1:3 root leaf 4: quantum 64Kb  class drr 3:1 root leaf 4: quantum 64Kb  tc qdisc ls  qdisc drr 1: dev lo root refcnt 2  qdisc plug 2: dev lo parent 1:1  qdisc pfifo 4: dev lo parent 3:1 refcnt 2 limit 1000p  qdisc drr 3: dev lo parent 1:2  Observe that a) parent for 4:0 does not change despite the replace request. There can only be one parent.  b) refcount has gone up by two for 4:0 and c) both class 1:3 and 3:1 are pointing to it.  Step 12.  send one packet to plug echo "" | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888,priority=$((0x10001)) step13.  send one packet to the grafted fifo echo "" | socat -u STDIN UDP4-DATAGRAM:127.0.0.1:8888,priority=$((0x10003))  step14. lets trigger the uaf tc class delete dev lo classid 1:3 tc class delete dev lo classid 1:1  The semantics of "replace" is for a del/add _on the same node_ and not a delete from one node(3:1) and add to another node (1:3) as in step10. While we could "fix" with a more complex approach there could be consequences to expectations so the patch takes the preventive approach of "disallow such config".  Joint work with Lion Ackermann <nnamrec@gmail.com>
published:2025-02-13T12:15:27.837


Instruction: Please provide detailed information about CVE-2025-1094

CVE:CVE-2025-1094
Description:Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns.  Specifically, SQL injection requires the application to use the function result to construct input to psql, the PostgreSQL interactive terminal.  Similarly, improper neutralization of quoting syntax in PostgreSQL command line utility programs allows a source of command line arguments to achieve SQL injection when client_encoding is BIG5 and server_encoding is one of EUC_TW or MULE_INTERNAL.  Versions before PostgreSQL 17.3, 16.7, 15.11, 14.16, and 13.19 are affected.
published:2025-02-13T13:15:09.130


Instruction: Please provide detailed information about CVE-2025-1270

CVE:CVE-2025-1270
Description:Insecure direct object reference (IDOR) vulnerability in Anapi Group's h6web, allows an authenticated attacker to access other users' information by making a POST request and modifying the “pkrelated” parameter in the “/h6web/ha_datos_hermano.php” endpoint to refer to another user. In addition, the first request could also allow the attacker to impersonate other users. As a result, all requests made after exploitation of the IDOR vulnerability will be executed with the privileges of the impersonated user.
published:2025-02-13T13:15:09.273


Instruction: Please provide detailed information about CVE-2025-1271

CVE:CVE-2025-1271
Description:Reflected Cross-Site Scripting (XSS) in Anapi Group's h6web. This security flaw could allow an attacker to inject malicious JavaScript code into a URL. When a user accesses that URL, the injected code is executed in their browser, which can result in the theft of sensitive information, identity theft or the execution of unauthorised actions on behalf of the affected user.
published:2025-02-13T13:15:09.433


Instruction: Please provide detailed information about CVE-2025-1247

CVE:CVE-2025-1247
Description:A flaw was found in Quarkus REST that allows request parameters to leak between concurrent requests if endpoints use field injection without a CDI scope. This vulnerability allows attackers to manipulate request data, impersonate users, or access sensitive information.
published:2025-02-13T14:16:18.400


Instruction: Please provide detailed information about CVE-2025-26538

CVE:CVE-2025-26538
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Dan Rossiter Prezi Embedder allows Stored XSS. This issue affects Prezi Embedder: from n/a through 2.1.
published:2025-02-13T14:16:19.100


Instruction: Please provide detailed information about CVE-2025-26539

CVE:CVE-2025-26539
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in petkivim Embed Google Map allows Stored XSS. This issue affects Embed Google Map: from n/a through 3.2.
published:2025-02-13T14:16:19.383


Instruction: Please provide detailed information about CVE-2025-26543

CVE:CVE-2025-26543
Description:Cross-Site Request Forgery (CSRF) vulnerability in Pukhraj Suthar Simple Responsive Menu allows Stored XSS. This issue affects Simple Responsive Menu: from n/a through 2.1.
published:2025-02-13T14:16:19.707


Instruction: Please provide detailed information about CVE-2025-26545

CVE:CVE-2025-26545
Description:Cross-Site Request Forgery (CSRF) vulnerability in shisuh Related Posts Line-up-Exactly by Milliard allows Stored XSS. This issue affects Related Posts Line-up-Exactly by Milliard: from n/a through 0.0.22.
published:2025-02-13T14:16:20.043


Instruction: Please provide detailed information about CVE-2025-26547

CVE:CVE-2025-26547
Description:Cross-Site Request Forgery (CSRF) vulnerability in nagarjunsonti My Login Logout Plugin allows Stored XSS. This issue affects My Login Logout Plugin: from n/a through 2.4.
published:2025-02-13T14:16:20.347


Instruction: Please provide detailed information about CVE-2025-26549

CVE:CVE-2025-26549
Description:Cross-Site Request Forgery (CSRF) vulnerability in pa1 WP Html Page Sitemap allows Stored XSS. This issue affects WP Html Page Sitemap: from n/a through 2.2.
published:2025-02-13T14:16:20.663


Instruction: Please provide detailed information about CVE-2025-26550

CVE:CVE-2025-26550
Description:Cross-Site Request Forgery (CSRF) vulnerability in Kunal Shivale Global Meta Keyword & Description allows Stored XSS. This issue affects Global Meta Keyword & Description: from n/a through 2.3.
published:2025-02-13T14:16:20.993


Instruction: Please provide detailed information about CVE-2025-26551

CVE:CVE-2025-26551
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in sureshdsk Bootstrap collapse allows Stored XSS. This issue affects Bootstrap collapse: from n/a through 1.0.4.
published:2025-02-13T14:16:21.450


Instruction: Please provide detailed information about CVE-2025-26552

CVE:CVE-2025-26552
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in badrHan Naver Syndication V2 allows Stored XSS. This issue affects Naver Syndication V2: from n/a through 0.8.3.
published:2025-02-13T14:16:21.787


Instruction: Please provide detailed information about CVE-2025-26558

CVE:CVE-2025-26558
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in mkkmail Aparat Responsive allows DOM-Based XSS. This issue affects Aparat Responsive: from n/a through 1.3.
published:2025-02-13T14:16:22.130


Instruction: Please provide detailed information about CVE-2025-26561

CVE:CVE-2025-26561
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in elfsight Elfsight Yottie Lite allows Stored XSS. This issue affects Elfsight Yottie Lite: from n/a through 1.3.3.
published:2025-02-13T14:16:22.450


Instruction: Please provide detailed information about CVE-2025-26562

CVE:CVE-2025-26562
Description:Cross-Site Request Forgery (CSRF) vulnerability in Shambhu Patnaik RSS Filter allows Stored XSS. This issue affects RSS Filter: from n/a through 1.2.
published:2025-02-13T14:16:22.607


Instruction: Please provide detailed information about CVE-2025-26567

CVE:CVE-2025-26567
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in farjana55 Font Awesome WP allows DOM-Based XSS. This issue affects Font Awesome WP: from n/a through 1.0.
published:2025-02-13T14:16:22.763


Instruction: Please provide detailed information about CVE-2025-26568

CVE:CVE-2025-26568
Description:Cross-Site Request Forgery (CSRF) vulnerability in jensmueller Easy Amazon Product Information allows Stored XSS. This issue affects Easy Amazon Product Information: from n/a through 4.0.1.
published:2025-02-13T14:16:22.910


Instruction: Please provide detailed information about CVE-2025-26569

CVE:CVE-2025-26569
Description:Cross-Site Request Forgery (CSRF) vulnerability in callmeforsox Post Thumbs allows Stored XSS. This issue affects Post Thumbs: from n/a through 1.5.
published:2025-02-13T14:16:23.070


Instruction: Please provide detailed information about CVE-2025-26570

CVE:CVE-2025-26570
Description:Cross-Site Request Forgery (CSRF) vulnerability in uamv Glance That allows Cross Site Request Forgery. This issue affects Glance That: from n/a through 4.9.
published:2025-02-13T14:16:23.223


Instruction: Please provide detailed information about CVE-2025-26571

CVE:CVE-2025-26571
Description:Cross-Site Request Forgery (CSRF) vulnerability in wibiya Wibiya Toolbar allows Cross Site Request Forgery. This issue affects Wibiya Toolbar: from n/a through 2.0.
published:2025-02-13T14:16:23.360


Instruction: Please provide detailed information about CVE-2025-26572

CVE:CVE-2025-26572
Description:Cross-Site Request Forgery (CSRF) vulnerability in jesseheap WP PHPList allows Cross Site Request Forgery. This issue affects WP PHPList: from n/a through 1.7.
published:2025-02-13T14:16:23.507


Instruction: Please provide detailed information about CVE-2025-26574

CVE:CVE-2025-26574
Description:Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Moch Amir Google Drive WP Media allows Stored XSS. This issue affects Google Drive WP Media: from n/a through 2.4.4.
published:2025-02-13T14:16:23.653


Instruction: Please provide detailed information about CVE-2025-26577

CVE:CVE-2025-26577
Description:Cross-Site Request Forgery (CSRF) vulnerability in daxiawp DX-auto-publish allows Stored XSS. This issue affects DX-auto-publish: from n/a through 1.2.
published:2025-02-13T14:16:23.797


Instruction: Please provide detailed information about CVE-2025-26578

CVE:CVE-2025-26578
Description:Cross-Site Request Forgery (CSRF) vulnerability in mathieuhays Simple Documentation allows Stored XSS. This issue affects Simple Documentation: from n/a through 1.2.8.
published:2025-02-13T14:16:23.990


Instruction: Please provide detailed information about CVE-2025-26580

CVE:CVE-2025-26580
Description:Cross-Site Request Forgery (CSRF) vulnerability in CompleteWebResources Page/Post Specific Social Share Buttons allows Stored XSS. This issue affects Page/Post Specific Social Share Buttons: from n/a through 2.1.
published:2025-02-13T14:16:24.250


Instruction: Please provide detailed information about CVE-2025-26582

CVE:CVE-2025-26582
Description:Cross-Site Request Forgery (CSRF) vulnerability in Blackbam TinyMCE Advanced qTranslate fix editor problems allows Stored XSS. This issue affects TinyMCE Advanced qTranslate fix editor problems: from n/a through 1.0.0.
published:2025-02-13T14:16:24.407


Instruction: Please provide detailed information about CVE-2025-21701

CVE:CVE-2025-21701
Description:In the Linux kernel, the following vulnerability has been resolved:  net: avoid race between device unregistration and ethnl ops  The following trace can be seen if a device is being unregistered while its number of channels are being modified.    DEBUG_LOCKS_WARN_ON(lock->magic != lock)   WARNING: CPU: 3 PID: 3754 at kernel/locking/mutex.c:564 __mutex_lock+0xc8a/0x1120   CPU: 3 UID: 0 PID: 3754 Comm: ethtool Not tainted 6.13.0-rc6+ #771   RIP: 0010:__mutex_lock+0xc8a/0x1120   Call Trace:    <TASK>    ethtool_check_max_channel+0x1ea/0x880    ethnl_set_channels+0x3c3/0xb10    ethnl_default_set_doit+0x306/0x650    genl_family_rcv_msg_doit+0x1e3/0x2c0    genl_rcv_msg+0x432/0x6f0    netlink_rcv_skb+0x13d/0x3b0    genl_rcv+0x28/0x40    netlink_unicast+0x42e/0x720    netlink_sendmsg+0x765/0xc20    __sys_sendto+0x3ac/0x420    __x64_sys_sendto+0xe0/0x1c0    do_syscall_64+0x95/0x180    entry_SYSCALL_64_after_hwframe+0x76/0x7e  This is because unregister_netdevice_many_notify might run before the rtnl lock section of ethnl operations, eg. set_channels in the above example. In this example the rss lock would be destroyed by the device unregistration path before being used again, but in general running ethnl operations while dismantle has started is not a good idea.  Fix this by denying any operation on devices being unregistered. A check was already there in ethnl_ops_begin, but not wide enough.  Note that the same issue cannot be seen on the ioctl version (__dev_ethtool) because the device reference is retrieved from within the rtnl lock section there. Once dismantle started, the net device is unlisted and no reference will be found.
published:2025-02-13T15:15:20.867


Instruction: Please provide detailed information about CVE-2025-0426

CVE:CVE-2025-0426
Description:A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
published:2025-02-13T16:16:48.417


Instruction: Please provide detailed information about CVE-2025-22480

CVE:CVE-2025-22480
Description:Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.
published:2025-02-13T16:16:48.777


Instruction: Please provide detailed information about CVE-2025-24903

CVE:CVE-2025-24903
Description:libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, any contact may forge a sync message, impersonating another device of the local user. The origin of sync messages is not checked. Patched libsignal-service can be found after commit 82d70f6720e762898f34ae76b0894b0297d9b2f8. The `Metadata` struct contains an additional `was_encrypted` field, which breaks the API, but should be easily resolvable. No known workarounds are available.
published:2025-02-13T16:16:48.913


Instruction: Please provide detailed information about CVE-2025-24904

CVE:CVE-2025-24904
Description:libsignal-service-rs is a Rust version of the libsignal-service-java library which implements the core functionality to communicate with Signal servers. Prior to commit 82d70f6720e762898f34ae76b0894b0297d9b2f8, plaintext content envelopes could be injected by a server or a malicious client, and may have been able to bypass the end-to-end encryption and authentication. The vulnerability is fixed per 82d70f6720e762898f34ae76b0894b0297d9b2f8. The `Metadata` struct contains an additional `was_encrypted` field, which breaks the API, but should be easily resolvable. No known workarounds are available.
published:2025-02-13T16:16:49.053


Instruction: Please provide detailed information about CVE-2025-25287

CVE:CVE-2025-25287
Description:Lakeus is a simple skin made for MediaWiki. Starting in version 1.8.0 and prior to versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0, Lakeus is vulnerable to store cross-site scripting via malicious system messages, though editing the messages requires high privileges. Those with `(editinterface)` rights can edit system messages that are improperly handled in order to send raw HTML. In the case of `lakeus-footermessage`, this will affect all users if the server is configured to link back to this repository. Otherwise, the system messages in themeDesigner.js are only used when the user enables it in their preferences. Versions 1.3.1+REL1.39, 1.3.1+REL1.42, and 1.4.0 contain a patch.
published:2025-02-13T16:16:49.187


Instruction: Please provide detailed information about CVE-2025-25352

CVE:CVE-2025-25352
Description:A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter.
published:2025-02-13T16:16:49.343


Instruction: Please provide detailed information about CVE-2025-25354

CVE:CVE-2025-25354
Description:A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter.
published:2025-02-13T16:16:49.433


Instruction: Please provide detailed information about CVE-2025-25355

CVE:CVE-2025-25355
Description:A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.
published:2025-02-13T16:16:49.530


Instruction: Please provide detailed information about CVE-2025-25356

CVE:CVE-2025-25356
Description:A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the " todate" POST request parameter.
published:2025-02-13T16:16:49.613


Instruction: Please provide detailed information about CVE-2025-25357

CVE:CVE-2025-25357
Description:A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter.
published:2025-02-13T16:16:49.700


Instruction: Please provide detailed information about CVE-2025-25897

CVE:CVE-2025-25897
Description:A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-13T16:16:49.790


Instruction: Please provide detailed information about CVE-2025-25898

CVE:CVE-2025-25898
Description:A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-13T16:16:49.867


Instruction: Please provide detailed information about CVE-2025-25899

CVE:CVE-2025-25899
Description:A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-13T16:16:49.953


Instruction: Please provide detailed information about CVE-2025-25900

CVE:CVE-2025-25900
Description:A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-13T16:16:50.037


Instruction: Please provide detailed information about CVE-2025-25901

CVE:CVE-2025-25901
Description:A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.
published:2025-02-13T16:16:50.180


Instruction: Please provide detailed information about CVE-2025-26511

CVE:CVE-2025-26511
Description:Systems running the Instaclustr  fork of Stratio's Cassandra-Lucene-Index plugin versions 4.0-rc1-1.0.0  through 4.0.16-1.0.0 and 4.1.2-1.0.0 through 4.1.8-1.0.0, installed into  Apache Cassandra version 4.x, are susceptible to a vulnerability which  when successfully exploited could allow authenticated Cassandra users to  remotely bypass RBAC and escalate their privileges.
published:2025-02-13T16:16:50.270


Instruction: Please provide detailed information about CVE-2025-25387

CVE:CVE-2025-25387
Description:A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the propertytype POST request parameter.
published:2025-02-13T17:17:20.247


Instruction: Please provide detailed information about CVE-2025-25388

CVE:CVE-2025-25388
Description:A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter.
published:2025-02-13T17:17:20.347


Instruction: Please provide detailed information about CVE-2025-25389

CVE:CVE-2025-25389
Description:A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.
published:2025-02-13T17:17:20.427


Instruction: Please provide detailed information about CVE-2025-24888

CVE:CVE-2025-24888
Description:The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to version 0.14.1, a malicious SecureDrop Server could obtain code execution on the SecureDrop Client virtual machine (`sd-app`). SecureDrop Server itself has multiple layers of built-in hardening, and is a dedicated physical machine exposed on the internet only via Tor hidden services for the Source and Journalist interfaces, and optionally via remote SSH access over another Tor hidden service. A newsroom's SecureDrop Workstation communicates only with its own dedicated SecureDrop Server.  The SecureDrop Client runs in a dedicated Qubes virtual machine, named `sd-app`, as part of the SecureDrop Workstation. The private OpenPGP key used to decrypt submissions and replies is stored in a separate virtual machine and never accessed directly. The vulnerability lies in the code responsible for downloading replies. The filename of the reply is obtained from the `Content-Disposition` HTTP header and used to write the encrypted reply on disk. Note that filenames are generated and sanitized server-side, and files are downloaded in an encrypted format, so a remote attacker who has not achieved server compromise, such as one posing as a source, could not craft the HTTP response necessary for this attack.  While the filename is later checked to guard against path traversal before being moved into the Client’s data storage directory, the file has already been written to a potentially arbitrary location. In this case, `safe_move()` would detect the path traversal and fail, leaving the original downloaded file in the attacker-chosen directory. Code execution can be gained by writing an autostart file in `/home/user/.config/autostart/`.  Version 0.14.1 fixes the issue. As of time of publication, there is no known evidence of exploitation in the wild. This attack requires a previously compromised SecureDrop Server.
published:2025-02-13T18:18:23.047


Instruction: Please provide detailed information about CVE-2025-24889

CVE:CVE-2025-24889
Description:The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on the SecureDrop Workstation. Prior to versions 0.14.1 and 1.0.1, an attacker who has already gained code execution in a virtual machine on the SecureDrop Workstation could gain code execution in the `sd-log` virtual machine by sending a specially crafted log entry. The vulnerability is not exploitable remotely and requires an attacker to already have code execution on one of the other virtual machines (VMs) of the system. Due to the Workstation's underlying usage of Qubes for strong isolation, the vulnerability would have allowed lateral movement between any log-enabled VM and the `sd-log` VM, but no further. The SecureDrop workstation collects logs centrally in an isolated virtual machine named `sd-log` for easy export for support and debugging purposes. The `sd-log`  VM is completely isolated from the internet and ingests logs via a narrow Qubes RPC policy that allows for specific inter-VM communication via the Xen vchan protocol used by Qubes's qrexec mechanism. A path traversal bug was found in the logic used to choose where to write the log file for a specific VM: the VM name, used unsanitized in the destination path in `sd-log`, is supplied by the logging VM itself instead of being read from a trusted source, such as the Qubes environment variable `QREXEC_REMOTE_DOMAIN` that is used in the fixed implementation. An attacker could provide an arbitrary source VM name, possibly overwriting logs of other VMs, or writing a file named `syslog.log`, with attacker-controlled content, in arbitrary directories as a low-privileged user. A successful attack could potentially overwrite or add configuration to software that loads configuration files from a directory. This is exploitable to achieve code execution by setting the target directory to `/home/user/.config/autostart/` and letting it write `syslog.log`, because XFCE treats any file in that directory as a `.desktop` file regardless of its extension. Versions 0.14.1 and 1.0.1 contain a patch for this issue.
published:2025-02-13T18:18:23.240


Instruction: Please provide detailed information about CVE-2025-1127

CVE:CVE-2025-1127
Description:The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the contents of any data on the filesystem.
published:2025-02-13T19:15:14.153


Instruction: Please provide detailed information about CVE-2025-1283

CVE:CVE-2025-1283
Description:The Dingtian DT-R0 Series is vulnerable to an exploit that allows  attackers to bypass login requirements by directly navigating to the  main page.
published:2025-02-13T22:15:11.413


Instruction: Please provide detailed information about CVE-2025-20615

CVE:CVE-2025-20615
Description:The Qardio Arm iOS application exposes sensitive data such as usernames  and passwords in a plist file. This allows an attacker to log in to  production-level development accounts and access an engineering backdoor  in the application. The engineering backdoor allows the attacker to  send hex-based commands over a UI-based terminal.
published:2025-02-13T22:15:11.590


Instruction: Please provide detailed information about CVE-2025-22896

CVE:CVE-2025-22896
Description:mySCADA myPRO Manager   stores credentials in cleartext, which could allow an attacker to obtain sensitive information.
published:2025-02-13T22:15:11.737


Instruction: Please provide detailed information about CVE-2025-23411

CVE:CVE-2025-23411
Description:mySCADA myPRO Manager  is vulnerable to cross-site request forgery (CSRF), which could allow  an attacker to obtain sensitive information. An attacker would need to  trick the victim in to visiting an attacker-controlled website.
published:2025-02-13T22:15:11.913


Instruction: Please provide detailed information about CVE-2025-23421

CVE:CVE-2025-23421
Description:An attacker could obtain firmware files and reverse engineer their  intended use leading to loss of confidentiality and integrity of the  hardware devices enabled by the Qardio iOS and Android applications.
published:2025-02-13T22:15:12.073


Instruction: Please provide detailed information about CVE-2025-24836

CVE:CVE-2025-24836
Description:With a specially crafted Python script, an attacker could send  continuous startMeasurement commands over an unencrypted Bluetooth  connection to the affected device. This would prevent the device from  connecting to a clinician's app to take patient readings and ostensibly  flood it with requests, resulting in a denial-of-service condition.
published:2025-02-13T22:15:12.270


Instruction: Please provide detailed information about CVE-2025-24861

CVE:CVE-2025-24861
Description:An attacker may inject commands via specially-crafted post requests.
published:2025-02-13T22:15:12.457


Instruction: Please provide detailed information about CVE-2025-24865

CVE:CVE-2025-24865
Description:The administrative web interface of  mySCADA myPRO Manager  can be accessed without authentication  which could allow an unauthorized attacker to retrieve sensitive  information and upload files without the associated password.
published:2025-02-13T22:15:12.613


Instruction: Please provide detailed information about CVE-2025-25067

CVE:CVE-2025-25067
Description:mySCADA myPRO Manager   is vulnerable to an OS command injection which could allow a remote attacker to execute arbitrary OS commands.
published:2025-02-13T22:15:12.780


Instruction: Please provide detailed information about CVE-2025-25195

CVE:CVE-2025-25195
Description:Zulip is an open source team chat application. A weekly cron job (added in 50256f48314250978f521ef439cafa704e056539) demotes channels to being "inactive" after they have not received traffic for 180 days.  However, upon doing so, an event was sent to all users in the organization, not just users in the channel.  This event contained the name of the private channel. Similarly, the same commit (50256f48314250978f521ef439cafa704e056539) added functionality to notify clients when channels stopped being "inactive."  The first message sent to a private channel which had not previously had any messages for over 180 days (and were thus already marked "inactive") would leak an event to all users in the organization; this event also contained the name of the private channel. Commits 75be449d456d29fef27e9d1828bafa30174284b4 and a2a1a7f8d152296c8966f1380872c0ac69e5c87e fixed the issue. This vulnerability only existed in `main`, and was not part of any published versions.
published:2025-02-13T22:15:13.100


Instruction: Please provide detailed information about CVE-2025-25281

CVE:CVE-2025-25281
Description:An attacker may modify the URL to discover sensitive information about the target network.
published:2025-02-13T22:15:13.263


Instruction: Please provide detailed information about CVE-2025-26473

CVE:CVE-2025-26473
Description:The Mojave Inverter uses the GET method for sensitive information.
published:2025-02-13T22:15:13.417


Instruction: Please provide detailed information about CVE-2025-22960

CVE:CVE-2025-22960
Description:A session hijacking vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters. Unauthenticated attackers can access exposed log files (/logs/debug/xteLog*), potentially revealing sensitive session-related information such as session IDs (sess_id) and authentication success tokens (user_check_password OK). Exploiting this flaw could allow attackers to hijack active sessions, gain unauthorized access, and escalate privileges on affected devices.
published:2025-02-13T23:15:10.960


Instruction: Please provide detailed information about CVE-2025-22961

CVE:CVE-2025-22961
Description:A critical information disclosure vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters due to Incorrect Access Control (CWE-284). Unauthenticated attackers can directly access sensitive database backup files (snapshot_users.db) via publicly exposed URLs (/logs/devcfg/snapshot/ and /logs/devcfg/user/). Exploiting this vulnerability allows retrieval of sensitive user data, including login credentials, potentially leading to full system compromise.
published:2025-02-13T23:15:11.047


Instruction: Please provide detailed information about CVE-2025-22962

CVE:CVE-2025-22962
Description:A critical remote code execution (RCE) vulnerability exists in the web-based management interface of GatesAir Maxiva UAXT, VAXT transmitters when debugging mode is enabled. An attacker with a valid session ID (sess_id) can send specially crafted POST requests to the /json endpoint, enabling arbitrary command execution on the underlying system. This vulnerability can lead to full system compromise, including unauthorized access, privilege escalation, and potentially full device takeover.
published:2025-02-13T23:15:11.140


Instruction: Please provide detailed information about CVE-2025-1053

CVE:CVE-2025-1053
Description:Under certain error conditions at time of SANnav installation or upgrade, the encryption key can be written into and obtained from a Brocade SANnav supportsave.  An attacker with privileged access to the Brocade SANnav database could use the encryption key to obtain passwords used by Brocade SANnav.
published:2025-02-14T04:15:08.903


Instruction: Please provide detailed information about CVE-2025-26519

CVE:CVE-2025-26519
Description:musl libc 0.9.13 through 1.2.5 before 1.2.6 has an out-of-bounds write vulnerability when an attacker can trigger iconv conversion of untrusted EUC-KR text to UTF-8.
published:2025-02-14T04:15:09.050


Instruction: Please provide detailed information about CVE-2025-23406

CVE:CVE-2025-23406
Description:Out-of-bounds read vulnerability caused by improper checking of TCP MSS option values exists in Cente middleware TCP/IP Network Series, which may lead to processing a specially crafted packet to cause the affected product crashed.
published:2025-02-14T05:15:12.567


Instruction: Please provide detailed information about CVE-2025-22630

CVE:CVE-2025-22630
Description:Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in MarketingFire Widget Options allows OS Command Injection.This issue affects Widget Options: from n/a through 4.1.0.
published:2025-02-14T07:15:32.750


Instruction: Please provide detailed information about CVE-2025-1298

CVE:CVE-2025-1298
Description:Logic vulnerability in the mobile application (com.transsion.carlcare) may lead to the risk of account takeover.
published:2025-02-14T08:15:30.877


Instruction: Please provide detailed information about CVE-2025-26788

CVE:CVE-2025-26788
Description:StrongKey FIDO Server before 4.15.1 treats a non-discoverable (namedcredential) flow as a discoverable transaction.
published:2025-02-14T08:15:31.183


Instruction: Please provide detailed information about CVE-2025-26789

CVE:CVE-2025-26789
Description:An issue was discovered in Logpoint AgentX before 1.5.0. A vulnerability caused by limited access controls allowed li-admin users to access sensitive information about AgentX Manager in a Logpoint deployment.
published:2025-02-14T08:15:31.357


Instruction: Please provide detailed information about CVE-2025-26791

CVE:CVE-2025-26791
Description:DOMPurify before 3.2.4 has an incorrect template literal regular expression, sometimes leading to mutation cross-site scripting (mXSS).
published:2025-02-14T09:15:08.067


Instruction: Please provide detailed information about CVE-2025-0821

CVE:CVE-2025-0821
Description:Bit Assist plugin for WordPress is vulnerable to time-based SQL Injection via the ‘id’ parameter in all versions up to, and including, 1.5.2 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Subscriber-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-02-14T11:15:10.230


Instruction: Please provide detailed information about CVE-2025-26522

CVE:CVE-2025-26522
Description:This vulnerability exists in RupeeWeb trading platform due to improper implementation of OTP validation mechanism in certain API endpoints. A remote attacker with valid credentials could exploit this vulnerability by manipulating API responses.    Successful exploitation of this vulnerability could allow the attacker to bypass Two-Factor Authentication (2FA) for other user accounts.
published:2025-02-14T12:15:29.583


Instruction: Please provide detailed information about CVE-2025-26523

CVE:CVE-2025-26523
Description:This vulnerability exists in RupeeWeb trading platform due to insufficient authorization controls on certain API endpoints handling addition and deletion operations. Successful exploitation of this vulnerability could allow an authenticated remote attacker to modify information belonging to other user accounts.
published:2025-02-14T12:15:29.723


Instruction: Please provide detailed information about CVE-2025-26524

CVE:CVE-2025-26524
Description:This vulnerability exists in RupeeWeb trading platform due to missing rate limiting on OTP requests in certain API endpoints. An authenticated remote attacker could exploit this vulnerability by sending multiple OTP request through vulnerable API endpoints which could lead to the OTP bombing/ flooding on the targeted system.
published:2025-02-14T12:15:29.887


Instruction: Please provide detailed information about CVE-2025-0867

CVE:CVE-2025-0867
Description:The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This allows a privilege escalation to the administrative level.
published:2025-02-14T13:15:42.620


Instruction: Please provide detailed information about CVE-2025-22698

CVE:CVE-2025-22698
Description:Missing Authorization vulnerability in Ability, Inc Accessibility Suite by Online ADA allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Accessibility Suite by Online ADA: from n/a through 4.16.
published:2025-02-14T13:15:42.757


Instruction: Please provide detailed information about CVE-2025-22702

CVE:CVE-2025-22702
Description:Missing Authorization vulnerability in EPC Photography. This issue affects Photography: from n/a through 7.5.2.
published:2025-02-14T13:15:42.893


Instruction: Please provide detailed information about CVE-2025-22705

CVE:CVE-2025-22705
Description:Cross-Site Request Forgery (CSRF) vulnerability in godthor Disqus Popular Posts allows Reflected XSS. This issue affects Disqus Popular Posts: from n/a through 2.1.1.
published:2025-02-14T13:15:43.020