Instruction: Please provide detailed information about CVE-2025-30115

CVE:CVE-2025-30115
Description:An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Default Credentials Cannot Be Changed. It uses a fixed default SSID and password ("qwertyuiop"), which cannot be modified by users. The SSID is continuously broadcast, allowing unauthorized access to the device network.
published:2025-03-18T15:16:02.720


Instruction: Please provide detailed information about CVE-2025-30116

CVE:CVE-2025-30116
Description:An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Remotely Dumping of Video Footage and the Live Video Stream can occur. It allows remote attackers to access and download recorded video footage from the SD card via port 9091. Additionally, attackers can connect to port 9092 to stream the live video feed by bypassing the challenge-response authentication mechanism. This exposes sensitive location and personal data.
published:2025-03-18T15:16:02.850


Instruction: Please provide detailed information about CVE-2025-30117

CVE:CVE-2025-30117
Description:An issue was discovered on the Forvia Hella HELLA Driving Recorder DR 820. Managing Settings and Obtaining Sensitive Data and Sabotaging the Car Battery can be performed by unauthorized parties. After bypassing the device pairing, an attacker can obtain sensitive user and vehicle information through the settings interface. Remote attackers can modify power management settings, disable recording, delete stored footage, and turn off battery protection, leading to potential denial-of-service conditions and vehicle battery drainage.
published:2025-03-18T15:16:02.990


Instruction: Please provide detailed information about CVE-2025-30122

CVE:CVE-2025-30122
Description:An issue was discovered on ROADCAM X3 devices. It has a uniform default credential set that cannot be modified by users, making it easy for attackers to gain unauthorized access to multiple devices.
published:2025-03-18T15:16:03.143


Instruction: Please provide detailed information about CVE-2025-30123

CVE:CVE-2025-30123
Description:An issue was discovered on ROADCAM X3 devices. The mobile app APK (Viidure) contains hardcoded FTP credentials for the FTPX user account, enabling attackers to gain unauthorized access and extract sensitive recorded footage from the device.
published:2025-03-18T15:16:03.293


Instruction: Please provide detailed information about CVE-2025-30132

CVE:CVE-2025-30132
Description:An issue was discovered on IROAD Dashcam V devices. It uses an unregistered public domain name as an internal domain, creating a security risk. During analysis, it was found that this domain was not owned by IROAD, allowing an attacker to register it and potentially intercept sensitive device traffic. If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could lead to data exfiltration or man-in-the-middle attacks.
published:2025-03-18T15:16:03.437


Instruction: Please provide detailed information about CVE-2025-25582

CVE:CVE-2025-25582
Description:yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the selectNoticeList() method at /xml/OaNoticeMapper.xml.
published:2025-03-18T16:15:26.900


Instruction: Please provide detailed information about CVE-2025-25586

CVE:CVE-2025-25586
Description:yimioa before v2024.07.04 was discovered to contain an information disclosure vulnerability via the component /resources/application.yml.
published:2025-03-18T16:15:27.047


Instruction: Please provide detailed information about CVE-2025-25589

CVE:CVE-2025-25589
Description:An XML external entity (XXE) injection vulnerability in the component /weixin/aes/XMLParse.java of yimioa before v2024.07.04 allows attackers to execute arbitrary code via supplying a crafted XML file.
published:2025-03-18T16:15:27.200


Instruction: Please provide detailed information about CVE-2025-27688

CVE:CVE-2025-27688
Description:Dell ThinOS 2408 and prior, contains an improper permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
published:2025-03-18T16:15:27.980


Instruction: Please provide detailed information about CVE-2025-25595

CVE:CVE-2025-25595
Description:A lack of rate limiting in the login page of Safe App version a3.0.9 allows attackers to bypass authentication via a brute force attack.
published:2025-03-18T17:15:46.203


Instruction: Please provide detailed information about CVE-2025-26137

CVE:CVE-2025-26137
Description:Systemic Risk Value <=2.8.0 is vulnerable to Local File Inclusion via /GetFile.aspx?ReportUrl=. An unauthenticated attacker can exploit this issue to read arbitrary system files by supplying a crafted file path, potentially exposing sensitive information.
published:2025-03-18T17:15:46.503


Instruction: Please provide detailed information about CVE-2025-26138

CVE:CVE-2025-26138
Description:Systemic Risk Value <=2.8.0 is vulnerable to improper access control in /RiskValue/GroupingEntities/Controls/GetFile.aspx?ID=. Uploaded files are accessible via a predictable numerical ID parameter, allowing unauthorized users to increment or decrement the ID to access and download files they do not have permission to view.
published:2025-03-18T17:15:46.670


Instruction: Please provide detailed information about CVE-2025-2487

CVE:CVE-2025-2487
Description:A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
published:2025-03-18T17:15:48.883


Instruction: Please provide detailed information about CVE-2025-21619

CVE:CVE-2025-21619
Description:GLPI is a free asset and IT management software package. An administrator user can perfom a SQL injection through the rules configuration forms. This vulnerability is fixed in 10.0.18.
published:2025-03-18T19:15:47.997


Instruction: Please provide detailed information about CVE-2025-24799

CVE:CVE-2025-24799
Description:GLPI is a free asset and IT management software package. An unauthenticated user can perform a SQL injection through the inventory endpoint. This vulnerability is fixed in 10.0.18.
published:2025-03-18T19:15:48.927


Instruction: Please provide detailed information about CVE-2025-24801

CVE:CVE-2025-24801
Description:GLPI is a free asset and IT management software package. An authenticated user can upload and force the execution of *.php files located on the GLPI server. This vulnerability is fixed in 10.0.18.
published:2025-03-18T19:15:49.110


Instruction: Please provide detailed information about CVE-2025-25040

CVE:CVE-2025-25040
Description:A vulnerability has been identified in the port ACL functionality of AOS-CX software running on the HPE Aruba Networking CX 9300 Switch Series only and affects:        - AOS-CX 10.14.xxxx : All patches      - AOS-CX 10.15.xxxx : 10.15.1000 and below  The vulnerability is specific to traffic originated by the CX 9300 switch platform and could allow an attacker to bypass ACL rules applied to routed ports on egress. As a result, port ACLs are not correctly enforced, which could lead to unauthorized traffic flow and violations of security policies. Egress VLAN ACLs and Routed VLAN ACLs are not affected by this vulnerability.
published:2025-03-18T19:15:49.290


Instruction: Please provide detailed information about CVE-2025-25042

CVE:CVE-2025-25042
Description:A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
published:2025-03-18T19:15:49.447


Instruction: Please provide detailed information about CVE-2025-27080

CVE:CVE-2025-27080
Description:Vulnerabilities in the command line interface of AOS-CX could allow an authenticated remote attacker to expose sensitive information. Successful exploitation could allow an attacker to gain unauthorized access to services outside of the impacted switch, potentially leading to lateral movement involving those services.
published:2025-03-18T19:15:50.680


Instruction: Please provide detailed information about CVE-2025-29790

CVE:CVE-2025-29790
Description:Contao is an Open Source CMS. Users can upload SVG files with malicious code, which is then executed in the back end and/or front end. This vulnerability is fixed in Contao 4.13.54, 5.3.30, or 5.5.6.
published:2025-03-18T19:15:50.813


Instruction: Please provide detailed information about CVE-2025-29907

CVE:CVE-2025-29907
Description:jsPDF is a library to generate PDFs in JavaScript. Prior to 3.0.1, user control of the first argument of the addImage method results in CPU utilization and denial of service. If given the possibility to pass unsanitised image urls to the addImage method, a user can provide a harmful data-url that results in high CPU utilization and denial of service. Other affected methods are html and addSvgAsImage. The vulnerability was fixed in jsPDF 3.0.1.
published:2025-03-18T19:15:51.197


Instruction: Please provide detailed information about CVE-2025-29930

CVE:CVE-2025-29930
Description:imFAQ is an advanced questions and answers management system for ImpressCMS. Prior to 1.0.1, if the $_GET['seoOp'] parameter is manipulated to include malicious input (e.g., seoOp=php://filter/read=convert.base64-encode/resource=/var/www/html/config.php), the application could allow an attacker to read sensitive files on the server (Local File Inclusion, LFI). The $_GET['seoOp'] and $_GET['seoArg'] parameters are directly used without sanitization or validation. This is partly mitigated by the fact that the ImpressCMS sensitive files are stored outside the web root, in a folder with a randomized name. The issue has been resolved in imFaq 1.0.1.
published:2025-03-18T19:15:51.340


Instruction: Please provide detailed information about CVE-2025-30137

CVE:CVE-2025-30137
Description:An issue was discovered in the G-Net GNET APK 2.6.2. Hardcoded credentials exist in in APK for ports 9091 and 9092. The GNET mobile application contains hardcoded credentials that provide unauthorized access to the dashcam's API endpoints on ports 9091 and 9092. Once the GNET SSID is connected to, the attacker sends a crafted authentication command with TibetList and 000000 to list settings of the dashcam at port 9091. There's a separate set of credentials for port 9092 (stream) that is also exposed in cleartext: admin + tibet. For settings, the required credentials are adim + 000000.
published:2025-03-18T20:15:26.407


Instruction: Please provide detailed information about CVE-2025-30138

CVE:CVE-2025-30138
Description:An issue was discovered on G-Net Dashcam BB GONX devices. Managing Settings and Obtaining Sensitive Data and Sabotaging Car Battery can be performed by unauthorized persons. It allows unauthorized users to modify critical system settings once connected to its network. Attackers can extract sensitive car and driver information, mute dashcam alerts to prevent detection, disable recording functionality, or even factory reset the device. Additionally, they can disable battery protection, causing the dashcam to drain the car battery when left on overnight. These actions not only compromise privacy but also pose potential physical harm by rendering the dashcam non-functional or causing vehicle battery failure.
published:2025-03-18T20:15:26.507


Instruction: Please provide detailed information about CVE-2025-30139

CVE:CVE-2025-30139
Description:An issue was discovered on G-Net Dashcam BB GONX devices. Default credentials for SSID cannot be changed. It broadcasts a fixed SSID with default credentials that cannot be changed. This allows any nearby attacker to connect to the dashcam's network without restriction. Once connected, an attacker can sniff on connected devices such as the user's smartphone. The SSID is also always broadcasted.
published:2025-03-18T20:15:26.597


Instruction: Please provide detailed information about CVE-2025-30141

CVE:CVE-2025-30141
Description:An issue was discovered on G-Net Dashcam BB GONX devices. One can Remotely Dump Video Footage and the Live Video Stream. It exposes API endpoints on ports 9091 and 9092 that allow remote access to recorded and live video feeds. An attacker who connects to the dashcam's network can retrieve all stored recordings and convert them from JDR format to MP4. Additionally, port 9092's RTSP stream can be accessed remotely, allowing real-time video feeds to be extracted without the owner's knowledge.
published:2025-03-18T20:15:26.693


Instruction: Please provide detailed information about CVE-2025-30142

CVE:CVE-2025-30142
Description:An issue was discovered on G-Net Dashcam BB GONX devices. Bypassing of Device Pairing can occur. It uses MAC address verification as the sole mechanism for recognizing paired devices, allowing attackers to bypass authentication. By capturing the MAC address of an already-paired device through ARP scanning or other means, an attacker can spoof the MAC address and connect to the dashcam without going through the pairing process. This enables full access to the device.
published:2025-03-18T20:15:26.777


Instruction: Please provide detailed information about CVE-2025-30140

CVE:CVE-2025-30140
Description:An issue was discovered on G-Net Dashcam BB GONX devices. A Public Domain name is Used for the Internal Domain Name. It uses an unregistered public domain name as an internal domain, creating a security risk. This domain was not owned by GNET originally, allowing an attacker to register it and potentially intercept sensitive device traffic (it has since been registered by the vulnerability discoverer). If the dashcam or related services attempt to resolve this domain over the public Internet instead of locally, it could lead to data exfiltration or man-in-the-middle attacks.
published:2025-03-18T21:15:32.880


Instruction: Please provide detailed information about CVE-2025-2290

CVE:CVE-2025-2290
Description:The LifterLMS – WP LMS for eLearning, Online Courses, & Quizzes plugin for WordPress is vulnerable to Unauthenticated Post Trashing due to a missing capability check on the delete_access_plan function and the related AJAX calls in all versions up to, and including, 8.0.1. This makes it possible for unauthenticated attackers to change status to "Trash" for every published post, therefore limiting the availability of the website's content.
published:2025-03-19T05:15:41.180


Instruction: Please provide detailed information about CVE-2025-30234

CVE:CVE-2025-30234
Description:SmartOS, as used in Triton Data Center and other products, has static host SSH keys in the 60f76fd2-143f-4f57-819b-1ae32684e81b image (a Debian 12 LX zone image from 2024-07-26).
published:2025-03-19T05:15:41.353


Instruction: Please provide detailed information about CVE-2025-1232

CVE:CVE-2025-1232
Description:The Site Reviews WordPress plugin before 7.2.5 does not properly sanitise and escape some of its Review fields, which could allow unauthenticated users to perform Stored XSS attacks
published:2025-03-19T06:15:15.940


Instruction: Please provide detailed information about CVE-2025-30235

CVE:CVE-2025-30235
Description:Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 is intended to disable accounts that have had more than 10 failed authentication attempts, but instead allows hundreds of failed authentication attempts, because concurrent attempts are mishandled.
published:2025-03-19T06:15:16.043


Instruction: Please provide detailed information about CVE-2025-30236

CVE:CVE-2025-30236
Description:Shearwater SecurEnvoy SecurAccess Enrol before 9.4.515 allows authentication through only a six-digit TOTP code (skipping a password check) if an HTTP POST request contains a SESSION parameter.
published:2025-03-19T06:15:16.243


Instruction: Please provide detailed information about CVE-2025-27018

CVE:CVE-2025-27018
Description:Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Airflow MySQL Provider.  When user triggered a DAG with dump_sql or load_sql functions they could pass a table parameter from a UI, that could cause SQL injection by running SQL that was not intended. It could lead to data corruption, modification and others. This issue affects Apache Airflow MySQL Provider: before 6.2.0.  Users are recommended to upgrade to version 6.2.0, which fixes the issue.
published:2025-03-19T09:15:14.457


Instruction: Please provide detailed information about CVE-2025-2511

CVE:CVE-2025-2511
Description:The AHAthat Plugin plugin for WordPress is vulnerable to time-based SQL Injection via the 'id' parameter in all versions up to, and including, 1.6 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query.  This makes it possible for authenticated attackers, with Administrator-level access and above, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database.
published:2025-03-19T12:15:14.313


Instruction: Please provide detailed information about CVE-2025-2512

CVE:CVE-2025-2512
Description:The File Away plugin for WordPress is vulnerable to arbitrary file uploads due to a missing capability check and missing file type validation in the upload() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers to upload arbitrary files on the affected site's server which may make remote code execution possible.
published:2025-03-19T12:15:14.463


Instruction: Please provide detailed information about CVE-2025-1472

CVE:CVE-2025-1472
Description:Mattermost versions 9.11.x <= 9.11.8 fail to properly perform authorization of the Viewer role which allows an attacker with the Viewer role configured with No Access to Reporting to still view team and site statistics.
published:2025-03-19T15:15:53.433


Instruction: Please provide detailed information about CVE-2025-1758

CVE:CVE-2025-1758
Description:Improper Input Validation vulnerability in Progress LoadMaster allows : Buffer OverflowThis issue affects:  * LoadMaster: 7.2.40.0 and above  * ECS: All versions  * Multi-Tenancy: 7.1.35.4 and above
published:2025-03-19T16:15:30.527


Instruction: Please provide detailed information about CVE-2025-23382

CVE:CVE-2025-23382
Description:Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, contain(s) an Exposure of Sensitive System Information to an Unauthorized Control Sphere vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.c
published:2025-03-19T16:15:30.787


Instruction: Please provide detailed information about CVE-2025-26475

CVE:CVE-2025-26475
Description:Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts, reducing attack exposure, preventing accidental misconfigurations, and ensuring security controls remain active.
published:2025-03-19T16:15:31.030


Instruction: Please provide detailed information about CVE-2025-26485

CVE:CVE-2025-26485
Description:The Exposure of Sensitive Information to an Unauthorized Actor  vulnerability impacting Beta80 Life 1st Identity Manager  allows User  Enumeration using Authentication Rest APIs. Affected: Life 1st version  1.5.2.14234. Different error messages are returned to failed authentication attempts  in case of the usage of a wrong password or a non existent user.    This issue affects Life 1st: 1.5.2.14234.
published:2025-03-19T16:15:31.257


Instruction: Please provide detailed information about CVE-2025-26486

CVE:CVE-2025-26486
Description:Use of a Broken or Risky Cryptographic Algorithm, Use of Password Hash  With Insufficient Computational Effort, Use of Weak Hash, Use of a  One-Way Hash with a Predictable Salt vulnerability in Beta80 Life 1st  allows an  Attacker to Bruteforce User Passwords or find a collision to gain access to a target application using BETA80 “Life 1st Identity Manager” as a service for authentication.This issue affects Life 1st: 1.5.2.14234.
published:2025-03-19T16:15:31.457


Instruction: Please provide detailed information about CVE-2025-29137

CVE:CVE-2025-29137
Description:Tenda AC7 V1.0 V15.03.06.44 found a buffer overflow caused by the timeZone parameter in the form_fast_setting_wifi_set function, which can cause RCE.
published:2025-03-19T16:15:31.677


Instruction: Please provide detailed information about CVE-2025-29401

CVE:CVE-2025-29401
Description:An arbitrary file upload vulnerability in the component /views/plugin.php of emlog pro v2.5.7 allows attackers to execute arbitrary code via uploading a crafted PHP file.
published:2025-03-19T16:15:31.827


Instruction: Please provide detailed information about CVE-2025-29770

CVE:CVE-2025-29770
Description:vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. The outlines library is one of the backends used by vLLM to support structured output (a.k.a. guided decoding). Outlines provides an optional cache for its compiled grammars on the local filesystem. This cache has been on by default in vLLM. Outlines is also available by default through the OpenAI compatible API server. The affected code in vLLM is vllm/model_executor/guided_decoding/outlines_logits_processors.py, which unconditionally uses the cache from outlines. A malicious user can send a stream of very short decoding requests with unique schemas, resulting in an addition to the cache for each request. This can result in a Denial of Service if the filesystem runs out of space. Note that even if vLLM was configured to use a different backend by default, it is still possible to choose outlines on a per-request basis using the guided_decoding_backend key of the extra_body field of the request. This issue applies only to the V0 engine and is fixed in 0.8.0.
published:2025-03-19T16:15:31.977


Instruction: Please provide detailed information about CVE-2025-29783

CVE:CVE-2025-29783
Description:vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. When vLLM is configured to use Mooncake, unsafe deserialization exposed directly over ZMQ/TCP on all network interfaces will allow attackers to execute remote code on distributed hosts. This is a remote code execution vulnerability impacting any deployments using Mooncake to distribute KV across distributed hosts. This vulnerability is fixed in 0.8.0.
published:2025-03-19T16:15:32.477


Instruction: Please provide detailed information about CVE-2025-2324

CVE:CVE-2025-2324
Description:Improper Privilege Management vulnerability for users configured as Shared Accounts in Progress MOVEit Transfer (SFTP module) allows Privilege Escalation.This issue affects MOVEit Transfer: from 2023.1.0 before 2023.1.12, from 2024.0.0 before 2024.0.8, from 2024.1.0 before 2024.1.2.
published:2025-03-19T16:15:32.867


Instruction: Please provide detailed information about CVE-2025-30144

CVE:CVE-2025-30144
Description:fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to 5.0.6, the fast-jwt library does not properly validate the iss claim based on the RFC 7519. The iss (issuer) claim validation within the fast-jwt library permits an array of strings as a valid iss value. This design flaw enables a potential attack where a malicious actor crafts a JWT with an iss claim structured as ['https://attacker-domain/', 'https://valid-iss']. Due to the permissive validation, the JWT will be deemed valid. Furthermore, if the application relies on external libraries like get-jwks that do not independently validate the iss claim, the attacker can leverage this vulnerability to forge a JWT that will be accepted by the victim application. Essentially, the attacker can insert their own domain into the iss array, alongside the legitimate issuer, and bypass the intended security checks. This issue is fixed in 5.0.6.
published:2025-03-19T16:15:33.080


Instruction: Please provide detailed information about CVE-2025-30152

CVE:CVE-2025-30152
Description:The Syliud PayPal Plugin is the Sylius Core Team’s plugin for the PayPal Commerce Platform. Prior to 1.6.2, 1.7.2, and 2.0.2, a discovered vulnerability allows users to modify their shopping cart after completing the PayPal Checkout process and payment authorization. If a user initiates a PayPal transaction from a product page or the cart page and then returns to the order summary page, they can still manipulate the cart contents before finalizing the order. As a result, the order amount in Sylius may be higher than the amount actually captured by PayPal, leading to a scenario where merchants deliver products or services without full payment. The issue is fixed in versions: 1.6.2, 1.7.2, 2.0.2 and above.
published:2025-03-19T16:15:33.313


Instruction: Please provide detailed information about CVE-2025-30153

CVE:CVE-2025-30153
Description:kin-openapi is a Go project for handling OpenAPI files. Prior to 0.131.0, when validating a request with a multipart/form-data schema, if the OpenAPI schema allows it, an attacker can upload a crafted ZIP file (e.g., a ZIP bomb), causing the server to consume all available system memory. The root cause comes from the ZipFileBodyDecoder, which is registered automatically by the module (contrary to what the documentation says). This vulnerability is fixed in 0.131.0.
published:2025-03-19T16:15:33.607


Instruction: Please provide detailed information about CVE-2025-30154

CVE:CVE-2025-30154
Description:reviewdog/action-setup is a GitHub action that installs reviewdog. reviewdog/action-setup@v1 was compromised March 11, 2025, between 18:42 and 20:31 UTC, with malicious code added that dumps exposed secrets to Github Actions Workflow Logs. Other reviewdog actions that use `reviewdog/action-setup@v1` that would also be compromised, regardless of version or pinning method, are reviewdog/action-shellcheck, reviewdog/action-composite-template, reviewdog/action-staticcheck, reviewdog/action-ast-grep, and reviewdog/action-typos.
published:2025-03-19T16:15:33.780


Instruction: Please provide detailed information about CVE-2025-30196

CVE:CVE-2025-30196
Description:Jenkins AnchorChain Plugin 1.0 does not limit URL schemes for links it creates based on workspace content, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control the input file for the Anchor Chain post-build step.
published:2025-03-19T16:15:33.950


Instruction: Please provide detailed information about CVE-2025-30197

CVE:CVE-2025-30197
Description:Jenkins Zoho QEngine Plugin 1.0.29.vfa_cc23396502 and earlier does not mask the QEngine API Key form field, increasing the potential for attackers to observe and capture it.
published:2025-03-19T16:15:34.060


Instruction: Please provide detailed information about CVE-2025-0431

CVE:CVE-2025-0431
Description:Enterprise Protection contains a vulnerability in URL rewriting that allows an unauthenticated remote attacker to send an email which bypasses URL protections impacting the integrity of recipient's email.  This occurs due to improper filtering of backslashes within URLs and affects all versions of 8.21, 8.20 and 8.18 prior to 8.21.0 patch 5115, 8.20.6 patch 5114 and 8.18.6 patch 5113 respectively.
published:2025-03-19T17:15:41.217


Instruction: Please provide detailed information about CVE-2025-29118

CVE:CVE-2025-29118
Description:Tenda AC8 V16.03.34.06 was discovered to contain a stack overflow via the src parameter in the function sub_47D878.
published:2025-03-19T17:15:41.377


Instruction: Please provide detailed information about CVE-2025-29405

CVE:CVE-2025-29405
Description:An arbitrary file upload vulnerability in the component /admin/template.php of emlog pro 2.5.0 and pro 2.5.* allows attackers to execute arbitrary code via uploading a crafted PHP file.
published:2025-03-19T18:15:25.023


Instruction: Please provide detailed information about CVE-2025-29924

CVE:CVE-2025-29924
Description:XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, it's possible for an user to get access to private information through the REST API - but could also be through another API - when a sub wiki is using "Prevent unregistered users to view pages". The vulnerability only affects subwikis, and it only concerns specific right options such as "Prevent unregistered users to view pages". or "Prevent unregistered users to edit pages". It's possible to detect the vulnerability by enabling "Prevent unregistered users to view pages" and then trying to access a page through the REST API without using any credentials. The vulnerability has been patched in XWiki 15.10.14, 16.4.6 and 16.10.0RC1.
published:2025-03-19T18:15:25.147


Instruction: Please provide detailed information about CVE-2025-29925

CVE:CVE-2025-29925
Description:XWiki Platform is a generic wiki platform. Prior to 15.10.14, 16.4.6, and 16.10.0-rc-1, protected pages are listed when requesting the REST endpoints /rest/wikis/[wikiName]/pages even if the user doesn't have view rights on them. It's particularly true if the entire wiki is protected with "Prevent unregistered user to view pages": the endpoint would still list the pages of the wiki, though only for the main wiki. The problem has been patched in XWiki 15.10.14, 16.4.6, 16.10.0RC1. In those versions the endpoint can still be requested but the result is filtered out based on pages rights.
published:2025-03-19T18:15:25.300


Instruction: Please provide detailed information about CVE-2025-29926

CVE:CVE-2025-29926
Description:XWiki Platform is a generic wiki platform. Prior to 15.10.15, 16.4.6, and 16.10.0, any user can exploit the WikiManager REST API to create a new wiki, where the user could become an administrator and so performs other attacks on the farm. Note that this REST API is not bundled in XWiki Standard by default: it needs to be installed manually through the extension manager. The problem has been patched in versions 15.10.15, 16.4.6 and 16.10.0 of the REST module.
published:2025-03-19T18:15:25.770


Instruction: Please provide detailed information about CVE-2025-27415

CVE:CVE-2025-27415
Description:Nuxt is an open-source web development framework for Vue.js. Prior to 3.16.0, by sending a crafted HTTP request to a server behind an CDN, it is possible in some circumstances to poison the CDN cache and highly impacts the availability of a site. It is possible to craft a request, such as https://mysite.com/?/_payload.json which will be rendered as JSON. If the CDN in front of a Nuxt site ignores the query string when determining whether to cache a route, then this JSON response could be served to future visitors to the site. An attacker can perform this attack to a vulnerable site in order to make a site unavailable indefinitely. It is also possible in the case where the cache will be reset to make a small script to send a request each X seconds (=caching duration) so that the cache is permanently poisoned making the site completely unavailable. This vulnerability is fixed in 3.16.0.
published:2025-03-19T19:15:47.257


Instruction: Please provide detailed information about CVE-2025-27704

CVE:CVE-2025-27704
Description:There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in.  Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none.
published:2025-03-19T19:15:47.390


Instruction: Please provide detailed information about CVE-2025-2476

CVE:CVE-2025-2476
Description:Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)
published:2025-03-19T19:15:50.447


Instruction: Please provide detailed information about CVE-2025-2536

CVE:CVE-2025-2536
Description:Cross-site scripting (XSS) vulnerability on Liferay Portal 7.4.3.82 through 7.4.3.128, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.13, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 update 82 through update 92 in the Frontend JS module's layout-taglib/__liferay__/index.js allows remote attackers to inject arbitrary web script or HTML via toastData parameter
published:2025-03-19T19:15:50.560


Instruction: Please provide detailed information about CVE-2025-27705

CVE:CVE-2025-27705
Description:There is a cross-site scripting vulnerability in the Secure Access administrative console of Absolute Secure Access prior to version 13.53. Attackers with system administrator permissions can interfere with another system administrator’s use of the management console when the second administrator logs in.  Attack complexity is high, attack requirements are present, privileges required are none, user interaction is required. The impact to confidentiality is low, the impact to availability is none, and the impact to system integrity is none.
published:2025-03-19T20:15:19.727


Instruction: Please provide detailed information about CVE-2025-30258

CVE:CVE-2025-30258
Description:In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks a valid backsig or that has incorrect usage flags, the user loses the ability to verify signatures made from certain other signing keys, aka a "verification DoS."
published:2025-03-19T20:15:20.140


Instruction: Please provide detailed information about CVE-2025-26816

CVE:CVE-2025-26816
Description:A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic potentially allows users with particular permissions under certain conditions to see potentially sensitive data from a different user context.
published:2025-03-19T21:15:38.977


Instruction: Please provide detailed information about CVE-2025-27774

CVE:CVE-2025-27774
Description:Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 156 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the an arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.
published:2025-03-19T21:15:39.240


Instruction: Please provide detailed information about CVE-2025-27775

CVE:CVE-2025-27775
Description:Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 143 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.
published:2025-03-19T21:15:39.360


Instruction: Please provide detailed information about CVE-2025-27776

CVE:CVE-2025-27776
Description:Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) and file write in `model_download.py` (line 240 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with the arbitrary file read CVE-2025-27784 to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. The file write allows for writing files on the server, which can be coupled with other vulnerabilities, for example an unsafe deserialization, to achieve remote code execution on the Applio server. As of time of publication, no known patches are available.
published:2025-03-19T21:15:39.470


Instruction: Please provide detailed information about CVE-2025-27777

CVE:CVE-2025-27777
Description:Applio is a voice conversion tool. Versions 3.2.7 and prior are vulnerable to server-side request forgery (SSRF) in `model_download.py` (line 195 in 3.2.7). The blind SSRF allows for sending requests on behalf of Applio server and can be leveraged to probe for other vulnerabilities on the server itself or on other back-end systems on the internal network, that the Applio server can reach. The blind SSRF can also be coupled with a arbitrary file read (e.g., CVE-2025-27784) to read files from hosts on the internal network, that the Applio server can reach, which would make it a full SSRF. As of time of publication, no known patches are available.
published:2025-03-19T21:15:39.600


Instruction: Please provide detailed information about CVE-2025-27778

CVE:CVE-2025-27778
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `infer.py`. The issue can lead to remote code execution. As of time of publication, a fix is available on the `main` branch of the Applio repository but not attached to a numbered release.
published:2025-03-19T21:15:39.727


Instruction: Please provide detailed information about CVE-2025-27779

CVE:CVE-2025-27779
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in `model_blender.py` lines 20 and 21. `model_fusion_a` and `model_fusion_b` from voice_blender.py take user-supplied input (e.g. a path to a model) and pass that value to the `run_model_blender_script` and later to `model_blender` function, which loads these two models with `torch.load` in `model_blender.py (on lines 20-21 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available on the `main` branch of the Applio repository.
published:2025-03-19T21:15:39.850


Instruction: Please provide detailed information about CVE-2025-27780

CVE:CVE-2025-27780
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in model_information.py. `model_name` in model_information.py takes user-supplied input (e.g. a path to a model) and pass that value to the `run_model_information_script` and later to `model_information` function, which loads that model with `torch.load` in rvc/train/process/model_information.py (on line 16 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available in the `main` branch of the repository.
published:2025-03-19T21:15:39.980


Instruction: Please provide detailed information about CVE-2025-27781

CVE:CVE-2025-27781
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to unsafe deserialization in inference.py. `model_file` in inference.py as well as `model_file` in tts.py take user-supplied input (e.g. a path to a model) and pass that value to the `change_choices` and later to `get_speakers_id` function, which loads that model with `torch.load` in inference.py (line 326 in 3.2.8-bugfix), which is vulnerable to unsafe deserialization. The issue can lead to remote code execution. A patch is available on the `main` branch of the repository.
published:2025-03-19T21:15:40.117


Instruction: Please provide detailed information about CVE-2025-27782

CVE:CVE-2025-27782
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in inference.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.267


Instruction: Please provide detailed information about CVE-2025-27783

CVE:CVE-2025-27783
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file write in train.py. This issue may lead to writing arbitrary files on the Applio server. It can also be used in conjunction with an unsafe deserialization to achieve remote code execution. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.397


Instruction: Please provide detailed information about CVE-2025-27784

CVE:CVE-2025-27784
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_pth` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files from servers on the internal network that the Applio server has access to. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.523


Instruction: Please provide detailed information about CVE-2025-27785

CVE:CVE-2025-27785
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file read in train.py's `export_index` function. This issue may lead to reading arbitrary files on the Applio server. It can also be used in conjunction with blind server-side request forgery to read files from servers on the internal network that the Applio server has access to. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.650


Instruction: Please provide detailed information about CVE-2025-27786

CVE:CVE-2025-27786
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py. `output_tts_path` in tts.py takes arbitrary user input and passes it to `run_tts_script` function in core.py, which checks if the path in `output_tts_path` exists, and if yes, removes that path, which leads to arbitrary file removal. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.787


Instruction: Please provide detailed information about CVE-2025-27787

CVE:CVE-2025-27787
Description:Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to denial of service (DoS) in restart.py. `model_name` in train.py takes user input, and passes it to the `stop_train` function in restart.py, which uses it construct a path to a folder with `config.json`. That `config.json` is opened and the list of values under "process_pids" are read. Next all the process IDs listed in the JSON are killed. Using one of the arbitrary file writes, one can  write to `logs/foobar` a `config.json` file, which contains a list of process IDs. Then one can access this endpoint to kill these processes. Since an attacker can't know what process is running on which process ID, they can send a list of hundreds of process IDs, which can kill the process that applio is using to run, as well as other, potentially important processes, which leads to DoS. Note that constructing a path with user input also enables path traversal. For example, by supplying "../../" in `model_name` one can access `config.json` freom locations two folders down on the server. As of time of publication, no known patches are available.
published:2025-03-19T21:15:40.923


Instruction: Please provide detailed information about CVE-2025-30092

CVE:CVE-2025-30092
Description:Intrexx Portal Server 12.x <= 12.0.2 and 11.x <= 11.9.2 allows XSS in multiple Velocity scripts.
published:2025-03-19T21:15:41.293


Instruction: Please provide detailed information about CVE-2025-1628

CVE:CVE-2025-1628
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-03-19T23:15:12.783


Instruction: Please provide detailed information about CVE-2025-30259

CVE:CVE-2025-30259
Description:The WhatsApp cloud service before late 2024 did not block certain crafted PDF content that can defeat a sandbox protection mechanism and consequently allow remote access to messaging applications by third parties, as exploited in the wild in 2024 for installation of Android malware associated with BIGPRETZEL.
published:2025-03-20T00:15:13.780


Instruction: Please provide detailed information about CVE-2025-1314

CVE:CVE-2025-1314
Description:The Custom Twitter Feeds – A Tweets Widget or X Feed Widget plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.5. This is due to missing or incorrect nonce validation on the ctf_clear_cache_admin() function. This makes it possible for unauthenticated attackers to reset the plugin's cache via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.
published:2025-03-20T06:15:22.437


Instruction: Please provide detailed information about CVE-2025-1766

CVE:CVE-2025-1766
Description:The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'payment_complete' function in all versions up to, and including, 4.0.24. This makes it possible for unauthenticated attackers to update the status of ticket payments to 'completed', possibly resulting in financial loss.
published:2025-03-20T06:15:22.740


Instruction: Please provide detailed information about CVE-2025-1770

CVE:CVE-2025-1770
Description:The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 4.0.24 via the 'style' parameter. This makes it possible for authenticated attackers, with Contributor-level access and above, to include and execute arbitrary files on the server, allowing the execution of any PHP code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
published:2025-03-20T06:15:22.903


Instruction: Please provide detailed information about CVE-2025-22228

CVE:CVE-2025-22228
Description:BCryptPasswordEncoder.matches(CharSequence,String) will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same.
published:2025-03-20T06:15:23.087


Instruction: Please provide detailed information about CVE-2025-2108

CVE:CVE-2025-2108
Description:The 140+ Widgets | Xpro Addons For Elementor – FREE plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘Site Title’ widget's 'title_tag' and 'html_tag' parameters in all versions up to, and including, 1.4.6.8 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
published:2025-03-20T07:15:38.187


Instruction: Please provide detailed information about CVE-2025-1385

CVE:CVE-2025-1385
Description:When the library bridge feature is enabled, the clickhouse-library-bridge exposes an HTTP API on localhost. This allows clickhouse-server to dynamically load a library from a specified path and execute it in an isolated process. Combined with the ClickHouse table engine functionality that permits file uploads to specific directories, a misconfigured server can be exploited by an attacker with privilege to access to both table engines to execute arbitrary code on the ClickHouse server.  You can check if your ClickHouse server is vulnerable to this vulnerability by inspecting the configuration file and confirming if the following setting is enabled:  <library_bridge>    <port>9019</port> </library_bridge>
published:2025-03-20T08:15:11.723


Instruction: Please provide detailed information about CVE-2025-2505

CVE:CVE-2025-2505
Description:The Age Gate plugin for WordPress is vulnerable to Local PHP File Inclusion in all versions up to, and including, 3.5.3 via the 'lang' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary PHP files on the server, allowing the execution of code in those files. This can be used to bypass access controls, obtain sensitive data, or achieve code execution in cases where images and other “safe” file types can be uploaded and included.
published:2025-03-20T08:15:11.873


Instruction: Please provide detailed information about CVE-2025-0182

CVE:CVE-2025-0182
Description:A vulnerability in danswer-ai/danswer version 0.9.0 allows for denial of service through memory exhaustion. The issue arises from the use of a vulnerable version of the starlette package (<=0.49) via fastapi, which was patched in fastapi version 0.115.3. The vulnerability can be exploited by sending multiple requests to the /auth/saml/callback endpoint, leading to uncontrolled memory consumption and eventual denial of service.
published:2025-03-20T10:15:50.910


Instruction: Please provide detailed information about CVE-2025-0183

CVE:CVE-2025-0183
Description:A stored cross-site scripting (XSS) vulnerability exists in the Latex Proof-Reading Module of binary-husky/gpt_academic version 3.9.0. This vulnerability allows an attacker to inject malicious scripts into the `debug_log.html` file generated by the module. When an admin visits this debug report, the injected scripts can execute, potentially leading to unauthorized actions and data access.
published:2025-03-20T10:15:51.033


Instruction: Please provide detailed information about CVE-2025-0184

CVE:CVE-2025-0184
Description:A Server-Side Request Forgery (SSRF) vulnerability was identified in langgenius/dify version 0.10.2. The vulnerability occurs in the 'Create Knowledge' section when uploading DOCX files. If an external relationship exists in the DOCX file, the reltype value is requested as a URL using the 'requests' module instead of the 'ssrf_proxy', leading to an SSRF vulnerability. This issue was fixed in version 0.11.0.
published:2025-03-20T10:15:51.173


Instruction: Please provide detailed information about CVE-2025-0185

CVE:CVE-2025-0185
Description:A vulnerability in the Dify Tools' Vanna module of the langgenius/dify repository allows for a Pandas Query Injection in the latest version. The vulnerability occurs in the function `vn.get_training_plan_generic(df_information_schema)`, which does not properly sanitize user inputs before executing queries using the Pandas library. This can potentially lead to Remote Code Execution (RCE) if exploited.
published:2025-03-20T10:15:51.293


Instruction: Please provide detailed information about CVE-2025-0187

CVE:CVE-2025-0187
Description:A Denial of Service (DoS) vulnerability was discovered in the file upload feature of gradio-app/gradio version 0.39.1. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
published:2025-03-20T10:15:51.413


Instruction: Please provide detailed information about CVE-2025-0188

CVE:CVE-2025-0188
Description:A Server-Side Request Forgery (SSRF) vulnerability was discovered in gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability allows an attacker to construct a response link by saving the response in a folder named after the SHA-1 hash of the target URL. This enables the attacker to access the response directly, potentially leading to unauthorized access to internal systems, data theft, service disruption, or further attacks such as port scanning and accessing metadata endpoints.
published:2025-03-20T10:15:51.533


Instruction: Please provide detailed information about CVE-2025-0189

CVE:CVE-2025-0189
Description:In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large image, leading to a denial of service condition.
published:2025-03-20T10:15:51.660


Instruction: Please provide detailed information about CVE-2025-0190

CVE:CVE-2025-0190
Description:In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.
published:2025-03-20T10:15:51.780


Instruction: Please provide detailed information about CVE-2025-0191

CVE:CVE-2025-0191
Description:A Denial of Service (DoS) vulnerability exists in the file upload feature of gaizhenbiao/chuanhuchatgpt version 20240914. The vulnerability is due to improper handling of form-data with a large filename in the file upload request. By sending a payload with an excessively large filename, the server becomes overwhelmed and unresponsive, leading to unavailability for legitimate users.
published:2025-03-20T10:15:51.907


Instruction: Please provide detailed information about CVE-2025-0192

CVE:CVE-2025-0192
Description:A stored Cross-site Scripting (XSS) vulnerability exists in the latest version of wandb/openui. The vulnerability is present in the edit HTML functionality, where an attacker can inject malicious scripts. When the modified HTML is shared with another user, the XSS payload executes, potentially leading to the theft of user prompt history and other sensitive information.
published:2025-03-20T10:15:52.033


Instruction: Please provide detailed information about CVE-2025-0281

CVE:CVE-2025-0281
Description:A stored cross-site scripting (XSS) vulnerability exists in lunary-ai/lunary versions 1.6.7 and earlier. An attacker can inject malicious JavaScript into the SAML IdP XML metadata, which is used to generate the SAML login redirect URL. This URL is then set as the value of `window.location.href` without proper validation or sanitization. This vulnerability allows the attacker to execute arbitrary JavaScript in the context of the user's browser, potentially leading to session hijacking, data theft, or other malicious actions. The issue is fixed in version 1.7.10.
published:2025-03-20T10:15:52.153


Instruction: Please provide detailed information about CVE-2025-0312

CVE:CVE-2025-0312
Description:A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a customized GGUF model file that, when uploaded and created on the Ollama server, can cause a crash due to an unchecked null pointer dereference. This can lead to a Denial of Service (DoS) attack via remote network.
published:2025-03-20T10:15:52.280


Instruction: Please provide detailed information about CVE-2025-0313

CVE:CVE-2025-0313
Description:A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to create a GGUF model that can cause a denial of service (DoS) attack. The vulnerability is due to improper validation of array index bounds in the GGUF model handling code, which can be exploited via a remote network.
published:2025-03-20T10:15:52.403


Instruction: Please provide detailed information about CVE-2025-0315

CVE:CVE-2025-0315
Description:A vulnerability in ollama/ollama <=0.3.14 allows a malicious user to create a customized GGUF model file, upload it to the Ollama server, and create it. This can cause the server to allocate unlimited memory, leading to a Denial of Service (DoS) attack.
published:2025-03-20T10:15:52.530


Instruction: Please provide detailed information about CVE-2025-0317

CVE:CVE-2025-0317
Description:A vulnerability in ollama/ollama versions <=0.3.14 allows a malicious user to upload and create a customized GGUF model file on the Ollama server. This can lead to a division by zero error in the ggufPadding function, causing the server to crash and resulting in a Denial of Service (DoS) attack.
published:2025-03-20T10:15:52.647


Instruction: Please provide detailed information about CVE-2025-0330

CVE:CVE-2025-0330
Description:In berriai/litellm version v1.52.1, an issue in proxy_server.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfuse_secret and langfuse_public_key, which can provide full access to the Langfuse project storing all requests.
published:2025-03-20T10:15:52.763


Instruction: Please provide detailed information about CVE-2025-0452

CVE:CVE-2025-0452
Description:eosphoros-ai/DB-GPT version latest is vulnerable to arbitrary file deletion on Windows systems via the '/v1/agent/hub/update' endpoint. The application fails to properly filter the '\' character, which is commonly used as a separator in Windows paths. This vulnerability allows attackers to delete any files on the host system by manipulating the 'plugin_repo_name' variable.
published:2025-03-20T10:15:52.890


Instruction: Please provide detailed information about CVE-2025-0453

CVE:CVE-2025-0453
Description:In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.
published:2025-03-20T10:15:53.017


Instruction: Please provide detailed information about CVE-2025-0454

CVE:CVE-2025-0454
Description:A Server-Side Request Forgery (SSRF) vulnerability was identified in the Requests utility of significant-gravitas/autogpt versions prior to v0.4.0. The vulnerability arises due to a hostname confusion between the `urlparse` function from the `urllib.parse` library and the `requests` library. A malicious user can exploit this by submitting a specially crafted URL, such as `http://localhost:\@google.com/../`, to bypass the SSRF check and perform an SSRF attack.
published:2025-03-20T10:15:53.157


Instruction: Please provide detailed information about CVE-2025-0508

CVE:CVE-2025-0508
Description:A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.
published:2025-03-20T10:15:53.283


Instruction: Please provide detailed information about CVE-2025-0628

CVE:CVE-2025-0628
Description:An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internal_user_viewer' logs into the application, they are provided with an overly privileged API key. This key can be used to access all the admin functionality of the application, including endpoints such as '/users/list' and '/users/get_users'. This vulnerability allows for privilege escalation within the application, enabling any account to become a PROXY ADMIN.
published:2025-03-20T10:15:53.407


Instruction: Please provide detailed information about CVE-2025-0655

CVE:CVE-2025-0655
Description:A vulnerability in man-group/dtale versions 3.15.1 allows an attacker to override global state settings to enable the `enable_custom_filters` feature, which is typically restricted to trusted environments. Once enabled, the attacker can exploit the /test-filter endpoint to execute arbitrary system commands, leading to remote code execution (RCE). This issue is addressed in version 3.16.1.
published:2025-03-20T10:15:53.533


Instruction: Please provide detailed information about CVE-2025-1040

CVE:CVE-2025-1040
Description:AutoGPT versions 0.3.4 and earlier are vulnerable to a Server-Side Template Injection (SSTI) that could lead to Remote Code Execution (RCE). The vulnerability arises from the improper handling of user-supplied format strings in the `AgentOutputBlock` implementation, where malicious input is passed to the Jinja2 templating engine without adequate security measures. Attackers can exploit this flaw to execute arbitrary commands on the host system. The issue is fixed in version 0.4.0.
published:2025-03-20T10:15:53.653


Instruction: Please provide detailed information about CVE-2025-1451

CVE:CVE-2025-1451
Description:A vulnerability in parisneo/lollms-webui v13 arises from the server's handling of multipart boundaries in file uploads. The server does not limit or validate the length of the boundary or the characters appended to it, allowing an attacker to craft requests with excessively long boundaries, leading to resource exhaustion and eventual denial of service (DoS). Despite an attempted patch in commit 483431bb, which blocked hyphen characters from being appended to the multipart boundary, the fix is insufficient. The server remains vulnerable if other characters (e.g., '4', 'a') are used instead of hyphens. This allows attackers to exploit the vulnerability using different characters, causing resource exhaustion and service unavailability.
published:2025-03-20T10:15:53.777


Instruction: Please provide detailed information about CVE-2025-1473

CVE:CVE-2025-1473
Description:A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.
published:2025-03-20T10:15:53.903


Instruction: Please provide detailed information about CVE-2025-1474

CVE:CVE-2025-1474
Description:In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user account management. The issue is fixed in version 2.19.0.
published:2025-03-20T10:15:54.037


Instruction: Please provide detailed information about CVE-2025-1796

CVE:CVE-2025-1796
Description:A vulnerability in langgenius/dify v0.10.1 allows an attacker to take over any account, including administrator accounts, by exploiting a weak pseudo-random number generator (PRNG) used for generating password reset codes. The application uses `random.randint` for this purpose, which is not suitable for cryptographic use and can be cracked. An attacker with access to workflow tools can extract the PRNG output and predict future password reset codes, leading to a complete compromise of the application.
published:2025-03-20T10:15:54.157


Instruction: Please provide detailed information about CVE-2025-1802

CVE:CVE-2025-1802
Description:The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘marker_title’, 'notification_content', and 'stt_button_text' parameters in all versions up to, and including, 2.8.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. The vulnerability was partially patched in version 2.8.3.
published:2025-03-20T12:15:14.413


Instruction: Please provide detailed information about CVE-2025-27888

CVE:CVE-2025-27888
Description:Severity: medium (5.8) / important  Server-Side Request Forgery (SSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Druid.  This issue affects all previous Druid versions.   When using the Druid management proxy, a request that has a specially crafted URL could be used to redirect the request to an arbitrary server instead. This has the potential for XSS or XSRF. The user is required to be authenticated for this exploit. The management proxy is enabled in Druid's out-of-box configuration. It may be disabled to mitigate this vulnerability. If the management proxy is disabled, some web console features will not work properly, but core functionality is unaffected.   Users are recommended to upgrade to Druid 31.0.2 or Druid 32.0.1, which fixes the issue.
published:2025-03-20T12:15:14.563


Instruction: Please provide detailed information about CVE-2025-2311

CVE:CVE-2025-2311
Description:Incorrect Use of Privileged APIs, Cleartext Transmission of Sensitive Information, Insufficiently Protected Credentials vulnerability in Sechard Information Technologies SecHard allows Authentication Bypass, Interface Manipulation, Authentication Abuse, Harvesting Information via API Event Monitoring.This issue affects SecHard: before 3.3.0.20220411.
published:2025-03-20T12:15:14.750


Instruction: Please provide detailed information about CVE-2025-2539

CVE:CVE-2025-2539
Description:The File Away plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the ajax() function in all versions up to, and including, 3.9.9.0.1. This makes it possible for unauthenticated attackers, leveraging the use of a reversible weak algorithm,  to read the contents of arbitrary files on the server, which can contain sensitive information.
published:2025-03-20T12:15:14.900


Instruction: Please provide detailed information about CVE-2025-29101

CVE:CVE-2025-29101
Description:Tenda AC8V4.0 V16.03.34.06 was discovered to contain a stack overflow via the deviceid parameter in the get_parentControl_list_Info function.
published:2025-03-20T13:15:36.467


Instruction: Please provide detailed information about CVE-2025-0254

CVE:CVE-2025-0254
Description:HCL Digital Experience components Ring API and dxclient may be vulnerable to man-in-the-middle (MitM) attacks prior to 9.5 CF226.  An attacker could intercept and potentially alter communication between two parties.
published:2025-03-20T14:15:22.493


Instruction: Please provide detailed information about CVE-2025-1496

CVE:CVE-2025-1496
Description:Improper Restriction of Excessive Authentication Attempts vulnerability in BG-TEK Coslat Hotspot allows Password Brute Forcing, Authentication Abuse.This issue affects Coslat Hotspot: before 6.26.0.R.20250227.
published:2025-03-20T14:15:22.920


Instruction: Please provide detailed information about CVE-2025-29410

CVE:CVE-2025-29410
Description:A cross-site scripting (XSS) vulnerability in the component /contact.php of Hospital Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the txtEmail parameter.
published:2025-03-20T14:15:24.540


Instruction: Please provide detailed information about CVE-2025-29412

CVE:CVE-2025-29412
Description:A cross-site scripting (XSS) vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter.
published:2025-03-20T14:15:24.653


Instruction: Please provide detailed information about CVE-2025-29411

CVE:CVE-2025-29411
Description:An arbitrary file upload vulnerability in the Client Profile Update section of Mart Developers iBanking v2.0.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.
published:2025-03-20T15:15:46.050


Instruction: Please provide detailed information about CVE-2025-2546

CVE:CVE-2025-2546
Description:A vulnerability classified as problematic was found in D-Link DIR-618 and DIR-605L 2.02/3.02. This vulnerability affects unknown code of the file /goform/formAdvFirewall of the component Firewall Service. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T15:15:46.420


Instruction: Please provide detailed information about CVE-2025-23120

CVE:CVE-2025-23120
Description:A vulnerability allowing remote code execution (RCE) for domain users.
published:2025-03-20T16:15:16.380


Instruction: Please provide detailed information about CVE-2025-29214

CVE:CVE-2025-29214
Description:Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_42F69C function at /goform/setMacFilterCfg.
published:2025-03-20T16:15:16.493


Instruction: Please provide detailed information about CVE-2025-2547

CVE:CVE-2025-2547
Description:A vulnerability, which was classified as problematic, has been found in D-Link DIR-618 and DIR-605L 2.02/3.02. This issue affects some unknown processing of the file /goform/formAdvNetwork. The manipulation leads to improper access controls. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T16:15:16.607


Instruction: Please provide detailed information about CVE-2025-2548

CVE:CVE-2025-2548
Description:A vulnerability, which was classified as problematic, was found in D-Link DIR-618 and DIR-605L 2.02/3.02. Affected is an unknown function of the file /goform/formSetDomainFilter. The manipulation leads to improper access controls. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T16:15:16.810


Instruction: Please provide detailed information about CVE-2025-29121

CVE:CVE-2025-29121
Description:A vulnerability was found in Tenda AC6 V15.03.05.16. The vulnerability affects the functionality of the /goform/fast_setting_wifi_set file form_fast_setting_wifi_set. Using the timeZone parameter causes a stack-based buffer overflow.
published:2025-03-20T17:15:38.267


Instruction: Please provide detailed information about CVE-2025-29149

CVE:CVE-2025-29149
Description:Tenda i12 V1.0.0.10(3805) was discovered to contain a buffer overflow via the ping1 parameter in the formSetAutoPing function.
published:2025-03-20T17:15:38.383


Instruction: Please provide detailed information about CVE-2025-2480

CVE:CVE-2025-2480
Description:Santesoft Sante DICOM Viewer Pro is vulnerable to an out-of-bounds write, which requires a user to open a malicious DCM file, resulting in execution of arbitrary code by a local attacker.
published:2025-03-20T17:15:38.523


Instruction: Please provide detailed information about CVE-2025-2549

CVE:CVE-2025-2549
Description:A vulnerability has been found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/formSetPassword. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T17:15:38.693


Instruction: Please provide detailed information about CVE-2025-2550

CVE:CVE-2025-2550
Description:A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/formSetDDNS of the component DDNS Service. The manipulation leads to improper access controls. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T17:15:38.903


Instruction: Please provide detailed information about CVE-2025-2551

CVE:CVE-2025-2551
Description:A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been classified as problematic. This affects an unknown part of the file /goform/formSetPortTr. The manipulation leads to improper access controls. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T17:15:39.090


Instruction: Please provide detailed information about CVE-2025-2552

CVE:CVE-2025-2552
Description:A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/formTcpipSetup. The manipulation leads to improper access controls. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T17:15:39.283


Instruction: Please provide detailed information about CVE-2025-2565

CVE:CVE-2025-2565
Description:The data exposure vulnerability in Liferay Portal 7.4.0 through 7.4.3.126, and Liferay DXP 2024.Q3.0, 2024.Q2.0 through 2024.Q2.12, 2024.Q1.1 through 2024.Q1.12, 2023.Q4.0 through 2023.Q4.10, 2023.Q3.1 through 2023.Q3.10, 7.4 GA through update 92 allows an unauthorized user to obtain entry data from forms.
published:2025-03-20T17:15:39.450


Instruction: Please provide detailed information about CVE-2025-29215

CVE:CVE-2025-29215
Description:Tenda AX12 v22.03.01.46_CN was discovered to contain a stack overflow via the sub_43fdcc function at /goform/SetNetControlList.
published:2025-03-20T18:15:18.790


Instruction: Please provide detailed information about CVE-2025-29914

CVE:CVE-2025-29914
Description:OWASP Coraza WAF is a golang modsecurity compatible web application firewall library. Prior to 3.3.3, if a request is made on an URI starting with //, coraza will set a wrong value in REQUEST_FILENAME. For example, if the URI //bar/uploads/foo.php?a=b is passed to coraza: , REQUEST_FILENAME will be set to /uploads/foo.php. This can lead to a rules bypass. This vulnerability is fixed in 3.3.3.
published:2025-03-20T18:15:18.907


Instruction: Please provide detailed information about CVE-2025-29922

CVE:CVE-2025-29922
Description:kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kubernetes and container workloads. Prior to 0.26.3, the identified vulnerability allows creating or deleting an object via the APIExport VirtualWorkspace in any arbitrary target workspace for pre-existing resources. By design, this should only be allowed when the workspace owner decides to give access to an API provider by creating an APIBinding. With this vulnerability, it is possible for an attacker to create and delete objects even if none of these requirements are satisfied, i.e. even if there is no APIBinding in that workspace at all or the workspace owner has created an APIBinding, but rejected a permission claim. A fix for this issue has been identified and has been published with kcp 0.26.3 and 0.27.0.
published:2025-03-20T18:15:19.063


Instruction: Please provide detailed information about CVE-2025-29923

CVE:CVE-2025-29923
Description:go-redis is the official Redis client library for the Go programming language. Prior to 9.5.5, 9.6.3, and 9.7.3, go-redis potentially responds out of order when `CLIENT SETINFO` times out during connection establishment. This can happen when the client is configured to transmit its identity, there are network connectivity issues, or the client was configured with aggressive timeouts. The problem occurs for multiple use cases. For sticky connections, you receive persistent out-of-order responses for the lifetime of the connection. All commands in the pipeline receive incorrect responses. When used with the default ConnPool once a connection is returned after use with ConnPool#Put the read buffer will be checked and the connection will be marked as bad due to the unread data. This means that at most one out-of-order response before the connection is discarded. This issue is fixed in 9.5.5, 9.6.3, and 9.7.3. You can prevent the vulnerability by setting the flag DisableIndentity to true when constructing the client instance.
published:2025-03-20T18:15:19.230


Instruction: Please provide detailed information about CVE-2025-2553

CVE:CVE-2025-2553
Description:A vulnerability was found in D-Link DIR-618 and DIR-605L 2.02/3.02. It has been rated as problematic. This issue affects some unknown processing of the file /goform/formVirtualServ. The manipulation leads to improper access controls. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. This vulnerability only affects products that are no longer supported by the maintainer.
published:2025-03-20T18:15:19.973


Instruction: Please provide detailed information about CVE-2025-2555

CVE:CVE-2025-2555
Description:A vulnerability classified as problematic has been found in Audi Universal Traffic Recorder App 2.0. Affected is an unknown function of the component FTP Credentials. The manipulation leads to use of hard-coded password. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.
published:2025-03-20T18:15:20.197


Instruction: Please provide detailed information about CVE-2025-2556

CVE:CVE-2025-2556
Description:A vulnerability classified as problematic was found in Audi UTR Dashcam 2.0. Affected by this vulnerability is an unknown functionality of the component Video Stream Handler. The manipulation leads to hard-coded credentials. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.
published:2025-03-20T18:15:20.400


Instruction: Please provide detailed information about CVE-2025-29217

CVE:CVE-2025-29217
Description:Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiSSID parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
published:2025-03-20T19:15:37.680


Instruction: Please provide detailed information about CVE-2025-29218

CVE:CVE-2025-29218
Description:Tenda W18E v2.0 v16.01.0.11 was discovered to contain a stack overflow in the wifiPwd parameter at /goform/setModules. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted POST request.
published:2025-03-20T19:15:37.790


Instruction: Please provide detailed information about CVE-2025-29980

CVE:CVE-2025-29980
Description:A SQL injection issue has been discovered in eTRAKiT.net release 3.2.1.77. Due to improper input validation, a remote unauthenticated attacker can run arbitrary commands as the current MS SQL server account. It is recommended that the CRM feature is turned off while on eTRAKiT.net release 3.2.1.77. eTRAKiT.Net is no longer supported, and users are recommended to migrate to the latest version of CentralSquare Community Development.
published:2025-03-20T19:15:38.080


Instruction: Please provide detailed information about CVE-2025-2557

CVE:CVE-2025-2557
Description:A vulnerability, which was classified as critical, has been found in Audi UTR Dashcam 2.0. Affected by this issue is some unknown functionality of the component Command API. The manipulation leads to improper access controls. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. Upgrading to version 2.89 and 2.90 is able to address this issue. It is recommended to upgrade the affected component. The vendor was contacted early about these issues and acted very professional. Version 2.89 is fixing this issue for new customers and 2.90 is going to fix it for existing customers.
published:2025-03-20T19:15:38.220


Instruction: Please provide detailed information about CVE-2025-30160

CVE:CVE-2025-30160
Description:Redlib is an alternative private front-end to Reddit. A vulnerability has been identified in Redlib where an attacker can cause a denial-of-service (DOS) condition by submitting a specially crafted base2048-encoded DEFLATE decompression bomb to the restore_preferences form. This leads to excessive memory consumption and potential system instability, which can be exploited to disrupt Redlib instances. This vulnerability is fixed in 0.36.0.
published:2025-03-20T19:15:38.383


Instruction: Please provide detailed information about CVE-2025-26852

CVE:CVE-2025-26852
Description:DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 allows SQL Injection.
published:2025-03-20T20:15:32.497


Instruction: Please provide detailed information about CVE-2025-26853

CVE:CVE-2025-26853
Description:DESCOR INFOCAD 3.5.1 and before and fixed in v.3.5.2.0 has a broken authorization schema.
published:2025-03-20T20:15:32.640


Instruction: Please provide detailed information about CVE-2025-25758

CVE:CVE-2025-25758
Description:An issue in KukuFM Android v1.12.7 (11207) allows attackers to access sensitive cleartext data via the android:allowBackup="true" in the ANdroidManifest.xml
published:2025-03-20T21:15:23.180


Instruction: Please provide detailed information about CVE-2025-2538

CVE:CVE-2025-2538
Description:A hardcoded credential vulnerability exists in a specific deployment pattern for Esri Portal for ArcGIS versions 11.4 and below that may allow a remote authenticated attacker to gain administrative access to the system.
published:2025-03-20T21:15:23.730


Instruction: Please provide detailed information about CVE-2025-2574

CVE:CVE-2025-2574
Description:Out-of-bounds array write in Xpdf 4.05 and earlier, due to incorrect integer overflow checking in the PostScript function interpreter code.
published:2025-03-20T21:15:23.880


Instruction: Please provide detailed information about CVE-2025-30334

CVE:CVE-2025-30334
Description:In OpenBSD 7.6 before errata 006 and OpenBSD 7.5 before errata 015, traffic sent over wg(4) could result in kernel crash.
published:2025-03-20T21:15:24.063


Instruction: Please provide detailed information about CVE-2025-2198

CVE:CVE-2025-2198
Description:Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
published:2025-03-20T23:15:12.520


Instruction: Please provide detailed information about CVE-2025-29807

CVE:CVE-2025-29807
Description:Deserialization of untrusted data in Microsoft Dataverse allows an authorized attacker to execute code over a network.
published:2025-03-21T01:15:17.070


Instruction: Please provide detailed information about CVE-2025-29814

CVE:CVE-2025-29814
Description:Improper authorization in Microsoft Partner Center allows an authorized attacker to elevate privileges over a network.
published:2025-03-21T01:15:17.253


Instruction: Please provide detailed information about CVE-2025-2585

CVE:CVE-2025-2585
Description:EBM Maintenance Center From EBM Technologies has a SQL Injection vulnerability, allowing remote attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents.
published:2025-03-21T02:15:12.073


Instruction: Please provide detailed information about CVE-2025-26336

CVE:CVE-2025-26336
Description:Dell Chassis Management Controller Firmware for Dell PowerEdge FX2, version(s) prior to 2.40.200.202101130302, and Dell Chassis Management Controller Firmware for Dell PowerEdge VRTX version(s) prior to 3.41.200.202209300499, contain(s) a Stack-based Buffer Overflow vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
published:2025-03-21T03:15:12.000


Instruction: Please provide detailed information about CVE-2025-2581

CVE:CVE-2025-2581
Description:A vulnerability has been found in xmedcon 0.25.0 and classified as problematic. Affected by this vulnerability is the function malloc of the component DICOM File Handler. The manipulation leads to integer underflow. The attack can be launched remotely. Upgrading to version 0.25.1 is able to address this issue. It is recommended to upgrade the affected component.
published:2025-03-21T05:15:38.280


Instruction: Please provide detailed information about CVE-2025-30342

CVE:CVE-2025-30342
Description:An XSS issue was discovered in OpenSlides before 4.2.5. When submitting descriptions such as Moderator Notes or Agenda Topics, an editor is shown that allows one to format the submitted text. This allows insertion of various HTML elements. When trying to insert a SCRIPT element, it is properly encoded when reflected; however, adding attributes to links is possible, which allows the injection of JavaScript via the onmouseover attribute and others. When a user moves the mouse over such a prepared link, JavaScript is executed in that user's session.
published:2025-03-21T06:15:26.510


Instruction: Please provide detailed information about CVE-2025-30343

CVE:CVE-2025-30343
Description:A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and organized in folders. The interface allows users to download a ZIP archive that contains all files in a folder and its subfolders. If an attacker specifies the title of a file or folder as a relative or absolute path (e.g., ../../../etc/passwd), the ZIP archive generated for download converts that title into a path. Depending on the extraction tool used by the user, this might overwrite files locally outside of the chosen directory.
published:2025-03-21T06:15:26.700


Instruction: Please provide detailed information about CVE-2025-30344

CVE:CVE-2025-30344
Description:An issue was discovered in OpenSlides before 4.2.5. During login at the /system/auth/login/ endpoint, the system's response times differ depending on whether a user exists in the system. The timing discrepancy stems from the omitted hashing of the password (e.g., more than 100 milliseconds).
published:2025-03-21T06:15:26.900


Instruction: Please provide detailed information about CVE-2025-30345

CVE:CVE-2025-30345
Description:An issue was discovered in OpenSlides before 4.2.5. When creating new chats via the chat_group.create action, the user is able to specify the name of the chat. Some HTML elements such as SCRIPT are filtered, whereas others are not. In most cases, HTML entities are encoded properly, but not when deleting chats or deleting messages in these chats. This potentially allows attackers to interfere with the layout of the rendered website, but it is unlikely that victims would click on deleted chats or deleted messages.
published:2025-03-21T06:15:27.090


Instruction: Please provide detailed information about CVE-2025-2582

CVE:CVE-2025-2582
Description:A vulnerability was found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this issue is some unknown functionality of the file ManageAttachments.php. The manipulation of the argument Notice leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
published:2025-03-21T07:15:36.953


Instruction: Please provide detailed information about CVE-2025-2583

CVE:CVE-2025-2583
Description:A vulnerability was found in SimpleMachines SMF 2.1.4. It has been classified as problematic. This affects an unknown part of the file ManageNews.php. The manipulation of the argument subject/message leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure.
published:2025-03-21T07:15:37.157


Instruction: Please provide detailed information about CVE-2025-30346

CVE:CVE-2025-30346
Description:Varnish Cache before 7.6.2 and Varnish Enterprise before 6.0.13r10 allow client-side desync via HTTP/1 requests.
published:2025-03-21T07:15:37.350


Instruction: Please provide detailed information about CVE-2025-30347

CVE:CVE-2025-30347
Description:Varnish Enterprise before 6.0.13r13 allows remote attackers to obtain sensitive information via an out-of-bounds read for range requests on ephemeral MSE4 stevedore objects.
published:2025-03-21T07:15:37.527


Instruction: Please provide detailed information about CVE-2025-30348

CVE:CVE-2025-30348
Description:encodeText in QDom in Qt before 6.8.0 has a complex algorithm involving XML string copy and inline replacement of parts of a string (with relocation of later data).
published:2025-03-21T07:15:37.673


Instruction: Please provide detailed information about CVE-2025-2584

CVE:CVE-2025-2584
Description:A vulnerability was found in WebAssembly wabt 1.0.36. It has been declared as critical. This vulnerability affects the function BinaryReaderInterp::GetReturnCallDropKeepCount of the file wabt/src/interp/binary-reader-interp.cc. The manipulation leads to heap-based buffer overflow. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used.
published:2025-03-21T08:15:11.273


Instruction: Please provide detailed information about CVE-2025-24920

CVE:CVE-2025-24920
Description:Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to restrict bookmark creation and updates in archived channels, which allows authenticated users created or update bookmarked in archived channels
published:2025-03-21T09:15:12.633


Instruction: Please provide detailed information about CVE-2025-25068

CVE:CVE-2025-25068
Description:Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8, 10.5.x <= 10.5.0 fail to enforce MFA on plugin endpoints, which allows authenticated attackers to bypass MFA protections via API requests to plugin-specific routes.
published:2025-03-21T09:15:12.817


Instruction: Please provide detailed information about CVE-2025-25274

CVE:CVE-2025-25274
Description:Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to restrict command execution in archived channels, which allows authenticated users to run commands in archived channels.
published:2025-03-21T09:15:12.960


Instruction: Please provide detailed information about CVE-2025-27715

CVE:CVE-2025-27715
Description:Mattermost versions 9.11.x <= 9.11.8 fail to prompt for explicit approval before adding a team admin to a private channel, which team admins to joining private channels via crafted permalink links without explicit consent from them.
published:2025-03-21T09:15:13.100


Instruction: Please provide detailed information about CVE-2025-27933

CVE:CVE-2025-27933
Description:Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to fail to enforce channel conversion restrictions, which allows members with permission to convert public channels to private ones to also convert private ones to public
published:2025-03-21T09:15:13.260


Instruction: Please provide detailed information about CVE-2025-30179

CVE:CVE-2025-30179
Description:Mattermost versions 10.4.x <= 10.4.2, 10.3.x <= 10.3.3, 9.11.x <= 9.11.8 fail to enforce MFA on certain search APIs, which allows authenticated attackers to bypass MFA protections via user search, channel search, or team search queries.
published:2025-03-21T09:15:13.623


Instruction: Please provide detailed information about CVE-2025-2587

CVE:CVE-2025-2587
Description:A vulnerability, which was classified as critical, was found in Jinher OA C6 1.0. This affects an unknown part of the file IncentivePlanFulfillAppprove.aspx. The manipulation of the argument httpOID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-21T12:15:25.480


Instruction: Please provide detailed information about CVE-2025-2588

CVE:CVE-2025-2588
Description:A vulnerability has been found in Hercules Augeas 1.14.1 and classified as problematic. This vulnerability affects the function re_case_expand of the file src/fa.c. The manipulation of the argument re leads to null pointer dereference. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used.
published:2025-03-21T12:15:26.553


Instruction: Please provide detailed information about CVE-2025-2597

CVE:CVE-2025-2597
Description:Reflected Cross-Site Scripting (XSS) in ITIUM 6050 version 5.5.5.2-b3526 from Impact Technologies. This vulnerability could allow an attacker to execute malicious Javascript code via GET and POST requests to the ‘/index.php’ endpoint and injecting code into the ‘id_session.
published:2025-03-21T12:15:26.723


Instruction: Please provide detailed information about CVE-2025-2589

CVE:CVE-2025-2589
Description:A vulnerability was found in code-projects Human Resource Management System 1.0.1 and classified as critical. This issue affects the function Index of the file \handler\Account.go. The manipulation of the argument user_cookie leads to improper authorization. The exploit has been disclosed to the public and may be used.
published:2025-03-21T13:15:34.830


Instruction: Please provide detailed information about CVE-2025-2590

CVE:CVE-2025-2590
Description:A vulnerability was found in code-projects Human Resource Management System 1.0.1. It has been classified as problematic. Affected is the function UpdateRecruitmentById of the file \handler\recruitment.go. The manipulation of the argument c leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
published:2025-03-21T13:15:35.460


Instruction: Please provide detailed information about CVE-2025-2591

CVE:CVE-2025-2591
Description:A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function MDLImporter::InternReadFile_Quake1 of the file code/AssetLib/MDL/MDLLoader.cpp. The manipulation of the argument skinwidth/skinheight leads to divide by zero. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is identified as ab66a1674fcfac87aaba4c8b900b315ebc3e7dbd. It is recommended to apply a patch to fix this issue.
published:2025-03-21T14:15:16.853


Instruction: Please provide detailed information about CVE-2025-2592

CVE:CVE-2025-2592
Description:A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads to heap-based buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The patch is named 2690e354da0c681db000cfd892a55226788f2743. It is recommended to apply a patch to fix this issue.
published:2025-03-21T14:15:17.037


Instruction: Please provide detailed information about CVE-2025-24915

CVE:CVE-2025-24915
Description:When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories.  This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.
published:2025-03-21T15:15:42.020


Instruction: Please provide detailed information about CVE-2025-27612

CVE:CVE-2025-27612
Description:libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply set provided capabilities as capabilities of the tenant container. However, setting inherited caps in any case for tenant container can lead to elevation of capabilities, similar to CVE-2022-29162. This does not affect youki binary itself. This is only applicable if you are using libcontainer directly and using the tenant builder.
published:2025-03-21T15:15:42.153


Instruction: Please provide detailed information about CVE-2025-29640

CVE:CVE-2025-29640
Description:Phpgurukul Human Metapneumovirus (HMPV) – Testing Management System v1.0 is vulnerable to SQL Injection in /patient-report.php via the parameter searchdata..
published:2025-03-21T15:15:42.300


Instruction: Please provide detailed information about CVE-2025-29641

CVE:CVE-2025-29641
Description:Phpgurukul Vehicle Record Management System v1.0 is vulnerable to SQL Injection in /index.php via the 'searchinputdata' parameter.
published:2025-03-21T15:15:42.473