Author name: UNDERCODE

How the mentioned CVE works The vulnerability is a flaw in the mail header parsing logic within Apple’s Mail framework

This vulnerability exists within the FaceTime application’s remote control feature on macOS. The core issue is a flaw in the

The vulnerability is an authorization bypass in the EduplusCampus Student Payment API endpoint /student/get-receipt. Authenticated users, such as students, can

CVE-2021-44228, known as Log4Shell, is a critical vulnerability in the Apache Log4j library. It enables remote code execution via improper

How the Mentioned CVE Works The vulnerability stems from a hardware defect in older VIA Technologies VT6415 and VT6330 PATA

The vulnerability in Apache Airflow arises from inadequate redaction of secret values within rendered templates accessible through the web UI.

The vulnerability CVE-2025-43497 is a sandbox escape flaw within the BackBoardServices framework in macOS. The macOS App Sandbox is a

The vulnerability exists in the `software_node_get_reference_args()` function within the Linux kernel’s software node subsystem, which is used to manage firmware

How the CVE Works: The vulnerability is a kernel memory leak in the ACPI Component Architecture (ACPICA). During early system

This vulnerability is a classic Dynamic Link Library (DLL) hijacking issue within Quark Cloud Drive version 3.23.2. The core flaw

How the Mentioned CVE Works CVE-2025-43473 is a critical information disclosure vulnerability in macOS Tahoe. The core flaw resides in

The CVE-2025-46287 vulnerability stems from an inconsistency in the user interface state management within the FaceTime application on macOS. This

The vulnerability exists within the `jbd2_journal_dirty_metadata()` function in the Linux kernel’s filesystem journaling layer. This function is critical for ensuring

The CVE-2025-65346 vulnerability is a Directory Traversal flaw in the `unzip` functionality of the alexusmai/laravel-file-manager package (versions 3.3.1 and below).

How the CVE Works The vulnerability exists within the `_download_file_or_dir` function of the ComposioHQ Python package, version 0.7.20. This function

The CVE-2025-38334 vulnerability in the Linux kernel’s SGX subsystem occurs when poisoned EPC pages are incorrectly considered for reclaim. Enclave

How the mentioned CVE works: CVE-2025-43523 is a permissions vulnerability within macOS Sequoia’s security framework. The flaw involves insufficient enforcement

The vulnerability CVE-2025-38328 is a null pointer dereference flaw in the Linux kernel’s JFFS2 flash filesystem. The issue occurs in

How the CVE Works: The CVE-2025-66675 vulnerability exists in the multipart request handler of Apache Struts. When the framework processes

How the mentioned vulnerability works: The half-blind Server Side Request Forgery (SSRF) vulnerability in kube-controller-manager arises from the in-tree Portworx

This vulnerability, CVE-2024-32059, is a critical Java deserialization issue within Liferay’s API. The `/api/jsonws/invoke` endpoint improperly deserializes untrusted data from

This vulnerability, CVE-2024-55297, is a critical SQL injection flaw within Liferay DXP’s and Portal’s dynamic data mapping (DDM) module. The

This vulnerability exploits the trust in the `X-Forwarded-For` HTTP header for client IP identification within the Misskey API rate limiter.

The vulnerability exists in the `/api/jsonws/invoke` endpoint of Liferay DXP/Portal. It allows unauthenticated remote code execution due to unsafe Java

CVE-2023-30597 is a critical deserialization vulnerability in Liferay Digital Experience Platform (DXP) and Liferay Portal. It affects the JSON web

This CVE targets a deserialization vulnerability within Apache’s data interaction protocols. The flaw resides in the improper validation of user-supplied

The vulnerability CVE-2025-43788 is a broken access control flaw in the organization selector component of Liferay Portal and Liferay DXP.

The critical vulnerability, known as React2Shell, resides in the insecure deserialization of the React Flight protocol used by React Server

How the Mentioned CVE Works The vulnerability CVE-2025-43790 is an Insecure Direct Object Reference (IDOR) flaw in Liferay Portal and

This vulnerability is an open redirect within the `/authentication/` endpoint of Mayan EDMS. The flaw exists due to improper validation

This critical vulnerability, CVE-2024-4340, is a deserialization of untrusted data issue within Liferay Portal and Liferay DXP. The flaw resides

The vulnerability, CVE-2025-XXXXX, exists in the data export functionality of the Misskey platform. When a user adds a private post

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 implemented AES encryption with hardcoded keys and initialization vectors, compromising cryptographic security.

The vulnerability CVE-2025-65950 in WBCE CMS versions 1.6.4 and below is a critical SQL injection flaw within the user management

The vulnerability is a detection bypass in the Fickling security analysis tool for Python pickle files. Pickle deserialization can execute

The vulnerability in Weblate stems from an insufficiently secured webhook endpoint that processes incoming HTTP requests without proper validation or

This critical vulnerability (CVE-2023-49606) in Liferay DXP and Portal arises from insecure deserialization of untrusted data within specific modules. The

The vulnerability exists within the `io.netty.handler.codec.http.HttpRequestEncoder` class. When encoding an HTTP request, this component writes the request URI directly into

The CVE-2025-43809 vulnerability is a Cross-Site Request Forgery (CSRF) flaw in the server license registration endpoint of Liferay Portal and

The vulnerability CVE-2023-33952 is an authentication bypass in Liferay DXP and Portal. It stems from improper validation of the “Remember

The vulnerability in ALTCHA libraries arises from insufficient semantic separation in HMAC computation for proof-of-work challenges. When a challenge is

This vulnerability is a reflected Cross-Site Scripting (XSS) flaw in the search bar portlet of Liferay Portal and Liferay DXP.

The vulnerability stems from broken authorization mechanisms within Weblate’s REST API, specifically affecting endpoints that handle user and project data.

The vulnerability CVE-2025-14674 is an expression injection flaw within the `QLExpressEngine.doEval` function of the aizuda snail-job task scheduling framework. This

How the Mentioned CVE Works The vulnerability CVE-2025-43787 is a stored cross-site scripting (XSS) flaw in Liferay Portal and Liferay

The vulnerability in Weblate arises from insufficient server-side validation during the invitation acceptance process. When a user generates an invitation,

The vulnerability CVE-2024-28822 is an SQL injection flaw within Liferay DXP’s and Portal’s social activity functionality. The issue originates in

This vulnerability, CVE-2025-53031, is a reflected Cross-Site Scripting (XSS) flaw within the `/authentication/` endpoint of Mayan EDMS. The issue stems

This vulnerability exploits a heuristic bypass in Fickling, a security tool for analyzing Python pickle files. Fickling relies on detecting

The vulnerability (CVE-2025-?????) is a trust boundary violation within the Universal Tool Calling Protocol (UTCP) Python client library. The flaw

The vulnerability exists in the `mlx4_en_create_rx_ring` function within the Linux kernel’s mlx4 Ethernet driver. This function is responsible for setting

The CVE-2025-39859 vulnerability is a use-after-free race condition within the `ptp_ocp` driver of the Linux kernel. The flaw exists in

The CVE-2025-49925 vulnerability is a Missing Authorization (CWE-862) flaw in the VibeThemes WPLMS WordPress plugin. It allows unauthenticated remote attackers

The vulnerability is a DOM-based Cross-Site Scripting (XSS) flaw within the `VDatePicker` component of Vuetify. It stems from the improper

The vulnerability exists in the internal `mergeDeep` utility function used by Vuetify’s Preset configuration feature to merge user-provided options with

The vulnerability in aircompressor’s Snappy and LZ4 decompressors stems from improper handling of malformed compressed data. When crafted inputs are

The vulnerability (CVE-2024-55269) exists within the Objects module of Liferay. Authenticated users with the Instance Administrator role can create or

The vulnerability (CVE-2024-XXXXX) in MineAdmin v3.x stems from an insecure default administrative password and improper access controls on the scheduled

How the CVE Works: The vulnerability resides within the Almost Native Graphics Layer Engine (ANGLE), a core component enabling WebGL

The vulnerability in Finality Provider versions up to 1.0.3 stems from a misconfiguration where EOTS manager endpoints are exposed without

In Apache StreamPark versions from 2.0.0 to before 2.1.7, the system employs a flawed encryption mechanism where sensitive data is

The vulnerability (CVE-2025-53007) is a ZipSlip path traversal in the backup restoration function. An attacker with database write access can

This vulnerability exists within the shard movement and file replication functionality of the Weaviate database. During the process of transferring

The vulnerability resides in the `APIVersion` rule of the affected component, which used the insecure JavaScript `new Function()` constructor to

The vulnerability in Apache StreamPark stems from the use of AES encryption in ECB (Electronic Codebook) mode combined with a

This vulnerability in Apache StreamPark stems from the use of a static, hard-coded encryption key within the application’s codebase for

The CVE-2024-39956 vulnerability in NeuVector arises from the default disabling of TLS certificate verification for OpenID Connect authentication and other

The CVE-2018-4063 vulnerability is an unrestricted upload of a dangerous file type in the `upload.cgi` component of Sierra Wireless AirLink

This vulnerability is an incomplete fix for CVE-2025-55184 in the React Server Components (RSC) protocol. A malicious actor can craft

How the mentioned vulnerability works: The vulnerability in FoF Pretty Mail version 1.1.2 is a server-side template injection (SSTI) that

The vulnerability exists within the `@vitejs/plugin-rsc` plugin’s integration of `react-server-dom-webpack` for processing React Server Components (RSCs). In affected versions prior

How the mentioned CVE works: The vulnerability is in the PLAIN restore meta-command filter added to pgAdmin to fix CVE-2025-12762.

This vulnerability, CVE-2025-53015, targets the HugeGraph-Server’s RAFT-based PD (Placement Driver) store. The cluster communication for metadata uses the Hessian protocol

CVE-2024-43608 exploits a vulnerability in react-server-dom-webpack versions prior to 19.2.3, where improper handling of server-side rendering contexts allows unauthorized access

The vulnerability arises from an incomplete patch for CVE-2025-55184 in React Server Components (RSC), allowing denial of service via resource

The vulnerability in React Server Components stems from a flaw in the serialization process during server-side rendering. In affected versions,

CVE-2025-55183 exploits a flaw in Next.js App Router endpoints using Server Actions. In affected versions, when a malicious HTTP request

A denial-of-service vulnerability exists within the React Server Components (RSC) rendering engine in affected versions. The flaw is triggered during

The vulnerability CVE-2025-55184 exploits a flaw in the deserialization process of React Server Components within Next.js App Router endpoints. A

The CVE-2025-34333 vulnerability exists in AudioCodes Fax Server and Auto-Attendant IVR appliances. Affected versions include all releases up to and

How the CVE Works: This vulnerability is a server-side template injection (SSTI) flaw in Elastic Cloud Enterprise’s (ECE) use of

The vulnerability exists in the web administration component of AudioCodes Fax Server and Auto-Attendant IVR appliances. When an administrator performs

The CVE-2025-34335 vulnerability exists within the license activation functionality of AudioCodes Fax Server and Auto-Attendant IVR appliances. The flaw is

The vulnerability CVE-2025-59945 affects the SysReptor pentest reporting platform. It exists in versions starting from 2024.74 up to, but not

The vulnerability CVE-2025-37736 is an improper authorization flaw (CWE-863) in Elastic Cloud Enterprise (ECE). The built-in `readonly` user account, which

The vulnerability CVE-2025-63214 is caused by an improper access control (CWE-284) flaw within the account management functions of the bridgetech

This vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the SysReptor pentest reporting platform for versions prior to 2025.102.

How the Mentioned CVE Works The vulnerability is an authenticated command injection in the fax test functionality of AudioCodes appliances.

The vulnerability exists in the Texas Instruments AM65x CPSW NUSS Ethernet driver within the Linux kernel. For TI System-on-Chips (SoCs)

The vulnerability CVE-2025-8897 is a Reflected Cross-Site Scripting (XSS) flaw in the Beaver Builder WordPress page builder plugin. It exists

The vulnerability CVE-2025-11726 in the Beaver Builder plugin stems from missing authorization checks in its REST API. Specifically, the endpoints

This vulnerability is a NULL pointer dereference (CWE-476) in the Linux kernel’s NUMA (Non-Uniform Memory Access) initialization code. During system

How the CVE Works The vulnerability exists in the library’s feature for downloading a specific subdirectory from a remote source,

The vulnerability CVE-2025-39875 is a NULL pointer dereference flaw within the `igb` network driver of the Linux kernel. It is

How the CVE Works (CVE-2025-47914) The vulnerability exists within the SSH Agent’s process for handling new key identity requests. The

How the CVE Works The vulnerability occurs in the Linux kernel’s `tracing/osnoise` subsystem. When a user writes to the `/sys/kernel/debug/tracing/osnoise/cpus`

How the CVE Works The vulnerability is a logic error introduced during code refactoring in the Linux kernel’s Ceph filesystem

Traefik, an HTTP reverse proxy and load balancer, contains a path normalization vulnerability in versions prior to 2.11.32 and from

The vulnerability exists in the `exportInstallTable` function within the `/app/utils/base/database/Migrate.php` file of YiFang CMS versions up to and including 2.0.5.

The CVE-2025-14285 vulnerability exists within the `edit_personnel.php` file of the Code-Projects Employee Profile Management System version 1.0. The flaw stems