Author name: UNDERCODE

The vulnerability exists within the `mergeMultipartUpload` function of the `/app/utils/base/plugin/P_file.php` file in YiFang CMS versions up to and including 2.0.5.

How the CVE Works The vulnerability is an improper limitation of a pathname, classified as CWE-22 Path Traversal. In affected

The vulnerability CVE-2025-66470 is a Cross-Site Scripting (XSS) flaw in the NiceGUI Python framework, affecting versions 3.3.1 and earlier. It

The vulnerability exploits the GeoServer WMS GetMap endpoint at /geoserver/wms, which accepts XML input without proper sanitization. When an XML

The vulnerability exists in the `HttpClient.java` component of Dreampie Resty’s HTTP client module. The flaw is specifically located within the

How the CVE Works The vulnerability exists in the `app/logic/L_tool.php` file of YiFang CMS versions up to 2.0.5. The flaw

The vulnerability CVE-2025-66481 in DeepChat (versions 0.5.1 and below) stems from insufficient sanitization of user-supplied Mermaid diagram content. The application’s

The vulnerability CVE-2025-11136 exists in the `webUploader` function within the file `/app/app/controller/File.php` of the YiFang CMS backend component. This function

How the CVE Works The vulnerability exists in the HTTP Host Header Handler within the file `Hush\hush-lib\hush\Util.php` of jameschz Hush

The CVE-2025-58181 vulnerability exists within SSH server implementations that support GSSAPI (Generic Security Services Application Program Interface) for authentication. During

The CVE-2025-39926 vulnerability is a logic flaw within the `genl_bind()` function of the Linux kernel’s genetlink subsystem. Genetlink provides a

The vulnerability CVE-2025-63932 is an unauthenticated Remote Code Execution flaw in the D-Link DIR-868L A1 router, specifically in firmware version

How the mentioned CVE works: The vulnerability is in the `spi-microchip-core-qspi` driver of the Linux kernel. A code change intended

The vulnerability CVE-2025-53840 in Icinga DB Web stems from an improper implementation of access control filters within the dependency map

The vulnerability exists in the `mt76` WiFi driver for MediaTek MT7996 chipsets within the Linux kernel. It stems from a

How the CVE Works This vulnerability exists in the web interface of Icinga DB, a monitoring system component. Authorized users

The Express.js framework provides the express.json() middleware for parsing JSON request bodies. By default, without a specified size limit, this

The CVE-2025-39924 vulnerability exists within the Enhanced Read-Only File System (erofs) component of the Linux kernel. It specifically concerns the

This vulnerability exists in the Linux kernel’s Controller Area Network (CAN) J1939 protocol implementation. The issue is a use-after-free flaw

How the CVE Works The vulnerability exists in the `ixgbe` network driver within the Linux kernel. Its Energy Efficient Ethernet

The vulnerability CVE-2025-14182 is a classic path traversal (CWE-22) flaw in the Sobey Media Convergence System, versions 2.0 and 2.1.

How the Mentioned CVE Works (CVE-2025-66565) Fiber Utils provides common functions for the Fiber web framework. The vulnerability exists in

A use-after-free vulnerability exists in the WebRTC Signaling component of affected Mozilla products. This memory corruption flaw, classified as CWE-416,

The CVE-2025-13248 vulnerability exists within the SourceCodester Patients Waiting Area Queue Management System, version 1.0. The specific flaw is located

This vulnerability is a post-authentication flaw in MongoDB’s network two-phase commit protocol, which coordinates transactions across different database shards. The

The vulnerability in @tiptap/extension-link before version 2.10.4 is a DOM-based Cross-site Scripting (XSS) flaw. It originates from the extension’s failure

The vulnerability CVE-2025-14286 is an information disclosure flaw in the Tenda AC9 router’s web management interface. It resides in an

The vulnerability stems from an internal API endpoint (/api/internal/sftp-event) designed for communication between AzuraCast’s core application and its internal SFTP

The vulnerability CVE-2025-14518 is a Server-Side Request Forgery (SSRF) in PowerJob versions up to 5.1.2. It exists in the `checkConnectivity`

How the CVE Works: The vulnerability exists in the quic-go library’s HTTP/3 implementation. It improperly handles QPACK header compression. An

How the CVE Works: This vulnerability exploits the HTTP/2 protocol’s stream cancellation feature. An attacker can open numerous HTTP/2 streams

This vulnerability is a stored (persistent) Cross-Site Scripting (XSS) flaw within the device’s web-based management interface. An attacker can inject

The vulnerability in WBCE CMS version 1.6.4 is a flaw in its brute-force protection mechanism. The application tracks failed login

The vulnerability CVE-2025-67487 in Static Web Server (SWS) versions 2.40.0 and below is a path traversal flaw caused by inadequate

The vulnerability is a stored cross-site scripting (XSS) flaw in the web interface of Lyrion Music Server versions 9.0.3 and

The vulnerability CVE-2025-14200 is a Cross-Site Scripting (XSS) flaw within the `usersub.php` file of the Hotel Management System’s “Request Pending

How the CVE Works The `xmlseclibs` PHP library uses libxml2 to canonicalize (standardize) XML data during signature validation. A flaw

The vulnerability in NiceGUI versions 3.3.1 and below is a reflected Cross-Site Scripting (XSS) flaw in the ui.add_css, ui.add_scss, and

How the CVE Works The vulnerability exists in the `alphapd` component of the D-Link DCS-930L IP camera firmware version 1.15.04.

The vulnerability is a logic flaw in how Astro middleware processed and normalized URL paths for authentication checks. A previous

This vulnerability exploits a insecure deserialization flaw within the SnakeYAML library used by the HummerRisk platform. Attackers with standard user

The vulnerability is an algorithmic complexity issue in the `django.core.serializers.xml_serializer.getInnerText()` function. When the XML deserializer processes input, this function recursively

The vulnerability CVE-2025-54154 is an improper authentication (CWE-287) flaw within QNAP Authenticator mobile app versions prior to 1.3.1.1227. Its operation

The vulnerability in the Okta Java SDK arises from inadequate thread management in multithreaded implementations. When the SDK processes requests,

The vulnerability exists in the TokenRequestCache mechanism of the Auth0 Next.js SDK (versions 4.11.0-4.11.1 and 4.12.0). When the SDK processes

The vulnerability (CVE-2025-XXXXX/GHSA-XXXX) in the Okta Java SDK stems from a race condition within the shared `ApiClient` instance when handling

The vulnerability CVE-2025-14086 exists within the `/app-api/v1/members/openid/` endpoint of the youlaitech youlai-mall e-commerce platform. It stems from insufficient access controls

The vulnerability CVE-2025-52856 is an improper authentication (CWE-287) flaw in the QVR firmware for legacy QNAP VioStor Network Video Recorders

How the mentioned CVE works: The vulnerability CVE-2025-64053 is a classic buffer overflow in the web management interface of Fanvil

How the CVE Works A race condition exists in the Linux kernel’s Ceph filesystem client. During concurrent operations like file

How the Mentioned CVE Works The vulnerability (CVE-2025-35916) in the `sd` command-line search-and-replace tool stems from its file operation logic.

The CVE-2025-14090 vulnerability is a SQL injection flaw within the AMTT Hotel Broadband Operation System version 1.0. The specific point

The vulnerability CVE-2025-14092 is an OS command injection flaw within the `sub_416898` function of the `/boafrm/formDebugDiagnosticRun` file in the Edimax

This vulnerability exists in the `/app-api/v1/orders/` API endpoint of Youlai-Mall versions 1.0.0 and 2.0.0. The flaw is an improper control

How the Mentioned CVE Works The vulnerability exists in the `rtl9300_i2c_config_xfer` function within the Linux kernel’s I2C driver for Realtek

The CSRF vulnerability in 1Panel’s web port configuration functionality arises due to insufficient validation mechanisms on the port-change endpoint. Specifically,

How the Mentioned CVE Works The vulnerability CVE-2025-64057 is a path traversal flaw in the web interface of the Fanvil

How the CVE-2025-64052 Vulnerability Works The CVE-2025-64052 vulnerability is a critical command injection flaw in the Fanvil x210 V2 IP

The vulnerability is a cross-site request forgery (CSRF) in the panel name management functionality of 1Panel. The affected endpoint does

The vulnerability in the Auth0 Next.js SDK involves improper input validation of the returnTo parameter during OAuth authentication flows. In

In Jenkins, build authorization tokens are used to authenticate remote build triggers via HTTP requests. These tokens are intended to

The CVE-2025-36140 vulnerability in IBM watsonx.data stems from a lack of resource allocation limits for its ingestion pods. In Kubernetes

This vulnerability is caused by an integer underflow (CWE-191) within the Windows Hyper-V virtualization stack. An integer underflow, or wraparound,

The vulnerability resides in the Jenkins HTTP-based Command Line Interface (CLI), a feature allowing remote administration. This CLI operates over

The vulnerability is an improper input validation flaw in the hyperlink handling mechanism of LibreOffice on Windows. LibreOffice has a

The vulnerability CVE-2025-64650 operates within IBM Storage Defender – Resiliency Service versions 2.0.0 through 2.0.18. This service inadvertently writes sensitive

How the Mentioned CVE Works (CVE-2025-62550) The vulnerability is an out-of-bounds write in the Azure Monitor Agent, classified as CWE-787.

The vulnerability exists in the `updateNotificationChannelGroupFromPrivilegedListener` method of the `NotificationManagerService.java` file within the Android Framework. This method, which handles updates

CVE-2025-62570 is an improper access control (CWE-284) vulnerability within the Windows Camera Frame Server Monitor. This system component is responsible

How the Mentioned CVE Works The vulnerability CVE-2025-54293 is a path traversal flaw within the log file retrieval function of

The vulnerability (CVE-2024-XXXXX) in the Algernon web server (v1.17.4) is a stored Cross-Site Scripting (XSS) flaw arising from improper neutralization

The vulnerability exists because the `download_media` method does not sanitize the `file_name` attribute from incoming Telegram messages. This attribute originates

How the mentioned CVE works: CVE-2025-14331 is a security flaw in the Request Handling component of Mozilla products that allows

This vulnerability exists in Jenkins’ handling of the build authorization token (AuthToken), a feature allowing remote triggering of builds via

The vulnerability CVE-2025-14333 is a collection of memory safety bugs identified in specific versions of Mozilla Firefox, Firefox ESR, Thunderbird,

The vulnerability CVE-2025-48589 is a local privilege escalation flaw within the Android operating system’s framework layer, specifically in the `HeaderPrivacyIconsController.kt`

The vulnerability is a memory corruption flaw in the `iconv` function of musl libc, specifically when converting text from the

The vulnerability exists due to inconsistent validation in the Jenkins Coverage Plugin. The plugin validates the “coverage results ID” field

This vulnerability exists in the Jenkins Redpen plugin, which reports pipeline artifacts to Jira. The flaw occurs when the plugin

The CSRF vulnerability in 1Panel affects versions 1.10.33 through 2.0.15. It targets the Change Username functionality in the settings panel

The CVE-2025-54292 vulnerability in Canonical LXD LXD-UI is a path traversal issue affecting versions before 6.5 and 5.21.4. It allows

This vulnerability exists within the Git client Plugin’s process of generating temporary shell scripts on Jenkins agents. When the plugin

The vulnerability resides in the `/mftp/application/api/api.php` endpoint, which handles file download requests. An attacker sends a crafted POST request containing

How the CVE Works The vulnerability resides within the `NotificationManagerService.java` file in Android’s framework. This service manages notifications and enforces

The Jenkins HashiCorp Vault Plugin retrieves credentials from HashiCorp Vault to supply secrets for Jenkins jobs. The vulnerability exists in

The vulnerability CVE-2025-48590 is a local denial-of-service (DoS) flaw within the Android operating system’s Framework component. It resides specifically in

This Cross-Site Request Forgery (CSRF) vulnerability exists in the Jenkins web interface’s login endpoint (/j_spring_security_check). The flaw occurs because the

How the mentioned CVE works (around 20 lines): The vulnerability CVE-2025-14332 stems from memory safety bugs inherent in the codebase

This vulnerability is a path traversal authorization bypass in the Formio server. The flaw exists in how the application processes

This vulnerability arises from a missing permission check in Jenkins’ view rendering mechanism. In affected versions, when a view is

The vulnerability CVE-2025-48580 is a logic error in the `connectInternal` method of the `MediaBrowser.java` component within the Android framework. This

The vulnerability CVE-2025-48583 resides in multiple functions within the `BaseBundle.java` class of the Android framework. A logic error in the

The CVE-2025-36017 vulnerability exists in IBM Controller and IBM Cognos Controller software. The affected versions are IBM Controller 11.1.0 through

How the CVE-2025-14203 Works The vulnerability is a classic SQL injection flaw in the `code-projects Question Paper Generator` software, affecting

The vulnerability CVE-2025-14134 is a stack-based buffer overflow within the `mod_form.so` library of multiple Linksys wireless range extender models. The

The vulnerability CVE-2025-36015 is caused by improper validation of a specified quantity size input within IBM Controller and IBM Cognos

How the mentioned CVE works: CVE-2025-36102 is a critical security vulnerability in IBM Cognos Controller that stems from improper enforcement

The vulnerability CVE-2025-14212 is an unauthenticated SQL Injection flaw within the Advanced Library Management System version 1.0. It originates from

The vulnerability is in the password change dialog in the Ibexa back office. During the transition from version 4 to

Lite XL versions 2.1.8 and prior contain a vulnerability that allows for arbitrary code execution. The editor automatically loads and