Author name: UNDERCODE

The vulnerability is an unrestricted file upload in the `add_file_query.php` script of the Employee Profile Management System v1.0. Attackers can

The vulnerability is a classic SQL injection in the `per_id` parameter of the `/view_personnel.php` file. This parameter is directly concatenated

The vulnerability CVE-2025-14211 is an unauthenticated SQL injection flaw within the `/delete_book.php` endpoint of the Advanced Library Management System version

How the CVE Works: The vulnerability, CVE-2025-12121, is a command injection flaw in the Lite XL code editor. It originates

The CVE-2025-14205 vulnerability is a stored Cross-Site Scripting (XSS) flaw within the `/membership_profile.php` file of the Chamber of Commerce Membership

How the mentioned CVE works: The vulnerability exists within Zitadel’s User Service API. When an authenticated user, regardless of their

The vulnerability exists in the `/update_query.php` file of Campcodes School File Management System 1.0. It is caused by the insecure

How the Mentioned CVE Works The vulnerability CVE-2025-14136 is a stack-based buffer overflow within the `mod_form.so` library of multiple Linksys

The vulnerability CVE-2025-14133 is a stack-based buffer overflow in the `AP_get_wireless_clientlist_setClientsName` function within the `mod_form.so` library on affected Linksys wireless

The vulnerability CVE-2025-14135 is a stack-based buffer overflow within the `AP_get_wired_clientlist_setClientsName` function of the `mod_form.so` library on affected Linksys wireless

The vulnerability is a Stored Cross-Site Scripting (XSS) flaw in the `/view_personnel.php` file of the Employee Profile Management System version

CVE-2025-33111 is a race condition vulnerability in IBM Controller and IBM Cognos Controller software. The flaw exists in the code

The vulnerability CVE-2025-14210 is a SQL injection flaw within the Advanced Library Management System version 1.0. It exists in the

This vulnerability is a file leak in the multipart request processing mechanism of Apache Struts. When a file upload request

An integer overflow vulnerability exists in the ACME certificate renewal backoff mechanism of Apache HTTP Server. When automatic certificate renewal

This vulnerability is a Server-Side Request Forgery (SSRF) specific to the Apache HTTP Server running on the Windows operating system.

This vulnerability is a classic symlink race condition within the Dell Encryption software for Windows, affecting versions prior to 11.12.1.

The vulnerability is a stored Cross-Site Scripting (XSS) flaw in the `Playlist Name` field. When an authenticated user creates a

The vulnerability exists within the Keycloak Admin REST API’s `/admin/realms/{realm}/roles` endpoint. Normally, this endpoint should enforce strict administrative permissions to

The CVE-2025-46636 vulnerability exists within Dell Encryption software in versions prior to 11.12.1. It is classified as an Improper Link

How the mentioned CVE works: This vulnerability is an improper neutralization flaw (CWE-150) in Apache HTTP Server’s handling of Common

The SSRF vulnerability in fetch-mcp server v1.0.2 and prior stems from insufficient validation of user-supplied URLs before they are used

The vulnerability CVE-2025-66200 is a security bypass in Apache HTTP Server affecting versions 2.4.7 through 2.4.65. It occurs in a

The vulnerability exists within the `PutContents` API endpoint used for writing files to a repository. This endpoint fails to properly

The SSRF vulnerability works through the `/api/v1/retrieval/process/web` endpoint in Open WebUI versions prior to 0.6.37. When an authenticated user submits

In the `MediaSessionRecord.java` file, the `sendCommand` function improperly handles requests to launch a Foreground Service (FGS). Normally, Android restricts background

How the CVE Works This vulnerability is a classic confused deputy attack within the Android operating system. A malicious application,

The vulnerability stems from insufficient escaping of user-controlled input within the `{{html}}` wiki macro. When a user profile field supporting

The vulnerability CVE-2025-22432 is located within the `notifyTimeout` method of the `CallRedirectionProcessor.java` component in the Android framework. This method is

The vulnerability exploits the absence of pagination or result limiting in multiple XWiki REST API endpoints, such as /rest/wikis/xwiki/spaces. An

This vulnerability exploits the interaction between calendar events and file handling in Nextcloud. A malicious actor with permission to create

The vulnerability exists in the `ReadTIMImage` function within coders/tim.c. When parsing a TIM (PSX TIM) image file, the decoder reads

This vulnerability is a local privilege escalation flaw within the Android System component. It stems from improper input validation in

How the Mentioned CVE Works The vulnerability, CVE-2025-62221, is a Use-After-Free (UAF) flaw within the Windows Cloud Files Mini Filter

The vulnerability stems from incorrect path handling within Nextcloud’s groupfolders feature. Groupfolders, which are shared directories for teams, use a

How the CVE Works: The vulnerability is a header shadowing attack in the cpp-httplib library. When an HTTP request is

The vulnerability exists within the `/Mondo/lang/sys/Forms/AddressBook.aspx` endpoint of MailEnable. The `AddressesCc` parameter, when passed via a GET request, is not

The vulnerability exists in MailEnable versions before 10.54. A reflected Cross-Site Scripting (XSS) flaw is present in the `AddressesTo` parameter

CVE-2025-48591 exploits missing permission checks in Android’s multi-user framework. In Android, each user has isolated storage under directories like /data/user/.

How the mentioned CVE works: The vulnerability resides in multiple functions within Session.java in the Android framework, where a logic

The CVE-2025-48525 vulnerability resides in the Android OS, specifically within the `DisassociationProcessor.java` file. This component manages the disassociation process for

The vulnerability exists in the `Message` parameter of the `/Mobile/Compose.aspx` endpoint. When processing a GET request, the application fails to

The CVE-2025-61727 vulnerability in OpenTofu originates from a bug in the Go programming language’s crypto/x509 library, which OpenTofu uses for

MailEnable versions before 10.54 contain a reflected XSS vulnerability. The vulnerability is in the FieldBcc parameter. This parameter is part

The vulnerability exists in the `run_ssh_command_with_credentials()` function tool used by AI agents. This function constructs an SSH command string using

How the CVE works: The vulnerability resides in multiple functions within NotificationStation.java in the Android framework. NotificationStation handles notifications across

This vulnerability exists in the `_metadata_predicate()` function within LangGraph’s SQLite checkpoint saver. When constructing SQL `WHERE` clauses for metadata filtering,

The CVE-2025-32328 vulnerability arises from a logic error in multiple functions within the Session.java file of the Android framework. This

MailEnable versions prior to 10.54 contain a reflected cross-site scripting vulnerability in the AddressesBcc parameter of the AddressBook.aspx page. The

The directory traversal vulnerability in Robocode version 1.9.3.6 resides within the CacheCleaner component’s recursivelyDelete method. This method is designed to

The vulnerability resides in the AutoExtract component’s `createTempFile` method within Robocode versions prior to 1.9.5.6. This method does not employ

How the CVE Works: The vulnerability exists within the `startAlwaysOnVpn` method of `Vpn.java` in the Android framework. A flawed logical

This vulnerability exists in the `EditFdnContactScreen` component of the Android framework. The `onActivityResult` method does not properly validate the identity

How the CVE works: CVE-2025-48565 exploits a logic error in Android’s code managing cross-profile intent filters. These filters secure communication

The vulnerability exists in the `ensureBound` method of `RemotePrintService.java` within the Android framework. This method handles binding to remote print

The vulnerability is located in the `grantAllowlistedPackagePermissions` method within the `SettingsSliceProvider.java` file of the Android framework. This method is designed

How the CVE Works: The vulnerability exists within Android’s component resolution mechanism. Multiple system locations contain a race condition between

MailEnable versions before 10.54 contain a reflected cross-site scripting vulnerability in the /Mondo/lang/sys/Forms/Statistics.aspx endpoint. The flaw exists in the ‘theme’

How the CVE works: MailEnable versions before 10.54 have a flaw in /Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx. The “Failed” parameter in GET requests is

The CVE-2025-14218 vulnerability is a SQL injection flaw in the code-projects Currency Exchange System version 1.0. It occurs in the

The CVE-2025-64471 vulnerability in Fortinet FortiWeb arises from a flaw in the authentication mechanism where the system incorrectly processes password

This vulnerability is a multi-threaded race condition within the camera framework module of Huawei devices. A race condition occurs when

The CVE-2025-66322 is a multi-thread race condition vulnerability in Huawei’s camera framework module. Race conditions occur when multiple threads access

The vulnerability is a reflected Cross-Site Scripting (XSS) flaw within MailEnable’s web interface. Specifically, the `Added` parameter in the `/Mondo/lang/sys/Forms/MAI/AddRecipientsResult.aspx`

The vulnerability resides in the Currency Exchange System version 1.0 within the ‘/edit.php’ file. Specifically, the ‘ID’ parameter is not

How the CVE Works: The vulnerability exists in the Online Banking System 1.0 by SourceCodester, specifically within the user profile

The CVE-2025-60024 vulnerability arises from improper pathname validation in Fortinet FortiVoice enterprise telephone systems. Affected versions include 7.2.0 through 7.2.2

This vulnerability arises from inadequate access control mechanisms within Fortinet FortiAuthenticator’s administrative interface. Specifically, the system fails to properly enforce

The CVE-2025-14216 vulnerability is a SQL injection flaw in the Currency Exchange System 1.0 by code-projects. It occurs in the

How the mentioned CVE works: CVE-2025-53679 is an OS command injection vulnerability in Fortinet FortiSandbox’s graphical user interface (GUI). It

CVE-2025-62631 is an insufficient session expiration vulnerability (CWE-613) in Fortinet FortiOS affecting versions 7.4.0, 7.2 all versions, 7.0 all versions,

How the CVE-2025-66320 Works: This vulnerability is a multi-thread race condition within the camera framework module on Huawei devices. When

CVE-2025-53949 is an OS command injection vulnerability in Fortinet FortiSandbox, originating from improper input sanitization in the web management interface.

This vulnerability exists within the `/edittrns.php` file of the Currency Exchange System 1.0. The application fails to properly sanitize user-supplied

The vulnerability CVE-2025-48633 resides in the `hasAccountsOnAnyUser` method within the `DevicePolicyManagerService.java` file of the Android framework. This method is responsible

The vulnerability exists within the `uploadAttachByUrl` API endpoint. This function accepts a user-supplied URL parameter to fetch and save a

The CVE-2025-66644 vulnerability in Array Networks ArrayOS stems from insufficient input validation and sanitization in one of the device’s web

The CVE-2025-13877 vulnerability operates due to insecure default configurations in NocoBase’s Docker deployments. Historically, the official one-click Docker setup provided

The CVE-2025-66323 vulnerability involves an improper security check in the card module of Huawei devices. This flaw arises from inadequate

In Nextcloud Desktop client versions before 3.16.5, a vulnerability exists in the manual file locking feature for end-to-end encrypted directories.

How the CVE Works: The vulnerability exists in the `/Customers/settings.php` file of Simple Shopping Cart 1.0. The application takes the

This vulnerability is a race condition within the audio subsystem of Huawei devices. A race condition occurs when the output

This vulnerability exists within the compression and decompression module of the affected system. The core flaw is a lack of

The CVE-2025-46261 vulnerability is a Stored (Persistent) Cross-Site Scripting (XSS) flaw in the Seriously Simple Podcasting WordPress plugin. The vulnerability

The vulnerability resides in the /Admin/delete-fee.php file of SourceCodester Online Student Clearance System 1.0. This script is part of the

How the mentioned CVE works: This vulnerability exploits WinRAR’s improper sanitization of file paths during archive extraction. Attackers craft malicious

The vulnerability CVE-2025-66548 exploits Right-to-Left Override (RTLO) Unicode control characters to spoof file extensions in Nextcloud Deck. When a user

How the mentioned CVE works: The vulnerability exists in the Windows Cloud Files Mini Filter Driver (cldflt.sys). During file system

This vulnerability resides in the package management module of Huawei software or devices, specifically within permission control mechanisms. Due to

The CVE-2025-66329 vulnerability resides within the window management module of Huawei’s software stack, specifically in the permission verification mechanisms for

The CVE-2025-58279 vulnerability is a local permission control flaw within the media library module on certain Huawei devices. It operates

How the mentioned CVE works: CVE-2025-66545 is a permission bypass vulnerability in the Nextcloud Groupfolders application, which provides admin-configured shared

The vulnerability arises when dynamic cookies are enabled in an Elysia application, meaning a cookie schema is defined for a

The vulnerability resides in the /api/v1/user endpoint of usememos memos version 0.25.2. This endpoint handles user registration and management functions.

How the Mentioned CVE Works: This vulnerability is an Insecure Direct Object Reference (IDOR) in the Nextcloud Calendar app. Appointment

This vulnerability exists in JDA’s component handling system when processing `ActionRow` components containing media attachments with external URLs. When `MessagegetComponents()`

How the mentioned CVE works: The vulnerability exists in the Nextcloud Twofactor WebAuthn provider. The application’s API endpoint for deleting

The vulnerability exists within the `importZipMd` function responsible for importing notes from a ZIP archive. During the extraction process, the

The vulnerability exists within the organisation and fields of a user’s contact card in the Nextcloud Contacts app. A malicious

The vulnerability in mad-proxy (v0.3 and earlier) stems from improper validation and enforcement of its traffic interception rules. The proxy’s