Author name: UNDERCODE

How the CVE Works: The vulnerability resides in the Application Server component of Desktop Alert PingAlert. Due to improper access

The CVE-2025-55222 vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware

This vulnerability is a stored Cross-Site Scripting (XSS) flaw within the user management interface of Revive Adserver. It arises from

How the Mentioned CVE Works The vulnerability exists in the Application Server component of Desktop Alert PingAlert. Critical configuration values,

The CVE-2025-54563 vulnerability arises from flawed access control in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2.

The CVE-2025-14008 vulnerability is a Server-Side Request Forgery (SSRF) flaw in dayrui XunRuiCMS up to version 4.7.1. It occurs in

How the mentioned CVE works: In ImageMagick’s Magick++ layer, invoking Options::fontFamily with an empty string triggers a cleanup that calls

The CVE-2025-13354 vulnerability in the Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress stems from

How the mentioned CVE works: The vulnerability resides in the “getTermsForAjax” function of the Tag, Category, and Taxonomy Manager –

How the mentioned CVE works: CVE-2025-20382 is an unvalidated redirect vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. It impacts

How the CVE works: In vulnerable versions of Splunk Enterprise and Splunk Secure Gateway app, a low-privileged user without “admin”

The vulnerability exists within the file archive extraction function of the Laravel File Manager package. The endpoint responsible for unzipping

How the CVE Works: Attestable AMIs use a Unified Kernel Image (UKI) measured by the UEFI firmware. The UKI embeds

The vulnerability resides in the /en-US/static/ web endpoint within Splunk Enterprise and Splunk Cloud Platform. This endpoint serves static resources

How the mentioned CVE works The vulnerability exists in the `login.php` file of Online Medicine Guide 1.0. The application fails

How the CVE works: CVE-2025-20385 is a stored Cross-Site Scripting (XSS) vulnerability in Splunk Enterprise and Splunk Cloud Platform. An

The vulnerability exists due to insufficient input sanitization and validation of user-uploaded SVG files for avatar images. SVG format inherently

How the CVE Works: This vulnerability occurs during the installation or upgrade process of Splunk Enterprise on Windows systems. The

The vulnerability resides within the function responsible for decoding the SOR (Service Order Routing) transparent container in the modem/baseband firmware

How the CVE Works: This vulnerability occurs during the installation or upgrade process of the Splunk Universal Forwarder on Windows.

How the CVE works: In Splunk Enterprise and Splunk Cloud Platform, distributed search environments use search heads and peers for

This vulnerability concerns Envoy’s TCP proxy mode and its handling of the HTTP CONNECT method, which establishes a tunnel for

The CVE-2025-54326 vulnerability stems from a flaw in the camera device driver for Samsung Exynos 1280 and 2200 mobile processors.

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Secure Gateway app versions below 3.9.10, 3.8.58, and

This vulnerability, CVE-2025-53007, affects Envoy’s certificate validation when using the `match_typed_subject_alt_names` filter with the `OTHERNAME` type. When a client certificate’s

The vulnerability CVE-2024-34351 in Next.js involves a Server-Side Request Forgery (SSRF) flaw in the framework’s handling of certain request operations.

The vulnerability exists in the `identity.extractIssuerURL` function of the affected library. This function processes untrusted OIDC identity tokens from incoming

The vulnerability (CVE-2024-XXXXX) in Sigstore Timestamp Authority arises from improper parsing of untrusted data. Two functions are involved. The `api.ParseJSONRequest`

How the CVE Works: The vulnerability exists in urllib3’s streaming API for compressed HTTP responses (e.g., gzip, Brotli). When an

The vulnerability occurs in Envoy’s JWT authentication filter when configured to fetch JSON Web Key Sets (JWKS) remotely from a

How the CVE Works: The vulnerability exists in urllib3’s HTTP response content decoding. According to RFC 9110, a server can

The CVE-2025-33201 vulnerability in the NVIDIA Triton Inference Server stems from an improper check for unusual or exceptional conditions when

How the CVE Works CVE-2025-33211 is an improper input validation flaw within the NVIDIA Triton Inference Server. The vulnerability exists

In Envoy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, a vulnerability exists in TCP proxy mode when handling CONNECT requests.

The CVE-2025-9817 vulnerability exists in the SSH dissector component of Wireshark, versions 4.4.0 to 4.4.8. When Wireshark processes SSH protocol

The vulnerability CVE-2025-66032 in Claude Code prior to version 1.0.93 arises from flawed parsing logic for shell commands involving the

How the CVE Works: The vulnerability is a re-entry race condition in Envoy’s JwksFetcherImpl. When JWT authentication is configured with

The CVE-2025-14006 vulnerability exists in dayrui XunRuiCMS versions up to 4.7.1. It is a cross-site scripting (XSS) flaw in the

How the CVE works: Mattermost Boards feature includes comment functionality for collaboration. In affected versions, the server-side code for deleting

The CVE-2025-13945 vulnerability targets Wireshark versions 4.6.0 and 4.6.1, specifically within the HTTP/3 protocol dissector. HTTP/3 utilizes QUIC transport over

How the CVE Works: The vulnerability is a Stored Cross-Site Scripting (XSS) flaw within the XunRuiCMS administrative interface. The affected

The vulnerability resides in the `react-server-dom-` packages (e.g., react-server-dom-webpack) used by React Server Components. Server Function endpoints accept serialized data

The vulnerability exists within the MEGACO (Media Gateway Control) protocol dissector in Wireshark. When processing a specially crafted packet, the

CVE-2025-66460 is a Cross-Site Scripting (XSS) vulnerability in Lookyloo, a web interface for capturing and analyzing website domains. The vulnerability

CVE-2025-66222 is a stored cross-site scripting vulnerability in DeepChat versions 0.5.0 and earlier, specifically within the Mermaid diagram renderer. Attackers

This Cross-Site Scripting (XSS) vulnerability in Lookyloo arises from unsafe rendering of user-controlled data within web pages. Lookyloo’s web interface

CVE-2025-14007 is a cross-site scripting vulnerability in XunRuiCMS versions up to 4.7.1. It affects the Domain Name Binding Page via

How the CVE Works The vulnerability resides in Intel’s QuickAssist Technology (QAT) software drivers. An untrusted pointer dereference occurs when

How the CVE Works: The vulnerability exists because the LogStare Collector software installs its binaries and supporting files into a

The vulnerability exists in the error handling mechanism of Lookyloo’s URL capture submission feature. When a user provides a list

The vulnerability CVE-2025-66220 in Envoy arises from a flaw in the mTLS certificate matcher for the `match_typed_subject_alt_names` configuration. Envoy uses

How the mentioned CVE works: The vulnerability resides within the UserManagement component of LogStare Collector. It is a classic stored

The CVE-2025-63681 vulnerability in open-webui v0.6.33 stems from incorrect access control in the /api/tasks/stop/ API endpoint. This endpoint is designed

This stored cross-site scripting (XSS) vulnerability in Classroomio LMS version 0.1.13 arises due to insufficient input sanitization and validation of

The vulnerability resides in the Webform Multiple File Upload module for Drupal 7.x, specifically within the file name rendering functionality.

In OneUptime version 9.0.5598, the application exposes an API endpoint for creating user accounts, typically restricted to administrative interfaces. Low-permission

The CVE-2025-66028 vulnerability in OneUptime stems from insecure handling of authentication responses. During the login process, the client application receives

How the CVE Works: This vulnerability is a side-channel attack within Chrome’s navigation and loading components. An attacker can craft

The vulnerability CVE-2025-55471 in youlai-boot v2.21.1 involves incorrect access control in the getUserFormData function. This function retrieves user form data

How the mentioned CVE works: The vulnerability in youlai-boot v2.21.1 involves incorrect access control mechanisms that fail to properly enforce

How the CVE Works: This vulnerability is an Insecure Direct Object Reference (IDOR) within the classroomio application version 0.1.13. The

How the mentioned CVE works: Suricata processes HTTP network traffic. It logs HTTP content type headers. A large content type

This vulnerability is a stack-based buffer overflow within Suricata’s SWF (Shockwave Flash) file decompression module. When SWF decompression is enabled

How the mentioned CVE works: The CVE-2025-65202 vulnerability exists in TRENDnet TEW-657BRM routers with firmware version 1.00.1. It involves the

The OpenBao AWS auth method allows AWS entities (like IAM roles) to authenticate and receive a Vault token. It works

The vulnerability CVE-2025-20995 involves improper handling of insufficient permissions in the ClientProvider component of Samsung Internet browser on non-Samsung devices.

The CVE-2025-11154 vulnerability exists in the IDonate WordPress plugin versions before 2.1.13. The plugin includes an action handler for deleting

The vulnerability in ansible-collection-community-general stems from inadequate sanitization of sensitive data during debug output generation. When Ansible is run with

How the mentioned CVE works: The vulnerability CVE-2025-6680 in Tutor LMS plugin for WordPress up to version 3.8.3 stems from

The CVE-2025-49923 vulnerability in the Seriously Simple Podcasting WordPress plugin arises from improper neutralization of user input during web page

How the mentioned CVE works: The vulnerability occurs in the Logrus logging library when using the Entry.Writer() method for logging

The vulnerability resides in the `tika-core` library’s XML parsing logic when processing XFA (XML Forms Architecture) data embedded within a

This High severity vulnerability is a path traversal flaw in Jira Software Data Center and Server that allows arbitrary file

How the Mentioned CVE Works: The vulnerability exists within the `elex-helpdesk` WordPress plugin’s file upload functionality, specifically in the `upload_files_ajax`

This vulnerability exists in the `downloadPdf()` function within /src/lib/components/notes/utils.ts. The function creates a temporary `div` element and directly assigns user-controlled

How the CVE Works: This CVE is a Missing Authorization vulnerability in the Seriously Simple Podcasting plugin for WordPress. The

How the mentioned CVE works: Weblate is a web-based localization tool. In versions 5.14 and below, a vulnerability exists where

How the mentioned CVE works: The vulnerability exists within the `libcrux-intrinsics` crate, specifically in its implementation of the `vxarq_u64` intrinsic

How the mentioned CVE works: The vulnerability is a stored Cross-site Scripting (XSS) in the 3DSearch component of 3DSwymer on

The directory traversal vulnerability in ComposioHQ v.0.7.20 resides in the `_download_file_or_dir` function. This function is responsible for handling file download

How the mentioned CVE works: CVE-2025-9554 is a security vulnerability in the Drupal Owl Carousel 2 module, which provides carousel

How the CVE works: The vulnerability resides in the SyncClientProvider component of Samsung Internet browser when installed on non-Samsung devices.

How the CVE Works This vulnerability exists in the 3DSwym community collaboration component of the 3DEXPERIENCE platform. An authenticated attacker

The vulnerability resides in the VerifyCertificate() function within Icinga 2 when compiled with OpenSSL versions prior to 1.1.0. Due to

How the CVE works: The vulnerability stems from a flaw in the TLS configuration parsing within the MongoDB Rust Driver.

The vulnerability in EasySoft Zentaopms stems from insecure deserialization within the Edit function of the Committer component. Attackers can remotely

The CVE-2025-11564 vulnerability stems from an insecure webhook handler in the Tutor LMS plugin. The `verifyAndCreateOrderData` function, responsible for processing

The vulnerability is in the `/api/v1/retrieval/process/web` endpoint. The `form_data.url` user input is passed directly to the `get_content_from_url()` function without any

The vulnerability exists in the `/api/tasks/stop/` endpoint of Open-WebUI version 0.6.33. This API function is designed to cancel long-running LLM

The vulnerability in alexusmai laravel-file-manager version 3.3.1 and below is a directory traversal issue within the zip/archiving functionality. This occurs

How the CVE works: Grav, a file-based CMS, stores user account data as YAML files in the user/accounts/ directory. When

The vulnerability exists in Grav’s Admin plugin due to missing username uniqueness validation during user creation. A user with ‘create

This vulnerability exists within the SSH restricted shell interface provided by certain HPE network management services. The shell is intended

The vulnerability resides in the MPLocalService component of MotionPhoto applications versions before 4.1.51. Improper access control mechanisms fail to enforce

The CVE-2025-66294 vulnerability in Grav arises from inadequate regex validation in the cleanDangerousTwig method, which is intended to sanitize Twig

The CVE-2025-66206 vulnerability is a path traversal issue in the Frappe web framework. It affects versions before 15.86.0 and 14.99.2.

The CVE-2025-51682 vulnerability in mJobtime 15.7.2 arises from implementing authorization controls exclusively on the client side. The application’s JavaScript code

The vulnerability exists within a specific Frappe framework endpoint that improperly handles user-supplied parameters. Due to insufficient input validation and

The vulnerability (CVE-2025-?????) in Anthropic’s experimental sandbox-runtime stems from an incorrect implementation of network allow-list logic. The sandbox’s enforcement mechanism

How the CVE works: The CVE-2025-54057 vulnerability exists in Apache SkyWalking versions 10.2.0 and earlier due to insufficient sanitization of