Author name: UNDERCODE

The vulnerability in Campcodes School File Management System 1.0 involves SQL injection via the stud_no parameter in the login component

The vulnerability exists within the `/listorder.php` file of the Simple Food Ordering System. The application fails to properly sanitize user-supplied

The vulnerability CVE-2025-13548 is a remote buffer overflow in D-Link DIR-822K and DWR-M920 routers running firmware version 1.00_20250513164613/1.1.50. It occurs

The vulnerability targets Advanced Library Management System 1.0. It resides in the /delete_admin.php file. The admin_id parameter is improperly sanitized.

The vulnerability exists in the itsourcecode COVID Tracking System version 1.0. It involves a SQL injection flaw in the /admin/?page=establishment

The vulnerability resides in the `removefile` function within /app/controllers/FilehelperController.php. This function accepts a user-controlled `filepath` parameter without adequate sanitization or

The CVE-2025-13547 vulnerability originates from insufficient input validation in the DDNS configuration form handler within the D-Link router firmware. Specifically,

The vulnerability exists within the `/add_book.php` script of ProjectWorlds versions up to 1.0. The application fails to adequately validate files

How the CVE Works: The vulnerability exists in the `/admin/?page=people` endpoint of itsourcecode COVID Tracking System version 1.0. The application

The CVE-2025-13577 vulnerability is a reflected cross-site scripting (XSS) flaw in PHPGurukul Hostel Management System version 2.1. The issue resides

How the mentioned CVE works: The vulnerability exists in the itsourcecode COVID Tracking System version 1.0. It is a SQL

How the CVE works: The vulnerability is in D-Link DIR-822K and DWR-M920 routers with firmware version 1.00_20250513164613/1.1.50. It involves a

The CVE-2025-58315 vulnerability originates from insufficient permission checks within the Wi-Fi module software on Huawei devices. This flaw allows local

The CVE-2025-64314 vulnerability stems from improper permission enforcement within the memory management module of Huawei systems. Memory management modules control

The Grav content management system contains a reflected cross-site scripting vulnerability in the admin panel’s page editing functionality. Specifically, the

The vulnerability operates through the Grav CMS administrative interface where page management is handled. When a POST request is sent

How the mentioned CVE works: CVE-2024-31419 exploits a Server-Side Template Injection (SSTI) vulnerability in Grav CMS’s forms plugin. When a

The CVE-2025-58308 vulnerability stems from an improper security criterion check within Huawei’s call module, which handles telecommunication functions. This module

The vulnerability CVE-2025-64315 is a configuration defect within the file management module of Huawei’s EMUI skin on Android. This flaw

The vulnerability exists in the Angular Template Compiler due to an incomplete internal security schema. This schema fails to properly

The CVE-2025-64311 is a permission control vulnerability in the Huawei Notepad module. It stems from improper access controls that fail

In Grav CMS, users with admin panel access and permissions to create or edit pages can enable Twig processing in

The CVE-2025-64312 vulnerability stems from inadequate permission enforcement within Huawei’s file management module. When a user interacts with the file

The CVE-2025-58305 vulnerability is an identity authentication bypass within the Huawei Gallery application. The flaw resides in how the app

This CVE involves a vulnerability in a Huawei driver module where improper memory handling allows access to invalid memory addresses.

The vulnerability in mdast-util-to-hast arises from improper sanitization of class attributes when processing markdown input. Specifically, when markdown source contains

The vulnerability exists in the `cleanDangerousTwig()` method in /system/src/Grav/Common/Security.php. This method uses a weak regular expression to blacklist dangerous Twig

The CVE-2025-64313 vulnerability in Huawei Office Service stems from improper input validation within document parsing functions. When a locally authenticated

The vulnerability operates through the `x-portkey-custom-host` HTTP header within the Portkey AI Gateway. During request processing, the gateway prioritizes this

The CVE-2025-58304 vulnerability stems from improper permission control within the file management module of Huawei devices. This flaw allows unauthorized

How the mentioned CVE works: CVE-2025-58302 is a permission control vulnerability in the Settings module of Huawei devices. It stems

How the mentioned CVE works: The vulnerability is a Stored Cross-Site Scripting (XSS) in the Grav application. It occurs in

The CVE-2025-58316 vulnerability resides in Huawei’s video-related system service module, where improper input validation and resource handling can lead to

The vulnerability in Keycloak involves a bypass of access controls to the admin console through proxy misconfiguration. Keycloak’s documentation advises

How the Mentioned CVE Works CVE-2025-58312 is a permission control flaw within Huawei’s App Lock module on certain devices. The

The vulnerability exists in the `/api/fileUploadAndDownload/removeChunk` endpoint of the gin-vue-admin application. This interface is intended for deleting temporary file chunks

The vulnerability operates within Grav CMS’s Admin UI when a user with account creation privileges attempts to create a new

This vulnerability is a Use-After-Free (UAF) flaw within a specific Huawei USB driver kernel module. UAF occurs when a program

The vulnerability exists in the `cloneRepo` method of the MCPScanner class within an MCP scanning tool. The method takes a

The CVE-2021-21425 vulnerability in Grav CMS stems from improper authorization checks in the Admin plugin’s page editing endpoint. When an

The vulnerability exists in `keras.utils.get_file()` when extracting tar archives. The function uses `tarfile.extractall()` without the security-critical `filter=”data”` parameter. While Keras

The vulnerability exists in the `maxminddb` Rust crate’s `Reader::open_mmap` function. This function was incorrectly declared as `safe` while it internally

The vulnerability operates within the “Forgot Password” functionality at the /admin/forgot endpoint in Grav CMS with the Admin plugin. When

How the mentioned CVE works: The vulnerability resides in an admin panel’s user account management section. Users granted read access

This vulnerability occurs in the Grav admin panel’s language configuration. The `Supported` language parameter value is directly used to dynamically

How the mentioned CVE works: This vulnerability targets the Grav content management system’s admin panel via the POST /admin/pages/[bash] endpoint.

How the Mentioned CVE Works The vulnerability is a Denial-of-Service (DoS) condition triggered by improper input sanitization of cron expressions

This vulnerability exists in Keycloak’s server distribution when started with the `–debug` flag to enable Java debugging. When this flag

The CVE-2021-12345 vulnerability works by exploiting a weakness in Grav CMS’s custom Twig sandbox. The sandbox uses a `registerUndefinedFilterCallback` function

How the CVE works: CVE-2024-2792 exploits an Insecure Direct Object Reference (IDOR) vulnerability in Grav CMS’s form plugin, specifically in

How the mentioned CVE works: The `@fastify/reply-from` plugin allows a Fastify server to forward specific HTTP requests to a designated

How the mentioned CVE works: The vulnerability exploits the Grav application’s admin endpoint `/admin/accounts/groups/Grupo` via the `data[bash]` parameter. During group

The vulnerability in Grav’s Admin plugin arises from a flawed user creation mechanism that does not enforce username uniqueness. When

The CVE-2025-66302 vulnerability is a path traversal flaw in Grav CMS version 1.7.49.5, affecting the backup functionality within the admin

The vulnerability exists in the user account management endpoint /admin/accounts/users/{username}. When a low-privilege authenticated user requests another user’s profile page

The vulnerability, CVE-2025-XXXXX, exists within the public API of the rtvm-interpreter. It stems from unsound memory safety practices in a

The vulnerability exists in Werkzeug’s `safe_join()` function, which is used by `send_from_directory()` to securely resolve user-supplied paths within a base

The vulnerability exists in the `GET /api/v4/channels/{channel_id}/common_teams` API endpoint. When this endpoint is queried, it returns a list of teams

This vulnerability in peppol-py arises from an insecure default configuration of the Saxon HE XML parser used for validating XML

The vulnerability in Keras version 3.11.3 resides in the `keras.utils.get_file()` function, which is used to download and cache files. When

The vulnerability in ThingsBoard versions prior to v4.2.1 involves a stored cross-site scripting (XSS) attack via malicious SVG image uploads.

The vulnerability, CVE-2025-XXXX, exists within the `/users/login/sso/code-exchange` endpoint of the Mattermost server. During the OAuth-based authentication flow, when a user

The vulnerability occurs in Mattermost when using OpenID Connect for authentication. During the OAuth authorization flow, the application generates a

How the CVE works: The vulnerability CVE-2025-39834 is a memory leak in the Linux kernel’s net/mlx5 subsystem, specifically within the

How the Mentioned CVE Works CVE-2025-53014 is an information disclosure vulnerability in the Overhang.IO Tutor platform, specifically version 20.0.2. The

CVE-2025-39836 is a vulnerability in the Linux kernel’s EFI System Trusted Management Module (STMM) driver. The issue arises from the

The vulnerability in Better Auth occurs when the baseURL is not explicitly configured, such as when the BETTER_AUTH_URL environment variable

This vulnerability in Mustangproject versions before 2.16.3 involves XML External Entity (XXE) attacks. Attackers can craft malicious XML inputs that

The vulnerability resides in the address parser within `lib/addressparser/index.js` of the Nodemailer library. According to RFC 5322, nested group structures

How the CVE works: The vulnerability CVE-2025-13397 exists in mrubyc up to version 3.4. It specifically targets the mrbc_raw_realloc function

The vulnerability CVE-2025-38643 in the Linux kernel arises from a missing mutex lock in the WiFi cfg80211 subsystem. Specifically, the

In Anyscale Ray 2.52.0, the management interfaces, including the dashboard and Jobs API, default to having token-based authentication disabled. This

How the CVE works: The vulnerability exists in the NR modem’s signal processing stack due to improper input validation of

The CVE-2025-54527 vulnerability in JetBrains YouTrack stems from inadequate sandbox attribute configuration for iframes used within the widget sandbox feature.

How the mentioned CVE works: Cherry Studio versions 1.2.5 through 1.5.1 integrate with MCP (Model Context Protocol) servers for enhanced

Cherry Studio version 1.5.1 has a remote code execution vulnerability in its streamableHttp MCP server handling. The issue occurs during

The vulnerability occurs in Express.js versions using the default ‘extended’ query parser. When parsing a query string like ?__proto__ =true</code>,

The vulnerability in fonttools varLib arises from unsanitized user input handling in the `main()` function when processing .designspace files. Specifically,

The CVE-2025-28977 vulnerability is a reflected Cross-site Scripting (XSS) issue in the ThimPress WP Pipes WordPress plugin. It arises from

The CVE-2025-10244 vulnerability exploits the HTML rendering engine within the Autodesk Fusion desktop application. This engine fails to properly sanitize

How the mentioned CVE works: The vulnerability exists within the `deletePartitionColumnStatistics` and `deleteTableColumnStatistics` methods of the Hive Metastore Server’s Thrift

The CVE-2025-36088 vulnerability is a stored Cross-Site Scripting (XSS) flaw within the web-based Graphical User Interface (GUI) of the IBM

The vulnerability operates within Cilium’s network policy engine when processing `CiliumNetworkPolicy` resources that specify egress rules using the `toGroups` field

How the CVE works: The vulnerability is an out-of-bounds write in the PCX image codec within QNX SDP versions 8.0,

The vulnerability is a Cross-Site Scripting (XSS) flaw in Spotipy’s OAuth callback server. During OAuth authentication, Spotipy initiates a local

How the CVE Works The vulnerability exists in the `/vb.htm` endpoint of the device’s management interface. This page contains a

How the CVE works: Cherry Studio uses a custom URL scheme (e.g., cherry://) for deep linking. In versions 1.4.8 to

The CVE-2025-28979 vulnerability stems from improper sanitization of file paths in the WP Pipes WordPress plugin, specifically within include() or

The CVE-2025-36114 vulnerability affects IBM QRadar SOAR Plugin App from versions 1.0.0 to 5.6.0. It is a directory traversal flaw

The vulnerability exists in the XWiki Jetty package (XJetty), which improperly exposes a static file-serving context. This context is mapped

How the mentioned CVE works: This vulnerability exists within the SIP media component of Cisco’s TelePresence CE and RoomOS software.

How the CVE Works: The vulnerability exists within the `coap_dtls_generate_cookie()` function in the libcoap library’s OpenSSL integration code. During a

The CVE-2025-12766 IDOR vulnerability exists in the Management Console of BlackBerry AtHoc OnPrem version 7.21. This console manages multiple organizations

CVE-2025-65494 is a NULL pointer dereference vulnerability in the get_san_or_cn_from_cert() function within src/coap_openssl.c of OISM libcoap version 4.3.5. This function

How the CVE Works The vulnerability exists in the `libcoap` library’s DTLS/TLS integration within the `src/coap_openssl.c` file. When the library

How the CVE works: The vulnerability exists within the `code` parameter of the `/login.php` script in Code-Projects COVID Tracking System

The vulnerability is an integer signedness error in the `tls_verify_call_back()` function within `src/coap_openssl.c` of OISM libcoap version 4.3.5. During TLS

The CVE-2025-65497 vulnerability involves a NULL pointer dereference in the coap_dtls_generate_cookie() function within the src/coap_openssl.c file of OISM libcoap version

The CVE-2025-13581 vulnerability exists in the itsourcecode Student Information System version 1.0, specifically within the `/schedule_edit1.php` file. This file handles

The vulnerability CVE-2025-65500 is a NULL pointer dereference in the coap_dtls_generate_cookie() function within src/coap_openssl.c of OISM libcoap version 4.3.5. This