Author name: UNDERCODE

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability within the Liferay Account Admin Web portlet. The flaw exists

The CVE-2025-22094 vulnerability is an IDOR flaw within Liferay’s Publications module. It stems from improper authorization checks on the `_com_liferay_change_tracking_web_portlet_PublicationsPortlet_value`

The CVE-2025-XXXX vulnerability in llama-index versions prior to 0.12.34 stems from an insecure default configuration for the NLTK data directory.

The CVE describes an Insecure Direct Object Reference (IDOR) vulnerability within the Liferay Publications module. The flaw exists in the

How the mentioned CVE works: The vulnerability CVE-2025-22096 exists due to a logical flaw in the MongoDB Rust Driver’s connection

The vulnerability in tracexec’s command line reconstruction feature stems from improper parsing of environment variable keys that begin with a

How the mentioned CVE works: This Cross-Site Scripting (XSS) vulnerability exists within the attribute table component of the QGIS QWC2

The CVE-2025-XXXXX vulnerability in Omni stems from an insecure direct object reference (IDOR) flaw within its API endpoints. The affected

The vulnerability is triggered when an unauthenticated user sends a Create or Update API request with an empty JSON body

How the CVE Works The vulnerability is a logic flaw within CommandKit’s message command handler. When a user invokes a

How the mentioned CVE works The vulnerability CVE-2025-45431 is an authenticated Stored Cross-Site Scripting (XSS) flaw within the Bagisto e-commerce

How the mentioned CVE works: This CVE is a Cross-Site Request Forgery vulnerability in Liferay Portal’s publication commenting feature. The

How the mentioned CVE works: The vulnerability CVE-2025-45427 exists in the Alt Redirect addon for Statamic. When the “Query String

The vulnerability exists in the CEL expression parser within the cel-rust crate. When parsing specially crafted, malformed CEL expressions, the

The CVE-2025-XXXXX vulnerability is a Stored Cross-Site Scripting (XSS) flaw within the workflow process builder component of Liferay Portal and

The CVE describes a Stored Cross-Site Scripting vulnerability within the Membership page of Liferay Portal’s Account Settings. The flaw exists

How the mentioned CVE works: The CVE-2025-45110 vulnerability exists within the rardecode library (versions 2.1.1 and earlier). The library’s code

The CVE-2025-XXXX vulnerability is a stored Cross-Site Scripting (XSS) flaw within the Liferay Portal Commerce module. The vulnerability exists due

The CVE-2025-XXXXX vulnerability in Elasticsearch occurs when the reindex API is used with a source that requires authentication, such as

The vulnerability exploits an integer overflow in the Parallax protocol’s handling of the `GetBlockHeaders` request. An attacker establishes a peer

The vulnerability in Happy DOM (v19 and lower) stems from the inherent lack of isolation in the Node.js VM context.

This CVE describes an Incorrect Execution-Assigned Permissions vulnerability within Apache StreamPark. The flaw exists in the application’s logic for assigning

The CVE-2025-22094 vulnerability exists within the `drupal-pattern-lab/unified-twig-extensions` package. The flaw is a Cross-site Scripting (XSS) issue caused by insufficient input

The CVE-2023-XXXX vulnerability in Astro’s on-demand rendering mode stems from its insecure handling of the `X-Forwarded-Host` header. When a request

How the CVE Works The vulnerability exists in Authlib’s implementation of JWE (JSON Web Encryption) when the `”zip”:”DEF”` header is

The vulnerability in the `python-ldap` library resides in the `ldap.filter.escape_filter_chars` function when the non-default `escape_mode=1` is used. This function is

The vulnerability exists in the `ReadFileTool` class within the Flowise application. This tool is designed to allow Large Language Models

The vulnerability exists in the Reviewbot component’s webhook authentication mechanism. Inbound webhook HTTP requests contain a signature header for verification.

The vulnerability exists in the `ldap.dn.escape_dn_chars()` function. Its purpose is to safely escape characters in a Distinguished Name (DN) according

The CVE-2025-45104 vulnerability is a reflected Cross-Site Scripting (XSS) flaw within the Calendar Events functionality of Liferay Portal and Liferay

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts. The exploit functions

How the CVE Works The vulnerability exists within Authlib’s JOSE implementation for JWS/JWT verification. A malicious actor can craft a

The CVE-2025-45513 vulnerability is a ReDoS flaw in the Sinatra web framework. It originates from the component that parses the

How the mentioned CVE works: CVE-2022-35914 is an unauthenticated SQL Injection vulnerability within the WordPress `WP_Query` class. The flaw resides

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. When a malicious

The CVE-2017-5638 vulnerability in Apache Struts is a critical remote code execution flaw stemming from flawed error handling in the

The vulnerability in Rack::Sendfile middleware occurs due to improper handling of client-supplied headers when used with an accelerator proxy like

How the CVE Works: The vulnerability exists within the Rack::RequestPOST method. When a request with a Content-Type of “application/x-www-form-urlencoded” is

How the CVE Works In the standard QUIC handshake, a client uses three encryption key phases: Initial, Handshake, and 1-RTT.

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. The exploit works

How the mentioned CVE works: The vulnerability exists within the `gitdumper.py` module of the BBOT tool. When BBOT processes a

How the CVE Works: The vulnerability exists within BBOT’s `git_clone.py` module. When processing a git repository URL from an untrusted

The vulnerability in Amazon.IonDotnet arises from improper handling of a specific error condition during the parsing of Ion text data.

How the mentioned CVE works: The CVE-2017-5638 vulnerability exists in the Jakarta Multipart parser of Apache Struts 2. The flaw

How the mentioned CVE works: This CVE exploits a SQL injection vulnerability within the Change Data Capture (CDC) functionality of

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts 2. The flaw

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts. The exploit is

The vulnerability CVE-2021-43798 is a path traversal flaw in Grafana’s static plugin handling. The issue resides in the URL path

How the mentioned CVE works: The vulnerability CVE-2025-22098 exists in the python-social-auth library for Django. During the third-party authentication pipeline,

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts 2. The exploit

How the CVE Works The vulnerability is an authentication logic flaw in the API key creation endpoint. The code derives

How the mentioned CVE works: The vulnerability exists within the ‘melis-cms-slider’ module of Melis Platform. An attacker can send a

The CVE-2025-45713 vulnerability chain in Liferay Portal stems from a failure to properly sanitize user-supplied input before rendering it in

The vulnerability in pyLoad’s web interface stems from insufficient input validation within the Captcha and Click’N’Load (CNL) endpoints. User-supplied parameters

The CVE-2021-21292 vulnerability stems from the inherent functionality of the ‘Execute Command’ node within the n8n workflow automation platform. This

The CVE-2024-XXXX vulnerability in the Melis Platform CMS is a classic SQL injection flaw located within the `getTinyTemplates` endpoint of

The vulnerability exists in the WriteFileTool component within Flowise. This tool, designed for LLM file operations, accepts a `file_path` and

This CVE describes a Stored Cross-Site Scripting vulnerability within the Forms module of Liferay Portal and DXP. The flaw exists

The CVE-2024-XXXX vulnerability in the Melis Platform’s `melis-core` module stems from an improper access control mechanism on the `/melis/MelisCore/ToolUser/addNewUser` endpoint.

This CVE describes a Stored Cross-Site Scripting vulnerability within the Liferay Portal Commerce module, specifically affecting products of the ‘diagram’

The CVE-2025-22094 vulnerability is a stored Cross-Site Scripting (XSS) flaw within the Commerce Product Comparison Table widget of Liferay Portal

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. When a malicious

The CVE-2025-45421 vulnerability is a stored Cross-Site Scripting (XSS) flaw within the Commerce Search Result widget of Liferay Portal and

The vulnerability in SciO stems from its dependency on a vulnerable version of PyTorch (torch <= 2.5.1). The underlying flaw,

How the mentioned CVE works: This CVE exploits a failure to properly sanitize user input within Liferay Portal’s commerce module.

The CVE-2017-5638 vulnerability in Apache Struts 2 is a critical remote code execution flaw originating from flawed error handling in

The vulnerability (CVE-2024-2418) in Keycloak’s `KeycloakRealmImport` custom resource stems from its placeholder substitution mechanism. During the import of a realm

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts 2. The flaw

The CVE-2017-5638 vulnerability in Apache Struts 2 is a critical remote code execution flaw stemming from flawed error handling in

The CVE-2025-45404 vulnerability in Opencast’s Paella Player stems from improper neutralization of user-controlled input before its inclusion in the rendered

This vulnerability exploits the file upload functionality in FlowiseAI’s `/api/v1/attachments/` endpoint. The system uses the Multer middleware for handling `multipart/form-data`

How the mentioned CVE works: The CVE-2017-5638 vulnerability resides in the Jakarta Multipart parser of Apache Struts 2. The exploit

How the mentioned CVE works: The vulnerability exists in the Jakarta Multipart parser in Apache Struts 2. An attacker can

The vulnerability exists because the Windows `CreateProcess` API, which Deno’s subprocess spawning mechanisms ultimately use, implicitly interprets batch files (.bat,

How the mentioned CVE works: The vulnerability exists in the Jakarta Multipart parser in Apache Struts 2. An attacker can

The vulnerability exists because the `Deno.FsFile.prototype.stat` and `Deno.FsFile.prototype.statSync` methods do not perform the necessary permission checks for reading when called

How the mentioned CVE works: This vulnerability stems from a lack of proper validation for device keys submitted by local

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. When a malicious

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. When a malicious

How the mentioned CVE works: The CVE-2017-5638 vulnerability in Apache Struts 2 is a critical flaw in the Jakarta Multipart

How the mentioned CVE works: The CVE-2022-21661 vulnerability exists within the WordPress WP_Query class. A flaw in the sanitization of

The CVE describes a critical memory isolation failure within the Fuel Virtual Machine (FuelVM). The vulnerability stems from improper memory

The vulnerability CVE-2025-1104 exists in the Deno runtime. It is a flaw in the permission model enforcement for the `Deno.FsFile.prototype.utime`

The vulnerability exists within the `_process_request` function of src/llamafactory/api/chat.py. This function processes user-supplied URLs for multimedia content (images, videos, audio).

How the mentioned CVE works: The vulnerability CVE-2025-45421 in pdfmake arises from its handling of external files embedded within a

The Profile widget in Liferay uses a user-supplied name to construct the “Content-Disposition” header when generating a vCard for download.

The vulnerability (CVE-2024-5372) in vLLM’s OpenAI-Compatible API server stems from insufficient validation of user-supplied Jinja2 templates. The `/v1/chat/completions` endpoint accepts

The vulnerability in LangChain’s HTMLSectionSplitter class stems from its unsafe handling of XSLT stylesheets. The class uses `lxml.etree.parse()` and `lxml.etree.XSLT()`

The vulnerability, CVE-2025-61778, stems from a flawed implementation of TLS in the Akka.Remote transport. In affected versions (1.2.0 to 1.5.51),

How the mentioned CVE works: The CVE-2017-5638 vulnerability exists in the Jakarta Multipart parser of Apache Struts. An attacker exploits

How the mentioned CVE works: The vulnerability resides in the Jakarta Multipart parser in Apache Struts 2. An attacker can

The CVE-2017-5638 vulnerability in Apache Struts 2 stems from flawed error handling within the Jakarta Multipart parser. When a malicious

How the mentioned CVE works: The CVE-2021-33909 vulnerability, also known as Sequoia, exists in the Linux kernel’s filesystem layer. The

The CVE-2025-XXXXX vulnerability exploits the Rack::Multipart::Parser’s handling of multipart form data headers. When parsing a multipart request, the parser reads

How the mentioned CVE works The vulnerability CVE-2024-22130 is a Stored Cross-Site Scripting (XSS) flaw within the Zimbra Collaboration Suite

The vulnerability exists within the Rack::Multipart::Parser component. During the parsing of a multipart/form-data request, the parser differentiates between file and

The vulnerability (CVE-2024-53500) in vLLM’s OpenAI-compatible API server stems from a non-constant-time string comparison used for API key validation. The

The vulnerability exists within the `Rack::Multipart::Parser` component. When parsing a multipart HTTP request, the parser searches for the initial boundary

How the mentioned CVE works The CVE-2017-5638 vulnerability exists within the Jakarta Multipart parser in Apache Struts 2. The flaw