exploit

The vulnerability (CVE-2021-35313) exploits a flaw in the XML canonicalization process within the `libxml2` library, as utilized by the Nokogiri

The CVE-2025-22399 vulnerability is a blind server-side request forgery (SSRF) flaw in Dell UCC Edge version 2.3.0, specifically within the

The vulnerability exists in the library’s ASN.1 object identifier (OID) decoding logic. When parsing a DER-encoded OID, `node-forge` uses a

The CVE-2025-63229 vulnerability is a reflected Cross-Site Scripting (XSS) flaw in the Mozart FM Transmitter web management interface, version WEBMOZZI-00287.

How the CVE works: node-forge’s ASN.1 parser in versions 1.3.1 and below lacks recursion depth limits when processing DER-encoded data.

How the mentioned CVE works: The vulnerability exists in the Image Handler component within the /user/profile endpoint of yungifez Skuul

The vulnerability occurs in the D-Link R15 (AX1500) router’s web administration interface. During a password change request, the application processes

This vulnerability exists within the SVG File Handler component of the yungifez Skuul School Management System (up to version 2.6.5).

How the CVE Works: The vulnerability resides in the `/api/images` endpoint of EverShop version 2.0.1. This API fails to perform

This vulnerability is a Time-of-Check-Time-of-Use (TOCTOU) race condition within HP Image Assistant’s package installation process on Windows. The flaw exists

The CVE-2025-41080 vulnerability is a stored Cross-Site Scripting (XSS) flaw in Seafile version 12.0.10. It specifically affects the API endpoint

This stored Cross-Site Scripting vulnerability in Seafile v12.0.10 stems from inadequate input sanitization in the ‘name’ parameter of PUT requests

How the CVE works: PgBouncer, a PostgreSQL connection pooler, versions prior to 1.25.1, contain an untrusted search path vulnerability in

The CVE-2024-35255 vulnerability works due to a flaw in the Strimzi operator’s role generation logic for Apache Kafka Connect and

The vulnerability resides in the thumb.cgi component of Synology FileStation, which handles thumbnail generation for image files. Authenticated remote users

How the CVE Works: The vulnerability exists within the `g_cfg.MaxUsers` configuration parsing component of LightFTP server version 2.0. This component

How the CVE Works: The vulnerability exists in the `sub.cgi` component of Synology VideoStation’s VideoPlayer2. This CGI script, intended for

In ClipBucket v5 versions 5.5.2-146 and prior, a stored cross-site scripting vulnerability exists in the Manage Photos feature. Authenticated regular

How the CVE Works: The vulnerability resides within the `file.cgi` component of Synology DiskStation Manager’s (DSM) FileStation application. A remote

How the mentioned CVE works: CVE-2025-22483 is a stored cross-site scripting vulnerability in the QNAP License Center web interface. It

The vulnerability CVE-2025-29846 targets the portenable cgi component in Synology software, likely within DiskStation Manager (DSM). This CGI script is

In AstrBot Project v3.5.22, the ‘/plugin/install-upload’ endpoint is vulnerable to directory traversal. The install_plugin_upload function handles file uploads for plugins.

The vulnerability resides in the `_encode_image_bs64` function within the `entities.py` file of AstrBot Project v3.5.22. This function is intended to

How CVE-2025-55221 Works: This vulnerability targets the Modbus TCP and Modbus RTU over TCP USB Function in Socomec DIRIS Digiware

How the mentioned CVE works: The vulnerability stems from inconsistent object size validation within MongoDB’s time series processing logic. When

The vulnerability exploits the Modbus RTU over TCP service on port 503. An unauthenticated attacker sends a specific sequence of

This vulnerability exploits the Modbus TCP and Modbus RTU over TCP services in the Socomec DIRIS Digiware M-70 energy meter.

How the CVE Works: This vulnerability is a TLS certificate validation bypass due to improper Extended Key Usage (EKU) enforcement.

The CVE-2025-46608 vulnerability involves improper access control in Dell Data Lakehouse versions prior to 1.6.0.0. This flaw allows a high-privileged

How CVE-2025-20085 Works: The vulnerability exists in the Modbus RTU over TCP functionality of Socomec DIRIS Digiware M-70 firmware version

How the CVE Works: The vulnerability resides in the Modbus RTU over TCP stack of the Socomec DIRIS Digiware M-70

How the CVE Works: The vulnerability resides in the Application Server component of Desktop Alert PingAlert. Due to improper access

The CVE-2025-55222 vulnerability exists in the Modbus TCP and Modbus RTU over TCP USB Function functionality of Socomec DIRIS Digiware

This vulnerability is a stored Cross-Site Scripting (XSS) flaw within the user management interface of Revive Adserver. It arises from

How the Mentioned CVE Works The vulnerability exists in the Application Server component of Desktop Alert PingAlert. Critical configuration values,

The CVE-2025-54563 vulnerability arises from flawed access control in the Application Server of Desktop Alert PingAlert versions 6.1.0.11 to 6.1.1.2.

The CVE-2025-14008 vulnerability is a Server-Side Request Forgery (SSRF) flaw in dayrui XunRuiCMS up to version 4.7.1. It occurs in

How the mentioned CVE works: In ImageMagick’s Magick++ layer, invoking Options::fontFamily with an empty string triggers a cleanup that calls

The CVE-2025-13354 vulnerability in the Tag, Category, and Taxonomy Manager – AI Autotagger with OpenAI plugin for WordPress stems from

How the mentioned CVE works: The vulnerability resides in the “getTermsForAjax” function of the Tag, Category, and Taxonomy Manager –

How the mentioned CVE works: CVE-2025-20382 is an unvalidated redirect vulnerability affecting Splunk Enterprise and Splunk Cloud Platform. It impacts

How the CVE works: In vulnerable versions of Splunk Enterprise and Splunk Secure Gateway app, a low-privileged user without “admin”

The vulnerability exists within the file archive extraction function of the Laravel File Manager package. The endpoint responsible for unzipping

How the CVE Works: Attestable AMIs use a Unified Kernel Image (UKI) measured by the UEFI firmware. The UKI embeds

The vulnerability resides in the /en-US/static/ web endpoint within Splunk Enterprise and Splunk Cloud Platform. This endpoint serves static resources

How the mentioned CVE works The vulnerability exists in the `login.php` file of Online Medicine Guide 1.0. The application fails

How the CVE works: CVE-2025-20385 is a stored Cross-Site Scripting (XSS) vulnerability in Splunk Enterprise and Splunk Cloud Platform. An

The vulnerability exists due to insufficient input sanitization and validation of user-uploaded SVG files for avatar images. SVG format inherently

How the CVE Works: This vulnerability occurs during the installation or upgrade process of Splunk Enterprise on Windows systems. The

The vulnerability resides within the function responsible for decoding the SOR (Service Order Routing) transparent container in the modem/baseband firmware

How the CVE Works: This vulnerability occurs during the installation or upgrade process of the Splunk Universal Forwarder on Windows.

How the CVE works: In Splunk Enterprise and Splunk Cloud Platform, distributed search environments use search heads and peers for

This vulnerability concerns Envoy’s TCP proxy mode and its handling of the HTTP CONNECT method, which establishes a tunnel for

The CVE-2025-54326 vulnerability stems from a flaw in the camera device driver for Samsung Exynos 1280 and 2200 mobile processors.

In Splunk Enterprise versions below 10.0.2, 9.4.6, 9.3.8, and 9.2.10, and Splunk Secure Gateway app versions below 3.9.10, 3.8.58, and

This vulnerability, CVE-2025-53007, affects Envoy’s certificate validation when using the `match_typed_subject_alt_names` filter with the `OTHERNAME` type. When a client certificate’s

The vulnerability CVE-2024-34351 in Next.js involves a Server-Side Request Forgery (SSRF) flaw in the framework’s handling of certain request operations.

The vulnerability exists in the `identity.extractIssuerURL` function of the affected library. This function processes untrusted OIDC identity tokens from incoming

The vulnerability (CVE-2024-XXXXX) in Sigstore Timestamp Authority arises from improper parsing of untrusted data. Two functions are involved. The `api.ParseJSONRequest`

How the CVE Works: The vulnerability exists in urllib3’s streaming API for compressed HTTP responses (e.g., gzip, Brotli). When an

The vulnerability occurs in Envoy’s JWT authentication filter when configured to fetch JSON Web Key Sets (JWKS) remotely from a

How the CVE Works: The vulnerability exists in urllib3’s HTTP response content decoding. According to RFC 9110, a server can

The CVE-2025-33201 vulnerability in the NVIDIA Triton Inference Server stems from an improper check for unusual or exceptional conditions when

How the CVE Works CVE-2025-33211 is an improper input validation flaw within the NVIDIA Triton Inference Server. The vulnerability exists

In Envoy versions 1.33.12, 1.34.10, 1.35.6, 1.36.2, and earlier, a vulnerability exists in TCP proxy mode when handling CONNECT requests.

The CVE-2025-9817 vulnerability exists in the SSH dissector component of Wireshark, versions 4.4.0 to 4.4.8. When Wireshark processes SSH protocol

The vulnerability CVE-2025-66032 in Claude Code prior to version 1.0.93 arises from flawed parsing logic for shell commands involving the

How the CVE Works: The vulnerability is a re-entry race condition in Envoy’s JwksFetcherImpl. When JWT authentication is configured with

The CVE-2025-14006 vulnerability exists in dayrui XunRuiCMS versions up to 4.7.1. It is a cross-site scripting (XSS) flaw in the

How the CVE works: Mattermost Boards feature includes comment functionality for collaboration. In affected versions, the server-side code for deleting

The CVE-2025-13945 vulnerability targets Wireshark versions 4.6.0 and 4.6.1, specifically within the HTTP/3 protocol dissector. HTTP/3 utilizes QUIC transport over

How the CVE Works: The vulnerability is a Stored Cross-Site Scripting (XSS) flaw within the XunRuiCMS administrative interface. The affected

The vulnerability resides in the `react-server-dom-` packages (e.g., react-server-dom-webpack) used by React Server Components. Server Function endpoints accept serialized data

The vulnerability exists within the MEGACO (Media Gateway Control) protocol dissector in Wireshark. When processing a specially crafted packet, the

CVE-2025-66460 is a Cross-Site Scripting (XSS) vulnerability in Lookyloo, a web interface for capturing and analyzing website domains. The vulnerability

CVE-2025-66222 is a stored cross-site scripting vulnerability in DeepChat versions 0.5.0 and earlier, specifically within the Mermaid diagram renderer. Attackers

This Cross-Site Scripting (XSS) vulnerability in Lookyloo arises from unsafe rendering of user-controlled data within web pages. Lookyloo’s web interface

CVE-2025-14007 is a cross-site scripting vulnerability in XunRuiCMS versions up to 4.7.1. It affects the Domain Name Binding Page via

How the CVE Works The vulnerability resides in Intel’s QuickAssist Technology (QAT) software drivers. An untrusted pointer dereference occurs when

How the CVE Works: The vulnerability exists because the LogStare Collector software installs its binaries and supporting files into a

The vulnerability exists in the error handling mechanism of Lookyloo’s URL capture submission feature. When a user provides a list

The vulnerability CVE-2025-66220 in Envoy arises from a flaw in the mTLS certificate matcher for the `match_typed_subject_alt_names` configuration. Envoy uses

How the mentioned CVE works: The vulnerability resides within the UserManagement component of LogStare Collector. It is a classic stored

The CVE-2025-63681 vulnerability in open-webui v0.6.33 stems from incorrect access control in the /api/tasks/stop/ API endpoint. This endpoint is designed

This stored cross-site scripting (XSS) vulnerability in Classroomio LMS version 0.1.13 arises due to insufficient input sanitization and validation of

The vulnerability resides in the Webform Multiple File Upload module for Drupal 7.x, specifically within the file name rendering functionality.

In OneUptime version 9.0.5598, the application exposes an API endpoint for creating user accounts, typically restricted to administrative interfaces. Low-permission

The CVE-2025-66028 vulnerability in OneUptime stems from insecure handling of authentication responses. During the login process, the client application receives

How the CVE Works: This vulnerability is a side-channel attack within Chrome’s navigation and loading components. An attacker can craft

The vulnerability CVE-2025-55471 in youlai-boot v2.21.1 involves incorrect access control in the getUserFormData function. This function retrieves user form data

How the mentioned CVE works: The vulnerability in youlai-boot v2.21.1 involves incorrect access control mechanisms that fail to properly enforce

How the CVE Works: This vulnerability is an Insecure Direct Object Reference (IDOR) within the classroomio application version 0.1.13. The

How the mentioned CVE works: Suricata processes HTTP network traffic. It logs HTTP content type headers. A large content type

This vulnerability is a stack-based buffer overflow within Suricata’s SWF (Shockwave Flash) file decompression module. When SWF decompression is enabled

How the mentioned CVE works: The CVE-2025-65202 vulnerability exists in TRENDnet TEW-657BRM routers with firmware version 1.00.1. It involves the

The OpenBao AWS auth method allows AWS entities (like IAM roles) to authenticate and receive a Vault token. It works

The vulnerability CVE-2025-20995 involves improper handling of insufficient permissions in the ClientProvider component of Samsung Internet browser on non-Samsung devices.

The CVE-2025-11154 vulnerability exists in the IDonate WordPress plugin versions before 2.1.13. The plugin includes an action handler for deleting

The vulnerability in ansible-collection-community-general stems from inadequate sanitization of sensitive data during debug output generation. When Ansible is run with

How the mentioned CVE works: The vulnerability CVE-2025-6680 in Tutor LMS plugin for WordPress up to version 3.8.3 stems from