exploit

The CVE-2025-49923 vulnerability in the Seriously Simple Podcasting WordPress plugin arises from improper neutralization of user input during web page

How the mentioned CVE works: The vulnerability occurs in the Logrus logging library when using the Entry.Writer() method for logging

The vulnerability resides in the `tika-core` library’s XML parsing logic when processing XFA (XML Forms Architecture) data embedded within a

This High severity vulnerability is a path traversal flaw in Jira Software Data Center and Server that allows arbitrary file

How the Mentioned CVE Works: The vulnerability exists within the `elex-helpdesk` WordPress plugin’s file upload functionality, specifically in the `upload_files_ajax`

This vulnerability exists in the `downloadPdf()` function within /src/lib/components/notes/utils.ts. The function creates a temporary `div` element and directly assigns user-controlled

How the CVE Works: This CVE is a Missing Authorization vulnerability in the Seriously Simple Podcasting plugin for WordPress. The

How the mentioned CVE works: Weblate is a web-based localization tool. In versions 5.14 and below, a vulnerability exists where

How the mentioned CVE works: The vulnerability exists within the `libcrux-intrinsics` crate, specifically in its implementation of the `vxarq_u64` intrinsic

How the mentioned CVE works: The vulnerability is a stored Cross-site Scripting (XSS) in the 3DSearch component of 3DSwymer on

The directory traversal vulnerability in ComposioHQ v.0.7.20 resides in the `_download_file_or_dir` function. This function is responsible for handling file download

How the mentioned CVE works: CVE-2025-9554 is a security vulnerability in the Drupal Owl Carousel 2 module, which provides carousel

How the CVE works: The vulnerability resides in the SyncClientProvider component of Samsung Internet browser when installed on non-Samsung devices.

How the CVE Works This vulnerability exists in the 3DSwym community collaboration component of the 3DEXPERIENCE platform. An authenticated attacker

The vulnerability resides in the VerifyCertificate() function within Icinga 2 when compiled with OpenSSL versions prior to 1.1.0. Due to

How the CVE works: The vulnerability stems from a flaw in the TLS configuration parsing within the MongoDB Rust Driver.

The vulnerability in EasySoft Zentaopms stems from insecure deserialization within the Edit function of the Committer component. Attackers can remotely

The CVE-2025-11564 vulnerability stems from an insecure webhook handler in the Tutor LMS plugin. The `verifyAndCreateOrderData` function, responsible for processing

The vulnerability is in the `/api/v1/retrieval/process/web` endpoint. The `form_data.url` user input is passed directly to the `get_content_from_url()` function without any

The vulnerability exists in the `/api/tasks/stop/` endpoint of Open-WebUI version 0.6.33. This API function is designed to cancel long-running LLM

The vulnerability in alexusmai laravel-file-manager version 3.3.1 and below is a directory traversal issue within the zip/archiving functionality. This occurs

How the CVE works: Grav, a file-based CMS, stores user account data as YAML files in the user/accounts/ directory. When

The vulnerability exists in Grav’s Admin plugin due to missing username uniqueness validation during user creation. A user with ‘create

This vulnerability exists within the SSH restricted shell interface provided by certain HPE network management services. The shell is intended

The vulnerability resides in the MPLocalService component of MotionPhoto applications versions before 4.1.51. Improper access control mechanisms fail to enforce

The CVE-2025-66294 vulnerability in Grav arises from inadequate regex validation in the cleanDangerousTwig method, which is intended to sanitize Twig

The CVE-2025-66206 vulnerability is a path traversal issue in the Frappe web framework. It affects versions before 15.86.0 and 14.99.2.

The CVE-2025-51682 vulnerability in mJobtime 15.7.2 arises from implementing authorization controls exclusively on the client side. The application’s JavaScript code

The vulnerability exists within a specific Frappe framework endpoint that improperly handles user-supplied parameters. Due to insufficient input validation and

The vulnerability (CVE-2025-?????) in Anthropic’s experimental sandbox-runtime stems from an incorrect implementation of network allow-list logic. The sandbox’s enforcement mechanism

How the CVE works: The CVE-2025-54057 vulnerability exists in Apache SkyWalking versions 10.2.0 and earlier due to insufficient sanitization of

The CVE-2025-12888 vulnerability exploits subtle timing differences in the X25519 elliptic curve key exchange on Espressif ESP32 (Xtensa architecture) chips.

How the CVE Works: This vulnerability exists within the wolfSSL library’s implementation of TLS 1.3. During the handshake, a client

How the Mentioned CVE Works: Apache Druid’s Kerberos authenticator requires a secret key (druid.auth.authenticator.kerberos.cookieSignatureSecret) to cryptographically sign authentication cookies, preventing

The vulnerability CVE-2025-11931 in wolfSSL involves an integer underflow in the XChaCha20-Poly1305 decryption function. Specifically, when the function wc_XChaCha20Poly1305_Decrypt() is

How the CVE Works The vulnerability CVE-2022-25899 exists in the `auth0/node-jws` library versions <=3.2.2 and 4.0.0. It stems from an

The CVE-2025-66059 vulnerability exists in the Seriously Simple Podcasting WordPress plugin versions up to and including 3.13.0. It arises from

The vulnerability exists within the Shiro-based authentication login endpoint of Central Dogma. The `redirect` query parameter in the login request

The vulnerability CVE-2025-13789 is a Server-Side Request Forgery (SSRF) flaw in ZenTao versions up to 21.7.6-8564. It resides in the

How the CVE Works: The Seriously Simple Podcasting WordPress plugin, up to and including version 3.13.0, fails to implement nonce

How the CVE works: The CVE-2025-66060 vulnerability in the Seriously Simple Podcasting WordPress plugin stems from missing authorization checks in

How the CVE Works: The vulnerability exists in the Tryton server (trytond) where the data export functionality fails to validate

How the CVE Works: This SQL injection vulnerability exists within the `deleteTableColumnStatistics` method of the Hive Metastore Server’s Thrift API

The vulnerability exists within the `file::delete` function of /file/module/file/control.php. This function handles requests to delete files stored within the ZenTao

The CVE-2025-62189 vulnerability in LogStare Collector arises from flawed authorization logic within the UserRegistration module. During account creation, the system

How the Mentioned CVE Works: During the TLS 1.2 handshake, a server can send a `CertificateRequest` message to authenticate the

The vulnerability CVE-2025-13546 is a SQL injection issue in the ashraf-kabir travel-agency web application. It affects the /results.php file within

The CVE-2025-13544 vulnerability in ashraf-kabir travel-agency stems from inadequate file validation in the `/customer_register.php` endpoint. Attackers can remotely send HTTP

How the CVE works: The vulnerability exists in the IDonate WordPress plugin’s panding_blood_request_action() function, which is hooked to WordPress AJAX

The vulnerability occurs in mruby versions up to 3.4.0 within the sort_cmp function in src/array.c. This function handles element comparisons

How the mentioned CVE works: The vulnerability exists in the `/admin_area/index.php` file of the ashraf-kabir travel-agency software. The `edit_pack` parameter

How the CVE Works The vulnerability is in ZITADEL’s user federation auto-linking logic. When a user logs in via an

How CVE-2025-12468 works: The vulnerability exists in the FunnelKit Automations plugin for WordPress, all versions up to and including 3.6.4.1.

How the mentioned CVE works: The FunnelKit Automations plugin for WordPress has an AJAX handler function `bwfan_test_email` for sending test

This vulnerability resides in the bootloader component of MediaTek’s System-on-a-Chip (SoC) firmware. The flaw exists due to improper validation of

How the mentioned CVE works: The vulnerability exists in MediaTek modem software. A missing bounds check occurs during signal processing.

The vulnerability CVE-2025-20753 in MediaTek modem firmware stems from inadequate exception handling within the base station connection protocol. When User

The CVE-2025-66307 vulnerability targets the “Forgot Password” functionality within the Grav admin plugin’s interface at the /admin/forgot endpoint. When a

The vulnerability CVE-2025-13813 affects moxi159753 Mogu Blog v2 versions up to 5.2. It involves the Storage Management component, specifically the

How the CVE Works: The vulnerability exists in the `/admin/config/site` endpoint of the Grav admin plugin prior to version 1.11.0-beta.1.

The vulnerability targets Mogu Blog v2 versions up to 5.2. The flaw resides in the `LocalFileServiceImpl.uploadPictureByUrl` function within the `/file/uploadPicsByUrl`

The CVE-2025-63534 vulnerability is a Reflected Cross-Site Scripting (XSS) flaw within the `login.php` component of Blood Bank Management System version

The CVE-2025-13816 vulnerability exists in the `FileOperation.unzip` function within the `/networkDisk/unzipFile` endpoint of Mogu Blog. This function is responsible for

The vulnerability CVE-2025-13815 exists in moxi159753 Mogu Blog v2 versions up to 5.2. It involves an unknown function within the

The Grav admin plugin, an HTML interface for configuring Grav and managing pages, contains a stored cross-site scripting (XSS) vulnerability

The vulnerability exists in the `/admin/pages/ ` endpoint of the Grav Admin Plugin prior to version 1.11.0-beta.1. Attackers with administrative

The CVE-2025-66309 is a reflected Cross-Site Scripting (XSS) vulnerability in the Grav admin plugin. It affects versions prior to 1.11.0-beta.1.

The CVE-2025-66310 vulnerability operates through a Stored Cross-Site Scripting (XSS) mechanism in the Grav admin plugin, specifically targeting the `/admin/pages/

The SQL injection vulnerability resides in the `abs.php` component of Blood Bank Management System 1.0. This file handles search functionality,

The CVE-2025-5888 vulnerability in jsnjfz WebStack-Guns version 1.0 is a cross-site request forgery (CSRF) flaw that allows remote attackers to

CVE-2025-60646 is a stored cross-site scripting vulnerability in the Business Line Management module of Xxl-api version 1.3.0. The flaw allows

This vulnerability exists within the modem firmware stack of MediaTek chipsets. It is caused by improper validation of specific input

The CVE-2025-65113 vulnerability exploits an authorization bypass in ClipBucket v5’s AJAX flagging system. The flaw resides in the endpoint handling

CVE-2025-20379 is a privilege escalation vulnerability in Splunk Enterprise and Splunk Cloud Platform. It affects Splunk Enterprise versions below 10.0.1,

How the CVE Works: The vulnerability resides within the modem firmware stack, specifically in a function that processes signaling messages

This vulnerability exists within the MediaTek modem firmware. It is caused by a missing bounds check when processing certain signaling

The vulnerability resides in the MediaTek GNSS (Global Navigation Satellite System) firmware driver (mtk-gnss-driver.ko). The issue is an integer overflow

How the Mentioned CVE Works: The vulnerability exists in the `/api/storage/upload` endpoint of PubNet, a self-hosted package repository for Dart

The vulnerability exists within the `fontTools.varLib.main()` function, which processes XML-based .designspace files. When a malicious .designspace file is parsed, it

How the CVE works: CVE-2025-20378 is an unvalidated redirect vulnerability in Splunk Enterprise and Cloud Platform’s web login endpoint. The

The Cross-Site Request Forgery (CSRF) vulnerability in xxl-api v1.3.0 enables attackers to arbitrarily add users to the management module. This

The vulnerability exists within the modem firmware’s Radio Resource Control (RRC) protocol stack. When a User Equipment (UE), such as

The vulnerability exists in the PyFory serialization library’s fallback mechanism. When deserializing data, PyFory can be forced to use the

Apache Flink CDC version 3.4.0 contains a SQL injection vulnerability that allows maliciously crafted identifiers, such as database or table

How the mentioned CVE works: This vulnerability exists in MediaTek modem firmware due to a logic error. When a User

How the CVE Works: This vulnerability resides within the modem firmware stack, specifically in the processing of Radio Resource Control

The CVE-2025-20790 vulnerability exists in MediaTek modem firmware due to improper input validation during communication with base stations. When a

How CVE-2025-20792 works: This vulnerability in MediaTek modem firmware stems from improper input validation during cellular signal processing. When a

How CVE-2025-65670 Works: The Insecure Direct Object Reference (IDOR) vulnerability in classroomio 0.1.13 arises from insufficient server-side authorization checks on

How the CVE works: The vulnerability resides in the GPU pdma (Physical Direct Memory Access) component of MediaTek graphics processors.

How the mentioned CVE works: This vulnerability exists within the MediaTek modem firmware’s error handling routines. When a User Equipment

The CVE-2025-65676 vulnerability operates through a stored cross-site scripting (XSS) mechanism within the Classroomio Learning Management System version 0.1.13. Authenticated

The CVE-2025-4779 vulnerability affects lunary-ai/lunary versions before 1.9.24. It is a stored cross-site scripting (XSS) flaw in the `v1/runs/ingest` endpoint.

How the mentioned CVE works: In classroomio version 0.1.13, the Explore page displays courses for students. The application intended to

The CVE-2025-6703 vulnerability arises from insufficient input validation in the Mozilla neqo library, a QUIC protocol implementation. When processing QUIC

The vulnerability resides in the `@vitejs/plugin-rsc` and its dependency react-server-dom-webpack. Affected versions improperly handle the deserialization of client-transmitted data within

This vulnerability exists in the BlazeMeter Jenkins Plugin. The plugin provides configuration options in the Jenkins UI, such as dropdown

The vulnerability in assyncmy versions through 0.2.10 stems from improper sanitization of dictionary keys used in SQL query construction. When

The vulnerability, CVE-2025-55182, stems from insecure deserialization within the React Server Components flight protocol implementation. When Next.js with the App

How the CVE works: The CVE-2025-11626 vulnerability exists in the MONGO protocol dissector within Wireshark versions 4.4.0 to 4.4.9 and