exploit

The vulnerability exists in TCMAN GIM v11 version 20250304. It involves the PDAWebService.asmx web service. This service exposes a SOAP

The CVE-2025-46174 vulnerability in Ruoyi v4.8.0 stems from an incorrect access control flaw in the resetPwd method of SysUserController.java. This

The vulnerability in React Server Components stems from insecure deserialization within the server-side rendering pipeline. When server components receive serialized

The CVE-2025-13674 vulnerability stems from a flaw in the BPv7 (Bundle Protocol version 7) dissector within Wireshark version 4.6.0. When

The vulnerability (CVE-2025-54078) occurs in the Coder platform’s Workspace Agent. By default, the agent redirects its internal logs to the

The vulnerability is within the `Options::fontFamily` method in the Magick++ C++ API. When invoked with an empty string argument, the

The vulnerability occurs in the `/var/tdf/download_setting.php` endpoint of Mozart FM Transmitter devices running affected firmware versions. This PHP script uses

The vulnerability resides in the status_contents.php script of the Mozart FM Transmitter software. It involves a while loop that attempts

FeehiCMS version 2.1.1 contains a vulnerability in its ad management module that allows authenticated remote attackers to upload arbitrary files

How the mentioned CVE works: OrangeHRM versions 5.0 to 5.7 lack session invalidation during user state changes. When an account

The vulnerability exists in the `django.core.serializers.xml_serializer.getInnerText()` function within Django’s XML deserialization framework. This function is responsible for extracting text content

The vulnerability resides in the `/var/tdf/restore_settings.php` endpoint of the Mozart FM Transmitter firmware. This PHP script is accessible without any

How the Mentioned CVE Works The vulnerability exists within the `/var/tdf/start_upgrade.php` script of the Mozart FM Transmitter’s web interface. This

How the CVE Works: The vulnerability exists in the `status_contents.php` script located at `/var/tdf/` within the web interface of Mozart

The disclosed vulnerability in Step CA affects deployments using ACME (Automated Certificate Management Environment) and SCEP (Simple Certificate Enrollment Protocol)

The vulnerability exists in the `upgrade_contents.php` firmware upgrade endpoint. This script accepts file uploads intended for device firmware updates. It

The CVE-2025-66262 vulnerability operates through the `restore_mozzi_memories.sh` script in affected Mozart FM Transmitter devices. This script handles user-supplied tar archive

How the CVE Works The vulnerability resides in the `deletehidden` parameter of the Mozart FM Transmitter web interface. This parameter,

The vulnerability exists in the `/var/tdf/patch_contents.php` endpoint of the device’s web interface. This script handles file uploads for system updates

The vulnerability stems from improper neutralization of special elements used in shell commands within the Claude Code environment. Specifically, errors

The vulnerability exploits the `DToA` number conversion library within the Mozilla Rhino JavaScript engine. When the `Number.prototype.toFixed()` method is called

The vulnerability is a Stored Cross-Site Scripting (XSS) flaw arising from insecure XML construction. The affected Mozart FM Transmitter software

This vulnerability allows an authenticated attacker to execute arbitrary code with root privileges on the affected Mozart FM Transmitter devices.

How the CVE works: The vulnerability exists in the `patch_contents.php` file of the Mozart FM Transmitter web interface. This script

The CVE-2025-66260 vulnerability is a SQL injection flaw in the `status_sql.php` endpoint of DB Electronica Telecomunicazioni S.p.A.’s Mozart FM Transmitter

How the mentioned CVE works: The vulnerability affects Step CA deployments using the SSHPOP provisioner for SSH certificate issuance. The

How CVE-2025-66254 works: The vulnerability exists in the `upgrade_contents.php` script of Mozart FM Transmitter devices. This PHP file is accessible

The vulnerability exists within the recruitment module’s file retrieval endpoint. When an authenticated user sends an HTTP request to download

This vulnerability exploits a logic flaw in the OrangeHRM password reset mechanism (versions 5.0 to 5.7). The reset process involves

How CVE-2025-66298 works: Grav, a file-based web platform, has a Server-Side Template Injection (SSTI) vulnerability in versions before 1.8.0-beta.27. The

CVE-2025-6195 is an information disclosure vulnerability in GitLab Enterprise Edition (EE). It affects all versions from 13.7 before 18.4.5, 18.5

This vulnerability allows an authenticated user with specific project permissions to cause a severe denial of service (DoS) condition on

Werkzeug’s safe_join function, used to securely combine path segments, fails to validate Windows-specific device names in versions before 3.1.4. On

CVE-2025-7396 in wolfSSL involves missing blinding support for Curve25519 in specific builds, potentially exposing private keys to side-channel attacks. Blinding

The vulnerability CVE-2025-7394 occurs in wolfSSL’s OpenSSL compatibility layer where the RAND_poll() function fails to properly reinitialize the random number

The vulnerability CVE-2025-66301 in Grav is an authorization bypass that allows a user with basic page editing permissions to escalate

How CVE-2025-65107 works: Langfuse is an open-source LLM engineering platform. The vulnerability affects SSO provider configurations. In versions 2.95.0 to

How the mentioned CVE works: The vulnerability exists in the REDAXO CMS backend’s Mediapool module. When an authenticated backend user

How the CVE Works: This vulnerability exploits a flaw in the OpenID Connect (OIDC) authentication flow of Mattermost. The application

This vulnerability exploits an incomplete security sandbox in Grav CMS’s Twig templating engine. Authenticated users with editor permissions can inject

This vulnerability exploits the trust model between a web browser and a network service. When the Docker MCP Gateway is

How the CVE Works: The vulnerability CVE-2025-13758 in Devolutions Server is an instance of sensitive information disclosure where the server

The CVE-2025-13757 vulnerability is a SQL injection flaw in the last usage logs functionality of Devolutions Server. It arises due

ThingsBoard versions before v4.2.1 contain a stored XSS vulnerability in the Image Gallery. Authenticated users can upload malicious SVG images

The CVE-2025-7915 vulnerability is a critical SQL injection issue in Chanjet CRM version 1.0. It affects the /mail/mailinactive.php file within

How the mentioned CVE works: In Devolutions Server versions before 2025.2.21 and 2025.3.9, a critical authorization flaw allows non-administrative users

How the CVE works: Devolutions Server 2025.3.2 and earlier has a flaw in TLS certificate validation when connecting to gateways.

The vulnerability exists in the GrapesJS-based page builder component of the Aimeos e-commerce CMS extension. Authenticated users with editor privileges

The vulnerability arises in Django’s FilteredRelation feature when used with QuerySet.annotate() or QuerySet.alias() on PostgreSQL databases. When a crafted dictionary

This vulnerability, an Insecure Direct Object Reference (IDOR) combined with an authentication bypass, exists within the Boards feature of Mattermost.

The vulnerability exists within the command-line interface (CLI) of the HPE Aruba Networking Airwave Platform. It stems from improper neutralization

The CVE-2025-7221 vulnerability stems from a missing capability check in the `give_update_payment_status()` function within the GiveWP WordPress plugin. This function

The vulnerability exploits the multipart request handler in Apache Struts. When a specially crafted multipart/form-data request is sent, the framework

How the CVE Works: The vulnerability exists within the `Add Gateway Handler` component of ThingsBoard. It stems from improper neutralization

The vulnerability exists in the access control logic for the `/marketplace/install` and `/marketplace/uninstall` endpoints. Despite a configuration setting to disable

The vulnerability allows an attacker to bypass intended AppArmor or SELinux restrictions in Singularity’s native runtime. When a user runs

The vulnerability resides in the GrapesJS builder component of the Mautic marketing automation platform. This component provides a visual editor

The vulnerability CVE-2024-39829 is a stored Cross-site Scripting (XSS) flaw within the IBM Jazz Foundation reporting component. It arises due

The CVE-2025-51733 is a Cross-Site Request Forgery (CSRF) vulnerability specific to HCL Unica platform version 12.0.0. This vulnerability exists because

How the CVE Works: This CVE is a CSV formula injection vulnerability in HCL Unica’s metrics export feature. When user-controlled

In Apptainer versions before 1.4.5, a vulnerability exists where containers can bypass security enforcement mechanisms. The `–security` option, with forms

How the CVE works: CVE-2025-51734 is a cross-site scripting (XSS) vulnerability in HCL Unica version 12.0.0, specifically within the Metrics

The vulnerability, CVE-2025-13611, stems from an improper access control mechanism within GitLab’s log handling features. Under specific conditions, certain application

How the CVE Works This vulnerability is an unauthenticated file upload flaw in the Metrics component of HCL Unica. The

The vulnerability CVE-2025-33187 resides within the SROOT component of the NVIDIA DGX Spark GB10 platform. SROOT is a privileged system

How the CVE Works: This vulnerability exists in the MediaTek Direct Rendering Manager (DRM) driver within the Linux kernel. During

How the Vulnerability Works: The vulnerability resides in the seed file decryption routine of gokey. A seed file is an

How the mentioned CVE works: This CVE is currently in a reserved state by a CVE Numbering Authority (CNA). Technical

This vulnerability exists within the `intel_quicki2c` kernel module for Intel HID devices. The driver retrieves ICRS and ISUB configuration data

The CVE-2025-39829 vulnerability exists in the Linux kernel’s trace/fgraph subsystem. When user-space writes to the function_profile_enabled interface via sysfs, the

This vulnerability resides within the System Root (SROOT) firmware of the NVIDIA DGX Spark GBX platform. The flaw is an

This vulnerability exists in the `bnxt_en` network driver of the Linux kernel. During an interface shutdown (ifdown), if the firmware

The CVE-2025-39822 vulnerability resides in the io_uring subsystem of the Linux kernel, specifically within the kernel buffer (kbuf) handling code.

The vulnerability exists in the `intel-thc` kernel driver within the `thc_i2c_subip_regs_save()` function. The code incorrectly uses a secondary pointer (&dev->i2c_subip_regs)

The CVE-2025-33188 vulnerability exists in the hardware resource management of NVIDIA DGX Spark GB10 systems. Attackers can exploit insufficient access

How the mentioned CVE works: The vulnerability CVE-2025-33194 targets the SROOT firmware in NVIDIA DGX Spark GB10 systems. SROOT firmware

How the mentioned CVE works: The vulnerability is in the Linux kernel’s fbnic driver. During power management resume, the driver’s

The vulnerability CVE-2025-39820 resides in the Linux kernel’s Direct Rendering Manager (DRM) driver for the MSM Display Processing Unit (DPU).

The vulnerability resides in the `Nemotron_Nano_VL_Config` class within vLLM. When loading a model configuration containing an `auto_map` entry, the class

The CVE-2025-39830 vulnerability is a memory leak in the Linux kernel’s mlx5 hardware steering (HWS) module. It occurs in the

The vulnerability exists in the user creation functionality of Calibre-Web version 0.6.25. When an administrative user creates a new account,

In the Linux kernel’s perf subsystem, a vulnerability arises from improper handling of event groups during throttling. When a group

The CVE-2025-33191 vulnerability exists within the OSROOT firmware of the NVIDIA DGX Spark GB10 platform. This firmware handles critical low-level

The vulnerability occurs in the Linux kernel’s drm/xe/vm subsystem, which manages virtual memory for Intel Xe graphics. During initialization or

How the CVE works: In the Linux kernel’s ice Ethernet driver, a NULL pointer dereference occurs during a PCIe function

The vulnerability stems from a hardcoded default JWT signing secret (“dev”) in the arcade-mcp HTTP server. During server startup via

The vulnerability exists within the SROOT firmware of the NVIDIA DGX Spark GB10 system. SROOT firmware handles low-level system root

How the CVE Works: The vulnerability is in the packet encoding logic of the Eclipse Paho Go MQTT client library

The CVE-2025-33193 vulnerability resides within the SROOT firmware of NVIDIA DGX Spark GB10 systems, specifically involving improper validation of integrity

This vulnerability is a use-after-free flaw within the XML parser of Fade In. When the application processes a malicious `.xml`

The vulnerability CVE-2025-54866 resides in the Wazuh agent for Windows, specifically within versions 4.3.0 to just before 4.13.0. During installation

The vulnerability targets OpenClinica Community Edition versions up to 3.12.2 and 3.13. It resides in the CRF Data Import component,

The vulnerability CVE-2025-62609 in the MLX framework involves a segmentation fault in the `mlx::core::load_gguf()` function when processing malicious GGUF files.

How the CVE works: The vulnerability exists in Wazuh Agent versions prior to 4.13.0. Authenticated attackers can inject malicious UNC

The vulnerability CVE-2025-12875 resides in the `ary_fill_exec` function within mruby’s array extension (array.c). This function handles the `Arrayfill` method. When

A Path Restriction Bypass vulnerability exists in Serv-U software. It allows malicious actors with administrative privileges to execute code on

How the Mentioned CVE Works: The vulnerability exists in the CRF Data Import component of OpenClinica. The `/ImportCRFData?action=confirm` endpoint accepts

How the CVE works: The vulnerability resides in the NR modem’s baseband processing unit, specifically within the Radio Resource Control

How the mentioned CVE works: CVE-2025-61610 exploits improper input validation in the nr modem software stack. The modem fails to

The CVE-2025-40548 vulnerability in SolarWinds Serv U arises from a missing validation process in input handling. Administrative users can submit