exploit

The vulnerability exists within the `fim_alert()` function of the Wazuh manager’s analysisd process. This function processes File Integrity Monitoring (FIM)

How the Mentioned CVE Works CVE-2025-36149 is a Clickjacking (UI Redress) vulnerability in IBM Concert. The application fails to implement

In NR modem software, improper input validation in packet processing logic allows remote attackers to cause a system crash. Specifically,

How the CVE works: MLX is a framework for machine learning on Apple silicon. The function mlx::core::load() parses NumPy .npy

How the mentioned CVE works: The vulnerability exists in the MCP Python SDK where DNS rebinding protection is not enabled

The CVE-2025-40547 vulnerability involves a logic error within Serv-U’s administrative functions. This flaw allows an authenticated attacker with administrative privileges

How the mentioned CVE works: The vulnerability exists in the NR modem’s protocol stack software. It involves improper validation of

The vulnerability CVE-2025-53855 is an out-of-bounds write flaw within the XML parser of Fade In version 4.2.0, triggered when processing

How the mentioned CVE works: Twonky Server 8.5.2 exposes a web service API for management. The authentication controls for this

The vulnerability arises from the default configuration of HTTP-based servers in the MCP TypeScript SDK, which lacks DNS rebinding protection.

The vulnerability resides in the /material/getMaterialEnableSerialNumberList endpoint of jishenghua JSH_ERP version 2.3.1. This endpoint accepts a user-controlled ‘search’ query parameter

How the CVE Works: The vulnerability exists in the `/user/addUser` API endpoint of JSH_ERP. This endpoint accepts JSON data that

How the CVE works: The vulnerability resides in the OpenSearch query_string parser. Attackers can submit complex query_string inputs containing deeply

The CVE-2025-51743 vulnerability targets the jishenghua JSH_ERP system version 2.3.1. The flaw resides in the `/materialCategory/addMaterialCategory` endpoint, which insecurely deserializes

The CVE-2025-51745 vulnerability in jishenghua JSH_ERP version 2.3.1 involves insecure deserialization via the `/role/addcan` endpoint, which uses the fastjson library.

How the CVE Works: The vulnerability is a Use-After-Free (UaF) within the kernel-mode drivers for Arm’s Valhall and 5th Gen

In Apache CloudStack, a gap in access control checks affected specific APIs: createNetworkACL, listNetworkACLs, listResourceDetails, listVirtualMachinesUsageHistory, and listVolumesUsageHistory. While these

How CVE-2025-8045 works: This vulnerability is a use-after-free flaw in the Arm Valhall GPU Kernel Driver and Arm 5th Gen

The CVE-2025-51746 vulnerability exploits a insecure deserialization flaw in the fastjson library used by jishenghua JSH_ERP version 2.3.1. Specifically, the

The CVE-2025-58360 vulnerability in GeoServer is an XML External Entity (XXE) flaw that affects versions from 2.26.0 to before 2.26.2

The CVE-2025-59302 vulnerability in Apache CloudStack is a code injection issue that allows administrative users to execute arbitrary code through

How the CVE works: CVE-2025-59789 is a stack overflow vulnerability in Apache bRPC’s json2pb component, affecting versions before 1.15.0. The

How CVE-2025-2879 works: This vulnerability exists in the Arm Valhall GPU Kernel Driver and the Arm 5th Gen GPU Architecture

The CVE-2025-13550 vulnerability is a remote buffer overflow in specific D-Link router models. It affects the firmware version 1.00_20250513164613/1.1.50. The

The vulnerability exists within the `/index.php` file’s login component. The application fails to properly sanitize user input passed to the

The CVE-2025-13576 vulnerability in code-projects Blog Site 1.0 arises from inadequate authorization checks within the /admin.php file. Specific functions in

The vulnerability exists in the `page=city` module of the admin panel (/admin/?page=city). The application fails to properly sanitize user-supplied input

The CVE-2025-13574 vulnerability targets code-projects Online Bidding System 1.0. It involves the /administrator/addcategory.php file. The categoryadd function handles category image

How the CVE works: CVE-2025-13552 is a remote buffer overflow vulnerability in D-Link routers. It targets the formWlEncrypt function in

The vulnerability resides in the `category_exists` function within /resources/functions/blog.php. This function is used to check if a blog category exists.

How the CVE Works: The vulnerability CVE-2025-13549 is a stack-based buffer overflow in the D-Link DIR-822K router’s firmware version 1.00.

The vulnerability in Campcodes School File Management System 1.0 involves SQL injection via the stud_no parameter in the login component

The vulnerability exists within the `/listorder.php` file of the Simple Food Ordering System. The application fails to properly sanitize user-supplied

The vulnerability CVE-2025-13548 is a remote buffer overflow in D-Link DIR-822K and DWR-M920 routers running firmware version 1.00_20250513164613/1.1.50. It occurs

The vulnerability targets Advanced Library Management System 1.0. It resides in the /delete_admin.php file. The admin_id parameter is improperly sanitized.

The vulnerability exists in the itsourcecode COVID Tracking System version 1.0. It involves a SQL injection flaw in the /admin/?page=establishment

The vulnerability resides in the `removefile` function within /app/controllers/FilehelperController.php. This function accepts a user-controlled `filepath` parameter without adequate sanitization or

The CVE-2025-13547 vulnerability originates from insufficient input validation in the DDNS configuration form handler within the D-Link router firmware. Specifically,

The vulnerability exists within the `/add_book.php` script of ProjectWorlds versions up to 1.0. The application fails to adequately validate files

How the CVE Works: The vulnerability exists in the `/admin/?page=people` endpoint of itsourcecode COVID Tracking System version 1.0. The application

The CVE-2025-13577 vulnerability is a reflected cross-site scripting (XSS) flaw in PHPGurukul Hostel Management System version 2.1. The issue resides

How the mentioned CVE works: The vulnerability exists in the itsourcecode COVID Tracking System version 1.0. It is a SQL

How the CVE works: The vulnerability is in D-Link DIR-822K and DWR-M920 routers with firmware version 1.00_20250513164613/1.1.50. It involves a

The CVE-2025-58315 vulnerability originates from insufficient permission checks within the Wi-Fi module software on Huawei devices. This flaw allows local

The CVE-2025-64314 vulnerability stems from improper permission enforcement within the memory management module of Huawei systems. Memory management modules control

The Grav content management system contains a reflected cross-site scripting vulnerability in the admin panel’s page editing functionality. Specifically, the

The vulnerability operates through the Grav CMS administrative interface where page management is handled. When a POST request is sent

How the mentioned CVE works: CVE-2024-31419 exploits a Server-Side Template Injection (SSTI) vulnerability in Grav CMS’s forms plugin. When a

The CVE-2025-58308 vulnerability stems from an improper security criterion check within Huawei’s call module, which handles telecommunication functions. This module

The vulnerability CVE-2025-64315 is a configuration defect within the file management module of Huawei’s EMUI skin on Android. This flaw

The vulnerability exists in the Angular Template Compiler due to an incomplete internal security schema. This schema fails to properly

The CVE-2025-64311 is a permission control vulnerability in the Huawei Notepad module. It stems from improper access controls that fail

In Grav CMS, users with admin panel access and permissions to create or edit pages can enable Twig processing in

The CVE-2025-64312 vulnerability stems from inadequate permission enforcement within Huawei’s file management module. When a user interacts with the file

The CVE-2025-58305 vulnerability is an identity authentication bypass within the Huawei Gallery application. The flaw resides in how the app

This CVE involves a vulnerability in a Huawei driver module where improper memory handling allows access to invalid memory addresses.

The vulnerability in mdast-util-to-hast arises from improper sanitization of class attributes when processing markdown input. Specifically, when markdown source contains

The vulnerability exists in the `cleanDangerousTwig()` method in /system/src/Grav/Common/Security.php. This method uses a weak regular expression to blacklist dangerous Twig

The CVE-2025-64313 vulnerability in Huawei Office Service stems from improper input validation within document parsing functions. When a locally authenticated

The vulnerability operates through the `x-portkey-custom-host` HTTP header within the Portkey AI Gateway. During request processing, the gateway prioritizes this

The CVE-2025-58304 vulnerability stems from improper permission control within the file management module of Huawei devices. This flaw allows unauthorized

How the mentioned CVE works: CVE-2025-58302 is a permission control vulnerability in the Settings module of Huawei devices. It stems

How the mentioned CVE works: The vulnerability is a Stored Cross-Site Scripting (XSS) in the Grav application. It occurs in

The CVE-2025-58316 vulnerability resides in Huawei’s video-related system service module, where improper input validation and resource handling can lead to

The vulnerability in Keycloak involves a bypass of access controls to the admin console through proxy misconfiguration. Keycloak’s documentation advises

How the Mentioned CVE Works CVE-2025-58312 is a permission control flaw within Huawei’s App Lock module on certain devices. The

The vulnerability exists in the `/api/fileUploadAndDownload/removeChunk` endpoint of the gin-vue-admin application. This interface is intended for deleting temporary file chunks

The vulnerability operates within Grav CMS’s Admin UI when a user with account creation privileges attempts to create a new

This vulnerability is a Use-After-Free (UAF) flaw within a specific Huawei USB driver kernel module. UAF occurs when a program

The vulnerability exists in the `cloneRepo` method of the MCPScanner class within an MCP scanning tool. The method takes a

The CVE-2021-21425 vulnerability in Grav CMS stems from improper authorization checks in the Admin plugin’s page editing endpoint. When an

The vulnerability exists in `keras.utils.get_file()` when extracting tar archives. The function uses `tarfile.extractall()` without the security-critical `filter=”data”` parameter. While Keras

The vulnerability exists in the `maxminddb` Rust crate’s `Reader::open_mmap` function. This function was incorrectly declared as `safe` while it internally

The vulnerability operates within the “Forgot Password” functionality at the /admin/forgot endpoint in Grav CMS with the Admin plugin. When

How the mentioned CVE works: The vulnerability resides in an admin panel’s user account management section. Users granted read access

This vulnerability occurs in the Grav admin panel’s language configuration. The `Supported` language parameter value is directly used to dynamically

How the mentioned CVE works: This vulnerability targets the Grav content management system’s admin panel via the POST /admin/pages/[bash] endpoint.

How the Mentioned CVE Works The vulnerability is a Denial-of-Service (DoS) condition triggered by improper input sanitization of cron expressions

This vulnerability exists in Keycloak’s server distribution when started with the `–debug` flag to enable Java debugging. When this flag

The CVE-2021-12345 vulnerability works by exploiting a weakness in Grav CMS’s custom Twig sandbox. The sandbox uses a `registerUndefinedFilterCallback` function

How the CVE works: CVE-2024-2792 exploits an Insecure Direct Object Reference (IDOR) vulnerability in Grav CMS’s form plugin, specifically in

How the mentioned CVE works: The `@fastify/reply-from` plugin allows a Fastify server to forward specific HTTP requests to a designated

How the mentioned CVE works: The vulnerability exploits the Grav application’s admin endpoint `/admin/accounts/groups/Grupo` via the `data[bash]` parameter. During group

The vulnerability in Grav’s Admin plugin arises from a flawed user creation mechanism that does not enforce username uniqueness. When

The CVE-2025-66302 vulnerability is a path traversal flaw in Grav CMS version 1.7.49.5, affecting the backup functionality within the admin

The vulnerability exists in the user account management endpoint /admin/accounts/users/{username}. When a low-privilege authenticated user requests another user’s profile page

The vulnerability, CVE-2025-XXXXX, exists within the public API of the rtvm-interpreter. It stems from unsound memory safety practices in a

The vulnerability exists in Werkzeug’s `safe_join()` function, which is used by `send_from_directory()` to securely resolve user-supplied paths within a base

The vulnerability exists in the `GET /api/v4/channels/{channel_id}/common_teams` API endpoint. When this endpoint is queried, it returns a list of teams

This vulnerability in peppol-py arises from an insecure default configuration of the Saxon HE XML parser used for validating XML

The vulnerability in Keras version 3.11.3 resides in the `keras.utils.get_file()` function, which is used to download and cache files. When

The vulnerability in ThingsBoard versions prior to v4.2.1 involves a stored cross-site scripting (XSS) attack via malicious SVG image uploads.

The vulnerability, CVE-2025-XXXX, exists within the `/users/login/sso/code-exchange` endpoint of the Mattermost server. During the OAuth-based authentication flow, when a user

The vulnerability occurs in Mattermost when using OpenID Connect for authentication. During the OAuth authorization flow, the application generates a

How the CVE works: The vulnerability CVE-2025-39834 is a memory leak in the Linux kernel’s net/mlx5 subsystem, specifically within the

How the Mentioned CVE Works CVE-2025-53014 is an information disclosure vulnerability in the Overhang.IO Tutor platform, specifically version 20.0.2. The

CVE-2025-39836 is a vulnerability in the Linux kernel’s EFI System Trusted Management Module (STMM) driver. The issue arises from the

The vulnerability in Better Auth occurs when the baseURL is not explicitly configured, such as when the BETTER_AUTH_URL environment variable

This vulnerability in Mustangproject versions before 2.16.3 involves XML External Entity (XXE) attacks. Attackers can craft malicious XML inputs that

The vulnerability resides in the address parser within `lib/addressparser/index.js` of the Nodemailer library. According to RFC 5322, nested group structures