exploit

How the CVE works: The vulnerability CVE-2025-13397 exists in mrubyc up to version 3.4. It specifically targets the mrbc_raw_realloc function

The vulnerability CVE-2025-38643 in the Linux kernel arises from a missing mutex lock in the WiFi cfg80211 subsystem. Specifically, the

In Anyscale Ray 2.52.0, the management interfaces, including the dashboard and Jobs API, default to having token-based authentication disabled. This

How the CVE works: The vulnerability exists in the NR modem’s signal processing stack due to improper input validation of

The CVE-2025-54527 vulnerability in JetBrains YouTrack stems from inadequate sandbox attribute configuration for iframes used within the widget sandbox feature.

How the mentioned CVE works: Cherry Studio versions 1.2.5 through 1.5.1 integrate with MCP (Model Context Protocol) servers for enhanced

Cherry Studio version 1.5.1 has a remote code execution vulnerability in its streamableHttp MCP server handling. The issue occurs during

The vulnerability occurs in Express.js versions using the default ‘extended’ query parser. When parsing a query string like ?__proto__ =true</code>,

The vulnerability in fonttools varLib arises from unsanitized user input handling in the `main()` function when processing .designspace files. Specifically,

The CVE-2025-28977 vulnerability is a reflected Cross-site Scripting (XSS) issue in the ThimPress WP Pipes WordPress plugin. It arises from

The CVE-2025-10244 vulnerability exploits the HTML rendering engine within the Autodesk Fusion desktop application. This engine fails to properly sanitize

How the mentioned CVE works: The vulnerability exists within the `deletePartitionColumnStatistics` and `deleteTableColumnStatistics` methods of the Hive Metastore Server’s Thrift

The CVE-2025-36088 vulnerability is a stored Cross-Site Scripting (XSS) flaw within the web-based Graphical User Interface (GUI) of the IBM

The vulnerability operates within Cilium’s network policy engine when processing `CiliumNetworkPolicy` resources that specify egress rules using the `toGroups` field

How the CVE works: The vulnerability is an out-of-bounds write in the PCX image codec within QNX SDP versions 8.0,

The vulnerability is a Cross-Site Scripting (XSS) flaw in Spotipy’s OAuth callback server. During OAuth authentication, Spotipy initiates a local

How the CVE Works The vulnerability exists in the `/vb.htm` endpoint of the device’s management interface. This page contains a

How the CVE works: Cherry Studio uses a custom URL scheme (e.g., cherry://) for deep linking. In versions 1.4.8 to

The CVE-2025-28979 vulnerability stems from improper sanitization of file paths in the WP Pipes WordPress plugin, specifically within include() or

The CVE-2025-36114 vulnerability affects IBM QRadar SOAR Plugin App from versions 1.0.0 to 5.6.0. It is a directory traversal flaw

The vulnerability exists in the XWiki Jetty package (XJetty), which improperly exposes a static file-serving context. This context is mapped

How the mentioned CVE works: This vulnerability exists within the SIP media component of Cisco’s TelePresence CE and RoomOS software.

How the CVE Works: The vulnerability exists within the `coap_dtls_generate_cookie()` function in the libcoap library’s OpenSSL integration code. During a

The CVE-2025-12766 IDOR vulnerability exists in the Management Console of BlackBerry AtHoc OnPrem version 7.21. This console manages multiple organizations

CVE-2025-65494 is a NULL pointer dereference vulnerability in the get_san_or_cn_from_cert() function within src/coap_openssl.c of OISM libcoap version 4.3.5. This function

How the CVE Works The vulnerability exists in the `libcoap` library’s DTLS/TLS integration within the `src/coap_openssl.c` file. When the library

How the CVE works: The vulnerability exists within the `code` parameter of the `/login.php` script in Code-Projects COVID Tracking System

The vulnerability is an integer signedness error in the `tls_verify_call_back()` function within `src/coap_openssl.c` of OISM libcoap version 4.3.5. During TLS

The CVE-2025-65497 vulnerability involves a NULL pointer dereference in the coap_dtls_generate_cookie() function within the src/coap_openssl.c file of OISM libcoap version

The CVE-2025-13581 vulnerability exists in the itsourcecode Student Information System version 1.0, specifically within the `/schedule_edit1.php` file. This file handles

The vulnerability CVE-2025-65500 is a NULL pointer dereference in the coap_dtls_generate_cookie() function within src/coap_openssl.c of OISM libcoap version 4.3.5. This

How the CVE works: In OISM libcoap version 4.3.5, the function tls_verify_call_back() in src/coap_openssl.c handles DTLS handshake verification. During this

CVE-2025-36112 is an information disclosure vulnerability affecting IBM Sterling B2B Integrator and IBM Sterling File Gateway. The flaw allows unauthorized

The vulnerability CVE-2025-60632 targets Free5GC versions 4.0.0 and 4.0.1, specifically in the Npcf_BDTPolicyControl API. This API handles background data transfer

The vulnerability CVE-2025-65501 is a null pointer dereference in the coap_dtls_info_callback() function within OISM libcoap version 4.3.5. This function handles

This vulnerability exists because IBM Concert versions 1.0.0 through 2.0.0 utilize deprecated or weak cryptographic algorithms (e.g., DES, RC4, or

The vulnerability exploits the Nnssf_NSSAIAvailability API in Free5GC by sending a maliciously crafted POST request. This API, part of the

The vulnerability is a NULL pointer dereference in the coap_dtls_generate_cookie() function within src/coap_openssl.c of OISM libcoap version 4.3.5. This function

The CVE-2025-64048 vulnerability is a stored cross-site scripting (XSS) issue in YCCMS version 3.4, specifically within the management functionality. The

The vulnerability CVE-2025-60633 exploits a flaw in the Nudm_SubscriberDataManagement API within Free5GC versions 4.0.0 and 4.0.1. This API handles subscriber

CVE-2025-36134 exploits a vulnerability in IBM Sterling B2B Integrator and Sterling File Gateway where a sensitive cookie does not have

How the CVE-2025-62497 Vulnerability Works This CVE describes a classic Cross-Site Request Forgery (CSRF) vulnerability in the Sony SNC-CX600W network

How the Mentioned CVE Works: CVE-2025-64761 is a privilege escalation flaw in the OpenBao identity and secrets manager. It exploits

The vulnerability exists in the lsfusion platform versions up to 6.1 within the `UploadFileRequestHandler` function in the file platform/web-client/src/main/java/lsfusion/http/controller/file/UploadFileRequestHandler.java. The

The CVE-2025-13261 vulnerability exists in the lsfusion platform versions up to 6.1. It is a path traversal flaw in the

How the CVE Works: The vulnerability exists in API endpoints (e.g., /api/getUserProfile, /api/getProject) of Primakon Pi Portal v1.0.18. These endpoints

The vulnerability exists in SIGB PMB version 8.0.1.14 within the /opac_css/ajax_selector.php component. The `id` and `datas` parameters are directly incorporated

How CVE-2025-64066 Works The vulnerability exists in the `/api/v2/user/register` REST endpoint of Primakon Pi Portal version 1.0.18. This endpoint is

The vulnerability exists in the cms_rest.php component of SIGB PMB v8.0.1.14. Attackers send crafted HTTP requests with malicious serialized data

How the CVE Works: This vulnerability exploits a flaw in the authentication logic of the Uniong WebITR platform. An attacker

CVE-2025-13770 is a SQL injection vulnerability in WebITR software developed by Uniong. It occurs due to improper input validation in

How the CVE Works: The vulnerability exists in the /api/v2/pp_users endpoint of Primakon Pi Portal version 1.0.18. This API handles

How the mentioned CVE works: The CVE-2025-65647 vulnerability is an Insecure Direct Object Reference (IDOR) in the Track order function

How the CVE Works: The vulnerability exists in the `/api/V2/pp_udfv_admin` endpoint of Primakon Pi Portal version 1.0.18. This endpoint implements

How the CVE works: Primakon Pi Portal version 1.0.18 API endpoints lack server-side authorization validation, relying solely on UI restrictions.

The CVE-2025-34240 vulnerability exists within the Advantech WebAccess/VPN software, specifically in versions prior to 1.1.5. The flaw is located in

The CVE-2025-34241 vulnerability is a SQL injection issue in Advantech WebAccess/VPN software. It affects versions before 1.1.5. The flaw resides

The vulnerability exists within the `ajaxDeviceFwRulesAction()` method of the AjaxFwRulesController. This endpoint, designed to return firewall rule data for devices

The CVE-2025-34242 vulnerability is a SQL injection flaw in Advantech WebAccess/VPN versions prior to 1.1.5. It specifically exists in the

How the mentioned CVE works: The Xtooltech Xtool AnyScan Android application version 4.40.40 and prior embeds a static cryptographic key

How the mentioned CVE works: 1. The update server endpoint lacks authentication. 2. No credentials are required for access. 3.

The CVE-2025-34246 vulnerability exists in Advantech WebAccess/VPN versions before 1.1.5. It is a SQL injection flaw within the `AjaxPrevalidationController.ajaxAction()` method.

How CVE-2025-63434 Works: The Xtool AnyScan Android application incorporates an update mechanism that automatically checks for and installs new software

The CVE-2025-34247 vulnerability involves a SQL injection flaw in Advantech WebAccess/VPN. It specifically exists within the NetworksController.addNetworkAction() function. This function

The vulnerability exists in the `unpackFile` function within the `ZipUtils.java` component of the lsfusion platform. This function is responsible for

The CVE-2025-63432 vulnerability stems from the Xtool AnyScan Android application’s failure to implement proper SSL certificate validation during TLS connections

The vulnerability occurs in libssh when utilizing the ChaCha20 cipher through OpenSSL. During cipher context initialization, if heap memory is

The CVE-2025-34245 vulnerability exists within the `AjaxStandaloneVpnClientsController.ajaxAction()` function of Advantech WebAccess/VPN. This function handles AJAX requests for datatable operations, such

The CVE-2025-34243 vulnerability exists in Advantech WebAccess/VPN versions before 1.1.5. It is a SQL injection flaw in the `AjaxFwRulesController.ajaxNetworkFwRulesAction()` function.

How the mentioned CVE works: The CVE-2022-31652 vulnerability exists within the system_settings.shtm page of ScadaBR. This page is part of

How the mentioned CVE works: The CVE-2025-5307 vulnerability exists within the ‘Create Workbook’ feature of the OpenStack Mistral dashboard plugin.

The CVE-2025-12345 vulnerability in Apache Druid stems from a weak fallback mechanism for the `druid.auth.authenticator.kerberos.cookieSignatureSecret` configuration parameter. When system administrators

Angular’s HttpClient class provides built-in Cross-Site Request Forgery (XSRF) protection. This mechanism works by comparing the request URL against the

The vulnerability exists in the multi-session plugin’s `/sign-out` after-hook. The hook retrieves the raw `cookie` header from the request and

The vulnerability CVE-2025-12816 is an Interpretation Conflict in the node-forge library’s ASN.1 parser. The flaw exists because the `asn1.validate` function

The vulnerability in node-forge’s `asn1.derToOid` function stems from using JavaScript’s 32-bit bitwise left-shift operator (<<) to decode Object Identifier (OID)

The CVE-2025-49607 vulnerability in REDAXO CMS stems from inadequate input sanitization within the template management feature. An authenticated attacker with

The CVE-2025-53033 vulnerability in REDAXO CMS functions by exploiting the “Output” code field within its module management system. This field

The vulnerability in [email protected] is a command injection flaw arising from improper neutralization of special elements used in an OS

The vulnerability exists in the `asn1.fromDer` function within forge/lib/asn1.js. The DER parser implementation uses a recursive function, _fromDer, to process

The CVE-2025-5307 vulnerability in OpenSearch exists within the query parser for the `query_string` functionality. When a specially crafted, complex query

How the mentioned CVE works: This vulnerability exists within the Keycloak LDAP User Federation provider. An authenticated attacker with realm

The CVE-2024-43651 vulnerability in Valibot is a ReDoS flaw within the `emoji()` validator’s `EMOJI_REGEX` pattern. The regex is structured with

The vulnerability exploits Ray’s insufficient browser request filtering. Ray’s dashboard endpoints, like /api/jobs/, are protected by a middleware that blocks

How the mentioned CVE works: The vulnerability exists in the API endpoint responsible for user creation, typically /api/user. The endpoint

The vulnerability is a reflected Cross-Site Scripting (XSS) in the Mediapool backend component. The attack flow begins when a user

How the mentioned CVE works: The vulnerability is a heap-based buffer overflow in the `nftnl-rs` Rust crate, a wrapper for

How the mentioned CVE works: CVE-2023-46805 is an authentication bypass vulnerability within the web component of Ivanti Connect Secure and

The vulnerability CVE-2024-23635 in the OWASP Java HTML Sanitizer arises from a specific and insecure interaction between the `noscript` and

How the mentioned CVE works: The vulnerability is an Insecure Direct Object Reference (IDOR) in the Better Auth Passkey Plugin.

How the mentioned CVE works: The vulnerability is a nil pointer dereference in the NSSF (Network Slice Selection Function) module

How the CVE Works The vulnerability exists within the Nudm_SubscriberDataManagement service of Free5GC. An unauthenticated attacker can send a specially

How the mentioned CVE works: The vulnerability CVE-2025-53032 exists within the Npcf_BDTPolicyControl service of Free5GC. A threat actor can exploit

How the mentioned CVE works: The vulnerability exists within the handling of template closures in the `Contao\Template::once()` method. Backend users

The vulnerability exists within the Snappy compression block decoder in affected versions of VictoriaMetrics. The decoder fails to properly validate

The CVE-2024-XXXX vulnerability in the cggmp24 library stems from insecure handling of presignatures in two specific contexts. First, when combined

How the CVE Works The vulnerability exists within the Fugue framework’s RPC server implementation. The `_decode()` function located in `fugue/rpc/flask.py`

The CGGMP21 threshold ECDSA protocol utilizes Zero-Knowledge (ZK) proofs to allow multiple parties to collaboratively generate signatures without any single

The CVE-2024-36401 vulnerability in GeoServer operates through its Web Map Service (WMS) `GetMap` endpoint at /geoserver/wms. This endpoint accepts XML-based