exploit

How the CVE Works: CVE-2025-12345 affects Spring Boot’s `EndpointRequest.to()` method, which incorrectly generates a matcher for `null/` when an actuator

How the CVE Works: The vulnerability in Apereo CAS 5.2.6 stems from improper input validation in the `saveService` function of

The vulnerability in the Go Snowflake Driver (versions 1.7.0 to 1.13.2) stems from improper permission validation in the Easy Logging

How the Vulnerability Works The Snowflake Connector for .NET’s Easy Logging feature on Linux and macOS improperly validates file permissions

How CVE-2025-28072 Works The vulnerability exists in `manage-teachers.php` due to improper input validation. Attackers exploit directory traversal by manipulating file

How the CVE Works The vulnerability exists in /admin/forgot-password.php, where the `email` parameter is improperly sanitized before being used in

How the CVE Works: The CVE-2025-3828 vulnerability exists in PHPGurukul Men Salon Management System 1.0 within the `/admin/view-appointment.php?viewid=11` endpoint. The

How the CVE Works: CVE-2025-24453 exploits a heap-based buffer overflow vulnerability in Adobe InDesign (versions ID20.1, ID19.5.2, and earlier). When

How CVE-2025-24452 Works Adobe InDesign versions ID20.1, ID19.5.2 and earlier contain an out-of-bounds write vulnerability in their file parsing mechanism.

How the CVE Works: CVE-2025-27172 is an out-of-bounds write vulnerability in Substance3D Designer (versions 14.1 and earlier). When parsing a

How the CVE Works: CVE-2025-21169 exploits a heap-based buffer overflow in Substance3D Designer (v14.1 and earlier). When parsing a maliciously

How the CVE Works: CVE-2025-27175 is an out-of-bounds write vulnerability in Adobe InDesign (versions ID20.1, ID19.5.2, and earlier). When a

How CVE-2025-27166 Works CVE-2025-27166 is an out-of-bounds write vulnerability in Adobe InDesign (versions ID20.1, ID19.5.2 and earlier). When parsing a

The CVE-2025-39778 vulnerability occurs in the Linux kernel’s NVMe over Fabrics (NVMe-oF) subsystem, specifically in the `nvmet_ctrl_state_show()` function. This function

How the CVE Works: CVE-2025-22035 is a use-after-free vulnerability in the Linux kernel’s tracing subsystem, specifically affecting `print_graph_function_flags()` during tracer

How CVE-2025-22097 Works This vulnerability exists in the Linux kernel’s Virtual Kernel Mode Setting (VKMS) driver. During initialization failure, the

How CVE-2025-22088 Works: This vulnerability exists in the Linux kernel’s RDMA/erdma subsystem within the `erdma_accept_newconn()` function. When handling new RDMA

How the CVE Works: CVE-2025-22085 is a use-after-free vulnerability in the Linux kernel’s RDMA (Remote Direct Memory Access) subsystem. The

How CVE-2025-22041 Works This vulnerability occurs in the ksmbd (kernel SMB server) component of Linux kernel when operating in multichannel

The CVE-2025-22040 vulnerability in the Linux kernel arises from a race condition in the `ksmbd` (SMB server daemon) module. This

How the CVE Works: The vulnerability (CVE-2025-XXXX) in Moodle arises due to insufficient access control checks in the cohorts report

How the CVE Works: The vulnerability (CVE-2025-XXXX) in Moodle LMS stems from improper input validation in the Dropbox repository integration.

The vulnerability in Moodle’s policy tool arises due to insufficient sanitization of the return URL parameter, allowing attackers to inject

How the CVE Works: The vulnerability exists in Moodle’s EQUELLA repository integration, allowing authenticated users (teachers/managers) to execute arbitrary code

The CVE-2025-XXXX vulnerability in Moodle arises due to insufficient capability checks in the web service API. When a user is

How CVE-2025-28399 Works CVE-2025-28399 is a critical privilege escalation vulnerability in Erick xmall v1.1 and earlier. The flaw resides in

How the CVE Works: CVE-2025-29449 exploits Twonav v2.1.18-20241105’s insecure link identification function. Attackers craft malicious requests to extract sensitive data

How the CVE Works: The vulnerability (CVE-2025-XXXX) in Moodle’s user tours manager allows attackers to duplicate existing tours via CSRF.

How the CVE Works: Moodle’s `mod_data` module improperly passes CSRF tokens in GET parameters on edit/delete pages. CSRF tokens are

How CVE-2025-29460 Works CVE-2025-29460 is an information disclosure vulnerability in MyBB 1.8.38 that allows remote attackers to obtain sensitive data

How CVE-2025-26268 Works CVE-2025-26268 affects DragonflyDB versions before 1.27.0, allowing authenticated users to crash the daemon via a malicious Redis

This vulnerability in Moodle arises due to Insecure Direct Object Reference (IDOR) in the RSS block component. The flaw allows

How the CVE Works: CVE-2025-43015 is a critical vulnerability in JetBrains RubyMine before version 2025.1, where the remote interpreter improperly

How the CVE Works: CVE-2025-29213 is a Zip Slip vulnerability in JEEWMS v3.7, specifically in \service\migrate\MigrateForm.java. Attackers exploit this by

How the CVE Works The vulnerability (CVE-2025-XXXX) in Moodle allows unauthenticated attackers to extract sensitive user data via improperly handled

How the CVE Works The vulnerability in GraphQL Armor’s Cost Limit plugin allows attackers to bypass query cost restrictions by

How the CVE Works The vulnerability in Rancher allows a user with project creation rights to escalate privileges by creating

How the CVE Works The vulnerability (CVE-2023-XXXX) in Steve arises due to improper TLS certificate validation during remote server connections.

How the CVE Works The vulnerability in Fleet arises due to improper SSH certificate validation. By default, Fleet trusts remote

How the CVE Works CVE-2025-32432 in Craft CMS allows remote code execution through improper input validation in template rendering. The

How the CVE Works: CVE-2025-28121 is a stored Cross-Site Scripting (XSS) vulnerability in `feedback.php` of the Online Exam Mastering System

How the CVE Works: CVE-2025-43919 exploits a directory traversal vulnerability in GNU Mailman 2.1.39, as bundled in cPanel/WHM. Attackers send

How the CVE Works CVE-2025-29287 exploits an insecure file upload mechanism in MCMS v5.4.3’s ueditor component. Attackers bypass file type

How CVE-2025-43920 Works GNU Mailman 2.1.39, when integrated with cPanel/WHM and configured with external archivers, fails to sanitize email Subject

How the CVE Works The vulnerability exploits the `X-React-Router-Prerender-Data` header in React-Router’s framework mode. When a page uses a loader,

How the CVE Works The vulnerability occurs when React-Router (Framework mode) processes the `X-React-Router-SPA-Mode` header, forcing Server-Side Rendering (SSR) pages

Mattermost Playbooks fails to properly validate the props used by the `RetrospectivePost` custom post type in versions 10.4.x ≤ 10.4.2,

How CVE-2025-43928 Works Infodraw Media Relay Service (MRS) 7.1.0.0 suffers from a critical directory traversal vulnerability in its web server

How the CVE Works The vulnerability (CVE-2025-XXXX) in h11 (versions ≤ 0.14.0) stems from improper validation of chunked-encoding line terminators.

How CVE-2025-3822 Works The vulnerability exists in `changepassword.php` due to improper sanitization of user-supplied inputs (txtconfirm_password, txtnew_password, txtold_password). An attacker

How CVE-2025-3821 Works The vulnerability exists in `add-admin.php` due to improper sanitization of user-supplied inputs (txtpassword, txtfullname, and txtemail). Attackers

How the CVE Works Mattermost Playbooks fails to enforce proper permission checks on the API endpoint /plugins/playbooks/api/v0/signal/keywords/ignore-thread. This flaw allows

How the CVE Works: Mattermost Playbooks fails to enforce proper validation checks on task actions in the UpdateRunTaskActions GraphQL operation.

The vulnerability in Picklescan (prior to v0.0.25) stems from improper handling of unsafe globals during deserialization. The library fails to

How CVE-2025-3690 Works The vulnerability exists in `/admin/edit-services.php` where user-supplied input in the `cost` parameter is directly concatenated into an

How CVE-2025-29652 Works The CVE-2025-29652 vulnerability allows SQL injection in TP-Link M7000 routers (firmware 1.0.7) via unauthenticated username/password fields. Attackers

How CVE-2025-29650 Works This SQL injection vulnerability in TP-Link M7200 routers occurs when unsanitized user input from login fields is

How the CVE Works: CVE-2025-3691 is an SSRF vulnerability in Seven Bears Library CMS 2023’s Add Link Handler component. Attackers

How CVE-2025-3378 Works The vulnerability exists in the EPRT command handler of PCMan FTP Server 2.0.7. When processing overly long

How the CVE Works: CVE-2025-0881 exploits improper input sanitization in the `rname` parameter of `/dashboard/admin/saveroutine.php` in Codezips Gym Management System

How CVE-2025-3162 Works The vulnerability exists in LMDeploy’s PT file handler component within lmdeploy/vl/model/utils.py. The `load_weight_ckpt` function improperly validates serialized

How the CVE Works CVE-2025-3374 exploits a buffer overflow vulnerability in PCMan FTP Server 2.0.7 via the CCC command handler.

How CVE-2025-2946 Works pgAdmin <= 9.1 fails to properly sanitize user-supplied input in query result rendering. Attackers craft malicious SQL

How CVE-2025-29648 Works This SQL injection vulnerability in TP-Link EAP120 (v1.0) occurs due to improper sanitization of user-supplied input in

How CVE-2025-29649 Works The CVE-2025-29649 vulnerability in TP-Link TL-WR840N (v1.0) allows unauthenticated SQL injection via the login dashboard. Attackers craft

How CVE-2025-29513 Works This vulnerability exploits insufficient input sanitization in NodeBB’s admin API access token generator (v4.0.4 and prior). Attackers

How CVE-2025-3787 Works This vulnerability in PbootCMS 3.2.5 arises from improper input validation in the Image Handler component. Attackers can

How CVE-2025-29512 Works This stored XSS vulnerability in NodeBB v4.0.4 and prior allows attackers to inject malicious JavaScript payloads into

How CVE-2025-3788 Works The vulnerability in BaseWeb JSite 1.0 arises from improper input sanitization in the `/a/sys/user/save` endpoint. An attacker

How CVE-2025-3783 Works This critical vulnerability in SourceCodester’s Web-based Pharmacy Product Management System 1.0 allows remote attackers to upload malicious

How the CVE Works CVE-2025-29710 is a stored Cross-Site Scripting (XSS) vulnerability in SourceCodester Company Website CMS 1.0. The flaw

How the CVE Works CVE-2025-29471 is a stored Cross-Site Scripting (XSS) vulnerability in Nagios Log Server v.2024R1.3.1. The flaw exists

How CVE-2025-3439 Works The vulnerability exists in the Everest Forms WordPress plugin (≤ v3.1.1) due to insecure deserialization of user-supplied

How the CVE Works: CVE-2025-29709 exploits an insecure file upload mechanism in SourceCodester Company Website CMS 1.0. Attackers can bypass

How CVE-2025-22911 Works CVE-2025-22911 is a critical stack-based buffer overflow vulnerability in RE11S v1.11. The flaw exists in the `formiNICbasicREP`

How CVE-2025-3422 Works The vulnerability exists in Everest Forms plugin (≤ v3.1.1) due to improper validation of user-supplied input before

How CVE-2025-3421 Works The vulnerability exists in the Everest Forms WordPress plugin (≤ v3.1.1) due to improper sanitization of the

How CVE-2025-30294 Works CVE-2025-30294 is an Improper Input Validation vulnerability in Adobe ColdFusion (versions 2023.12, 2021.18, 2025.0 and earlier). A

How CVE-2025-27892 Works This vulnerability affects Shopware versions before 6.5.8.13 due to a regression of previously patched CVEs (CVE-2024-22406 and

How CVE-2025-43013 Works The vulnerability in JetBrains Toolbox App before version 2.6 allows unencrypted transmission of SSH credentials during authentication.

How CVE-2025-42921 Works The vulnerability exists in JetBrains Toolbox App versions before 2.6 due to missing host key verification in

How CVE-2025-3163 Works The vulnerability exists in LMDeploy’s configuration file parsing logic within lmdeploy/docs/en/conf.py. When processing the `Open()` function, improper

How CVE-2025-3164 Works CVE-2025-3164 is a critical code injection vulnerability in Tencent Music Entertainment SuperSonic (up to v0.9.8). The flaw

How CVE-2025-3174 Works The vulnerability exists in `/searchLawyer.php` due to improper sanitization of the `experience` parameter. Attackers can inject malicious

How CVE-2025-3253 Works This vulnerability exists in AdminTwo 1.0 within the `/ztree/insertTree` endpoint due to improper sanitization of the `Name`

How CVE-2025-1949 Works The vulnerability in ZZCMS 2025 arises from improper sanitization of the `$_SERVER[‘PHP_SELF’]` parameter in the `/3/ucenter_api/code/register_nodb.php` file.

How CVE-2025-3245 Works The vulnerability exists in the `Search` function within library_management/src/Library_Management/Forgot.java. The `txtuname` parameter is directly concatenated into SQL

How the CVE Works: The vulnerability occurs when uTLS (a TLS 1.3 library) fails to verify the downgrade canary in

How the CVE Works The vulnerability allows unauthenticated attackers to bypass HQL (Hibernate Query Language) restrictions and execute arbitrary SQL

How the CVE Works: Laravel Starter 11.11.0 fails to properly sanitize user-supplied input in the tags feature. Attackers can inject

How the CVE Works: The vulnerability exists in the `/files` endpoint of CUBA Platform’s REST API (versions <7.2.7). Attackers can

The vulnerability in `io.jmix.localfs:jmix-localfs` allows attackers to trigger a DoS condition by exploiting insufficient file size restrictions in the local

How the CVE Works: The vulnerability arises due to improper validation of file extensions in the `/files` endpoint of Jmix.

How the Vulnerability Works This XSS vulnerability occurs in the `/download` endpoint of CUBA Platform’s JPA Web API (versions <1.1.1).

How the CVE Works: The vulnerability in `io.jmix.localfs:jmix-localfs` allows attackers to perform path traversal attacks by manipulating the `FileRef` parameter.

How the CVE Works The vulnerability arises in Wazuh’s DistributedAPI when deserializing JSON data using `as_wazuh_object` in framework/wazuh/core/cluster/common.py. Attackers can

The vulnerability in OctoPrint (up to v1.10.3) allows attackers to bypass frontend authentication by injecting the `X-Preemptive-Recording: yes` HTTP header.

How the CVE Works: Crawl4AI versions <=0.4.247 contain an SSRF vulnerability in /crawl4ai/async_dispatcher.py. The flaw allows attackers to manipulate server-side

How the CVE Works CVE-2025-32415 is a heap-based buffer under-read vulnerability in libxml2 versions before 2.13.8 and 2.14.x before 2.14.2.

How the CVE Works The CVE-2025-XXXX vulnerability in Alkacon OpenCMS v17.0 arises due to insufficient input sanitization in the “author”