CVE-2018-25417

creationtimestamp| type| source ---|---|--- 2026-05-30 17:16:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mn3kkelk352a...

CVE-2018-25417

AiOPMSD Final 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the quality parameter. Attackers can send GET requests to quality.php with crafted SQL payloads in the quality parameter to extrac...

CVE-2021-25417

Improper authorization in SDP SDK prior to SMR JUN-2021 Release 1 allows access to internal storage...

CVE-2024-25417

creationtimestamp| type| source ---|---|--- 2024-02-11 22:21:36+00:00| seen| https://t.me/ctinow/182854 2024-02-13 02:16:40+00:00| seen| https://t.me/ctinow/183555 2024-03-03 14:16:55+00:00| seen| https://t.me/ctinow/198736...

CVE-2024-25417

flusity-CMS v2.33 was discovered to contain a Cross-Site Request Forgery CSRF via the component /core/tools/addtranslation.php...

CVE-2024-25417

CVE-2024-25417 concerns flusity-CMS v2.33, where a CSRF flaw exists in the /core/tools/add_translation.php component. The vulnerability allows unauthorized actions requiring user interaction, with CVSS v3.1 base score 8.8 (High impact across confidentiality, integrity, and availability; network a...

CVE-2022-25417

CVE-2022-25417 affects the Tenda AC9 router with firmware version V15.03.2.21_cn . The vulnerability is a stack overflow in the function saveparentcontrolinfo . The CVSS-3.1 base score is 9.8 (CRITICAL) with network exploitability, no user interaction, and impact to confidentiality, integrity, an...

CVE-2021-25417

CVE-2021-25417 affects the SDP SDK prior to Samsung SMR JUN-2021 Release 1, where improper authorization allows access to internal storage. The vulnerability is documented across multiple sources (NVD entry; Red Hat advisory; PRION; CVE listing; CNNVD) with CVSS v3.1 base score 7.5 (Network, Low ...

GNU Tar contains_dot_dot函数远程目录遍历漏洞

BUGTRAQ ID: 25417 CVECAN ID: CVE-2007-4131 GNU tar可创建和解压tar文档，并进行各种存档文件管理。 GNU tar在处理符号链接时存在漏洞，本地攻击者可能利用此漏洞提升权限或破坏文件。 GNU tar的containsdotdot函数没有正确地检查目录符号链接的名称，恶意用户所创建tar文档可以写入运行GNU tar的用户可写访问的任意文件。 GNU tar = 1.15.91 RedHat已经为此发布了一个安全公告（RHSA-2007:0860-01）以及相应补丁: RHSA-2007:0860-01：Moderate: tar...