CVE-2025-5952

A vulnerability, which was classified as critical, has been found in Zend.To up to 6.10-6 Beta. This issue affects the function exec of the file NSSDropoff.php. The manipulation of the argument file1 leads to os command injection. The attack may be initiated remotely. The exploit has been disclos...

CVE-2025-5952

creationtimestamp| type| source ---|---|--- 2025-06-10 05:29:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17829 2025-06-10 05:30:35+00:00| published-proof-of-concept| Telegram/fpCirrWp0oU0Ex5TyvxTvRDfboiqPgLEDt6DbVLmZ6Csc...

CVE-2025-5952

The CVE-2025-5952 issue affects Zend.To up to version 6.10-6 Beta, specifically the NSSDropoff.php file where manipulation of the file_1 argument in the exec function enables os command injection. The vulnerability is remote, with public exploits, and affects older Zend.To releases. Remediation p...