18 matches found
CVE-2025-31125
CVE-2025-31125 脆弱性検出ツール これは CVE-2025-31125 脆弱性を検出するための Python スクリプトツールです。 作者情報 Author: 大智 Date: 2025-04-01 機能特徴 単一ターゲットの検出に対応 複数ターゲットの一括検出に対応 検出結果の自動保存 カラー出力インターフェース 詳細な検出ログ 環境要件 Python 3.6 以上 Windows/Linux/MacOS オペレーティングシステム クイックスタート 1. 依存関係のインストール 必要な依存関係を一括インストール pip install -r requirements.tx...
Vitejs-exploit
Vite エクスプロイト CVE-2025-31125 説明: Vite開発サーバーの@fsエンドポイントにおけるパストラバーサル（CVE-2025-31125）を悪用し、巧妙に細工されたURLを介して/etc/passwdや/etc/hostsなどの機密ファイルにアクセスします。 作成者: Muhammad Waseem 使用方法: python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 必要条件: Python 3.x pip install requests...
Path-Transversal-CVE-2025-31125-
Vite Exploit（CVE-2025-31125） 説明：Vite開発サーバーの@fsエンドポイントにおけるパストラバーサル（CVE-2025-31125）を悪用し、細工したURLを介して/etc/passwdや/etc/hostsなどの機密ファイルにアクセスします。 作成者：Harsh Gupta 使い方： python viteexploit.py -u http://target.com python viteexploit.py -f urls.txt -o output.txt 要件： Python 3.x pip install requests colorama...
Exploit for CVE-2025-31125
Vite Exploit CVE-2025-31125 Description: Exploits path tr...
Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125
Summary Security Bulletin: IBM Maximo Application Suite - Manage Component uses vite-5.4.12.tgz which is vulnerable to CVE-2025-31125. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2025-31125 DESCRIPTION: Vite is a frontend tooling...
Security Bulletin: Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation (CVE-2025-31125, CVE-2025-32395, CVE-2025-31486).
Summary Multiple security vulnerabilities in Vite affect IBM Robotic Process Automation CVE-2025-31125, CVE-2025-32395, CVE-2025-31486. Vite is used by IBM Robotic Process Automation as part of the UI framework. This bulletin identifies the fixes required to address these vulnerabilities...
VulnCheck KEV: CVE-2025-31125
Vite Vitejs contains an improper access control vulnerability that exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected...
Exploit for CVE-2025-31125
CVE-2025-31125 Exploit - Vite WASM Import Path Traversal 🛡️ T...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: langfuse-fips, langfuse...
CVE-2025-31125 vulnerabilities
Vulnerabilities for packages: vitess...
@angular-devkit/build-angular (>=19.2.0-next.2, <=19.2.0), @angular/build (>=19.2.0-next.2, <=19.2.0) +41 more potentially affected by CVE-2025-31125 via vite (>=6.1.0, <=6.1.2)
vite NPM version =6.1.0, =19.2.0-next.2, =19.2.0-next.2, =1.0.7, =2.12.0, =2.12.0, =11.24.0, =0.0.1739797164641, =1.0.0, =0.0.0-experimental-989cf02-20250217-d62ba1cb, =0.0.0-experimental-0580205-20250209-2be35102, =0.0.0-snapshot-08bd566ea55152626f488c12d32ebce7e35b812d,...
@4399ywkf/bundler-vite (>=4.0.61, <=4.0.84), @4399ywkf/js (>=4.0.61, <=4.0.84) +512 more potentially affected by CVE-2025-31125 via vite (>=4.0.0, <=4.5.9)
vite NPM version =4.0.0, =4.0.61, =4.0.61, =4.0.61, =4.0.61, =0.0.1, =0.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1, =0.0.1, =3.3.9-patch.1, =3.3.9-patch.2 and more Source cves: CVE-2025-31125 Source advisory: OSV:GHSA-4R4M-QW57-CHR8...
@aklesky/vite-config (1.0.0), @aminnairi/react-translate (>=0.2.0, <=1.0.0) +56 more potentially affected by CVE-2025-31125 via vite (>=6.0.0, <=6.0.11)
vite NPM version =6.0.0, =0.2.0, =4.25.19-patch.2, =19.1.0-next.0, =19.1.0-next.0, =6.0.0-beta.1, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.0.0-sessions-20241122114539, =0.4.2, =0.1.10, =0.0.1, =5.0.0-alpha.32, =5.0.0-alpha.38 and more Sour...
@adhd/backlog (>=1.0.0, <=1.0.8), @adhd/react-hooks (2.2.1) +445 more potentially affected by CVE-2025-31125 via vite (>=5.0.0, <=5.4.15)
vite NPM version =5.0.0, =1.0.0, =2.2.1, =0.0.1, =0.7.9, =4.23.1-prerelease.0, =17.1.0-next.0, =18.0.0-next.3, =1.0.25-beta.0, =0.0.1-alpha.0, =0.5.0, =0.5.5 - @avorati/strapi-plugin-preview 1.0.1 - @beaker-tools/typescript-toolkit 1.3.0 - @beardeddudes/strapi-types 0.1.1 and more Source cves:...
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...
CVE-2025-31125 Vite has a `server.fs.deny` bypassed for `inline` and `raw` with `?import` query
Vite is a frontend tooling framework for javascript. Vite exposes content of non-allowed files using ?inline&import or ?raw?import. Only apps explicitly exposing the Vite dev server to the network using --host or server.host config option are affected. This vulnerability is fixed in 6.2.4, 6.1.3,...
CVE-2025-31125
Summary of CVE-2025-31125 (Vite): Vite’s dev server, when exposed to the network (e.g., via --host or server.host), can disclose content of non-allowed files through URL modifiers like ?inline&import or ?raw?import. The issue is specific to Vite when the dev server is reachable externally; it doe...