CVE-2025-43928

creationtimestamp| type| source ---|---|--- 2025-04-20 03:02:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12606 2025-04-20 05:55:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln7xme3jeih2 2025-04-20...

CVE-2025-43928

The CVE-2025-43928 entry concerns Infodraw Media Relay Service (MRS) v7.1.0.0. The MRS web server (port 12654) exposes a path traversal in the username field, enabling reading arbitrary files. Reading ServerParameters.xml could disclose administrator credentials (cleartext or MD5 hashed). Affecte...