CVE-2025-0785

Summary: CVE-2025-0785 affects ESAFENET CDG V5, specifically the /SysConfig.jsp file where the user-supplied parameter likely named “help” can be manipulated to trigger cross-site scripting (XSS). The root cause is improper sanitization/handling of the argument, enabling an attacker to inject exe...

PT-2025-4046 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting an unknown function of the file /appDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to launch the attack...

PT-2025-4047 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A vulnerability was found in an unknown functionality of the file /appDetail.jsp. The manipulation of the curpage argument leads to cross site scripting. The attack can be launched remotely. The vendor was contact...

PT-2025-4050 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A problematic issue was found in ESAFENET CDG V5, affecting unknown code of the file "doneDetail.jsp". The manipulation of the curpage argument leads to cross site scripting. The attack can be initiated remotely...

PT-2025-4048 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...

PT-2025-4049 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical vulnerability has been found in ESAFENET CDG V5, affecting an unknown part of the file /doneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. It is possible to initiate the...

PT-2025-4051 · Unknown · Esafenet Cdg V5

Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue has been found in ESAFENET CDG V5, affecting some unknown processing of the file /sdDoneDetail.jsp. The manipulation of the flowId argument leads to SQL injection. The attack may be initiated...

CVE-2025-21624

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an attacker can upload a PHP script...

CVE-2025-21623

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service...

CVE-2025-21622

ClipBucket V5 provides open source video hosting with PHP. During the user avatar upload workflow, a user can choose to upload and change their avatar at any time. During deletion, ClipBucket checks for the avatarurl as a filepath within the avatars subdirectory. If the URL path exists within the...

CVE-2025-21624 ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an attacker can upload a PHP script...

CVE-2025-21624 ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an attacker can upload a PHP script...

CVE-2025-21624 ClipBucket V5 Playlist Cover File Upload to Remote Code Execution

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 239, a file upload vulnerability exists in the Manage Playlist functionality of the application, specifically surrounding the uploading of playlist cover images. Without proper checks, an attacker can upload a PHP script...

CVE-2025-21624

CVE-2025-21624 affects ClipBucket V5 prior to 5.5.1-239. The issue is an improper validation in the Manage Playlist file upload that allows uploading a PHP script instead of an image, enabling remote code execution (webshell) in both admin and user areas. The vulnerability is fixed in version 5.5...

CVE-2025-21623 ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Service

ClipBucket V5 provides open source video hosting with PHP. Prior to 5.5.1 - 238, ClipBucket V5 allows unauthenticated attackers to change the template directory via a directory traversal, which results in a denial of service...

CVE-2025-21623

ClipBucket V5 is affected by CVE-2025-21623. According to Red Hat/NVD and related records, versions prior to 5.5.1 - 238 allow unauthenticated attackers to traverse directories to change the template directory, causing a denial of service. Impact is availability loss. Affected product: ClipBucket...

CVE-2025-21622 ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

ClipBucket V5 provides open source video hosting with PHP. During the user avatar upload workflow, a user can choose to upload and change their avatar at any time. During deletion, ClipBucket checks for the avatarurl as a filepath within the avatars subdirectory. If the URL path exists within the...

CVE-2025-21622 ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Delete

ClipBucket V5 provides open source video hosting with PHP. During the user avatar upload workflow, a user can choose to upload and change their avatar at any time. During deletion, ClipBucket checks for the avatarurl as a filepath within the avatars subdirectory. If the URL path exists within the...

MAL-2024-11920 Malicious code in redux-form-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae31362c43d68bb1256c0bfe637e48b0ee30c4bcb18f8768cf7c83153c2beaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in redux-form-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae31362c43d68bb1256c0bfe637e48b0ee30c4bcb18f8768cf7c83153c2beaf9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...