Publish Advisories

GHSA-43qr-pjmr-cgfv GHSA-8743-487v-2xqh GHSA-f87m-rx58-p97v GHSA-fmqv-vc53-6mwm GHSA-fx6v-jrpq-f762 GHSA-h9vw-8pf3-5j78
2026-05-22 18:04:22 -07:00 · 2025-05-17 15:32:33 +00:00
parent 69de50c084
commit 4452f8b31e
6 changed files with 206 additions and 2 deletions
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-43qr-pjmr-cgfv",
-  "modified": "2025-05-14T15:31:37Z",
+  "modified": "2025-05-17T15:30:25Z",
  "published": "2025-05-14T15:31:37Z",
  "aliases": [
    "CVE-2024-54779"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack"
    },
+    {
+      "type": "WEB",
+      "url": "https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2"
+    },
    {
      "type": "WEB",
      "url": "http://netgate.com"
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-8743-487v-2xqh",
+  "modified": "2025-05-17T15:30:25Z",
+  "published": "2025-05-17T15:30:25Z",
+  "aliases": [
+    "CVE-2025-4101"
+  ],
+  "details": "The MultiVendorX – WooCommerce Multivendor Marketplace Solutions plugin for WordPress is vulnerable to unauthorized loss of data due to a misconfigured capability check on the 'delete_fpm_product' function in all versions up to, and including, 4.2.22. This makes it possible for authenticated attackers, with Contributor-level access and above, to delete arbitrary posts, pages, attachments, and products. The vulnerability was partially patched in version 4.2.22.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4101"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/browser/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php#L982"
+    },
+    {
+      "type": "WEB",
+      "url": "https://plugins.trac.wordpress.org/changeset/3293832/dc-woocommerce-multi-vendor/trunk/classes/class-mvx-ajax.php?old=3272848&old_path=dc-woocommerce-multi-vendor%2Ftrunk%2Fclasses%2Fclass-mvx-ajax.php"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/5c1fd517-32ee-429d-9026-512afe117dc5?source=cve"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-863"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-17T13:15:47Z"
+  }
+}
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-f87m-rx58-p97v",
+  "modified": "2025-05-17T15:30:25Z",
+  "published": "2025-05-17T15:30:25Z",
+  "aliases": [
+    "CVE-2025-48187"
+  ],
+  "details": "RAGFlow through 0.18.1 allows account takeover because it is possible to conduct successful brute-force attacks against email verification codes to perform arbitrary account registration, login, and password reset. Codes are six digits and there is no rate limiting.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-48187"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/infiniflow/ragflow/commits/main"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.cnblogs.com/qiushuo/p/18881084"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-307"
+    ],
+    "severity": "CRITICAL",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-17T13:15:47Z"
+  }
+}
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fmqv-vc53-6mwm",
+  "modified": "2025-05-17T15:30:25Z",
+  "published": "2025-05-17T15:30:25Z",
+  "aliases": [
+    "CVE-2025-4827"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected is an unknown function of the file /boafrm/formSaveConfig of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4827"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CH13hh/tmp_store_cc/blob/main/toto/6.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.309288"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.309288"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.574598"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-17T15:15:46Z"
+  }
+}
@@ -1,7 +1,7 @@
 {
  "schema_version": "1.4.0",
  "id": "GHSA-fx6v-jrpq-f762",
-  "modified": "2025-05-14T15:31:38Z",
+  "modified": "2025-05-17T15:30:25Z",
  "published": "2025-05-14T15:31:37Z",
  "aliases": [
    "CVE-2024-54780"
@@ -23,6 +23,10 @@
      "type": "WEB",
      "url": "https://blog.brillantit.com/exploiting-pfsense-xss-command-injection-cloud-hijack"
    },
+    {
+      "type": "WEB",
+      "url": "https://www.netgate.com/blog/important-security-updates-for-pfsense-plus-24.11-and-ce-2.7.2"
+    },
    {
      "type": "WEB",
      "url": "http://netgate.com"
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h9vw-8pf3-5j78",
+  "modified": "2025-05-17T15:30:25Z",
+  "published": "2025-05-17T15:30:25Z",
+  "aliases": [
+    "CVE-2025-4829"
+  ],
+  "details": "A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3.0.0-B20230809.1615. Affected by this vulnerability is the function sub_40BE30 of the file /boafrm/formStats of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4829"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/CH13hh/tmp_store_cc/blob/main/toto/7.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.309295"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.309295"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.574599"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.totolink.net"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-17T15:15:47Z"
+  }
+}