diff --git a/advisories/github-reviewed/2019/12/GHSA-hrqr-hxpp-chr3/GHSA-hrqr-hxpp-chr3.json b/advisories/github-reviewed/2019/12/GHSA-hrqr-hxpp-chr3/GHSA-hrqr-hxpp-chr3.json
index 852519b2257..b3d3320d3f4 100644
--- a/advisories/github-reviewed/2019/12/GHSA-hrqr-hxpp-chr3/GHSA-hrqr-hxpp-chr3.json
+++ b/advisories/github-reviewed/2019/12/GHSA-hrqr-hxpp-chr3/GHSA-hrqr-hxpp-chr3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hrqr-hxpp-chr3",
-  "modified": "2021-11-03T14:59:03Z",
+  "modified": "2025-02-13T18:33:17Z",
   "published": "2019-12-18T19:01:31Z",
   "aliases": [
     "CVE-2019-16782"
@@ -75,6 +75,10 @@
       "type": "WEB",
       "url": "https://github.com/rubysec/ruby-advisory-db/blob/master/gems/rack/CVE-2019-16782.yml"
     },
+    {
+      "type": "WEB",
+      "url": "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX"
+    },
     {
       "type": "WEB",
       "url": "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HZXMWILCICQLA2BYSP6I2CRMUG53YBLX"
diff --git a/advisories/github-reviewed/2022/12/GHSA-9h9g-93gc-623h/GHSA-9h9g-93gc-623h.json b/advisories/github-reviewed/2022/12/GHSA-9h9g-93gc-623h/GHSA-9h9g-93gc-623h.json
index bf16f04a6ba..1d4510304cf 100644
--- a/advisories/github-reviewed/2022/12/GHSA-9h9g-93gc-623h/GHSA-9h9g-93gc-623h.json
+++ b/advisories/github-reviewed/2022/12/GHSA-9h9g-93gc-623h/GHSA-9h9g-93gc-623h.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9h9g-93gc-623h",
-  "modified": "2022-12-17T00:32:41Z",
+  "modified": "2025-02-13T18:33:18Z",
   "published": "2022-12-13T17:50:25Z",
   "aliases": [
     "CVE-2022-23519"
   ],
   "summary": "Possible XSS vulnerability with certain configurations of rails-html-sanitizer",
-  "details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags in either of the following ways:\n\n- allow both \"math\" and \"style\" elements,\n- or allow both \"svg\" and \"style\" elements\n\nCode is only impacted if allowed tags are being overridden. Applications may be doing this in four different ways:\n\n1. using application configuration:\n\n  ```ruby\n  # In config/application.rb\n  config.action_view.sanitized_allowed_tags = [\"math\", \"style\"]\n  # or\n  config.action_view.sanitized_allowed_tags = [\"svg\", \"style\"]\n  ```\n\n  see https://guides.rubyonrails.org/configuring.html#configuring-action-view\n\n2. using a `:tags` option to the Action View helper `sanitize`:\n\n  ```\n  <%= sanitize @comment.body, tags: [\"math\", \"style\"] %>\n  <%# or %>\n  <%= sanitize @comment.body, tags: [\"svg\", \"style\"] %>\n  ```\n\n  see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize\n\n3. using Rails::Html::SafeListSanitizer class method `allowed_tags=`:\n\n  ```ruby\n  # class-level option\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"math\", \"style\"]\n  # or\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"svg\", \"style\"]\n  ```\n\n4. using a `:tags` options to the Rails::Html::SafeListSanitizer instance method `sanitize`:\n\n  ```ruby\n  # instance-level option\n  Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: [\"math\", \"style\"])\n  # or\n  Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: [\"svg\", \"style\"])\n  ```\n\nAll users overriding the allowed tags by any of the above mechanisms to include ((\"math\" or \"svg\") and \"style\") should either upgrade or use one of the workarounds immediately.\n\n\n## Workarounds\n\nRemove \"style\" from the overridden allowed tags, or remove \"math\" and \"svg\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://hackerone.com/reports/1656627\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.\n",
+  "details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags in either of the following ways:\n\n- allow both \"math\" and \"style\" elements,\n- or allow both \"svg\" and \"style\" elements\n\nCode is only impacted if allowed tags are being overridden. Applications may be doing this in four different ways:\n\n1. using application configuration:\n\n  ```ruby\n  # In config/application.rb\n  config.action_view.sanitized_allowed_tags = [\"math\", \"style\"]\n  # or\n  config.action_view.sanitized_allowed_tags = [\"svg\", \"style\"]\n  ```\n\n  see https://guides.rubyonrails.org/configuring.html#configuring-action-view\n\n2. using a `:tags` option to the Action View helper `sanitize`:\n\n  ```\n  <%= sanitize @comment.body, tags: [\"math\", \"style\"] %>\n  <%# or %>\n  <%= sanitize @comment.body, tags: [\"svg\", \"style\"] %>\n  ```\n\n  see https://api.rubyonrails.org/classes/ActionView/Helpers/SanitizeHelper.html#method-i-sanitize\n\n3. using Rails::Html::SafeListSanitizer class method `allowed_tags=`:\n\n  ```ruby\n  # class-level option\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"math\", \"style\"]\n  # or\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"svg\", \"style\"]\n  ```\n\n4. using a `:tags` options to the Rails::Html::SafeListSanitizer instance method `sanitize`:\n\n  ```ruby\n  # instance-level option\n  Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: [\"math\", \"style\"])\n  # or\n  Rails::Html::SafeListSanitizer.new.sanitize(@article.body, tags: [\"svg\", \"style\"])\n  ```\n\nAll users overriding the allowed tags by any of the above mechanisms to include ((\"math\" or \"svg\") and \"style\") should either upgrade or use one of the workarounds immediately.\n\n\n## Workarounds\n\nRemove \"style\" from the overridden allowed tags, or remove \"math\" and \"svg\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://hackerone.com/reports/1656627\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2022/12/GHSA-mjmj-j48q-9wg2/GHSA-mjmj-j48q-9wg2.json b/advisories/github-reviewed/2022/12/GHSA-mjmj-j48q-9wg2/GHSA-mjmj-j48q-9wg2.json
index 0ff8820fafd..576271ef50c 100644
--- a/advisories/github-reviewed/2022/12/GHSA-mjmj-j48q-9wg2/GHSA-mjmj-j48q-9wg2.json
+++ b/advisories/github-reviewed/2022/12/GHSA-mjmj-j48q-9wg2/GHSA-mjmj-j48q-9wg2.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mjmj-j48q-9wg2",
-  "modified": "2025-02-06T18:09:52Z",
+  "modified": "2025-02-13T18:33:29Z",
   "published": "2022-12-12T21:19:47Z",
   "aliases": [
     "CVE-2022-1471"
diff --git a/advisories/github-reviewed/2022/12/GHSA-qwph-4952-7xr6/GHSA-qwph-4952-7xr6.json b/advisories/github-reviewed/2022/12/GHSA-qwph-4952-7xr6/GHSA-qwph-4952-7xr6.json
index 8e858dc3646..98402dd9f86 100644
--- a/advisories/github-reviewed/2022/12/GHSA-qwph-4952-7xr6/GHSA-qwph-4952-7xr6.json
+++ b/advisories/github-reviewed/2022/12/GHSA-qwph-4952-7xr6/GHSA-qwph-4952-7xr6.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qwph-4952-7xr6",
-  "modified": "2024-06-21T21:33:52Z",
+  "modified": "2025-02-13T18:33:13Z",
   "published": "2022-12-22T03:32:59Z",
   "aliases": [
     "CVE-2022-23540"
   ],
   "summary": "jsonwebtoken vulnerable to signature validation bypass due to insecure default algorithm in jwt.verify()",
-  "details": "# Overview\n\nIn versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification.\n\n# Am I affected?\nYou will be affected if all the following are true in the `jwt.verify()` function:\n- a token with no signature is received\n- no algorithms are specified \n- a falsy (e.g. null, false, undefined) secret or key is passed \n\n# How do I fix it?\n \nUpdate to version 9.0.0 which removes the default support for the none algorithm in the `jwt.verify()` method. \n\n# Will the fix impact my users?\n\nThere will be no impact, if you update to version 9.0.0 and you don’t need to allow for the `none` algorithm. If you need 'none' algorithm, you have to explicitly specify that in `jwt.verify()` options.\n",
+  "details": "# Overview\n\nIn versions <=8.5.1 of jsonwebtoken library, lack of algorithm definition and a falsy secret or key in the `jwt.verify()` function can lead to signature validation bypass due to defaulting to the `none` algorithm for signature verification.\n\n# Am I affected?\nYou will be affected if all the following are true in the `jwt.verify()` function:\n- a token with no signature is received\n- no algorithms are specified \n- a falsy (e.g. null, false, undefined) secret or key is passed \n\n# How do I fix it?\n \nUpdate to version 9.0.0 which removes the default support for the none algorithm in the `jwt.verify()` method. \n\n# Will the fix impact my users?\n\nThere will be no impact, if you update to version 9.0.0 and you don’t need to allow for the `none` algorithm. If you need 'none' algorithm, you have to explicitly specify that in `jwt.verify()` options.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2022/12/GHSA-rrfc-7g8p-99q8/GHSA-rrfc-7g8p-99q8.json b/advisories/github-reviewed/2022/12/GHSA-rrfc-7g8p-99q8/GHSA-rrfc-7g8p-99q8.json
index fa0f94f3d97..2acfbd0fb26 100644
--- a/advisories/github-reviewed/2022/12/GHSA-rrfc-7g8p-99q8/GHSA-rrfc-7g8p-99q8.json
+++ b/advisories/github-reviewed/2022/12/GHSA-rrfc-7g8p-99q8/GHSA-rrfc-7g8p-99q8.json
@@ -1,13 +1,13 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rrfc-7g8p-99q8",
-  "modified": "2022-12-17T00:32:44Z",
+  "modified": "2025-02-13T18:33:21Z",
   "published": "2022-12-13T17:51:40Z",
   "aliases": [
     "CVE-2022-23520"
   ],
   "summary": "Possible XSS vulnerability with certain configurations of rails-html-sanitizer",
-  "details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This is due to an incomplete fix of CVE-2022-32209.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both \"select\" and \"style\" elements.\n\nCode is only impacted if allowed tags are being overridden using either of the following two mechanisms:\n\n1. Using the Rails configuration `config.action_view.sanitized_allow_tags=`:\n\n  ```ruby\n  # In config/application.rb\n  config.action_view.sanitized_allowed_tags = [\"select\", \"style\"]\n  ```\n\n  (see https://guides.rubyonrails.org/configuring.html#configuring-action-view)\n\n2. Using the class method `Rails::Html::SafeListSanitizer.allowed_tags=`:\n\n  ```ruby\n  # class-level option\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"select\", \"style\"]\n  ```\n\nAll users overriding the allowed tags by either of the above mechanisms to include both \"select\" and \"style\" should either upgrade or use one of the workarounds immediately.\n\nNOTE: Code is _not_ impacted if allowed tags are overridden using either of the following mechanisms:\n\n- the `:tags` option to the Action View helper method `sanitize`.\n- the `:tags` option to the instance method `SafeListSanitizer#sanitize`.\n\n\n## Workarounds\n\nRemove either \"select\" or \"style\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32209\n- https://hackerone.com/reports/1654310\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.\n",
+  "details": "## Summary\n\nThere is a possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer. This is due to an incomplete fix of CVE-2022-32209.\n\n- Versions affected: ALL\n- Not affected: NONE\n- Fixed versions: 1.4.4\n\n\n## Impact\n\nA possible XSS vulnerability with certain configurations of Rails::Html::Sanitizer may allow an attacker to inject content if the application developer has overridden the sanitizer's allowed tags to allow both \"select\" and \"style\" elements.\n\nCode is only impacted if allowed tags are being overridden using either of the following two mechanisms:\n\n1. Using the Rails configuration `config.action_view.sanitized_allow_tags=`:\n\n  ```ruby\n  # In config/application.rb\n  config.action_view.sanitized_allowed_tags = [\"select\", \"style\"]\n  ```\n\n  (see https://guides.rubyonrails.org/configuring.html#configuring-action-view)\n\n2. Using the class method `Rails::Html::SafeListSanitizer.allowed_tags=`:\n\n  ```ruby\n  # class-level option\n  Rails::Html::SafeListSanitizer.allowed_tags = [\"select\", \"style\"]\n  ```\n\nAll users overriding the allowed tags by either of the above mechanisms to include both \"select\" and \"style\" should either upgrade or use one of the workarounds immediately.\n\nNOTE: Code is _not_ impacted if allowed tags are overridden using either of the following mechanisms:\n\n- the `:tags` option to the Action View helper method `sanitize`.\n- the `:tags` option to the instance method `SafeListSanitizer#sanitize`.\n\n\n## Workarounds\n\nRemove either \"select\" or \"style\" from the overridden allowed tags.\n\n\n## References\n\n- [CWE - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (4.9)](https://cwe.mitre.org/data/definitions/79.html)\n- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32209\n- https://hackerone.com/reports/1654310\n\n\n## Credit\n\nThis vulnerability was responsibly reported by Dominic Breuker.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/github-reviewed/2023/01/GHSA-3xh5-8hvq-rc8x/GHSA-3xh5-8hvq-rc8x.json b/advisories/github-reviewed/2023/01/GHSA-3xh5-8hvq-rc8x/GHSA-3xh5-8hvq-rc8x.json
index ae55aad0453..bc7d5c5836d 100644
--- a/advisories/github-reviewed/2023/01/GHSA-3xh5-8hvq-rc8x/GHSA-3xh5-8hvq-rc8x.json
+++ b/advisories/github-reviewed/2023/01/GHSA-3xh5-8hvq-rc8x/GHSA-3xh5-8hvq-rc8x.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-3xh5-8hvq-rc8x",
-  "modified": "2024-09-04T19:40:33Z",
+  "modified": "2025-02-13T18:33:11Z",
   "published": "2023-01-04T15:30:19Z",
   "aliases": [
     "CVE-2022-45875"
diff --git a/advisories/unreviewed/2024/03/GHSA-52p5-x626-gw72/GHSA-52p5-x626-gw72.json b/advisories/unreviewed/2024/03/GHSA-52p5-x626-gw72/GHSA-52p5-x626-gw72.json
index 091645e292b..f6aa3e104a8 100644
--- a/advisories/unreviewed/2024/03/GHSA-52p5-x626-gw72/GHSA-52p5-x626-gw72.json
+++ b/advisories/unreviewed/2024/03/GHSA-52p5-x626-gw72/GHSA-52p5-x626-gw72.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-52p5-x626-gw72",
-  "modified": "2024-03-23T06:30:27Z",
+  "modified": "2025-02-13T18:32:23Z",
   "published": "2024-03-23T06:30:27Z",
   "aliases": [
     "CVE-2024-2326"
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-352"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-7xmw-55r7-4xvc/GHSA-7xmw-55r7-4xvc.json b/advisories/unreviewed/2024/03/GHSA-7xmw-55r7-4xvc/GHSA-7xmw-55r7-4xvc.json
index 1c662af26a2..e23ee30a81a 100644
--- a/advisories/unreviewed/2024/03/GHSA-7xmw-55r7-4xvc/GHSA-7xmw-55r7-4xvc.json
+++ b/advisories/unreviewed/2024/03/GHSA-7xmw-55r7-4xvc/GHSA-7xmw-55r7-4xvc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7xmw-55r7-4xvc",
-  "modified": "2024-03-23T06:30:27Z",
+  "modified": "2025-02-13T18:32:23Z",
   "published": "2024-03-23T06:30:27Z",
   "aliases": [
     "CVE-2024-1049"
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-8mxv-pm3p-xvgq/GHSA-8mxv-pm3p-xvgq.json b/advisories/unreviewed/2024/03/GHSA-8mxv-pm3p-xvgq/GHSA-8mxv-pm3p-xvgq.json
index a2b040d81e7..17d56a045be 100644
--- a/advisories/unreviewed/2024/03/GHSA-8mxv-pm3p-xvgq/GHSA-8mxv-pm3p-xvgq.json
+++ b/advisories/unreviewed/2024/03/GHSA-8mxv-pm3p-xvgq/GHSA-8mxv-pm3p-xvgq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8mxv-pm3p-xvgq",
-  "modified": "2024-08-01T15:31:34Z",
+  "modified": "2025-02-13T18:32:22Z",
   "published": "2024-03-21T12:31:56Z",
   "aliases": [
     "CVE-2024-27438"
diff --git a/advisories/unreviewed/2024/03/GHSA-92jp-q2g9-wmq7/GHSA-92jp-q2g9-wmq7.json b/advisories/unreviewed/2024/03/GHSA-92jp-q2g9-wmq7/GHSA-92jp-q2g9-wmq7.json
index a8234422ec0..7945dd6944d 100644
--- a/advisories/unreviewed/2024/03/GHSA-92jp-q2g9-wmq7/GHSA-92jp-q2g9-wmq7.json
+++ b/advisories/unreviewed/2024/03/GHSA-92jp-q2g9-wmq7/GHSA-92jp-q2g9-wmq7.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-92jp-q2g9-wmq7",
-  "modified": "2024-08-06T18:30:49Z",
+  "modified": "2025-02-13T18:32:21Z",
   "published": "2024-03-21T03:36:47Z",
   "aliases": [
     "CVE-2024-2053"
diff --git a/advisories/unreviewed/2024/03/GHSA-9xp7-754r-wj55/GHSA-9xp7-754r-wj55.json b/advisories/unreviewed/2024/03/GHSA-9xp7-754r-wj55/GHSA-9xp7-754r-wj55.json
index e6396b8dd0d..d007c0d2a4c 100644
--- a/advisories/unreviewed/2024/03/GHSA-9xp7-754r-wj55/GHSA-9xp7-754r-wj55.json
+++ b/advisories/unreviewed/2024/03/GHSA-9xp7-754r-wj55/GHSA-9xp7-754r-wj55.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-9xp7-754r-wj55",
-  "modified": "2024-04-16T00:30:31Z",
+  "modified": "2025-02-13T18:32:24Z",
   "published": "2024-03-28T06:30:47Z",
   "aliases": [
     "CVE-2024-29090"
   ],
-  "details": "Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.\n\n",
+  "details": "Server-Side Request Forgery (SSRF) vulnerability in Jordy Meow AI Engine: ChatGPT Chatbot.This issue affects AI Engine: ChatGPT Chatbot: from n/a through 2.1.4.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -26,6 +26,10 @@
     {
       "type": "WEB",
       "url": "https://www.vicarius.io/vsociety/posts/chaos-in-the-ai-zoo-exploiting-cve-2024-29090-authenticated-ssrf-in-ai-engine-plugin-by-jordy-meow"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.vicarius.io/vsociety/posts/decoding-the-unseen-threat-exploiting-cve-2024-29090-authenticated-ssrf-in-ai-engine-by-jordy-meow-wordpress-plugin"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2024/03/GHSA-j36f-wgwh-98h3/GHSA-j36f-wgwh-98h3.json b/advisories/unreviewed/2024/03/GHSA-j36f-wgwh-98h3/GHSA-j36f-wgwh-98h3.json
index 7d05747cfae..2f3860b855d 100644
--- a/advisories/unreviewed/2024/03/GHSA-j36f-wgwh-98h3/GHSA-j36f-wgwh-98h3.json
+++ b/advisories/unreviewed/2024/03/GHSA-j36f-wgwh-98h3/GHSA-j36f-wgwh-98h3.json
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-p84f-xgwp-4frf/GHSA-p84f-xgwp-4frf.json b/advisories/unreviewed/2024/03/GHSA-p84f-xgwp-4frf/GHSA-p84f-xgwp-4frf.json
index a460e0af4be..40897791b64 100644
--- a/advisories/unreviewed/2024/03/GHSA-p84f-xgwp-4frf/GHSA-p84f-xgwp-4frf.json
+++ b/advisories/unreviewed/2024/03/GHSA-p84f-xgwp-4frf/GHSA-p84f-xgwp-4frf.json
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/03/GHSA-rxvc-rwp4-p484/GHSA-rxvc-rwp4-p484.json b/advisories/unreviewed/2024/03/GHSA-rxvc-rwp4-p484/GHSA-rxvc-rwp4-p484.json
index 02099082e72..5a9bbdec0fb 100644
--- a/advisories/unreviewed/2024/03/GHSA-rxvc-rwp4-p484/GHSA-rxvc-rwp4-p484.json
+++ b/advisories/unreviewed/2024/03/GHSA-rxvc-rwp4-p484/GHSA-rxvc-rwp4-p484.json
@@ -33,7 +33,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/04/GHSA-22q4-f5r6-3xqw/GHSA-22q4-f5r6-3xqw.json b/advisories/unreviewed/2024/04/GHSA-22q4-f5r6-3xqw/GHSA-22q4-f5r6-3xqw.json
index 149cb4fe86d..8886579f20b 100644
--- a/advisories/unreviewed/2024/04/GHSA-22q4-f5r6-3xqw/GHSA-22q4-f5r6-3xqw.json
+++ b/advisories/unreviewed/2024/04/GHSA-22q4-f5r6-3xqw/GHSA-22q4-f5r6-3xqw.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-22q4-f5r6-3xqw",
-  "modified": "2024-07-22T18:31:47Z",
+  "modified": "2025-02-13T18:32:26Z",
   "published": "2024-04-17T18:31:36Z",
   "aliases": [
     "CVE-2024-2961"
   ],
-  "details": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.\n",
+  "details": "The iconv() function in the GNU C Library versions 2.39 and older may overflow the output buffer passed to it by up to 4 bytes when converting strings to the ISO-2022-CN-EXT character set, which may be used to crash an application or overwrite a neighbouring variable.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -43,6 +43,18 @@
       "type": "WEB",
       "url": "https://sourceware.org/git/?p=glibc.git;a=blob;f=advisories/GLIBC-SA-2024-0004"
     },
+    {
+      "type": "WEB",
+      "url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p1"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p2"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ambionics.io/blog/iconv-cve-2024-2961-p3"
+    },
     {
       "type": "WEB",
       "url": "http://www.openwall.com/lists/oss-security/2024/04/17/9"
diff --git a/advisories/unreviewed/2024/04/GHSA-68ww-8rpc-355h/GHSA-68ww-8rpc-355h.json b/advisories/unreviewed/2024/04/GHSA-68ww-8rpc-355h/GHSA-68ww-8rpc-355h.json
index f834a91434f..440e061be72 100644
--- a/advisories/unreviewed/2024/04/GHSA-68ww-8rpc-355h/GHSA-68ww-8rpc-355h.json
+++ b/advisories/unreviewed/2024/04/GHSA-68ww-8rpc-355h/GHSA-68ww-8rpc-355h.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-68ww-8rpc-355h",
-  "modified": "2024-04-09T21:32:00Z",
+  "modified": "2025-02-13T18:32:25Z",
   "published": "2024-04-09T21:32:00Z",
   "aliases": [
     "CVE-2024-2738"
@@ -37,7 +37,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/04/GHSA-7hpg-wrjj-gghq/GHSA-7hpg-wrjj-gghq.json b/advisories/unreviewed/2024/04/GHSA-7hpg-wrjj-gghq/GHSA-7hpg-wrjj-gghq.json
index 7f71a700d51..357222ee8fc 100644
--- a/advisories/unreviewed/2024/04/GHSA-7hpg-wrjj-gghq/GHSA-7hpg-wrjj-gghq.json
+++ b/advisories/unreviewed/2024/04/GHSA-7hpg-wrjj-gghq/GHSA-7hpg-wrjj-gghq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7hpg-wrjj-gghq",
-  "modified": "2024-11-12T21:30:49Z",
+  "modified": "2025-02-13T18:32:25Z",
   "published": "2024-04-10T15:30:40Z",
   "aliases": [
     "CVE-2024-31309"
diff --git a/advisories/unreviewed/2024/04/GHSA-82x4-8q4x-2qxv/GHSA-82x4-8q4x-2qxv.json b/advisories/unreviewed/2024/04/GHSA-82x4-8q4x-2qxv/GHSA-82x4-8q4x-2qxv.json
index 525523f0e3f..60d4ba326f3 100644
--- a/advisories/unreviewed/2024/04/GHSA-82x4-8q4x-2qxv/GHSA-82x4-8q4x-2qxv.json
+++ b/advisories/unreviewed/2024/04/GHSA-82x4-8q4x-2qxv/GHSA-82x4-8q4x-2qxv.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-82x4-8q4x-2qxv",
-  "modified": "2024-06-10T18:30:57Z",
+  "modified": "2025-02-13T18:32:28Z",
   "published": "2024-04-29T15:30:28Z",
   "aliases": [
     "CVE-2024-27322"
   ],
-  "details": "Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.\n",
+  "details": "Deserialization of untrusted data can occur in the R statistical programming language, on any version starting at 1.4.0 up to and not including 4.4.0, enabling a maliciously crafted RDS (R Data Serialization) formatted file or R package to run arbitrary code on an end user’s system when interacted with.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/04/GHSA-rx5p-gx7r-2xj5/GHSA-rx5p-gx7r-2xj5.json b/advisories/unreviewed/2024/04/GHSA-rx5p-gx7r-2xj5/GHSA-rx5p-gx7r-2xj5.json
index c747943db8f..97b018dafba 100644
--- a/advisories/unreviewed/2024/04/GHSA-rx5p-gx7r-2xj5/GHSA-rx5p-gx7r-2xj5.json
+++ b/advisories/unreviewed/2024/04/GHSA-rx5p-gx7r-2xj5/GHSA-rx5p-gx7r-2xj5.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-rx5p-gx7r-2xj5",
-  "modified": "2024-05-01T18:30:40Z",
+  "modified": "2025-02-13T18:32:27Z",
   "published": "2024-04-25T12:30:49Z",
   "aliases": [
     "CVE-2024-25583"
   ],
-  "details": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.\n\n",
+  "details": "A crafted response from an upstream server the recursor has been configured to forward-recurse to can cause a Denial of Service in the Recursor. The default configuration of the Recursor does not use recursive forwarding and is not affected.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/05/GHSA-55g9-rgmx-hvww/GHSA-55g9-rgmx-hvww.json b/advisories/unreviewed/2024/05/GHSA-55g9-rgmx-hvww/GHSA-55g9-rgmx-hvww.json
index 4ae185c5161..17d7e76ea2c 100644
--- a/advisories/unreviewed/2024/05/GHSA-55g9-rgmx-hvww/GHSA-55g9-rgmx-hvww.json
+++ b/advisories/unreviewed/2024/05/GHSA-55g9-rgmx-hvww/GHSA-55g9-rgmx-hvww.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-55g9-rgmx-hvww",
-  "modified": "2024-06-10T18:30:58Z",
+  "modified": "2025-02-13T18:32:29Z",
   "published": "2024-05-14T15:32:52Z",
   "aliases": [
     "CVE-2024-25581"
   ],
-  "details": "When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.\n\n",
+  "details": "When incoming DNS over HTTPS support is enabled using the nghttp2 provider, and queries are routed to a tcp-only or DNS over TLS backend, an attacker can trigger an assertion failure in DNSdist by sending a request for a zone transfer (AXFR or IXFR) over DNS over HTTPS, causing the process to stop and thus leading to a Denial of Service. DNS over HTTPS is not enabled by default, and backends are using plain DNS (Do53) by default.",
   "severity": [
     {
       "type": "CVSS_V3",
diff --git a/advisories/unreviewed/2024/05/GHSA-8g74-32fg-5ghc/GHSA-8g74-32fg-5ghc.json b/advisories/unreviewed/2024/05/GHSA-8g74-32fg-5ghc/GHSA-8g74-32fg-5ghc.json
index a96f12ab170..52f95fc431a 100644
--- a/advisories/unreviewed/2024/05/GHSA-8g74-32fg-5ghc/GHSA-8g74-32fg-5ghc.json
+++ b/advisories/unreviewed/2024/05/GHSA-8g74-32fg-5ghc/GHSA-8g74-32fg-5ghc.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-8g74-32fg-5ghc",
-  "modified": "2024-07-03T18:38:35Z",
+  "modified": "2025-02-13T18:32:28Z",
   "published": "2024-05-02T12:30:40Z",
   "aliases": [
     "CVE-2024-32638"
diff --git a/advisories/unreviewed/2024/05/GHSA-cjqq-r96c-pwrf/GHSA-cjqq-r96c-pwrf.json b/advisories/unreviewed/2024/05/GHSA-cjqq-r96c-pwrf/GHSA-cjqq-r96c-pwrf.json
index 936896e3798..ad929806004 100644
--- a/advisories/unreviewed/2024/05/GHSA-cjqq-r96c-pwrf/GHSA-cjqq-r96c-pwrf.json
+++ b/advisories/unreviewed/2024/05/GHSA-cjqq-r96c-pwrf/GHSA-cjqq-r96c-pwrf.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-cjqq-r96c-pwrf",
-  "modified": "2024-06-21T12:31:18Z",
+  "modified": "2025-02-13T18:32:29Z",
   "published": "2024-05-14T18:30:58Z",
   "aliases": [
     "CVE-2024-0762"
diff --git a/advisories/unreviewed/2024/06/GHSA-77m3-6865-xvqj/GHSA-77m3-6865-xvqj.json b/advisories/unreviewed/2024/06/GHSA-77m3-6865-xvqj/GHSA-77m3-6865-xvqj.json
index bcb57a6099f..e88dd2367b5 100644
--- a/advisories/unreviewed/2024/06/GHSA-77m3-6865-xvqj/GHSA-77m3-6865-xvqj.json
+++ b/advisories/unreviewed/2024/06/GHSA-77m3-6865-xvqj/GHSA-77m3-6865-xvqj.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-77m3-6865-xvqj",
-  "modified": "2024-07-03T18:44:11Z",
+  "modified": "2025-02-13T18:32:30Z",
   "published": "2024-06-04T09:30:57Z",
   "aliases": [
     "CVE-2024-36104"
diff --git a/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json b/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json
index 22d284e8c7e..588a719065c 100644
--- a/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json
+++ b/advisories/unreviewed/2024/07/GHSA-7637-3fm3-m2q3/GHSA-7637-3fm3-m2q3.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7637-3fm3-m2q3",
-  "modified": "2024-07-04T09:32:49Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-03T18:48:16Z",
   "aliases": [
     "CVE-2024-5672"
diff --git a/advisories/unreviewed/2024/07/GHSA-7g4v-8cvx-gp5q/GHSA-7g4v-8cvx-gp5q.json b/advisories/unreviewed/2024/07/GHSA-7g4v-8cvx-gp5q/GHSA-7g4v-8cvx-gp5q.json
index 00dea5f6e57..96d3f2087b2 100644
--- a/advisories/unreviewed/2024/07/GHSA-7g4v-8cvx-gp5q/GHSA-7g4v-8cvx-gp5q.json
+++ b/advisories/unreviewed/2024/07/GHSA-7g4v-8cvx-gp5q/GHSA-7g4v-8cvx-gp5q.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7g4v-8cvx-gp5q",
-  "modified": "2024-07-08T15:31:55Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-05T15:32:06Z",
   "aliases": [
     "CVE-2024-38346"
diff --git a/advisories/unreviewed/2024/07/GHSA-7g94-hfqc-q993/GHSA-7g94-hfqc-q993.json b/advisories/unreviewed/2024/07/GHSA-7g94-hfqc-q993/GHSA-7g94-hfqc-q993.json
index 76f82124be2..e30b92bdf19 100644
--- a/advisories/unreviewed/2024/07/GHSA-7g94-hfqc-q993/GHSA-7g94-hfqc-q993.json
+++ b/advisories/unreviewed/2024/07/GHSA-7g94-hfqc-q993/GHSA-7g94-hfqc-q993.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7g94-hfqc-q993",
-  "modified": "2024-07-19T18:31:21Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-17T09:30:49Z",
   "aliases": [
     "CVE-2023-52291"
diff --git a/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json b/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json
index 25daa9416ce..f1539532ece 100644
--- a/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json
+++ b/advisories/unreviewed/2024/07/GHSA-7x4x-g7pr-2356/GHSA-7x4x-g7pr-2356.json
@@ -29,7 +29,9 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
+    "cwe_ids": [
+      "CWE-79"
+    ],
     "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
diff --git a/advisories/unreviewed/2024/07/GHSA-gmm6-5xx7-57r6/GHSA-gmm6-5xx7-57r6.json b/advisories/unreviewed/2024/07/GHSA-gmm6-5xx7-57r6/GHSA-gmm6-5xx7-57r6.json
index e80cf411f99..ef8c05b1d2e 100644
--- a/advisories/unreviewed/2024/07/GHSA-gmm6-5xx7-57r6/GHSA-gmm6-5xx7-57r6.json
+++ b/advisories/unreviewed/2024/07/GHSA-gmm6-5xx7-57r6/GHSA-gmm6-5xx7-57r6.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gmm6-5xx7-57r6",
-  "modified": "2024-08-01T15:32:06Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-19T12:31:28Z",
   "aliases": [
     "CVE-2024-41107"
diff --git a/advisories/unreviewed/2024/07/GHSA-qcg7-r5qq-mqmw/GHSA-qcg7-r5qq-mqmw.json b/advisories/unreviewed/2024/07/GHSA-qcg7-r5qq-mqmw/GHSA-qcg7-r5qq-mqmw.json
index e4db35113d1..74f06410d49 100644
--- a/advisories/unreviewed/2024/07/GHSA-qcg7-r5qq-mqmw/GHSA-qcg7-r5qq-mqmw.json
+++ b/advisories/unreviewed/2024/07/GHSA-qcg7-r5qq-mqmw/GHSA-qcg7-r5qq-mqmw.json
@@ -1,12 +1,12 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qcg7-r5qq-mqmw",
-  "modified": "2024-07-08T15:31:55Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-05T15:32:06Z",
   "aliases": [
     "CVE-2024-39864"
   ],
-  "details": "The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for internal portal integrations and for testing purposes. By default, the integration API service port is disabled and is considered disabled when integration.api.port is set to 0 or negative. Due to an improper initialisation logic, the integration API service would listen on a random port when its port value is set to 0 (default value). An attacker that can access the CloudStack management network could scan and find the randomised integration API service port and exploit it to perform unauthorised administrative actions and perform remote code execution on CloudStack managed hosts and result in complete compromise of the confidentiality, integrity, and availability of CloudStack managed infrastructure.\n\nUsers are recommended to restrict the network access on the CloudStack management server hosts to only essential ports. Users are recommended to upgrade to version 4.18.2.1, 4.19.0.2 or later, which addresses this issue.\n\n",
+  "details": "The CloudStack integration API service allows running its unauthenticated API server (usually on port 8096 when configured and enabled via integration.api.port global setting) for internal portal integrations and for testing purposes. By default, the integration API service port is disabled and is considered disabled when integration.api.port is set to 0 or negative. Due to an improper initialisation logic, the integration API service would listen on a random port when its port value is set to 0 (default value). An attacker that can access the CloudStack management network could scan and find the randomised integration API service port and exploit it to perform unauthorised administrative actions and perform remote code execution on CloudStack managed hosts and result in complete compromise of the confidentiality, integrity, and availability of CloudStack managed infrastructure.\n\nUsers are recommended to restrict the network access on the CloudStack management server hosts to only essential ports. Users are recommended to upgrade to version 4.18.2.1, 4.19.0.2 or later, which addresses this issue.",
   "severity": [
     {
       "type": "CVSS_V3",
@@ -38,7 +38,8 @@
   ],
   "database_specific": {
     "cwe_ids": [
-      "CWE-665"
+      "CWE-665",
+      "CWE-94"
     ],
     "severity": "CRITICAL",
     "github_reviewed": false,
diff --git a/advisories/unreviewed/2024/07/GHSA-vv8h-m63v-53pq/GHSA-vv8h-m63v-53pq.json b/advisories/unreviewed/2024/07/GHSA-vv8h-m63v-53pq/GHSA-vv8h-m63v-53pq.json
index 565709682c3..061bc908f53 100644
--- a/advisories/unreviewed/2024/07/GHSA-vv8h-m63v-53pq/GHSA-vv8h-m63v-53pq.json
+++ b/advisories/unreviewed/2024/07/GHSA-vv8h-m63v-53pq/GHSA-vv8h-m63v-53pq.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vv8h-m63v-53pq",
-  "modified": "2024-08-01T15:32:05Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2024-07-18T12:30:52Z",
   "aliases": [
     "CVE-2024-29178"
diff --git a/advisories/unreviewed/2025/02/GHSA-2hqc-v3c9-r36r/GHSA-2hqc-v3c9-r36r.json b/advisories/unreviewed/2025/02/GHSA-2hqc-v3c9-r36r/GHSA-2hqc-v3c9-r36r.json
new file mode 100644
index 00000000000..a8fdc4a1588
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-2hqc-v3c9-r36r/GHSA-2hqc-v3c9-r36r.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-2hqc-v3c9-r36r",
+  "modified": "2025-02-13T18:32:35Z",
+  "published": "2025-02-13T18:32:35Z",
+  "aliases": [
+    "CVE-2025-25901"
+  ],
+  "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11, triggered by the dnsserver1 and dnsserver2 parameters at /userRpm/WanSlaacCfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25901"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_5.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-326h-2x69-48rv/GHSA-326h-2x69-48rv.json b/advisories/unreviewed/2025/02/GHSA-326h-2x69-48rv/GHSA-326h-2x69-48rv.json
index 5853c9759e5..f243756c05f 100644
--- a/advisories/unreviewed/2025/02/GHSA-326h-2x69-48rv/GHSA-326h-2x69-48rv.json
+++ b/advisories/unreviewed/2025/02/GHSA-326h-2x69-48rv/GHSA-326h-2x69-48rv.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-326h-2x69-48rv",
-  "modified": "2025-02-11T21:32:08Z",
+  "modified": "2025-02-13T18:32:34Z",
   "published": "2025-02-11T21:32:07Z",
   "aliases": [
     "CVE-2025-25526"
   ],
   "details": "Buffer overflow vulnerability in Mercury MIPC552W Camera v1.0 due to the lack of length verification, which is related to the configuration of the PPTP server. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T20:15:38Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-35p6-x466-363j/GHSA-35p6-x466-363j.json b/advisories/unreviewed/2025/02/GHSA-35p6-x466-363j/GHSA-35p6-x466-363j.json
index ecaf41f8382..4f2dd621c0d 100644
--- a/advisories/unreviewed/2025/02/GHSA-35p6-x466-363j/GHSA-35p6-x466-363j.json
+++ b/advisories/unreviewed/2025/02/GHSA-35p6-x466-363j/GHSA-35p6-x466-363j.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-35p6-x466-363j",
-  "modified": "2025-02-13T00:33:05Z",
+  "modified": "2025-02-13T18:32:33Z",
   "published": "2025-02-13T00:33:05Z",
   "aliases": [
     "CVE-2024-36293"
@@ -26,6 +26,10 @@
     {
       "type": "WEB",
       "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01213.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000283897/dsa-2025-041-security-update-for-dell-poweredge-server-for-intel-2025-security-advisories-2025-1-ipu"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/02/GHSA-3f3x-7h29-jgrg/GHSA-3f3x-7h29-jgrg.json b/advisories/unreviewed/2025/02/GHSA-3f3x-7h29-jgrg/GHSA-3f3x-7h29-jgrg.json
new file mode 100644
index 00000000000..ba69c02da2a
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-3f3x-7h29-jgrg/GHSA-3f3x-7h29-jgrg.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-3f3x-7h29-jgrg",
+  "modified": "2025-02-13T18:32:36Z",
+  "published": "2025-02-13T18:32:36Z",
+  "aliases": [
+    "CVE-2025-25388"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/edit-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the editid GET request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25388"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20p%20editid.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T17:17:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-4678-fmrh-j2fj/GHSA-4678-fmrh-j2fj.json b/advisories/unreviewed/2025/02/GHSA-4678-fmrh-j2fj/GHSA-4678-fmrh-j2fj.json
new file mode 100644
index 00000000000..7515340e916
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-4678-fmrh-j2fj/GHSA-4678-fmrh-j2fj.json
@@ -0,0 +1,34 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4678-fmrh-j2fj",
+  "modified": "2025-02-13T18:32:37Z",
+  "published": "2025-02-13T18:32:37Z",
+  "aliases": [
+    "CVE-2025-25900"
+  ],
+  "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the username and password parameters at /userRpm/PPPoEv6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25900"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_4.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-58jq-9v9j-27q7/GHSA-58jq-9v9j-27q7.json b/advisories/unreviewed/2025/02/GHSA-58jq-9v9j-27q7/GHSA-58jq-9v9j-27q7.json
index 20440f3ccb0..b2318aea2a9 100644
--- a/advisories/unreviewed/2025/02/GHSA-58jq-9v9j-27q7/GHSA-58jq-9v9j-27q7.json
+++ b/advisories/unreviewed/2025/02/GHSA-58jq-9v9j-27q7/GHSA-58jq-9v9j-27q7.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-58jq-9v9j-27q7",
-  "modified": "2025-02-11T21:32:08Z",
+  "modified": "2025-02-13T18:32:32Z",
   "published": "2025-02-11T21:32:08Z",
   "aliases": [
     "CVE-2025-25528"
   ],
   "details": "Multiple buffer overflow vulnerabilities in Wavlink WL-WN575A3 RPT75A3.V4300, which are caused by not performing strict length checks on user-controlled data. By successfully exploiting the vulnerabilities, attackers can crash the remote devices or execute arbitrary commands without any authorization verification.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T20:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-662h-m43q-2c6c/GHSA-662h-m43q-2c6c.json b/advisories/unreviewed/2025/02/GHSA-662h-m43q-2c6c/GHSA-662h-m43q-2c6c.json
index 370b21cc4e3..1d00a7f1997 100644
--- a/advisories/unreviewed/2025/02/GHSA-662h-m43q-2c6c/GHSA-662h-m43q-2c6c.json
+++ b/advisories/unreviewed/2025/02/GHSA-662h-m43q-2c6c/GHSA-662h-m43q-2c6c.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-662h-m43q-2c6c",
-  "modified": "2025-02-09T06:30:52Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2025-02-09T06:30:52Z",
   "aliases": [
     "CVE-2024-13440"
diff --git a/advisories/unreviewed/2025/02/GHSA-68qp-rj3r-5wfp/GHSA-68qp-rj3r-5wfp.json b/advisories/unreviewed/2025/02/GHSA-68qp-rj3r-5wfp/GHSA-68qp-rj3r-5wfp.json
index 13db4c6abe4..e37ce664c9f 100644
--- a/advisories/unreviewed/2025/02/GHSA-68qp-rj3r-5wfp/GHSA-68qp-rj3r-5wfp.json
+++ b/advisories/unreviewed/2025/02/GHSA-68qp-rj3r-5wfp/GHSA-68qp-rj3r-5wfp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-68qp-rj3r-5wfp",
-  "modified": "2025-02-11T21:32:08Z",
+  "modified": "2025-02-13T18:32:32Z",
   "published": "2025-02-11T21:32:08Z",
   "aliases": [
     "CVE-2025-25527"
   ],
   "details": "Buffer overflow vulnerability in Ruijie RG-NBR2600S Gateway 10.3(4b12) due to the lack of length verification, which is related to the configuration of source address NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T20:15:38Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-73xc-hhcm-f4v8/GHSA-73xc-hhcm-f4v8.json b/advisories/unreviewed/2025/02/GHSA-73xc-hhcm-f4v8/GHSA-73xc-hhcm-f4v8.json
new file mode 100644
index 00000000000..f1f1ca6ed80
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-73xc-hhcm-f4v8/GHSA-73xc-hhcm-f4v8.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-73xc-hhcm-f4v8",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25354"
+  ],
+  "details": "A SQL Injection was found in /admin/admin-profile.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactnumber POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25354"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20contact.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json b/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json
new file mode 100644
index 00000000000..0dcec90e5bb
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-749g-9h7c-6xjr/GHSA-749g-9h7c-6xjr.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-749g-9h7c-6xjr",
+  "modified": "2025-02-13T18:32:35Z",
+  "published": "2025-02-13T18:32:35Z",
+  "aliases": [
+    "CVE-2025-25898"
+  ],
+  "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the pskSecret parameter at /userRpm/WlanSecurityRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25898"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_1.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-7gx7-rqf8-p84p/GHSA-7gx7-rqf8-p84p.json b/advisories/unreviewed/2025/02/GHSA-7gx7-rqf8-p84p/GHSA-7gx7-rqf8-p84p.json
index 688e0527e78..2368f93d001 100644
--- a/advisories/unreviewed/2025/02/GHSA-7gx7-rqf8-p84p/GHSA-7gx7-rqf8-p84p.json
+++ b/advisories/unreviewed/2025/02/GHSA-7gx7-rqf8-p84p/GHSA-7gx7-rqf8-p84p.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-7gx7-rqf8-p84p",
-  "modified": "2025-02-11T21:32:06Z",
+  "modified": "2025-02-13T18:32:32Z",
   "published": "2025-02-11T21:32:06Z",
   "aliases": [
     "CVE-2025-25524"
   ],
   "details": "Buffer overflow vulnerability in TOTOLink X6000R routers V9.4.0cu.652_B20230116 due to the lack of length verification, which is related to the addition of Wi-Fi filtering rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T19:15:19Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-7p8p-8grh-gvmj/GHSA-7p8p-8grh-gvmj.json b/advisories/unreviewed/2025/02/GHSA-7p8p-8grh-gvmj/GHSA-7p8p-8grh-gvmj.json
new file mode 100644
index 00000000000..f610961d6f9
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-7p8p-8grh-gvmj/GHSA-7p8p-8grh-gvmj.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-7p8p-8grh-gvmj",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25352"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/aboutus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the pagetitle POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25352"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20About.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json b/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json
new file mode 100644
index 00000000000..e04de6e0d90
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-c3mp-82ww-6hm4/GHSA-c3mp-82ww-6hm4.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-c3mp-82ww-6hm4",
+  "modified": "2025-02-13T18:32:37Z",
+  "published": "2025-02-13T18:32:37Z",
+  "aliases": [
+    "CVE-2025-25387"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/manage-propertytype.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the propertytype POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25387"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20edited.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T17:17:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json b/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json
new file mode 100644
index 00000000000..5374544afc0
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-cpgh-hqjm-xwf7/GHSA-cpgh-hqjm-xwf7.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cpgh-hqjm-xwf7",
+  "modified": "2025-02-13T18:32:36Z",
+  "published": "2025-02-13T18:32:36Z",
+  "aliases": [
+    "CVE-2025-25389"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/forgot-password.php in Phpgurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the contactno POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25389"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20forget.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T17:17:20Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-g5g3-whp3-mmvg/GHSA-g5g3-whp3-mmvg.json b/advisories/unreviewed/2025/02/GHSA-g5g3-whp3-mmvg/GHSA-g5g3-whp3-mmvg.json
new file mode 100644
index 00000000000..85e857ddaf2
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-g5g3-whp3-mmvg/GHSA-g5g3-whp3-mmvg.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-g5g3-whp3-mmvg",
+  "modified": "2025-02-13T18:32:33Z",
+  "published": "2025-02-13T18:32:33Z",
+  "aliases": [
+    "CVE-2024-12013"
+  ],
+  "details": "A CWE-1392 “Use of Default Credentials” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The device exposes an FTP server with default and easy-to-guess admin credentials. A remote attacker capable of interacting with the FTP server could gain access and perform changes over resources exposed by the service such as configuration files where password hashes are saved or where network settings are stored.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12013"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12013"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-1392"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:15:44Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-gf79-frwr-2v77/GHSA-gf79-frwr-2v77.json b/advisories/unreviewed/2025/02/GHSA-gf79-frwr-2v77/GHSA-gf79-frwr-2v77.json
new file mode 100644
index 00000000000..005c7b4a3fd
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-gf79-frwr-2v77/GHSA-gf79-frwr-2v77.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gf79-frwr-2v77",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-22480"
+  ],
+  "details": "Dell SupportAssist OS Recovery versions prior to 5.5.13.1 contain a symbolic link attack vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary file deletion and Elevation of Privileges.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-22480"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000275712/dsa-2025-051"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-61"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-gg96-8hgf-g3hr/GHSA-gg96-8hgf-g3hr.json b/advisories/unreviewed/2025/02/GHSA-gg96-8hgf-g3hr/GHSA-gg96-8hgf-g3hr.json
index f50e9f0a52e..295f807241c 100644
--- a/advisories/unreviewed/2025/02/GHSA-gg96-8hgf-g3hr/GHSA-gg96-8hgf-g3hr.json
+++ b/advisories/unreviewed/2025/02/GHSA-gg96-8hgf-g3hr/GHSA-gg96-8hgf-g3hr.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gg96-8hgf-g3hr",
-  "modified": "2025-02-11T21:32:06Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2025-02-11T21:32:06Z",
   "aliases": [
     "CVE-2025-25523"
   ],
   "details": "Buffer overflow vulnerability in Trendnet TEG-40128 Web Smart Switch v1(1.00.023) due to the lack of length verification, which is related to the mobile access point setup operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T19:15:19Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-h3cq-pv9v-4qxp/GHSA-h3cq-pv9v-4qxp.json b/advisories/unreviewed/2025/02/GHSA-h3cq-pv9v-4qxp/GHSA-h3cq-pv9v-4qxp.json
new file mode 100644
index 00000000000..fb57b1ab98f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-h3cq-pv9v-4qxp/GHSA-h3cq-pv9v-4qxp.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-h3cq-pv9v-4qxp",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25356"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the \" todate\" POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25356"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20tadate.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-hf56-943j-3hp3/GHSA-hf56-943j-3hp3.json b/advisories/unreviewed/2025/02/GHSA-hf56-943j-3hp3/GHSA-hf56-943j-3hp3.json
index d564eb52258..2aa13514816 100644
--- a/advisories/unreviewed/2025/02/GHSA-hf56-943j-3hp3/GHSA-hf56-943j-3hp3.json
+++ b/advisories/unreviewed/2025/02/GHSA-hf56-943j-3hp3/GHSA-hf56-943j-3hp3.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-hf56-943j-3hp3",
-  "modified": "2025-02-11T21:32:07Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2025-02-11T21:32:07Z",
   "aliases": [
     "CVE-2025-25522"
   ],
   "details": "Buffer overflow vulnerability in Linksys WAP610N v1.0.05.002 due to the lack of length verification, which is related to the time setting operation. The attacker can directly control the remote target device by successfully exploiting this vulnerability.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "HIGH",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T19:15:18Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-jgfp-53c3-624w/GHSA-jgfp-53c3-624w.json b/advisories/unreviewed/2025/02/GHSA-jgfp-53c3-624w/GHSA-jgfp-53c3-624w.json
new file mode 100644
index 00000000000..fdd7350fb64
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-jgfp-53c3-624w/GHSA-jgfp-53c3-624w.json
@@ -0,0 +1,44 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-jgfp-53c3-624w",
+  "modified": "2025-02-13T18:32:33Z",
+  "published": "2025-02-13T18:32:33Z",
+  "aliases": [
+    "CVE-2025-0426"
+  ],
+  "details": "A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0426"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/kubernetes/kubernetes/issues/130016"
+    },
+    {
+      "type": "WEB",
+      "url": "https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8"
+    },
+    {
+      "type": "WEB",
+      "url": "http://www.openwall.com/lists/oss-security/2025/02/13/1"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-400"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:48Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json b/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json
new file mode 100644
index 00000000000..7148dd597fe
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-m4vq-534q-jr6q/GHSA-m4vq-534q-jr6q.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-m4vq-534q-jr6q",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25357"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/contactus.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the email POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25357"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20Emails.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-mjjg-jgrj-9453/GHSA-mjjg-jgrj-9453.json b/advisories/unreviewed/2025/02/GHSA-mjjg-jgrj-9453/GHSA-mjjg-jgrj-9453.json
index af3d7d4d4a4..6c5b5096c5c 100644
--- a/advisories/unreviewed/2025/02/GHSA-mjjg-jgrj-9453/GHSA-mjjg-jgrj-9453.json
+++ b/advisories/unreviewed/2025/02/GHSA-mjjg-jgrj-9453/GHSA-mjjg-jgrj-9453.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-mjjg-jgrj-9453",
-  "modified": "2025-02-11T21:32:06Z",
+  "modified": "2025-02-13T18:32:31Z",
   "published": "2025-02-11T21:32:06Z",
   "aliases": [
     "CVE-2022-35202"
   ],
   "details": "A security issue in Sitevision version 10.3.1 and older allows a remote attacker, in certain (non-default) scenarios, to gain access to the private keys used for signing SAML Authn requests. The underlying issue is a Java keystore that may become accessible and downloadable via WebDAV. This keystore is protected with a low-complexity, auto-generated password.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -24,8 +29,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-532"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T19:15:10Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-p8r2-h85q-cmcr/GHSA-p8r2-h85q-cmcr.json b/advisories/unreviewed/2025/02/GHSA-p8r2-h85q-cmcr/GHSA-p8r2-h85q-cmcr.json
new file mode 100644
index 00000000000..a9836310e13
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-p8r2-h85q-cmcr/GHSA-p8r2-h85q-cmcr.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-p8r2-h85q-cmcr",
+  "modified": "2025-02-13T18:32:33Z",
+  "published": "2025-02-13T18:32:33Z",
+  "aliases": [
+    "CVE-2024-12011"
+  ],
+  "details": "A CWE-126 “Buffer Over-read” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. The information disclosure can be triggered by leveraging a memory leak affecting the web server. A remote unauthenticated attacker can exploit this vulnerability in order to leak valid authentication tokens from the process memory associated to users currently logged to the system and bypass the authentication mechanism.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12011"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12011"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-126"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-qhjq-4w73-8cmv/GHSA-qhjq-4w73-8cmv.json b/advisories/unreviewed/2025/02/GHSA-qhjq-4w73-8cmv/GHSA-qhjq-4w73-8cmv.json
new file mode 100644
index 00000000000..31ed5f44a8f
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-qhjq-4w73-8cmv/GHSA-qhjq-4w73-8cmv.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-qhjq-4w73-8cmv",
+  "modified": "2025-02-13T18:32:35Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25897"
+  ],
+  "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'ip' parameter at /userRpm/WanStaticIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25897"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_3.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-qrcc-hpw3-5q3x/GHSA-qrcc-hpw3-5q3x.json b/advisories/unreviewed/2025/02/GHSA-qrcc-hpw3-5q3x/GHSA-qrcc-hpw3-5q3x.json
index c74a29680ff..de42ac129ca 100644
--- a/advisories/unreviewed/2025/02/GHSA-qrcc-hpw3-5q3x/GHSA-qrcc-hpw3-5q3x.json
+++ b/advisories/unreviewed/2025/02/GHSA-qrcc-hpw3-5q3x/GHSA-qrcc-hpw3-5q3x.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-qrcc-hpw3-5q3x",
-  "modified": "2025-02-13T00:33:04Z",
+  "modified": "2025-02-13T18:32:34Z",
   "published": "2025-02-13T00:33:04Z",
   "aliases": [
     "CVE-2023-48267"
@@ -26,6 +26,10 @@
     {
       "type": "WEB",
       "url": "https://intel.com/content/www/us/en/security-center/advisory/intel-sa-01203.html"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.dell.com/support/kbdoc/en-us/000236851/dsa-2025-002"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/02/GHSA-rxrj-c86x-c8c8/GHSA-rxrj-c86x-c8c8.json b/advisories/unreviewed/2025/02/GHSA-rxrj-c86x-c8c8/GHSA-rxrj-c86x-c8c8.json
new file mode 100644
index 00000000000..e04497fd2e0
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-rxrj-c86x-c8c8/GHSA-rxrj-c86x-c8c8.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rxrj-c86x-c8c8",
+  "modified": "2025-02-13T18:32:33Z",
+  "published": "2025-02-13T18:32:33Z",
+  "aliases": [
+    "CVE-2024-12012"
+  ],
+  "details": "A CWE-598 “Use of GET Request Method with Sensitive Query Strings” was discovered affecting the 130.8005 TCP/IP Gateway running firmware version 12h. Both the SHA-1 hash of the password as well as the session tokens are included as part of the URL and therefore exposed to information leakage scenarios. An attacker capable of accessing such values (e.g., victim browser, network traffic inspection) can exploit this vulnerability to leak both the password hash as well as session tokens and bypass the authentication mechanism using a pass-the-hash attack.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12012"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.nozominetworks.com/labs/vulnerability-advisories-cve-2024-12012"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-598"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:15:43Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-vcv3-98rx-3xxp/GHSA-vcv3-98rx-3xxp.json b/advisories/unreviewed/2025/02/GHSA-vcv3-98rx-3xxp/GHSA-vcv3-98rx-3xxp.json
index e434f3abe5e..39248671c67 100644
--- a/advisories/unreviewed/2025/02/GHSA-vcv3-98rx-3xxp/GHSA-vcv3-98rx-3xxp.json
+++ b/advisories/unreviewed/2025/02/GHSA-vcv3-98rx-3xxp/GHSA-vcv3-98rx-3xxp.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-vcv3-98rx-3xxp",
-  "modified": "2025-02-11T21:32:08Z",
+  "modified": "2025-02-13T18:32:32Z",
   "published": "2025-02-11T21:32:08Z",
   "aliases": [
     "CVE-2025-25529"
   ],
   "details": "Buffer overflow vulnerability in Digital China DCBC Gateway 200-2.1.1 due to the lack of length verification, which is related to the configuration of static NAT rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T20:15:39Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-wp6r-c52j-pjff/GHSA-wp6r-c52j-pjff.json b/advisories/unreviewed/2025/02/GHSA-wp6r-c52j-pjff/GHSA-wp6r-c52j-pjff.json
new file mode 100644
index 00000000000..3bb2cd875d1
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-wp6r-c52j-pjff/GHSA-wp6r-c52j-pjff.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wp6r-c52j-pjff",
+  "modified": "2025-02-13T18:32:37Z",
+  "published": "2025-02-13T18:32:37Z",
+  "aliases": [
+    "CVE-2025-25899"
+  ],
+  "details": "A buffer overflow vulnerability was discovered in TP-Link TL-WR841ND V11 via the 'gw' parameter at /userRpm/WanDynamicIpV6CfgRpm.htm. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted packet.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25899"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/2664521593/mycve/blob/main/TP-Link/BOF_in_TP-Link_TL-WR841ND-V11_2.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/02/GHSA-x2hv-hf2m-v432/GHSA-x2hv-hf2m-v432.json b/advisories/unreviewed/2025/02/GHSA-x2hv-hf2m-v432/GHSA-x2hv-hf2m-v432.json
index 0113f5d4655..9811d72627b 100644
--- a/advisories/unreviewed/2025/02/GHSA-x2hv-hf2m-v432/GHSA-x2hv-hf2m-v432.json
+++ b/advisories/unreviewed/2025/02/GHSA-x2hv-hf2m-v432/GHSA-x2hv-hf2m-v432.json
@@ -1,13 +1,18 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-x2hv-hf2m-v432",
-  "modified": "2025-02-11T21:32:08Z",
+  "modified": "2025-02-13T18:32:32Z",
   "published": "2025-02-11T21:32:08Z",
   "aliases": [
     "CVE-2025-25525"
   ],
   "details": "Buffer overflow vulnerability in H3C FA3010L access points SWFA1B0V100R005 due to the lack of length verification, which is related to the setting of firewall rules. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands.",
-  "severity": [],
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N"
+    }
+  ],
   "affected": [],
   "references": [
     {
@@ -20,8 +25,10 @@
     }
   ],
   "database_specific": {
-    "cwe_ids": [],
-    "severity": null,
+    "cwe_ids": [
+      "CWE-120"
+    ],
+    "severity": "MODERATE",
     "github_reviewed": false,
     "github_reviewed_at": null,
     "nvd_published_at": "2025-02-11T20:15:38Z"
diff --git a/advisories/unreviewed/2025/02/GHSA-x5h7-6c5j-qhg6/GHSA-x5h7-6c5j-qhg6.json b/advisories/unreviewed/2025/02/GHSA-x5h7-6c5j-qhg6/GHSA-x5h7-6c5j-qhg6.json
new file mode 100644
index 00000000000..293a9858bd3
--- /dev/null
+++ b/advisories/unreviewed/2025/02/GHSA-x5h7-6c5j-qhg6/GHSA-x5h7-6c5j-qhg6.json
@@ -0,0 +1,29 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x5h7-6c5j-qhg6",
+  "modified": "2025-02-13T18:32:34Z",
+  "published": "2025-02-13T18:32:34Z",
+  "aliases": [
+    "CVE-2025-25355"
+  ],
+  "details": "A SQL Injection vulnerability was found in /admin/bwdates-reports-details.php in PHPGurukul Land Record System v1.0, which allows remote attackers to execute arbitrary code via the fromdate POST request parameter.",
+  "severity": [],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-25355"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/Santoshcyber1/CVE-wirteup/blob/main/Phpgurukul/Land%20record/SQL%20Injection%20fromdate.pdf"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [],
+    "severity": null,
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-02-13T16:16:49Z"
+  }
+}
\ No newline at end of file