From dd268a25f3446ea9bf0c905cba71357f873c4210 Mon Sep 17 00:00:00 2001
From: "advisory-database[bot]"
 <45398580+advisory-database[bot]@users.noreply.github.com>
Date: Fri, 2 May 2025 00:33:54 +0000
Subject: [PATCH] Publish Advisories

GHSA-gwvg-5xhp-rp5q
GHSA-4j5c-r959-xx38
GHSA-4p79-vffr-6jm5
GHSA-4x5f-fcg7-8m3c
GHSA-5v9r-24g7-2gx7
GHSA-cx2v-3m68-m9x4
GHSA-fhjf-qcr2-g8m7
GHSA-gjwx-g2ph-472r
GHSA-pqjf-9c57-cpg3
GHSA-rmwj-ph92-h7fq
GHSA-v3vg-hvj3-3m8h
GHSA-wx9f-pj36-96hc
GHSA-x69c-67qv-fx4j
GHSA-xgw4-9mp9-75mc
GHSA-xh33-q298-mqqf
---
 .../GHSA-gwvg-5xhp-rp5q.json                  |  6 +-
 .../GHSA-4j5c-r959-xx38.json                  | 52 +++++++++++++++++
 .../GHSA-4p79-vffr-6jm5.json                  | 56 +++++++++++++++++++
 .../GHSA-4x5f-fcg7-8m3c.json                  | 52 +++++++++++++++++
 .../GHSA-5v9r-24g7-2gx7.json                  | 36 ++++++++++++
 .../GHSA-cx2v-3m68-m9x4.json                  | 36 ++++++++++++
 .../GHSA-fhjf-qcr2-g8m7.json                  | 36 ++++++++++++
 .../GHSA-gjwx-g2ph-472r.json                  | 40 +++++++++++++
 .../GHSA-pqjf-9c57-cpg3.json                  | 52 +++++++++++++++++
 .../GHSA-rmwj-ph92-h7fq.json                  | 52 +++++++++++++++++
 .../GHSA-v3vg-hvj3-3m8h.json                  | 52 +++++++++++++++++
 .../GHSA-wx9f-pj36-96hc.json                  | 52 +++++++++++++++++
 .../GHSA-x69c-67qv-fx4j.json                  | 56 +++++++++++++++++++
 .../GHSA-xgw4-9mp9-75mc.json                  | 52 +++++++++++++++++
 .../GHSA-xh33-q298-mqqf.json                  | 52 +++++++++++++++++
 15 files changed, 681 insertions(+), 1 deletion(-)
 create mode 100644 advisories/unreviewed/2025/05/GHSA-4j5c-r959-xx38/GHSA-4j5c-r959-xx38.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-4p79-vffr-6jm5/GHSA-4p79-vffr-6jm5.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-4x5f-fcg7-8m3c/GHSA-4x5f-fcg7-8m3c.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-5v9r-24g7-2gx7/GHSA-5v9r-24g7-2gx7.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-cx2v-3m68-m9x4/GHSA-cx2v-3m68-m9x4.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-fhjf-qcr2-g8m7/GHSA-fhjf-qcr2-g8m7.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-gjwx-g2ph-472r/GHSA-gjwx-g2ph-472r.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-pqjf-9c57-cpg3/GHSA-pqjf-9c57-cpg3.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-rmwj-ph92-h7fq/GHSA-rmwj-ph92-h7fq.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-v3vg-hvj3-3m8h/GHSA-v3vg-hvj3-3m8h.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-wx9f-pj36-96hc/GHSA-wx9f-pj36-96hc.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-x69c-67qv-fx4j/GHSA-x69c-67qv-fx4j.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-xgw4-9mp9-75mc/GHSA-xgw4-9mp9-75mc.json
 create mode 100644 advisories/unreviewed/2025/05/GHSA-xh33-q298-mqqf/GHSA-xh33-q298-mqqf.json

diff --git a/advisories/unreviewed/2025/04/GHSA-gwvg-5xhp-rp5q/GHSA-gwvg-5xhp-rp5q.json b/advisories/unreviewed/2025/04/GHSA-gwvg-5xhp-rp5q/GHSA-gwvg-5xhp-rp5q.json
index 438baf74f67..65d29c0de0f 100644
--- a/advisories/unreviewed/2025/04/GHSA-gwvg-5xhp-rp5q/GHSA-gwvg-5xhp-rp5q.json
+++ b/advisories/unreviewed/2025/04/GHSA-gwvg-5xhp-rp5q/GHSA-gwvg-5xhp-rp5q.json
@@ -1,7 +1,7 @@
 {
   "schema_version": "1.4.0",
   "id": "GHSA-gwvg-5xhp-rp5q",
-  "modified": "2025-04-23T15:30:56Z",
+  "modified": "2025-05-02T00:32:14Z",
   "published": "2025-04-22T21:30:44Z",
   "aliases": [
     "CVE-2025-37087"
@@ -22,6 +22,10 @@
     {
       "type": "WEB",
       "url": "https://support.hpe.com/hpesc/docDisplay?docLocale=en_US&docId=a00146087en_us"
+    },
+    {
+      "type": "WEB",
+      "url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbcr04840en_us&docLocale=en_US"
     }
   ],
   "database_specific": {
diff --git a/advisories/unreviewed/2025/05/GHSA-4j5c-r959-xx38/GHSA-4j5c-r959-xx38.json b/advisories/unreviewed/2025/05/GHSA-4j5c-r959-xx38/GHSA-4j5c-r959-xx38.json
new file mode 100644
index 00000000000..9327213ed1c
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-4j5c-r959-xx38/GHSA-4j5c-r959-xx38.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4j5c-r959-xx38",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4185"
+  ],
+  "details": "A vulnerability, which was classified as critical, has been found in Wangshen SecGate 3600 2024. This issue affects some unknown processing of the file ?g=obj_area_export_save. The manipulation of the argument file_name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4185"
+    },
+    {
+      "type": "WEB",
+      "url": "https://flowus.cn/share/6bd8ca39-bad2-4567-b0e1-9407991ad943?code=G8A6P3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306803"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306803"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561803"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T00:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-4p79-vffr-6jm5/GHSA-4p79-vffr-6jm5.json b/advisories/unreviewed/2025/05/GHSA-4p79-vffr-6jm5/GHSA-4p79-vffr-6jm5.json
new file mode 100644
index 00000000000..4a99e4e1545
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-4p79-vffr-6jm5/GHSA-4p79-vffr-6jm5.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4p79-vffr-6jm5",
+  "modified": "2025-05-02T00:32:16Z",
+  "published": "2025-05-02T00:32:16Z",
+  "aliases": [
+    "CVE-2025-4191"
+  ],
+  "details": "A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /editmyeducation.php. The manipulation of the argument coursepg leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4191"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ideal-valli/myCVE/issues/3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306805"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306805"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561816"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T00:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-4x5f-fcg7-8m3c/GHSA-4x5f-fcg7-8m3c.json b/advisories/unreviewed/2025/05/GHSA-4x5f-fcg7-8m3c/GHSA-4x5f-fcg7-8m3c.json
new file mode 100644
index 00000000000..8e082f2d18f
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-4x5f-fcg7-8m3c/GHSA-4x5f-fcg7-8m3c.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-4x5f-fcg7-8m3c",
+  "modified": "2025-05-02T00:32:16Z",
+  "published": "2025-05-02T00:32:16Z",
+  "aliases": [
+    "CVE-2025-4186"
+  ],
+  "details": "A vulnerability, which was classified as critical, was found in Wangshen SecGate 3600 2024. Affected is an unknown function of the file /?g=route_ispinfo_export_save. The manipulation of the argument file_name leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4186"
+    },
+    {
+      "type": "WEB",
+      "url": "https://flowus.cn/share/0f982f99-ecd5-4e35-88f0-c27093743385?code=G8A6P3"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306804"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306804"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561814"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T00:15:19Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-5v9r-24g7-2gx7/GHSA-5v9r-24g7-2gx7.json b/advisories/unreviewed/2025/05/GHSA-5v9r-24g7-2gx7/GHSA-5v9r-24g7-2gx7.json
new file mode 100644
index 00000000000..0c9c94a733c
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-5v9r-24g7-2gx7/GHSA-5v9r-24g7-2gx7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-5v9r-24g7-2gx7",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2024-52903"
+  ],
+  "details": "IBM Db2 for Linux, UNIX and Windows 12.1.0 and 12.1.1 is vulnerable to a denial of service as the server may crash under certain conditions with a specially crafted query.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2024-52903"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7232336"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-20"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T23:15:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-cx2v-3m68-m9x4/GHSA-cx2v-3m68-m9x4.json b/advisories/unreviewed/2025/05/GHSA-cx2v-3m68-m9x4/GHSA-cx2v-3m68-m9x4.json
new file mode 100644
index 00000000000..3a5caf5fbae
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-cx2v-3m68-m9x4/GHSA-cx2v-3m68-m9x4.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-cx2v-3m68-m9x4",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-27365"
+  ],
+  "details": "IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10 \n\nClient connecting to a MQ Queue Manager can cause a SIGSEGV in the AMQRMPPA channel process terminating it.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-27365"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7232272"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-416"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-fhjf-qcr2-g8m7/GHSA-fhjf-qcr2-g8m7.json b/advisories/unreviewed/2025/05/GHSA-fhjf-qcr2-g8m7/GHSA-fhjf-qcr2-g8m7.json
new file mode 100644
index 00000000000..5292e3d7721
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-fhjf-qcr2-g8m7/GHSA-fhjf-qcr2-g8m7.json
@@ -0,0 +1,36 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-fhjf-qcr2-g8m7",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-1333"
+  ],
+  "details": "IBM MQ Container when used with the IBM MQ Operator LTS 2.0.0 through 2.0.29, MQ Operator CD 3.0.0, 3.0.1, 3.1.0 through 3.1.3, 3.3.0, 3.4.0, 3.4.1, 3.5.0, 3.5.1, and MQ Operator SC2 3.2.0 through 3.2.10  and configured with Cloud Pak for Integration Keycloak could disclose sensitive information to a privileged user.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1333"
+    },
+    {
+      "type": "WEB",
+      "url": "https://www.ibm.com/support/pages/node/7232272"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-214"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:16Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-gjwx-g2ph-472r/GHSA-gjwx-g2ph-472r.json b/advisories/unreviewed/2025/05/GHSA-gjwx-g2ph-472r/GHSA-gjwx-g2ph-472r.json
new file mode 100644
index 00000000000..635cea9cbda
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-gjwx-g2ph-472r/GHSA-gjwx-g2ph-472r.json
@@ -0,0 +1,40 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-gjwx-g2ph-472r",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-43595"
+  ],
+  "details": "An insecure file system permissions vulnerability in MSP360 Backup 4.3.1.115 allows a lower privileged user to execute commands with root level privileges in the 'Online Backup' folder. Users are recommended to upgrade to MSP360 Backup 4.4 (released on 2025-04-22).",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-43595"
+    },
+    {
+      "type": "WEB",
+      "url": "https://help.msp360.com/cloudberry-backup-mac-linux/whats-new"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-276"
+    ],
+    "severity": "HIGH",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-pqjf-9c57-cpg3/GHSA-pqjf-9c57-cpg3.json b/advisories/unreviewed/2025/05/GHSA-pqjf-9c57-cpg3/GHSA-pqjf-9c57-cpg3.json
new file mode 100644
index 00000000000..c529fdbf55b
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-pqjf-9c57-cpg3/GHSA-pqjf-9c57-cpg3.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-pqjf-9c57-cpg3",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4183"
+  ],
+  "details": "A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RECV Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4183"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-d8578edf8458ce06fbc5bb76a58c5ca4.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306801"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306801"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561144"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T23:15:51Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-rmwj-ph92-h7fq/GHSA-rmwj-ph92-h7fq.json b/advisories/unreviewed/2025/05/GHSA-rmwj-ph92-h7fq/GHSA-rmwj-ph92-h7fq.json
new file mode 100644
index 00000000000..3ad9f4b5c3a
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-rmwj-ph92-h7fq/GHSA-rmwj-ph92-h7fq.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-rmwj-ph92-h7fq",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4184"
+  ],
+  "details": "A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component QUOTE Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4184"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-81dc9bdb52d04dc20036dbd8313ed055.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306802"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306802"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561145"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-02T00:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-v3vg-hvj3-3m8h/GHSA-v3vg-hvj3-3m8h.json b/advisories/unreviewed/2025/05/GHSA-v3vg-hvj3-3m8h/GHSA-v3vg-hvj3-3m8h.json
new file mode 100644
index 00000000000..a59ed30dbba
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-v3vg-hvj3-3m8h/GHSA-v3vg-hvj3-3m8h.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-v3vg-hvj3-3m8h",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4178"
+  ],
+  "details": "A vulnerability was found in xiaowei1118 java_server up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component File Upload API. The manipulation leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4178"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/ShenxiuSec/cve-proofs/blob/main/POC-20250418-02.md"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306797"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306797"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561794"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-22"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:18Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-wx9f-pj36-96hc/GHSA-wx9f-pj36-96hc.json b/advisories/unreviewed/2025/05/GHSA-wx9f-pj36-96hc/GHSA-wx9f-pj36-96hc.json
new file mode 100644
index 00000000000..eda63b7dcf6
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-wx9f-pj36-96hc/GHSA-wx9f-pj36-96hc.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-wx9f-pj36-96hc",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4182"
+  ],
+  "details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been rated as critical. Affected by this issue is some unknown functionality of the component BELL Command Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4182"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-e99a18c428cb38d5f260853678922e03.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306800"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306800"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561141"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T23:15:51Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-x69c-67qv-fx4j/GHSA-x69c-67qv-fx4j.json b/advisories/unreviewed/2025/05/GHSA-x69c-67qv-fx4j/GHSA-x69c-67qv-fx4j.json
new file mode 100644
index 00000000000..f068319e6fd
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-x69c-67qv-fx4j/GHSA-x69c-67qv-fx4j.json
@@ -0,0 +1,56 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-x69c-67qv-fx4j",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4176"
+  ],
+  "details": "A vulnerability has been found in PHPGurukul Blood Bank & Donor Management System 2.4 and classified as critical. This vulnerability affects unknown code of the file /admin/request-received-bydonar.php. The manipulation of the argument searchdata leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4176"
+    },
+    {
+      "type": "WEB",
+      "url": "https://github.com/bluechips-zhao/myCVE/issues/5"
+    },
+    {
+      "type": "WEB",
+      "url": "https://phpgurukul.com"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306796"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306796"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561764"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-74"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:17Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-xgw4-9mp9-75mc/GHSA-xgw4-9mp9-75mc.json b/advisories/unreviewed/2025/05/GHSA-xgw4-9mp9-75mc/GHSA-xgw4-9mp9-75mc.json
new file mode 100644
index 00000000000..7daef5862dd
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-xgw4-9mp9-75mc/GHSA-xgw4-9mp9-75mc.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xgw4-9mp9-75mc",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4181"
+  ],
+  "details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4181"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-202cb962ac59075b964b07152d234b70.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306799"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561139"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T23:15:50Z"
+  }
+}
\ No newline at end of file
diff --git a/advisories/unreviewed/2025/05/GHSA-xh33-q298-mqqf/GHSA-xh33-q298-mqqf.json b/advisories/unreviewed/2025/05/GHSA-xh33-q298-mqqf/GHSA-xh33-q298-mqqf.json
new file mode 100644
index 00000000000..e00af244860
--- /dev/null
+++ b/advisories/unreviewed/2025/05/GHSA-xh33-q298-mqqf/GHSA-xh33-q298-mqqf.json
@@ -0,0 +1,52 @@
+{
+  "schema_version": "1.4.0",
+  "id": "GHSA-xh33-q298-mqqf",
+  "modified": "2025-05-02T00:32:15Z",
+  "published": "2025-05-02T00:32:15Z",
+  "aliases": [
+    "CVE-2025-4180"
+  ],
+  "details": "A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. Affected is an unknown function of the component TRACE Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.",
+  "severity": [
+    {
+      "type": "CVSS_V3",
+      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L"
+    },
+    {
+      "type": "CVSS_V4",
+      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X"
+    }
+  ],
+  "affected": [],
+  "references": [
+    {
+      "type": "ADVISORY",
+      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-4180"
+    },
+    {
+      "type": "WEB",
+      "url": "https://fitoxs.com/exploit/exploit-25d55ad283aa400af464c76d713c07ad.txt"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?ctiid.306798"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?id.306798"
+    },
+    {
+      "type": "WEB",
+      "url": "https://vuldb.com/?submit.561035"
+    }
+  ],
+  "database_specific": {
+    "cwe_ids": [
+      "CWE-119"
+    ],
+    "severity": "MODERATE",
+    "github_reviewed": false,
+    "github_reviewed_at": null,
+    "nvd_published_at": "2025-05-01T22:15:18Z"
+  }
+}
\ No newline at end of file