Update Tue Jul 14 12:46:48 UTC 2026

2011/CVE-2011-4203.md

@@ -0,0 +1,17 @@
+### [CVE-2011-4203](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4203)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+CRLF injection vulnerability in calendar/set.php in the Calendar component in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, 2.1.x before 2.1.3, and 2.2 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via vectors involving the url variable.
+
+### POC
+
+#### Reference
+- http://tracker.moodle.org/browse/MDL-24808
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-6920.md

@@ -10,7 +10,7 @@ Drupal core 8 before versions 8.3.4 allows remote attackers to execute arbitrary
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2017/CVE-2017-6921.md

@@ -0,0 +1,17 @@
+### [CVE-2017-6921](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6921)
+![](https://img.shields.io/static/v1?label=Product&message=Drupal%20Core&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=Drupal%208%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Access%20Bypass&color=brightgreen)
+
+### Description
+
+In Drupal 8 prior to 8.3.4; The file REST resource does not properly validate some fields when manipulating files. A site is only affected by this if the site has the RESTful Web Services (rest) module enabled, the file REST resource is enabled and allows PATCH requests, and an attacker can get or register a user account on the site with permissions to upload files and to modify the file resource.
+
+### POC
+
+#### Reference
+- https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple
+
+#### Github
+No PoCs found on GitHub currently.
+

2017/CVE-2017-6922.md

@@ -0,0 +1,18 @@
+### [CVE-2017-6922](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-6922)
+![](https://img.shields.io/static/v1?label=Product&message=Drupal%20Core&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=Drupal%207%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=Drupal%208%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Access%20Bypass&color=brightgreen)
+
+### Description
+
+In Drupal core 8.x prior to 8.3.4 and Drupal core 7.x prior to 7.56; Private files that have been uploaded by an anonymous user but not permanently attached to content on the site should only be visible to the anonymous user that uploaded them, rather than all anonymous users. Drupal core did not previously provide this protection, allowing an access bypass vulnerability to occur. This issue is mitigated by the fact that in order to be affected, the site must allow anonymous users to upload files into a private file system.
+
+### POC
+
+#### Reference
+- https://www.drupal.org/forum/newsletters/security-advisories-for-drupal-core/2017-06-21/drupal-core-multiple
+
+#### Github
+No PoCs found on GitHub currently.
+

2018/CVE-2018-25340.md

@@ -10,6 +10,7 @@ Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated a
 ### POC
 
 #### Reference
+- https://github.com/smakosh/Smartshop/archive/master.zip
 - https://www.exploit-db.com/exploits/44823
 
 #### Github

2018/CVE-2018-25341.md

@@ -10,6 +10,7 @@ Smartshop 1 contains a SQL injection vulnerability that allows unauthenticated a
 ### POC
 
 #### Reference
+- https://github.com/smakosh/Smartshop/archive/master.zip
 - https://www.exploit-db.com/exploits/44823
 
 #### Github

2018/CVE-2018-25342.md

@@ -10,6 +10,7 @@ Smartshop 1 contains a time-based blind SQL injection vulnerability that allows
 ### POC
 
 #### Reference
+- https://github.com/smakosh/Smartshop/archive/master.zip
 - https://www.exploit-db.com/exploits/44823
 
 #### Github

2018/CVE-2018-25343.md

@@ -10,6 +10,7 @@ Smartshop 1 contains a cross-site request forgery vulnerability that allows atta
 ### POC
 
 #### Reference
+- https://github.com/smakosh/Smartshop/archive/master.zip
 - https://www.exploit-db.com/exploits/44824
 
 #### Github

2020/CVE-2020-25900.md

@@ -0,0 +1,17 @@
+### [CVE-2020-25900](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-25900)
+![](https://img.shields.io/static/v1?label=Product&message=HelloTalk&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-359%20Exposure%20of%20Private%20Personal%20Information%20to%20an%20Unauthorized%20Actor&color=brightgreen)
+
+### Description
+
+HelloTalk through 3.4.1 stores full-precision GPS coordinates even when the user had intended to share only a country or city. Furthermore, these coordinates are placed into a database on the client of other users. (The client side was changed in 2019 to encrypt that database.)
+
+### POC
+
+#### Reference
+- https://isopach.dev/CVE-2020-25900/
+
+#### Github
+No PoCs found on GitHub currently.
+

2020/CVE-2020-35803.md

@@ -0,0 +1,17 @@
+### [CVE-2020-35803](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-35803)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Certain NETGEAR devices are affected by disclosure of sensitive information. This affects D6200 before 1.1.00.40, D7000 before 1.0.1.78, R6020 before 1.0.0.46, R6080 before 1.0.0.46, R6120 before 1.0.0.72, R6220 before 1.1.0.100, R6230 before 1.1.0.100, R6260 before 1.1.0.76, R6700v2 before 1.2.0.74, R6800 before 1.2.0.74, R6900v2 before 1.2.0.74, R7450 before 1.2.0.74, AC2100 before 1.2.0.74, AC2400 before 1.2.0.74, and AC2600 before 1.2.0.74.
+
+### POC
+
+#### Reference
+- https://kb.netgear.com/000062732/Security-Advisory-for-Sensitive-Information-Disclosure-on-Some-Routers-PSV-2019-0110
+
+#### Github
+No PoCs found on GitHub currently.
+

2021/CVE-2021-38517.md

@@ -0,0 +1,17 @@
+### [CVE-2021-38517](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-38517)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Certain NETGEAR devices are affected by out-of-bounds reads and writes. This affects R6400 before 1.0.1.70, RAX75 before 1.0.4.120, RAX80 before 1.0.4.120, and XR300 before 1.0.3.50.
+
+### POC
+
+#### Reference
+- https://kb.netgear.com/000063772/Security-Advisory-for-Out-of-Bounds-Read-and-Write-on-Some-Routers-PSV-2019-0187
+
+#### Github
+No PoCs found on GitHub currently.
+

2021/CVE-2021-41617.md

@@ -11,6 +11,7 @@ sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurati
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.oracle.com/security-alerts/cpuapr2022.html
 - https://www.oracle.com/security-alerts/cpujul2022.html
 - https://www.tenable.com/plugins/nessus/154174

2021/CVE-2021-4473.md

@@ -0,0 +1,17 @@
+### [CVE-2021-4473](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-4473)
+![](https://img.shields.io/static/v1?label=Product&message=Tianxin%20Internet%20Behavior%20Management%20System&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-78%20Improper%20Neutralization%20of%20Special%20Elements%20used%20in%20an%20OS%20Command%20('OS%20Command%20Injection')&color=brightgreen)
+
+### Description
+
+Tianxin Internet Behavior Management System contains a command injection vulnerability in the Reporter component endpoint that allows unauthenticated attackers to execute arbitrary commands by supplying a crafted objClass parameter containing shell metacharacters and output redirection. Attackers can exploit this vulnerability to write malicious PHP files into the web root and achieve remote code execution with the privileges of the web server process. This vulnerability has been fixed in version NACFirmware_4.0.0.7_20210716.180815_topsec_0_basic.bin. Exploitation evidence was first observed by the Shadowserver Foundation on 2024-06-01 (UTC).
+
+### POC
+
+#### Reference
+- https://cn-sec.com/archives/4631959.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2022/CVE-2022-36310.md

@@ -11,6 +11,7 @@ Airspan AirVelocity 1500 software prior to version 15.18.00.2511 had NET-SNMP-EX
 
 #### Reference
 - https://github.com/metaredteam/external-disclosures/security/advisories/GHSA-whc6-2989-42xm
+- https://helpdesk.airspan.com/browse/TRN3-1689
 
 #### Github
 No PoCs found on GitHub currently.

2022/CVE-2022-36312.md

@@ -0,0 +1,17 @@
+### [CVE-2022-36312](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36312)
+![](https://img.shields.io/static/v1?label=Product&message=AirVelocity&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=unspecified%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CSRF%20(CWE-352)&color=brightgreen)
+
+### Description
+
+Airspan AirVelocity 1500 software version 15.18.00.2511 lacks CSRF protections in the eNodeB's web management UI. This issue may affect other AirVelocity and AirSpeed models.
+
+### POC
+
+#### Reference
+- https://helpdesk.airspan.com/browse/TRN3-1695
+
+#### Github
+No PoCs found on GitHub currently.
+

2022/CVE-2022-42248.md

@@ -10,7 +10,7 @@ QlikView 12.60.2 was discovered to contain a stored cross-site scripting (XSS) v
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://github.com/Ozozuz/Qlik-View-Stored-XSS
 
 #### Github
 - https://github.com/ARPSyndicate/cvemon

2023/CVE-2023-28531.md

@@ -11,7 +11,7 @@ ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the inten
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Certifiedhustler-Swaba/VulnerableGPT

2023/CVE-2023-37369.md

@@ -10,7 +10,7 @@ In Qt before 5.15.15, 6.x before 6.2.9, and 6.3.x through 6.5.x before 6.5.2, th
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://bugreports.qt.io/browse/QTBUG-114829
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2023/CVE-2023-38545.md

@@ -13,6 +13,7 @@ This flaw makes curl overflow a heap based buffer in the SOCKS5 proxyhandshake.W
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://github.com/UTsweetyfish/CVE-2023-38545
 - https://github.com/bcdannyboy/CVE-2023-38545
 - https://github.com/dbrugman/CVE-2023-38545-POC

2023/CVE-2023-38546.md

@@ -13,7 +13,7 @@ This flaw allows an attacker to insert cookies at will into a running programusi
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/alex-grandson/docker-python-example

2023/CVE-2023-38890.md

@@ -11,6 +11,7 @@ Online Shopping Portal Project 3.1 allows remote attackers to execute arbitrary
 
 #### Reference
 - https://github.com/akshadjoshi/CVE-2023-38890
+- https://tagmachan.com/online-shopping-portal-3-1-sql-injection-to-remote-code-execution-unauthenticated.tagox
 - https://www.exploit-db.com/exploits/50029
 
 #### Github

2023/CVE-2023-44487.md

@@ -15,6 +15,7 @@ The HTTP/2 protocol allows a denial of service (server resource consumption) bec
 #### Reference
 - https://blog.cloudflare.com/technical-breakdown-http2-rapid-reset-ddos-attack/
 - https://blog.cloudflare.com/zero-day-rapid-reset-http2-record-breaking-ddos-attack/
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cloud.google.com/blog/products/identity-security/google-cloud-mitigated-largest-ddos-attack-peaking-above-398-million-rps/
 - https://cloud.google.com/blog/products/identity-security/how-it-works-the-novel-http2-rapid-reset-ddos-attack
 - https://github.com/Azure/AKS/issues/3947

2023/CVE-2023-4527.md

@@ -14,7 +14,7 @@ A flaw was found in glibc. When the getaddrinfo function is called with the AF_U
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Dalifo/wik-dvs-tp02

2023/CVE-2023-46218.md

@@ -13,7 +13,7 @@ This flaw allows a malicious HTTP server to set "super cookies" in curl thatare
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/bartvoet/assignment-ehb-security-review-adamlenez

2023/CVE-2023-46219.md

@@ -13,7 +13,7 @@ When saving HSTS data to an excessively long file name, curl could end upremovin
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/bartvoet/assignment-ehb-security-review-adamlenez

2023/CVE-2023-4806.md

@@ -16,7 +16,7 @@ A flaw has been identified in glibc. In an extremely rare situation, the getaddr
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Dalifo/wik-dvs-tp02

2023/CVE-2023-48795.md

@@ -13,6 +13,7 @@ The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH bef
 
 #### Reference
 - http://packetstormsecurity.com/files/176280/Terrapin-SSH-Connection-Weakening.html
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://github.com/ronf/asyncssh/blob/develop/docs/changes.rst
 - https://groups.google.com/g/golang-announce/c/-n5WqVC18LQ
 - https://groups.google.com/g/golang-announce/c/qA3XtxvMUyg

2023/CVE-2023-4911.md

@@ -23,6 +23,7 @@ A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so whi
 - http://packetstormsecurity.com/files/176288/Glibc-Tunables-Privilege-Escalation.html
 - http://seclists.org/fulldisclosure/2023/Oct/11
 - http://www.openwall.com/lists/oss-security/2023/10/03/2
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.exploit-db.com/exploits/52479
 - https://www.qualys.com/2023/10/03/cve-2023-4911/looney-tunables-local-privilege-escalation-glibc-ld-so.txt
 

2023/CVE-2023-51384.md

@@ -11,7 +11,7 @@ In ssh-agent in OpenSSH before 9.6, certain destination constraints can be incom
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/GitHubForSnap/openssh-server-gael

2023/CVE-2023-51385.md

@@ -13,6 +13,7 @@ In ssh in OpenSSH before 9.6, OS command injection might occur if a user name or
 #### Reference
 - http://www.openwall.com/lists/oss-security/2025/10/07/1
 - http://www.openwall.com/lists/oss-security/2025/10/12/1
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://vin01.github.io/piptagole/ssh/security/openssh/libssh/remote-code-execution/2023/12/20/openssh-proxycommand-libssh-rce.html
 
 #### Github

2023/CVE-2023-52927.md

@@ -13,6 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:netfilter: al
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://seadragnol.github.io/posts/CVE-2023-52927/
 
 #### Github

2023/CVE-2023-5363.md

@@ -13,7 +13,7 @@ Issue summary: A bug has been identified in the processing of key andinitialisat
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Atamik03/API-calc-dz

2023/CVE-2023-6246.md

@@ -19,6 +19,7 @@ A heap-based buffer overflow was found in the __vsyslog_internal function of the
 - http://packetstormsecurity.com/files/176931/glibc-qsort-Out-Of-Bounds-Read-Write.html
 - http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
 - http://seclists.org/fulldisclosure/2024/Feb/3
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.openwall.com/lists/oss-security/2024/01/30/6
 - https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
 

2023/CVE-2023-6779.md

@@ -18,6 +18,7 @@ An off-by-one heap-based buffer overflow was found in the __vsyslog_internal fun
 #### Reference
 - http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
 - http://seclists.org/fulldisclosure/2024/Feb/3
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.openwall.com/lists/oss-security/2024/01/30/6
 - https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
 

2023/CVE-2023-6780.md

@@ -18,6 +18,7 @@ An integer overflow was found in the __vsyslog_internal function of the glibc li
 #### Reference
 - http://packetstormsecurity.com/files/176932/glibc-syslog-Heap-Based-Buffer-Overflow.html
 - http://seclists.org/fulldisclosure/2024/Feb/3
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.openwall.com/lists/oss-security/2024/01/30/6
 - https://www.qualys.com/2024/01/30/cve-2023-6246/syslog.txt
 

2024/CVE-2024-12133.md

@@ -27,7 +27,7 @@ A flaw in libtasn1 causes inefficient handling of specific certificate data. Whe
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-12243.md

@@ -23,7 +23,7 @@ A flaw was found in GnuTLS, which relies on libtasn1 for ASN.1 data processing.
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-24855.md

@@ -11,7 +11,7 @@ A race condition was found in the Linux kernel's scsi device driver in lpfc_unre
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2024/CVE-2024-26596.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:net: dsa: fix
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2024/CVE-2024-28085.md

@@ -14,6 +14,7 @@ wall in util-linux through 2.40, often installed with setgid tty permissions, al
 #### Reference
 - http://seclists.org/fulldisclosure/2024/Mar/35
 - http://www.openwall.com/lists/oss-security/2024/03/27/5
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://people.rit.edu/sjf5462/6831711781/wall_2_27_2024.txt
 - https://www.openwall.com/lists/oss-security/2024/03/27/5
 

2024/CVE-2024-2961.md

@@ -11,6 +11,7 @@ The iconv() function in the GNU C Library versions 2.39 and older may overflow t
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://www.ambionics.io/blog/iconv-cve-2024-2961-p1
 - https://www.ambionics.io/blog/iconv-cve-2024-2961-p2
 - https://www.ambionics.io/blog/iconv-cve-2024-2961-p3

2024/CVE-2024-33599.md

@@ -11,7 +11,7 @@ nscd: Stack-based buffer overflow in netgroup cacheIf the Name Service Cache Dae
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-33600.md

@@ -11,7 +11,7 @@ nscd: Null pointer crashes after notfound responseIf the Name Service Cache Daem
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-33601.md

@@ -11,7 +11,7 @@ nscd: netgroup cache may terminate daemon on memory allocation failureThe Name S
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-33602.md

@@ -11,7 +11,7 @@ nscd: netgroup cache assumes NSS callback uses in-buffer stringsThe Name Service
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-34397.md

@@ -13,6 +13,7 @@ An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x befor
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-613116.html
 - https://gitlab.gnome.org/GNOME/glib/-/issues/3268
 

2024/CVE-2024-37370.md

@@ -11,7 +11,7 @@ In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can modify the plaintext
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Atamik03/API-calc-dz

2024/CVE-2024-37371.md

@@ -11,7 +11,7 @@ In MIT Kerberos 5 (aka krb5) before 1.21.3, an attacker can cause invalid memory
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/Atamik03/API-calc-dz

2024/CVE-2024-45490.md

@@ -13,6 +13,7 @@ An issue was discovered in libexpat before 2.6.3. xmlparse.c does not reject a n
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-613116.html
 
 #### Github

2024/CVE-2024-45491.md

@@ -13,6 +13,7 @@ An issue was discovered in libexpat before 2.6.3. dtdCopy in xmlparse.c can have
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-613116.html
 
 #### Github

2024/CVE-2024-45492.md

@@ -13,6 +13,7 @@ An issue was discovered in libexpat before 2.6.3. nextScaffoldPart in xmlparse.c
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-613116.html
 
 #### Github

2024/CVE-2024-50246.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:fs/ntfs3: Add
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/bygregonline/devsec-fastapi-report

2024/CVE-2024-53166.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:block, bfq: f
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/bygregonline/devsec-fastapi-report

2024/CVE-2024-57924.md

@@ -14,7 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:fs: relax ass
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2024/CVE-2024-57977.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:memcg: fix so
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2024/CVE-2024-57996.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:net_sched: sc
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2024/CVE-2024-58005.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:tpm: Change t
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2024/CVE-2024-6119.md

@@ -16,6 +16,7 @@ Issue summary: Applications performing certificate name checks (e.g., TLSclients
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-613116.html
 
 #### Github

2024/CVE-2024-6387.md

@@ -32,6 +32,7 @@ A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd).
 - http://www.openwall.com/lists/oss-security/2024/07/03/5
 - http://www.openwall.com/lists/oss-security/2024/07/28/2
 - https://blog.qualys.com/vulnerabilities-threat-research/2024/07/01/regresshion-remote-unauthenticated-code-execution-vulnerability-in-openssh-server
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://github.com/zgzhang/cve-2024-6387-poc
 - https://news.ycombinator.com/item?id=40843778
 - https://santandersecurityresearch.github.io/blog/sshing_the_masses.html

2024/CVE-2024-6963.md

@@ -12,6 +12,7 @@ Eine Schwachstelle wurde in Tenda O3 1.0.0.10 entdeckt. Sie wurde als kritisch e
 
 #### Reference
 - https://github.com/abcdefg-png/IoT-vulnerable/blob/main/Tenda/O3V2.0/formexeCommand.md
+- https://vuldb.com/?ctiid.272117
 - https://vuldb.com/?id.272117
 
 #### Github

2025/CVE-2025-11082.md

@@ -13,7 +13,7 @@ In GNU Binutils 2.45 ist eine Schwachstelle entdeckt worden. Betroffen davon ist
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/raph-rcn/devsecops-juice-shop

2025/CVE-2025-11083.md

@@ -13,7 +13,7 @@ Eine Schwachstelle wurde in GNU Binutils 2.45 gefunden. Es betrifft die Funktion
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/raph-rcn/devsecops-juice-shop

2025/CVE-2025-11412.md

@@ -0,0 +1,19 @@
+### [CVE-2025-11412](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11412)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-Bounds%20Read&color=brightgreen)
+
+### Description
+
+A vulnerability has been found in GNU Binutils 2.45. This impacts the function bfd_elf_gc_record_vtentry of the file bfd/elflink.c of the component Linker. The manipulation leads to out-of-bounds read. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of the patch is 047435dd988a3975d40c6626a8f739a0b2e154bc. To fix this issue, it is recommended to deploy a patch.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-11413.md

@@ -0,0 +1,20 @@
+### [CVE-2025-11413](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11413)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-Bounds%20Read&color=brightgreen)
+
+### Description
+
+A vulnerability was found in GNU Binutils 2.45. Affected is the function elf_link_add_object_symbols of the file bfd/elflink.c of the component Linker. The manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has been made public and could be used. Upgrading to version 2.46 is able to address this issue. The patch is identified as 72efdf166aa0ed72ecc69fc2349af6591a7a19c0. Upgrading the affected component is advised.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-11414.md

@@ -0,0 +1,20 @@
+### [CVE-2025-11414](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11414)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-Bounds%20Read&color=brightgreen)
+
+### Description
+
+A vulnerability was determined in GNU Binutils 2.45. Affected by this vulnerability is the function get_link_hash_entry of the file bfd/elflink.c of the component Linker. This manipulation causes out-of-bounds read. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.46 addresses this issue. Patch name: aeaaa9af6359c8e394ce9cf24911fec4f4d23703. It is advisable to upgrade the affected component.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-11494.md

@@ -12,6 +12,7 @@ A vulnerability was found in GNU Binutils 2.45. Impacted is the function _bfd_x8
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://vuldb.com/?id.327619
 
 #### Github

2025/CVE-2025-11495.md

@@ -0,0 +1,19 @@
+### [CVE-2025-11495](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11495)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Heap-based%20Buffer%20Overflow&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+
+### Description
+
+A vulnerability was determined in GNU Binutils 2.45. The affected element is the function elf_x86_64_relocate_section of the file elf64-x86-64.c of the component Linker. This manipulation causes heap-based buffer overflow. The attack can only be executed locally. The exploit has been publicly disclosed and may be utilized. Patch name: 6b21c8b2ecfef5c95142cbc2c32f185cb1c26ab0. To fix this issue, it is recommended to deploy a patch.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-11839.md

@@ -0,0 +1,19 @@
+### [CVE-2025-11839](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11839)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Incorrect%20Check%20of%20Function%20Return%20Value&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Unchecked%20Return%20Value&color=brightgreen)
+
+### Description
+
+A security flaw has been discovered in GNU Binutils 2.45. Impacted is the function tg_tag_type of the file prdbg.c. Performing a manipulation results in unchecked return value. The attack needs to be approached locally. The exploit has been released to the public and may be used for attacks.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-11840.md

@@ -0,0 +1,19 @@
+### [CVE-2025-11840](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-11840)
+![](https://img.shields.io/static/v1?label=Product&message=Binutils&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=2.45%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Version&message=V3.1.5%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Memory%20Corruption&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=Out-of-Bounds%20Read&color=brightgreen)
+
+### Description
+
+A weakness has been identified in GNU Binutils 2.45. The affected element is the function vfinfo of the file ldmisc.c. Executing a manipulation can lead to out-of-bounds read. The attack can only be executed locally. The exploit has been made available to the public and could be used for attacks. This patch is called 16357. It is best practice to apply a patch to resolve this issue.
+
+### POC
+
+#### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-15665.md

@@ -0,0 +1,17 @@
+### [CVE-2025-15665](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-15665)
+![](https://img.shields.io/static/v1?label=Product&message=Ultimate%20Before%20After%20Image%20Slider%20%26%20Gallery&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=0%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-79%20Cross-Site%20Scripting%20(XSS)&color=brightgreen)
+
+### Description
+
+The Ultimate Before After Image Slider & Gallery  WordPress plugin before 4.7.1 does not escape the value of the BEAF Slider widget's shortcode field before outputting it on the front end (the value is passed through do_shortcode, which echoes non-shortcode content verbatim), allowing users with administrator-level access to store a script that executes in the browser of any visitor who loads a page displaying the widget.
+
+### POC
+
+#### Reference
+- https://wpscan.com/vulnerability/754f0960-efc8-426f-bb1d-7cceec920910/
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-1840.md

@@ -14,6 +14,7 @@ Eine kritische Schwachstelle wurde in ESAFENET CDG 5.6.3.154.205 ausgemacht. Es
 #### Reference
 - https://github.com/Rain1er/report/blob/main/CDG/dXBkYXRlb3JnLmpzcA%3D%3D.md
 - https://vuldb.com/?id.298106
+- https://vuldb.com/?submit.504384
 
 #### Github
 No PoCs found on GitHub currently.

2025/CVE-2025-21701.md

@@ -17,7 +17,7 @@ In the Linux kernel, the following vulnerability has been resolved:net: avoid ra
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2025/CVE-2025-21702.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:pfifo_tail_en
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/ARPSyndicate/cve-scores

2025/CVE-2025-21712.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:md/md-bitmap:
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2025/CVE-2025-21724.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:iommufd/iova_
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2025/CVE-2025-21728.md

@@ -18,6 +18,7 @@ In the Linux kernel, the following vulnerability has been resolved:bpf: Send sig
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21745.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:blk-cgroup: F
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21756.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:vsock: Keep t
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21758.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv6: mcast:
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2025/CVE-2025-21765.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv6: use RCU
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21766.md

@@ -21,7 +21,7 @@ In the Linux kernel, the following vulnerability has been resolved:ipv4: use RCU
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2025/CVE-2025-21767.md

@@ -19,7 +19,7 @@ In the Linux kernel, the following vulnerability has been resolved:clocksource:
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2025/CVE-2025-21795.md

@@ -18,6 +18,7 @@ In the Linux kernel, the following vulnerability has been resolved:NFSD: fix han
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21796.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:nfsd: clear a
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21848.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:nfp: bpf: Add
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2025/CVE-2025-21862.md

@@ -14,6 +14,7 @@ In the Linux kernel, the following vulnerability has been resolved:drop_monitor:
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-21864.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:tcp: drop sec
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/fkie-cad/nvd-json-data-feeds

2025/CVE-2025-21865.md

@@ -26,6 +26,7 @@ In the Linux kernel, the following vulnerability has been resolved:gtp: Suppress
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-26465.md

@@ -22,6 +22,7 @@ A vulnerability was found in OpenSSH when the VerifyHostKeyDNS option is enabled
 #### Reference
 - http://seclists.org/fulldisclosure/2025/Feb/18
 - https://bugzilla.suse.com/show_bug.cgi?id=1237040
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://seclists.org/oss-sec/2025/q1/144
 - https://www.openwall.com/lists/oss-security/2025/02/18/1
 - https://www.theregister.com/2025/02/18/openssh_vulnerabilities_mitm_dos/

2025/CVE-2025-29329.md

@@ -0,0 +1,17 @@
+### [CVE-2025-29329](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29329)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+Buffer Overflow in the ippprint (Internet Printing Protocol) service in Sagemcom F@st 3686 MAGYAR_4.121.0 allows remote attacker to execute arbitrary code by sending a crafted HTTP request.
+
+### POC
+
+#### Reference
+- https://github.com/SilverS3c/Sagemcom-fast-3686-ippprint
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-29338.md

@@ -0,0 +1,17 @@
+### [CVE-2025-29338](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-29338)
+![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
+![](https://img.shields.io/static/v1?label=Version&message=n%2Fa%20&color=brightgreen)
+![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brightgreen)
+
+### Description
+
+NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 To v17.92.1.p149.157 was discovered to contain a buffer overflow via the mod_para parameter in the woal_init_module_param function.
+
+### POC
+
+#### Reference
+- https://github.com/masjadaan/CVE-2025-29338
+
+#### Github
+No PoCs found on GitHub currently.
+

2025/CVE-2025-31115.md

@@ -14,7 +14,7 @@ XZ Utils provide a general-purpose data-compression library plus command-line to
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/adegoodyer/kubernetes-admin-toolkit

2025/CVE-2025-3198.md

@@ -15,6 +15,7 @@ In GNU Binutils 2.43/2.44 wurde eine Schwachstelle gefunden. Sie wurde als probl
 ### POC
 
 #### Reference
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 - https://cert-portal.siemens.com/productcert/html/ssa-265688.html
 
 #### Github

2025/CVE-2025-32988.md

@@ -24,7 +24,7 @@ A flaw was found in GnuTLS. A double-free vulnerability exists in GnuTLS due to
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/GitHubForSnap/ssmtp-gael

2025/CVE-2025-32989.md

@@ -24,7 +24,7 @@ A heap-buffer-overread vulnerability was found in GnuTLS in how it handles the C
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/GitHubForSnap/ssmtp-gael

2025/CVE-2025-34160.md

@@ -10,6 +10,7 @@ AnyShare contains a critical unauthenticated remote code execution vulnerability
 ### POC
 
 #### Reference
+- https://cn-sec.com/archives/4320091.html
 - https://stack.chaitin.com/vuldb/detail/b4640952-9be9-4bfa-9d7f-a0be72b35e18
 - https://www.vulncheck.com/advisories/anyshare-serviceagent-api-unauthenticated-rce
 

2025/CVE-2025-34162.md

@@ -10,6 +10,7 @@ An unauthenticated SQL injection vulnerability exists in the GetLyfsByParams end
 ### POC
 
 #### Reference
+- https://cn-sec.com/archives/4160402.html
 - https://github.com/wooluo/nuclei-templates-2025hw/blob/main/bianque-medical-sql-injection.yaml
 - https://www.vulncheck.com/advisories/bian-que-feiju-intelligent-emergency-and-quality-control-system-sqli
 

2025/CVE-2025-34163.md

@@ -10,6 +10,7 @@ Dongsheng Logistics Software exposes an unauthenticated endpoint at /CommMng/Pri
 ### POC
 
 #### Reference
+- https://cn-sec.com/archives/4243708.html
 - https://www.vulncheck.com/advisories/dongsheng-logisitics-software-unauth-arbitrary-file-upload
 
 #### Github

2025/CVE-2025-38058.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:__legitimize_
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security

2025/CVE-2025-38063.md

@@ -13,7 +13,7 @@ In the Linux kernel, the following vulnerability has been resolved:dm: fix uncon
 ### POC
 
 #### Reference
-No PoCs from references.
+- https://cert-portal.siemens.com/productcert/html/ssa-082556.html
 
 #### Github
 - https://github.com/w4zu/Debian_security