Dark C0d3rs
Daily CVE Record Information - 2025-03-04 - Printable Version

+- Dark C0d3rs (https://darkcoders.wiki)
+-- Forum: Exploit Log (https://darkcoders.wiki/Forum-Exploit-Log)
+--- Forum: CVE Details (https://darkcoders.wiki/Forum-CVE-Details)
+--- Thread: Daily CVE Record Information - 2025-03-04 (/Thread-Daily-CVE-Record-Information-2025-03-04)



Daily CVE Record Information - 2025-03-04 - hashXploiter - 03-04-2025

CVE-2025-27521

Vulnerability of improper access permission in the process management module
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

Maximum CVSS Score : 6.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-27221

In the URI gem before 1.0.3 for Ruby, the URI handling methods (URI.join, URI#merge, URI#+) have an inadvertent leakage of authentication credentials because userinfo is retained even after changing the host.

Maximum CVSS Score : 3.2
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service (ReDoS) vulnerability exists in the Util#escapeElement method.

Maximum CVSS Score : 4.0
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-26849

There is a Hard-coded Cryptographic Key in Docusnap 13.0.1440.24261, and earlier and later versions.

Maximum CVSS Score : 4.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-24309

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-24301

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23420

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23418

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23414

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23409

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through use after free. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23240

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-23234

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22897

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through buffer overflow.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22847

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22841

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22837

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22835

in OpenHarmony v5.0.2 and prior versions allow a local attacker arbitrary code execution in pre-installed apps through out-of-bounds write. This vulnerability can be exploited only in restricted scenarios.

Maximum CVSS Score : 3.8
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-22443

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through out-of-bounds read.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-21098

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause information leak through out-of-bounds read bypass permission check.

Maximum CVSS Score : 5.5
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.


CVE-2025-21097

in OpenHarmony v5.0.2 and prior versions allow a local attacker cause DOS through NULL pointer dereference.

Maximum CVSS Score : 3.3
Exploit Availability: Not available
Reference: You are not allowed to view links. Register or Login to view.