CVE-2025-14007
published 2025-12-04CVE-2025-14007: A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the…
PriorityP431medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
0.22%
13.0th percentile
A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| dayrui | xunruicms | — | — |
| dayrui | xunruicms | — | — |
| xunruicms | xunruicms | <= 4.7.1 | — |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv4.01.1LOWCVSS:4.0/AV:N/AC:H/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.01.7LOWAV:N/AC:H/Au:M/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-3286-53cx-8fp4: A vulnerability was detected in dayrui XunRuiCMS up to 4
ghsa_unreviewed·2025-12-04
CVE-2025-14007 [LOW] CWE-79 GHSA-3286-53cx-8fp4: A vulnerability was detected in dayrui XunRuiCMS up to 4
A vulnerability was detected in dayrui XunRuiCMS up to 4.7.1. This affects an unknown part of the file /admin79f2ec220c7e.php?c=api&m=demo&name=mobile of the component Domain Name Binding Page. The manipulation results in cross site scripting. The attack may be performed from remote. A high complexity level is associated with this attack. It is indicated that the exploitability is difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Citrix
Citrix Security Bulletin CTX236548
vendor_citrix·CVSS 9.8
CVE-2018-14007 [CRITICAL] Citrix Security Bulletin CTX236548
Citrix Security Bulletin CTX236548
CVE References: CVE-2018-14007, CVE-2025-12101, CVE-2025-62626, CVE-2026-23554, CVE-2026-3055, CVE-2026-4368, CVE-2026-4397
Affected Products: Citrix ADM, Citrix Hypervisor, Citrix Virtual Apps and Desktops, Endpoint Management, NetScaler ADC, NetScaler Gateway, XenServer
Suricata
ET WEB_SPECIFIC_APPS Shenzhen TVT NVMS-9000 Information Disclosure Attempt (CVE-2024-14007)
suricata·2025-11-25·CVSS 8.7
CVE-2024-14007 [HIGH] ET WEB_SPECIFIC_APPS Shenzhen TVT NVMS-9000 Information Disclosure Attempt (CVE-2024-14007)
ET WEB_SPECIFIC_APPS Shenzhen TVT NVMS-9000 Information Disclosure Attempt (CVE-2024-14007)
Rule: alert tcp any any -> $HOME_NET any (msg:"ET WEB_SPECIFIC_APPS Shenzhen TVT NVMS-9000 Information Disclosure Attempt (CVE-2024-14007)"; flow:established,to_server; content:"systemType|3d 22|NVMS-9000|22 20|clientType|3d 22|WEB|22 20|url|3d 22|query"; fast_pattern; reference:cve,2024-14007; reference:url,ssd-disclosure.com/ssd-advisory-nvms9000-information-disclosure/; classtype:attempted-admin; sid:2065916; rev:1; metadata:affected_product Shenzhen_Atemi, attack_target IoT, tls_state plaintext, created_at 2025_11_25, cve CVE_2024_14007, deployment Perimeter, deployment Internal, performance_impact Low, confidence High, signature_severity Major, tag Exploit, tag Description_Generated_By_Proofpo
No public exploits indexed.
No writeups or analysis indexed.
2025-12-04
Published