Qualitor 8.20/8.24 Office 365-type Connection testaConexaoOffice365.php nmconexao kura hakki ndiyam

CVSS Meta Temp ScoreGarga na exploit ndiyam (≈)CTI Nganji Score
6.3$0-$5k0.00

Gundumabayani

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Qualitor 8.20/8.24. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /html/ad/adconexaooffice365/request/testaConexaoOffice365.php na cikin fayil, Office 365-type Connection Handler na cikin sashi. Ngam manipulation of the argument nmconexao shi kura hakki ndiyam. Wannan rauni ana sayar da shi da suna CVE-2025-5139. Ngam yiɗi ka a tuma ndiyam ka nder internet. Kuma, exploit ɗin yana akwai. Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Furɗebayani

Wuro vulnerability wey an yi classify sey kura an gano shi a cikin Qualitor 8.20/8.24. Gaskiya, $software_function na da matsala; idan ba a sani ba, to wata aiki ce da ba a sani ba, $software_library na cikin lissafi, /html/ad/adconexaooffice365/request/testaConexaoOffice365.php na cikin fayil, Office 365-type Connection Handler na cikin sashi. Ngam manipulation of the argument nmconexao shi kura hakki ndiyam. CWE shidin ka a yi bayani matsala sai ya kai CWE-77. Gaskiya, laifi an fitar da shi (https://www.qualitor.com.br/official-security-advisory-cve-2025-5139). Advisory ɗin ana rabawa don saukewa a youtube.com.

Wannan rauni ana sayar da shi da suna CVE-2025-5139. Ngam yiɗi ka a tuma ndiyam ka nder internet. Tekinikal bayani ga. Kari gamji na kai hari ya fi girma. Wuro kaɗa a yi amfani da shi da sauki. Wannan vulnerability ɗin ba shi da yawa sosai. Kuma, exploit ɗin yana akwai. Wuro exploit ɗin an bayyana shi ga jama'a kuma za a iya amfani da shi. A sa'i, exploit might be approx. USD $0-$5k ndiyam.

Á wúro huɗɗi-na-gaskiya. Wona yiwuwa a zazzage exploit a gist.githubusercontent.com.

Ngamdi ka a yiɗi a ɗaɓɓita kompona wey ka a hokkata.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Kayanbayani

Sunu

Furɗe

CPE 2.3bayani

CPE 2.2bayani

Bidiyo

CVSSv4bayani

VulDB Furɗo: 🔒
VulDB Gaskiya: 🔍

CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Furɗo: 🔒

CVSSv3bayani

VulDB Meta Base Score: 6.4
VulDB Meta Temp Score: 6.3

VulDB Ganda Borno: 5.6
VulDB Temp Score: 5.1
VulDB Furɗo: 🔒
VulDB Gaskiya: 🔍

NVD Ganda Borno: 8.1
NVD Furɗo: 🔒

CNA Ganda Borno: 5.6
CNA Furɗo: 🔒

CVSSv2bayani

AVACAuCIA
💳💳💳💳💳💳
💳💳💳💳💳💳
💳💳💳💳💳💳
VektarKumpleksitiAuthentisierungKariyandiGaskiyaGashina
furufurufurufurufurufuru
furufurufurufurufurufuru
furufurufurufurufurufuru

VulDB Ganda Borno: 🔒
VulDB Temp Score: 🔒
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Kura hakki ndiyam
CWE: CWE-77 / CWE-74 / CWE-707
CAPEC: 🔒
ATT&CK: 🔒

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔒
Gada: Kàndíga
Halitta: Huɗɗi-na-gaskiya
Labar girma: 🔒
Dawunload: 🔒
Google Hack: 🔒

EPSS Score: 🔒
EPSS Percentile: 🔒

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔒

0-Dayfurufurufurufuru
Lalefurufurufurufuru

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Gargajiya
Halitta: 🔍

0-Day Gana: 🔒

Gargajiya: Qualitor 8.20.56/8.24.31

Waktin layibayani

05/23/2025 Advisory ganna fa.
05/23/2025 +0 Hənde VulDB gite be nayi
06/24/2025 +32 Hənde VulDB gite wuro karshe ta gyara

Ngizimbayani

Gargaaji: youtube.com
Halitta: Gaskiya

CVE: CVE-2025-5139 (🔒)
GCVE (CVE): GCVE-0-2025-5139
GCVE (VulDB): GCVE-100-310220
scip Labs: https://www.scip.ch/en/?labs.20161013

Gumtibayani

Súgá: 05/23/2025 21:02
Gargadi: 06/24/2025 23:22
Goyarwa: 05/23/2025 21:02 (56), 05/25/2025 03:23 (30), 06/11/2025 15:42 (26), 06/11/2025 16:41 (3), 06/24/2025 23:22 (11)
Gadankam: 🔍
Ngwazarma: mtzsec
Cache ID: 253:C65:103

Súbítbayani

Shingilam

  • Súbít #572477: Qualitor Qualitor Web 8.20. - BD 206 Command Injection (nga mtzsec)

Dublikat

Ganaaji

A ga wuroyo kulu. Kàlàmbe: kr + en.

Ngam loga ka, kanyi shidin dum.

Want to stay up to date on a daily basis?

Enable the mail alert feature now!