2025-11-29 Daily Vulns

NEW:

CVE	vendor-product	description	metric	Referenceurl	title	GithubURL
CVE-2019-25226	Dongyoung Media Tech Co., Ltd. - DM-AP240T/W Wireless Access Point	Dongyoung Media DM-AP240T/W wireless access points contain an unauthenticated configuration disclosure vulnerability in the /cgi-bin/sys_system_config management endpoint. The endpoint allows remote retrieval of a compressed configuration archive without requiring authentication or authorization. The exposed configuration may include administrative credentials and other sensitive settings, enabling an unauthenticated attacker to obtain information that can facilitate further compromise of the device or network.	CVSS4.0: 8.7 - HIGH	0 1 2 3	Exploitation: pocAutomatable: yesTechnical Impact: partial	Dongyoung Media DM-AP240T/W Unauthenticated Configuration Disclosure	github
CVE-2022-50589	SuiteCRM - SuiteCRM	SuiteCRM versions prior to 7.12.6 contain a SQL injection vulnerability within the processing of the ‘uid’ parameter within the ‘export’ functionality. Successful exploitation allows remote unauthenticated attackers to ultimately execute arbitrary code.	CVSS4.0: 9.3 - CRITICAL	0 1 2	Exploitation: noneAutomatable: yesTechnical Impact: total	SuiteCRM < 7.12.6 SQL Injection via ‘export’ Functionality	github