Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2025-63499

EPSS 0.01% · P1
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-63499

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SOGo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SOGo是Alinto开源的一个非常快速且可扩展的现代协作套件。它提供日历、地址簿管理和功能齐全的 Webmail 客户端以及资源共享和权限处理。 SOGo 5.12.3版本存在安全漏洞,该漏洞源于theme参数容易受到跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2025-63499

#POC DescriptionSource LinkShenlong Link
1PoC for CVE-2025-63499https://github.com/xryptoh/CVE-2025-63499POC Details
2 POC for CVE-2025-63499https://github.com/poblaguev-tot/CVE-2025-63499POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-63499

登录查看更多情报信息。

Same Patch Batch · n/a · 2025-12-04 · 32 CVEs total

CVE-2025-140124.7 MEDIUMJIZHICMS Batch Delete Comments deleteAll.html delete sql injection
CVE-2025-140114.7 MEDIUMJIZHICMS Add Display Name Field addcomment.html commentlist sql injection
CVE-2025-140132.4 LOWJIZHICMS Comment addcomment.html cross site scripting
CVE-2025-63364Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞
CVE-2025-65899Kalmia 安全漏洞
CVE-2025-66373Akamai Ghost 安全漏洞
CVE-2025-63363Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞
CVE-2025-63361Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞
CVE-2025-63362Waveshare RS232/485 TO WIFI ETH (B) 安全漏洞
CVE-2025-65637Logrus 安全漏洞
CVE-2025-65806e-point CMS 安全漏洞
CVE-2025-29268ALLNET ALL-RUT22GW v3.3.8 安全漏洞
CVE-2025-29269ALLNET ALL-RUT22GW 安全漏洞
CVE-2025-65883Genexis Platinum P4410 安全漏洞
CVE-2025-63896JXL 9 Inch Car Android Double Din Player 安全漏洞
CVE-2025-55948X-SpringBoot 安全漏洞
CVE-2025-65900Kalmia 安全漏洞
CVE-2025-65516Seafile Community Edition 安全漏洞
CVE-2025-61148EduplusCampus 安全漏洞
CVE-2025-57210Weitong Mall 安全漏洞

Showing top 20 of 32 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2025-63499

Anonymous User
2026-04-16 21:22:48

Just had a cracking arvo session playing crash casino games and honestly reckon it's pure adrenaline when you actually know when to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone online</a> this time and was pretty happy. Funded my account with Visa and noticed they also take PayID which is good to know. The multiplier climb gets your heart pumping — you have to keep your cool while also know when to bail. Unlike Mines, Plinko which I've also punted on, crash gives you that live decision-making buzz. Solid site for locals — have a squiz at https://rootskitchen.bar

Anonymous User
2026-04-18 06:00:33

Just wrapped up a deadly arvo session punting on the crash format and honestly reckon nothing beats the rush when you work out the right time to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone casino</a> this time and was stoked. Funded my account with Visa and saw they also take Apple Pay which is good to know. The whole crash format is addictive as hell — you have to keep your cool while also know when to bail. Unlike Zeppelin, Goal which I've also punted on, this format gives you that real-time decision-making buzz. Ripper platform for Aussie players — worth a visit at https://rootskitchen.bar


Leave a comment