Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2025-63721

EPSS 0.08% · P23
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2025-63721

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
HummerRisk thru v1.5.0 is using a vulnerable Snakeyaml component, allowing attackers with normal user privileges to hit the /rule/add API and thereby achieve RCE and take over the server.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
HummerCloud HummerRisk 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
HummerCloud HummerRisk是中国瀚马科技（HummerCloud）公司的一个开源的云原生安全平台，以非侵入的方式解决云原生环境的安全和治理问题，核心能力包括混合云的安全治理和云原生安全检测。 HummerCloud HummerRisk v1.5.0及之前版本存在安全漏洞，该漏洞源于使用存在漏洞的Snakeyaml组件，可能导致远程代码执行和服务器接管。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2025-63721

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-63721

请登录查看更多情报信息。

Same Patch Batch · n/a · 2025-12-08 · 21 CVEs total

CVE-2025-142457.3 HIGHIdeaCMS Coupon.php whereRaw sql injection
CVE-2025-142442.4 LOWGreenCMS Menu Management CustomController.class.php cross site scripting
CVE-2025-64081SourceCodester Patients Waiting Area Queue Management System SQL注入漏洞
CVE-2025-65228R.V.R. Elettronica TLK302T 安全漏洞
CVE-2025-65229Lyrion Music Server 安全漏洞
CVE-2025-65230Barix Instreamer 安全漏洞
CVE-2025-65231Barix Instreamer 安全漏洞
CVE-2025-65849ALTCHA 安全漏洞
CVE-2025-65548Cashu NUTs 安全漏洞
CVE-2025-65271Azuriom 安全漏洞
CVE-2025-60912phpIPAM 安全漏洞
CVE-2025-65804Tenda Ax3 安全漏洞
CVE-2025-59391libcoap 安全漏洞
CVE-2025-65363Ruijie AP_RGOS 安全漏洞
CVE-2025-65799Memos 安全漏洞
CVE-2025-65797Memos 安全漏洞
CVE-2025-65795Memos 安全漏洞
CVE-2025-65796Memos 安全漏洞
CVE-2025-65798Memos 安全漏洞
CVE-2025-61318Emlog Pro 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-63721

No comments yet

Leave a comment