CVE-2025-69600
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-69600
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Command injection in Raynet rvia 12.6.4392.49-amd64.deb allows adversaries to execute commands via getconfig, and upload through the URL argument, and oracle through the -o flag The Supplier's perspective is that this is caused by Argument Injection in the find command query in rvia 12.6.4392.49. This in an arbitrary code execution flaw caused by an incorrectly constructed find command. The application actively searches for a Java executable by using search criteria that is not properly terminated or sanitized. By constructing a crafted directory path that satisfies the malformed search criteria, an attacker can trick the application into executing arbitrary Java code. This differs from standard PATH manipulation because it stems from the application's internal search logic. Specifically, a local attacker can create a crafted directory structure and path that satisfies an improperly terminated find query used by the application to locate a Java runtime.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2025-69600
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | None | https://github.com/Wise-Security/CVE-2025-69600 | POC Details |
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-69600
请登录查看更多情报信息。
Other References for CVE-2025-69600 (1)
Same Patch Batch · n/a · 2026-05-27 · 28 CVEs total
| CVE-2026-36044 | 8.8 HIGH | @pensar/apex<=0.0.58 OS命令注入 |
| CVE-2026-4390 | 5.4 MEDIUM | TeamSpeak 3 Server Connection State Management process_resend_queue use after free |
| CVE-2026-4391 | 5.3 MEDIUM | TeamSpeak 3 Server ECC Key heap-based overflow |
| CVE-2026-4392 | 5.3 MEDIUM | TeamSpeak 3 Server clientek Handshake assertion |
| CVE-2026-33552 | Mender Enterprise Server <4.1.1 访问控制错误漏洞 | |
| CVE-2026-49009 | Mender Server路径遍历漏洞 | |
| CVE-2025-67903 | Mender Client 5<5.0.4 存在密码学签名验证绕过漏洞 | |
| CVE-2026-38808 | uzy-ssm-mall v1.1.0 SQL注入漏洞 | |
| CVE-2026-38807 | kvf-admin v1.0.0 不安全权限提升漏洞 | |
| CVE-2025-70116 | GPAC MP4Box NULL指针解引用导致崩溃 | |
| CVE-2025-68712 | AppLock 7.9.40绕过认证漏洞 | |
| CVE-2026-38930 | OpenRapid RapidCMS v1.3.1 认证绕过漏洞 | |
| CVE-2026-38931 | SimplePHP存储型XSS漏洞 | |
| CVE-2026-38945 | Raynet rvia 12.6.4392.49 命令注入漏洞 | |
| CVE-2025-70103 | libjxl 0.12.0 PBM解析堆溢出漏洞 | |
| CVE-2026-30498 | AdminPanel 4.0 CSRF漏洞 | |
| CVE-2026-31266 | Craft CMS<5.9.5 迁移接口权限缺失漏洞 | |
| CVE-2026-37711 | Dolibarr远程代码执行漏洞 | |
| CVE-2026-37712 | Dolibarr ERP/CRM远程代码执行漏洞 | |
| CVE-2026-37713 | Dolibarr ERP/CRM 22.x-24.0-alpha 远程代码执行漏洞 |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2025-69600
No comments yet