Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2025-29419

Quick assessment

Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

CTFd 3.7.6 版本被发现有中间人攻击（Man-in-the-Middle Attack）漏洞。

AI Predicted 7.0 Difficulty: Moderate

Affected Version Matrix 1

VendorProduct Version RangeStatus
n/a n/a n/a affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-29419

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
CTFd v3.7.6 was discovered to be vulnerable to a man-in-the-middle attack.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2025-29419

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-29419

请登录查看更多情报信息。

Proof of Concept for CVE-2025-29419 (1)

Security Blog Posts for CVE-2025-29419 (1)

Vendor Pages for CVE-2025-29419 (1)

Same Patch Batch · n/a · 2026-08-26 · 39 CVEs total

CVE-2026-75415 AntFlow V2.0.0 访问控制缺陷
CVE-2026-26449 Stomper缺失目的头致空指针引用
CVE-2026-26446 Stomp 5e2741e 拒绝服务漏洞
CVE-2026-26447 Stomp 5e2741e 堆释放后使用导致崩溃
CVE-2026-26448 Stomper 5e2741e 堆栈释放后使用漏洞
CVE-2026-75414 AntFlow 2.0.0 JUEL表达式未过滤导致命令执行
CVE-2026-75363 Comfast CF-WR630AX 远程代码执行漏洞
CVE-2026-75411 JeecgBoot 3.9.2 远程命令执行漏洞
CVE-2026-75364 Comfast CF-N1-S 2.6.0.1 webmgnt命令注入漏洞
CVE-2026-75413 DocSys V2.02.80任意文件下载漏洞
CVE-2026-26445 Stomper 5e2741e 拒绝服务漏洞
CVE-2026-52473 Wgcloud 3.6.4远程命令执行漏洞
CVE-2026-52103 SimpleX Chat 6.5前Terminal远程代码执行漏洞
CVE-2026-39275 Cockpit CMS v2.13.5前XSS漏洞
CVE-2025-51679 openRISC OR1200 83ac6b RTL与网表不一致
CVE-2025-51675 openRISC OR1200 DoS：PC更新不准确
CVE-2025-61479 SACRE SPC5300.000 v3.14.1 SPC Connect Pro DoS漏洞
CVE-2025-61478 Acre SPC5300.000 v3.14.1 SYN报文致拒绝服务
CVE-2025-61480 Vanderbilt SPC5300 v3.14.1 远程DoS漏洞
CVE-2025-61164 Cohere North AI v1.1.5 WebSocket信息泄露

Showing top 20 of 39 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2025-29419

No comments yet

Leave a comment