Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-63499
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Alinto Sogo 5.12.3 is vulnerable to Cross Site Scripting (XSS) via the theme parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SOGo 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SOGo是Alinto开源的一个非常快速且可扩展的现代协作套件。它提供日历、地址簿管理和功能齐全的 Webmail 客户端以及资源共享和权限处理。 SOGo 5.12.3版本存在安全漏洞,该漏洞源于theme参数容易受到跨站脚本攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
-n/a n/a -
II. Public POCs for CVE-2025-63499
#POC DescriptionSource LinkShenlong Link
1PoC for CVE-2025-63499https://github.com/xryptoh/CVE-2025-63499POC Details
2 POC for CVE-2025-63499https://github.com/poblaguev-tot/CVE-2025-63499POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-63499
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2025-63499
Anonymous User
2026-04-16 21:22:48

Just had a cracking arvo session playing crash casino games and honestly reckon it's pure adrenaline when you actually know when to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone online</a> this time and was pretty happy. Funded my account with Visa and noticed they also take PayID which is good to know. The multiplier climb gets your heart pumping — you have to keep your cool while also know when to bail. Unlike Mines, Plinko which I've also punted on, crash gives you that live decision-making buzz. Solid site for locals — have a squiz at https://rootskitchen.bar

Anonymous User
2026-04-18 06:00:33

Just wrapped up a deadly arvo session punting on the crash format and honestly reckon nothing beats the rush when you work out the right time to cash out. Gave a crack <a href="https://rootskitchen.bar/">Vegazone casino</a> this time and was stoked. Funded my account with Visa and saw they also take Apple Pay which is good to know. The whole crash format is addictive as hell — you have to keep your cool while also know when to bail. Unlike Zeppelin, Goal which I've also punted on, this format gives you that real-time decision-making buzz. Ripper platform for Aussie players — worth a visit at https://rootskitchen.bar


Leave a comment