Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-7618
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
A stored Cross-Site Scripting (XSS) vulnerability exists in the File Explorer and Text Editor of ADM
Source: NVD (National Vulnerability Database)
Vulnerability Description
A stored Cross-Site Scripting (XSS) vulnerability vulnerability was found in the File Explorer and Text Editor of ADM. An attacker could exploit this vulnerability to inject malicious scripts into the applications, which may then access cookies or other sensitive information retained by the browser and used with the affected applications. Affected products and versions include: from ADM 4.1.0 to ADM 4.3.3.RH61 as well as ADM 5.0.0.RIN1 and earlier, and Text Editor 1.0.0.r112 and earlier.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: NVD (National Vulnerability Database)
Vulnerability Title
ASUSTOR ADM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ASUSTOR ADM是中国华硕(ASUS)公司的一种所有 ASUSTOR NAS 设备的专用操作系统。 ASUSTOR ADM存在安全漏洞,该漏洞源于存储型跨站脚本攻击,可能导致访问敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
ASUSTORADM 4.1.0 ~ 4.3.3.RH61 -
ASUSTORADM 1.0.0 ~ 1.0.0.r112 -
II. Public POCs for CVE-2025-7618
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-7618
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2025-7618

No comments yet


Leave a comment