CVE-2023-7025

A vulnerability was found in KylinSoft hedron-domain-hook up to 3.8.0.12-0k0.5. It has been declared as critical. This vulnerability affects the function init_kcm of the component DBus Handler. The manipulation leads to improper access controls. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. VDB-248578 is the identifier assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-284

• https://note.zhaoj.in/share/B05NqMPvEqoUBroken Link
• https://vuldb.com/?ctiid.248578Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248578Third Party Advisory
• https://note.zhaoj.in/share/B05NqMPvEqoUBroken Link
• https://vuldb.com/?ctiid.248578Permissions Required, Third Party Advisory
• https://vuldb.com/?id.248578Third Party Advisory

Published

Dec 21, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7019The LightStart – Maintenance Mode, Coming Soon and Landing P…4.3
• CVE-2023-7020A vulnerability was found in Tongda OA 2017 up to 11.9 and c…9.8
• CVE-2023-7021A vulnerability was found in Tongda OA 2017 up to 11.9. It h…9.8
• CVE-2023-7022A vulnerability was found in Tongda OA 2017 up to 11.9. It h…9.8
• CVE-2023-7023A vulnerability was found in Tongda OA 2017 up to 11.9. It h…9.8
• CVE-2023-7024Heap buffer overflow in WebRTC in Google Chrome prior to 120…8.8
• CVE-2023-7026A vulnerability was found in Lightxun IPTV Gateway up to 202…6.5
• CVE-2023-7027The POST SMTP Mailer – Email log, Delivery Failure Notificat…5.4
• CVE-2023-7028An issue has been discovered in GitLab CE/EE affecting all v…9.8
• CVE-2023-7029The WordPress Button Plugin MaxButtons plugin for WordPress …5.4
• CVE-2023-7030The Collapse-O-Matic plugin for WordPress is vulnerable to S…6.4
• CVE-2023-7031Insecure Direct Object Reference vulnerabilities were discov…4.3