CVE-2025-13252

A vulnerability was found in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Affected by this issue is some unknown functionality of the component RSA/OAuth2/Database. The manipulation results in hard-coded credentials. The attack can be executed remotely. The exploit has been made public and could be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable.

• CWE-259
• CWE-798

• https://github.com/shsuishang/modulithshop/issues/2
• https://github.com/shsuishang/modulithshop/issues/2#issue-3580272472
• https://vuldb.com/?ctiid.332587
• https://vuldb.com/?id.332587
• https://vuldb.com/?submit.687685

Published

Nov 16, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-13247A security flaw has been discovered in PHPGurukul Tourism Ma…9.8
• CVE-2025-13248A weakness has been identified in SourceCodester Patients Wa…9.8
• CVE-2025-13249A security vulnerability has been detected in Jiusi OA up to…6.3
• CVE-2025-1325The WP-Recall – Registration, Profile, Commerce & More plugi…6.3
• CVE-2025-13250A vulnerability was detected in WeiYe-Jing datax-web up to 2…8.8
• CVE-2025-13251A flaw has been found in WeiYe-Jing datax-web up to 2.1.2. A…8.8
• CVE-2025-13253A vulnerability was determined in projectworlds Advanced Lib…8.8
• CVE-2025-13254A vulnerability was identified in projectworlds Advanced Lib…8.8
• CVE-2025-13255A security flaw has been discovered in projectworlds Advance…8.8
• CVE-2025-13256A weakness has been identified in projectworlds Advanced Lib…8.8
• CVE-2025-13257A security vulnerability has been detected in itsourcecode I…9.8
• CVE-2025-13258A vulnerability was detected in Tenda AC20 up to 16.03.08.12…8.8