CVE-2025-15090

A vulnerability was found in UTT 进取 512W up to 1.7.7-171114. This vulnerability affects the function strcpy of the file /goform/formConfigNoticeConfig. The manipulation of the argument timestart results in buffer overflow. The attack may be performed from remote. The exploit has been made public and could be used.

• CWE-119
• CWE-120
• CWE-120

• https://github.com/cymiao1978/cve/blob/main/new/15.mdExploit, Third Party Advisory
• https://github.com/cymiao1978/cve/blob/main/new/15.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.338419Permissions Required, VDB Entry
• https://vuldb.com/?id.338419Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.708349Third Party Advisory, VDB Entry

Published

Dec 25, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15085A security flaw has been discovered in youlaitech youlai-mal…8.1
• CVE-2025-15086A weakness has been identified in youlaitech youlai-mall 1.0…4.3
• CVE-2025-15087A security vulnerability has been detected in youlaitech you…4.3
• CVE-2025-15088A vulnerability was detected in ketr JEPaaS up to 7.2.8. Aff…6.3
• CVE-2025-15089A vulnerability has been found in UTT 进取 512W up to 1.7.7-17…9.8
• CVE-2025-1509The The Show Me The Cookies plugin for WordPress is vulnerab…9.8
• CVE-2025-15091A vulnerability was determined in UTT 进取 512W up to 1.7.7-17…9.8
• CVE-2025-15092A vulnerability was identified in UTT 进取 512W up to 1.7.7-17…9.8
• CVE-2025-15093A security flaw has been discovered in sunkaifei FlyCMS up t…6.1
• CVE-2025-15094A weakness has been identified in sunkaifei FlyCMS up to abb…6.1
• CVE-2025-15095A security vulnerability has been detected in postmanlabs ht…3.5
• CVE-2025-15096The 'Videospirecore Theme Plugin' plugin for WordPress is vu…8.8