CVE-2025-15461

A flaw has been found in UTT 进取 520W 1.7.7-180627. This vulnerability affects the function strcpy of the file /goform/formTaskEdit. Executing a manipulation of the argument selDateType can lead to buffer overflow. The attack can be executed remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-119
• CWE-120

• https://github.com/cymiao1978/cve/blob/main/new/24.mdExploit, Third Party Advisory
• https://github.com/cymiao1978/cve/blob/main/new/24.md#pocExploit, Third Party Advisory
• https://vuldb.com/?ctiid.339497Permissions Required, VDB Entry
• https://vuldb.com/?id.339497Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.725818Third Party Advisory, VDB Entry
• https://github.com/cymiao1978/cve/blob/main/new/24.mdExploit, Third Party Advisory

Published

Jan 5, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-15456A vulnerability has been found in bg5sbk MiniCMS up to 1.8. …7.5
• CVE-2025-15457A vulnerability was found in bg5sbk MiniCMS up to 1.8. The i…9.8
• CVE-2025-15458A vulnerability was determined in bg5sbk MiniCMS up to 1.8. …9.8
• CVE-2025-15459A security vulnerability has been detected in UTT 进取 520W 1.…8.8
• CVE-2025-1546A vulnerability has been found in BDCOM Behavior Management …7.3
• CVE-2025-15460A vulnerability was detected in UTT 进取 520W 1.7.7-180627. Th…8.8
• CVE-2025-15462A vulnerability has been found in UTT 进取 520W 1.7.7-180627. …8.8
• CVE-2025-15463The The Advanced Custom Fields: Extended plugin for WordPres…6.5
• CVE-2025-15464Exported Activity allows external applications to gain appli…7.5
• CVE-2025-15466The Image Photo Gallery Final Tiles Grid plugin for WordPres…5.4
• CVE-2025-15467Issue summary: Parsing CMS AuthEnvelopedData or EnvelopedDat…8.8
• CVE-2025-15468Issue summary: If an application using the SSL_CIPHER_find()…5.9