CVE-2025-5180

A vulnerability, which was classified as critical, has been found in Wondershare Filmora 14.5.16. Affected by this issue is some unknown functionality in the library CRYPTBASE.dll of the file NFWCHK.exe of the component Installer. The manipulation leads to uncontrolled search path. Attacking locally is a requirement. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-426
• CWE-427
• CWE-427

• https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80Exploit
• https://vuldb.com/?ctiid.310268Permissions Required, VDB Entry
• https://vuldb.com/?id.310268Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.580226Third Party Advisory, VDB Entry
• https://gist.github.com/shellkraft/aa66561e984e83052bd080f195a3ec80Exploit

Published

May 26, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-51746An issue was discovered in jishenghua JSH_ERP 2.3.1. The /se…9.8
• CVE-2025-5175A vulnerability was found in erdogant pypickle up to 1.1.5. …5.5
• CVE-2025-5176A vulnerability was found in Realce Tecnologia Queue Ticket …9.1
• CVE-2025-5177A vulnerability was found in Realce Tecnologia Queue Ticket …4.7
• CVE-2025-5178A vulnerability classified as critical has been found in Rea…9.8
• CVE-2025-5179A vulnerability classified as problematic was found in Realc…3.4
• CVE-2025-5181A vulnerability, which was classified as problematic, was fo…4.1
• CVE-2025-51818MCCMS 2.7.0 is vulnerable to Arbitrary file deletion in the …5.4
• CVE-2025-5182A vulnerability has been found in Summer Pearl Group Vacatio…7.5
• CVE-2025-51823libcsp 2.0 is vulnerable to Buffer Overflow in the csp_eth_i…6.5
• CVE-2025-51824libcsp 2.0 is vulnerable to Buffer Overflow in the csp_usart…6.5
• CVE-2025-51825JeecgBoot versions from 3.4.3 up to 3.8.0 were found to cont…6.5