CVE detail
CVE-2025-3967
A vulnerability was found in itwanger paicoding 1.0.3. It has been classified as critical. This affects an unknown part of the file /article/api/post of the component Article Handler. The manipulation of the argument articleId leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 17.9 · diversity 6.5 · KEV 0.0 · OTX 0.0 · PoC 4.5
Why it matters now
Mention timeline
- Total mentions
- 0
- within the 30d window
- Peak daily
- 0
- highest bucket
Evidence
Source links by recency
5 source links · newest first
- https://vuldb.com/?submit.557251vuldb.com
No excerpt available.
Exploitvuldb.comApr 27, 2025, 11:15 AM - https://vuldb.com/?id.306303vuldb.com
No excerpt available.
Exploitvuldb.comApr 27, 2025, 11:15 AM - https://vuldb.com/?ctiid.306303vuldb.com
No excerpt available.
Exploitvuldb.comApr 27, 2025, 11:15 AM No excerpt available.
Exploitgithub.comApr 27, 2025, 11:15 AMNo excerpt available.
Exploitgithub.comApr 27, 2025, 11:15 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
1 repository references · best confidence 0.90 · max 0 stars
- uglory-gll/javasecHigh confidencegithubNVD Exploit reference0 starsDiscovered Aug 4, 2026, 6:20 PM
NVD labels the source link as Exploit; this is not independent verification of the repository's code.
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2024-14045CVSS 2.1 · Low
A weakness has been identified in OpenBoxes up to 0.9.2. This vulnerability affects unknown code of the file grails-app/controllers/org/pih/warehouse/RoleInterceptor.groovy of the…
- CVE-2026-19986CVSS 2.1 · Low
A weakness has been identified in Adblock for Youtube Extension up to 7.2.1 on Chrome. The impacted element is the function updateDynamicRules of the file contentscript.js of the…
- CVE-2026-18998CVSS 2.1 · Low
A vulnerability was determined in cosmicstack-labs mercury-agent up to 1.1.12. Impacted is the function SubAgent.run of the file src/core/sub-agent.ts of the component delegate_ta…
- CVE-2026-18817CVSS 2.1 · Low
A security flaw has been discovered in Baserow up to 2.3.2. Affected by this issue is the function BaserowImpersonateAuthTokenSerializer of the file backend/src/baserow/api/admin/…
- CVE-2026-18723CVSS 2.1 · Low
A vulnerability was determined in diaowen DWSurvey up to 6.14.0. The affected element is an unknown function of the file /api/dwsurvey/app/survey/up-survey-status.do of the compon…
- CVE-2026-18720CVSS 5.5 · Medium
A flaw has been found in kalcaddle kodbox 1.67 Build 02. This vulnerability affects unknown code of the file /index.php?plugin/msgWarning/action of the component msgWarning Plugin…