Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      Microsoft Graph CLI to be retired

      September 2, 2025

      The state of DevOps and AI: Not just hype

      September 1, 2025

      A Breeze Of Inspiration In September (2025 Wallpapers Edition)

      August 31, 2025

      10 Top Generative AI Development Companies for Enterprise Node.js Projects

      August 30, 2025

      Spec-driven development with AI: Get started with a new open source toolkit

      September 2, 2025

      Should the CSS light-dark() Function Support More Than Light and Dark Values?

      September 2, 2025

      A Behind-the-Scenes Look at the New Jitter Website

      September 2, 2025

      The Modern Job Hunt: Part 1

      September 2, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Enhanced Queue Job Control with Laravel’s ThrottlesExceptions failWhen() Method

      September 2, 2025
      Recent

      Enhanced Queue Job Control with Laravel’s ThrottlesExceptions failWhen() Method

      September 2, 2025

      August report 2025

      September 2, 2025

      Fake News Detection using Python Machine Learning (ML)

      September 1, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Lenovo Legion Go 2 confirmed with Ryzen Z2 Extreme, 1200p OLED 144Hz display & 74Wh battery

      September 2, 2025
      Recent

      Lenovo Legion Go 2 confirmed with Ryzen Z2 Extreme, 1200p OLED 144Hz display & 74Wh battery

      September 2, 2025

      How to Open Ports in Firewall on Windows Server

      September 2, 2025

      Google TV Remote Not Working? 5 Quick Fixes

      September 2, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-7625 – YiJiuSmile kkFileViewOfficeEdit Remote Path Traversal Vulnerability

    CVE-2025-7625 – YiJiuSmile kkFileViewOfficeEdit Remote Path Traversal Vulnerability

    July 14, 2025

    CVE ID : CVE-2025-7625

    Published : July 14, 2025, 5:15 p.m. | 1 hour, 34 minutes ago

    Description : A vulnerability, which was classified as critical, was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. Affected is the function Download of the file /download. The manipulation of the argument url leads to path traversal. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

    Severity: 4.3 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-7626 – YiJiuSmile kkFileViewOfficeEdit Path Traversal Vulnerability
    Next Article CVE-2025-51660 – SemCms SQL Injection

    Related Posts

    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-2414 – Akinsoft OctoCloud Authentication Bypass

    September 2, 2025
    Common Vulnerabilities and Exposures (CVEs)

    CVE-2025-46810 – Traefik2 openSUSE Tumbleweed Symlink Following Root Escalation

    September 2, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    Linux Firmware Service Calls on Hardware Makers to Help Fund It

    Linux

    These tech markets are taking the brunt of the new US tariffs – what that means for you

    News & Updates

    CVE-2025-3901 – Drupal Bootstrap Site Alert Cross-Site Scripting (XSS)

    Common Vulnerabilities and Exposures (CVEs)

    I like SteelSeries’ tiniest high performance gaming keyboard, but it’s not the only great magnetic option

    News & Updates

    Highlights

    CVE-2025-7219 – Campcodes Payroll Management System SQL Injection

    July 9, 2025

    CVE ID : CVE-2025-7219

    Published : July 9, 2025, 6:15 a.m. | 22 minutes ago

    Description : A vulnerability was found in Campcodes Payroll Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /ajax.php?action=delete_allowances. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

    Severity: 7.3 | HIGH

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Welcome to the Terraform Tutorial Series, Infra Coders!

    June 14, 2025

    FBI Warns of Scattered Spider’s Expanding Attacks on Airlines Using Social Engineering

    June 28, 2025

    CVE-2025-53308 – Gopi_plus Image Slider Stored XSS CSRF

    June 27, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.