Close Menu
    DevStackTipsDevStackTips
    • Home
    • News & Updates
      1. Tech & Work
      2. View All

      10 Top Generative AI Development Companies for Enterprise Node.js Projects

      August 30, 2025

      Prompting Is A Design Act: How To Brief, Guide And Iterate With AI

      August 29, 2025

      Best React.js Development Services in 2025: Features, Benefits & What to Look For

      August 29, 2025

      August 2025: AI updates from the past month

      August 29, 2025

      This 3-in-1 charger has a retractable superpower that’s a must for travel

      August 31, 2025

      How a legacy hardware company reinvented itself in the AI age

      August 31, 2025

      The 13+ best Walmart Labor Day deals 2025: Sales on Apple, Samsung, LG, and more

      August 31, 2025

      You can save up to $700 on my favorite Bluetti power stations for Labor Day

      August 31, 2025
    • Development
      1. Algorithms & Data Structures
      2. Artificial Intelligence
      3. Back-End Development
      4. Databases
      5. Front-End Development
      6. Libraries & Frameworks
      7. Machine Learning
      8. Security
      9. Software Engineering
      10. Tools & IDEs
      11. Web Design
      12. Web Development
      13. Web Security
      14. Programming Languages
        • PHP
        • JavaScript
      Featured

      Call for Speakers – JS Conf Armenia 2025

      August 30, 2025
      Recent

      Call for Speakers – JS Conf Armenia 2025

      August 30, 2025

      Streamlining Application Automation with Laravel’s Task Scheduler

      August 30, 2025

      A Fluent Path Builder for PHP and Laravel

      August 30, 2025
    • Operating Systems
      1. Windows
      2. Linux
      3. macOS
      Featured

      Windows 11 KB5064081 24H2 adds taskbar clock, direct download links for .msu offline installer

      August 30, 2025
      Recent

      Windows 11 KB5064081 24H2 adds taskbar clock, direct download links for .msu offline installer

      August 30, 2025

      My Family Cinema not Working? 12 Quick Fixes

      August 30, 2025

      Super-linter – collection of linters and code analyzers

      August 30, 2025
    • Learning Resources
      • Books
      • Cheatsheets
      • Tutorials & Guides
    Home»Security»Common Vulnerabilities and Exposures (CVEs)»CVE-2025-7628 – YiJiuSmile kkFileViewOfficeEdit Path Traversal Vulnerability

    CVE-2025-7628 – YiJiuSmile kkFileViewOfficeEdit Path Traversal Vulnerability

    July 14, 2025

    CVE ID : CVE-2025-7628

    Published : July 14, 2025, 6:15 p.m. | 34 minutes ago

    Description : A vulnerability was found in YiJiuSmile kkFileViewOfficeEdit up to 5fbc57c48e8fe6c1b91e0e7995e2d59615f37abd. It has been classified as critical. This affects the function deleteFile of the file /deleteFile. The manipulation of the argument fileName leads to path traversal. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available.

    Severity: 5.4 | MEDIUM

    Visit the link for more details, such as CVSS details, affected products, timeline, and more…

    Source: Read More

    Facebook Twitter Reddit Email Copy Link
    Previous ArticleCVE-2025-7627 – YiJiuSmile kkFileViewOfficeEdit Unrestricted File Upload Vulnerability
    Next Article CVE-2025-53014 – ImageMagick Heap Buffer Overflow Vulnerability

    Related Posts

    Development

    WhatsApp Issues Emergency Update for Zero-Click Exploit Targeting iOS and macOS Devices

    August 31, 2025
    Development

    Attackers Abuse Velociraptor Forensic Tool to Deploy Visual Studio Code for C2 Tunneling

    August 31, 2025
    Leave A Reply Cancel Reply

    For security, use of Google's reCAPTCHA service is required which is subject to the Google Privacy Policy and Terms of Use.

    Continue Reading

    CVE-2025-43577 – Adobe Acrobat Reader Use After Free Vulnerability

    Common Vulnerabilities and Exposures (CVEs)

    “They’re just hiding the critical information” — Google’s latest AI efficiency claims spark backlash over hidden environmental costs

    News & Updates

    The Ultimate Guide to Vibe Coding: Benefits, Tools, and Future Trends

    Machine Learning

    CodeSOD: Classic WTF: When it’s OK to GOTO

    News & Updates

    Highlights

    Development

    Acquia Source: What it is, and why you should be learning to use it

    August 5, 2025

    Meet Acquia Source Acquia Source powered by Drupal is Acquia’s SaaS solution to streamline building,…

    Beyond Basics: Unlocking the Power of Advanced Bash Scripting

    May 15, 2025

    CVE-2025-1417 – Proget MDM Information Disclosure Vulnerability

    May 21, 2025

    Don’t panic, but it’s only a matter of time before critical ‘CitrixBleed 2’ is under attack

    June 24, 2025
    © DevStackTips 2025. All rights reserved.
    • Contact
    • Privacy Policy

    Type above and press Enter to search. Press Esc to cancel.