Threats Tagged 'cve-2025-14780'
View all threats tagged with 'cve-2025-14780'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2025-14780'
Click on any threat for detailed analysis and mitigation recommendations
CVE-2025-14780 is a medium-severity SQL injection vulnerability in Xiongwei Smart Catering Cloud Platform version 2.1.6446.28761. The flaw exists in an unspecified function within the /dishtrade/dish_trade_detail_get endpoint, where manipulation of the 'filter' parameter allows remote attackers to inject SQL commands. Exploitation requires no user interaction but does require low-level privileges. Although no public exploits are currently observed in the wild, the exploit code has been publicly disclosed, increasing the risk of attacks. The vulnerability can lead to partial compromise of confidentiality, integrity, and availability of the affected system. European organizations using this platform, especially in countries with significant adoption of Xiongwei products or large catering/cloud service sectors, could be impacted. Mitigation involves applying vendor patches once available, implementing strict input validation, and monitoring database queries for anomalies. Join the discussion | CVE Database V5 | 12/16/2025, 13:02:05 UTC Added: 12/16/2025, 13:24:40 UTC |
Showing 1 to 1 of 1 result