PT-2025-51183 · Unknown · Inter-Plugin Api+1

Qiushui · Published 2025-12-15 · Updated 2025-12-15 · CVE-2025-14695

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SamuNatsu HaloBot (affected versions not specified)

Description A flaw exists in the html renderer function within the plugins/html renderer/index.js file of the Inter-plugin API component. Manipulation of the action argument can lead to dynamically-managed code resources, and the attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted but did not respond. This issue only affects unsupported products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-913

Related Identifiers

CVE-2025-14695

Affected Products

Inter-Plugin Api

Samunatsu Halobot

References · 8

• 🔥 https://github.com/rassec2/dbcve/issues/20 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-14695 · Security Note
• https://vuldb.com/?submit.705587 · Note
• https://t.me/CVEtracker/39791 · Telegram Post
• https://twitter.com/CVEnew/status/2000611239920275529 · Twitter Post
• https://vuldb.com/?ctiid.336413 · Note
• https://vuldb.com/?id.336413 · Note
• https://t.me/cveNotify/145732 · Telegram Post