PT-2026-105118

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

DEBIAN-CVE-2026-91769

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

AZL-104907 CVE-2026-91769 affecting package php 8.3.33-1

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

CVE-2026-91769

PHP's OpenSSL stream peer verification checks the certificate's subjectAltName entries first and, whenever no entry matches, falls back to the Common Name. RFC 6125 requires the CN to be ignored once the certificate presents any service identity, so a certificate carrying a non-matching DNS SAN w...

CVE-2015-6125

creationtimestamp| type| source ---|---|--- 2026-07-29 12:01:20+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-07-30 00:01:52+00:00| seen| Telegram/7S6GTcGTrOkazNYM6aCjvvQCh58ZZ0xQJO4nXoU5wy4UXQ 2026-08-01 11:00:10+00:00| seen|...

CVE-2026-6125 Dromara warm-flow Workflow Definition save-json SpelHelper.parseExpression code injection

A security flaw has been discovered in Dromara warm-flow up to 1.8.4. Impacted is the function SpelHelper.parseExpression of the file /warm-flow/save-json of the component Workflow Definition Handler. The manipulation of the argument listenerPath/skipCondition/permissionFlag results in code...

EUVD-2017-2972

Malware in sbrugna...

EUVD-2018-20727

Malware in sbrugna...

Linux Distros Unpatched Vulnerability : CVE-2018-6125

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Insufficient policy enforcement in USB in Google Chrome on Windows prior to 67.0.3396.62 allowed a remote attacker to obtain potentially sensitive information v...

CVE-2025-6125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18457 2025-06-16 15:38:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqcrk6kjp25...

CVE-2025-6125 PHPGurukul Rail Pass Management System aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2025-6125

CVE-2025-6125 affects PHPGurukul Rail Pass Management System 1.0. Affected is an unknown function in /admin/aboutus.php where manipulating the pagedes parameter leads to cross-site scripting. Exploitation can be remote, and the exploit has been disclosed publicly. Several connected sources corrob...

CVE-2025-6125 PHPGurukul Rail Pass Management System aboutus.php cross site scripting

A vulnerability was found in PHPGurukul Rail Pass Management System 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/aboutus.php. The manipulation of the argument pagedes leads to cross site scripting. It is possible to launch the attack remotely. The...

CVE-2024-6125 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism

The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for...

CVE-2024-6125 Login with phone number <= 1.7.34 - Insecure Password Reset Mechanism

The Login with phone number plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.7.34. This is due to the plugin generating too weak a reset code, and the code used to reset the password has no attempt or time limit. This makes it possible for...

WordPress Login with phone number Plugin <= 1.7.34 is vulnerable to Broken Access Control

Software Login with phone number Type Plugin Vulnerable versions = 1.7.34 Fixed in 1.7.35 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2024-6125 Patch priority Low CVSS severity Low 8.1 Developer Hamid Alinia PSID b1915aa020d8 Credits István Márton Required...

CVE-2023-6125 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6125 Code Injection in salesagility/suitecrm

Code Injection in GitHub repository salesagility/suitecrm prior to 7.14.2, 7.12.14, 8.4.2...

CVE-2023-6125

SuiteCRM CVE-2023-6125 is a Code Injection vulnerability in the salesagility/suitecrm project, affecting versions prior to 7.14.2, 7.12.14, and 8.4.2. The NVD entry rates it HIGH (8.8 CVSSv3.1) with network attack vector, low attack complexity, and no user interaction, indicating potential remote...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 : snapd vulnerability (USN-6125-1)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6125-1 advisory. It was discovered that the snap sandbox did not restrict the use of the ioctl system call with a TIOCLINUX request. Th...