23595 matches found
CVE-2025-5715
CVE-2025-5715 concerns Signal App 7.41.4 on Android with a vulnerability in the Biometric Authentication Handler causing a missing critical authentication step. The issue affects the authentication flow in the Biometric Authentication Handler component and can be exploited by attacking the physic...
CVE-2025-5750
creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-329/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:51+00:00| seen|...
CVE-2025-5749
creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-328/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...
CVE-2025-5704
creationtimestamp| type| source ---|---|--- 2025-06-06 02:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvtn6rlpy2k...
CVE-2025-5709
creationtimestamp| type| source ---|---|--- 2025-06-06 02:30:48+00:00| published-proof-of-concept| Telegram/4q60nwpdjXRbesVJTGfPfPMfHJR0gUJAChumjZiNahiH7yk 2025-06-06 05:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw3kal2zi25...
CVE-2025-5553
A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...
CVE-2024-56343
IBM Verify Identity Access Digital Credentials 24.06 could allow an authenticated user to crash the service with a specially crafted POST request...
CVE-2025-5696
creationtimestamp| type| source ---|---|--- 2025-06-06 01:12:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnpyx24w2m...
CVE-2025-29094
Cross Site Scripting vulnerability in Motivian Content Mangment System v.41.0.0 allows a remote attacker to execute arbitrary code via the Marketing/Forms, Marketing/Offers and Content/Pages components...
CVE-2025-10234
creationtimestamp| type| source ---|---|--- 2025-06-06 00:55:27+00:00| seen| https://gist.github.com/zhenthebuilder/4a770766e6f7fb5bfae78e65f213ea75 2025-06-06 23:03:52+00:00| seen| https://gist.github.com/zhenthebuilder/97cf412d778693f512dd6d4fe812f0a3 2025-06-06 23:11:11+00:00| seen|...
CVE-2025-38002
In the Linux kernel, the following vulnerability has been resolved: iouring/fdinfo: grab ctx-uringlock around iouringshowfdinfo Not everything requires locking in there, which is why the 'haslock' variable exists. But enough does that it's a bit unwieldy to manage. Wrap the whole thing in a...
CVE-2025-5698 Brilliance Golden Link Secondary System logSelect.htm sql injection
A vulnerability, which was classified as critical, was found in Brilliance Golden Link Secondary System up to 20250424. Affected is an unknown function of the file /sysframework/logSelect.htm. The manipulation of the argument nodename leads to sql injection. It is possible to launch the attack...
CVE-2025-5677
creationtimestamp| type| source ---|---|--- 2025-06-05 20:30:44+00:00| published-proof-of-concept| Telegram/RAuR4LLNmn1CnkWaHAzYQYeG8hMJgMyoggU9ALosiP524 2025-06-06 01:17:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvnzi3vek2r...
WordPress Knowledge Base plugin <= 2.3.0 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability
Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by muhammad yudha in WordPress Plugin Knowledge Base versions = 2.3.0...
CVE-2025-5745
The strncmp implementation optimized for the Power10 processor in the GNU C Library version 2.40 and later writes to vector registers v20 to v31 without saving contents from the caller those registers are defined as non-volatile registers by the powerpc64le ABI, resulting in overwriting of its...
CVE-2025-5675 Campcodes Online Teacher Record Management System bwdates-reports-details.php sql injection
A vulnerability was found in Campcodes Online Teacher Record Management System 1.0. It has been classified as critical. This affects an unknown part of the file /trms/admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...
CVE-2025-5667
creationtimestamp| type| source ---|---|--- 2025-06-05 17:00:36+00:00| published-proof-of-concept| Telegram/A9f37ZcuYx5jNdnKSVUqaR4RdNGeXXyhi5wZBDKeQiFw1DU 2025-06-05 18:59:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lquyupk7fg2e 2025-06-13 19:34:59+00:00|...
CVE-2025-48493
The vulnerability CVE-2025-48493 affects the Yii 2 Redis extension (yii2-redis) used with Yii Framework 2.0. Prior to version 2.0.20, AUTH credentials are logged in plain text when a connection fails, exposing usernames and passwords to anyone with access to the logs. The issue is mitigated by up...
CVE-2025-5668 PHPGurukul Medical Card Generation System readenq.php sql injection
A vulnerability classified as critical has been found in PHPGurukul Medical Card Generation System 1.0. This affects an unknown part of the file /admin/readenq.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...