23691 matches found
CVE-2025-5534
The ESV Bible Shortcode for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'esv' shortcode in all versions up to, and including, 1.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
CVE-2025-5729 code-projects Health Center Patient Record Management System birthing_record.php sql injection
A vulnerability, which was classified as critical, was found in code-projects Health Center Patient Record Management System 1.0. Affected is an unknown function of the file /birthingrecord.php. The manipulation of the argument itrno leads to sql injection. It is possible to launch the attack...
CVE-2025-48911
Vulnerability of improper permission assignment in the note sharing module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-58114
Resource allocation control failure vulnerability in the ArkUI framework Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-48906
Authentication bypass vulnerability in the DSoftBus module Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2024-22330
creationtimestamp| type| source ---|---|--- 2025-06-06 05:44:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw4wyw6uv2e...
CVE-2025-20994
Improper handling of insufficient permission in SyncClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to access read and write arbitrary files...
CVE-2025-20995
Improper handling of insufficient permission in ClientProvider in Samsung Internet installed on non-Samsung Device prior to version 28.0.0.59 allows local attackers to read and write arbitrary files...
CVE-2025-20985
Improper privilege management in ThemeManager prior to SMR Jun-2025 Release 1 allows local privileged attackers to reuse trial items...
CVE-2024-31127
An improper verification of a loaded library in Zscaler Client Connector on Mac 4.2.0.241 may allow a local attacker to elevate their privileges...
CVE-2024-46941
creationtimestamp| type| source ---|---|--- 2025-06-06 04:51:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvzy77nut2m...
CVE-2025-5716
creationtimestamp| type| source ---|---|--- 2025-06-06 04:30:17+00:00| published-proof-of-concept| Telegram/7LZU3MoESZOhnwjb3GUEt-MqDm54x27PQetv68QnuBE0-rM 2025-06-06 05:15:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw3cky4rx2m...
CVE-2025-5733
CVE-2025-5733 affects the Modern Events Calendar Lite plugin for WordPress. The issue is a Full Path Disclosure caused by improper validation of the id parameter during calendar export, enabling unauthenticated attackers to retrieve the web application’s full filesystem path. The disclosure is an...
CVE-2025-5715
CVE-2025-5715 concerns Signal App 7.41.4 on Android with a vulnerability in the Biometric Authentication Handler causing a missing critical authentication step. The issue affects the authentication flow in the Biometric Authentication Handler component and can be exploited by attacking the physic...
CVE-2025-5749
creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-328/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:52+00:00| seen|...
CVE-2025-5750
creationtimestamp| type| source ---|---|--- 2025-06-06 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-329/ 2025-06-06 17:07:50+00:00| seen| https://bsky.app/profile/basefortify.bsky.social/post/3lqxd4fmsis2l 2025-06-06 17:07:51+00:00| seen|...
CVE-2025-5704
creationtimestamp| type| source ---|---|--- 2025-06-06 02:58:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqvtn6rlpy2k...
CVE-2025-5709
creationtimestamp| type| source ---|---|--- 2025-06-06 02:30:48+00:00| published-proof-of-concept| Telegram/4q60nwpdjXRbesVJTGfPfPMfHJR0gUJAChumjZiNahiH7yk 2025-06-06 05:19:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqw3kal2zi25...
CVE-2025-5553
A vulnerability classified as critical was found in PHPGurukul Rail Pass Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /download-pass.php. The manipulation of the argument searchdata leads to sql injection. The attack can be launched remotely. The...