6723 matches found
CVE-2025-53885 Directus doesn't redact sensitive user data when logging via event hooks
Directus is a real-time API and App dashboard for managing SQL database content. Starting in version 9.0.0 and prior to version 11.9.0, when using Directus Flows to handle CRUD events for users it is possible to log the incoming data to console using the "Log to Console" operation and a template...
CVE-2025-7029
creationtimestamp| type| source ---|---|--- 2025-07-14 13:12:10+00:00| seen| https://bsky.app/profile/brianhaddock.bsky.social/post/3ltwho4bzyf2a 2025-07-14 13:45:03+00:00| seen| https://t.me/truesecator/7227 2025-07-15 14:29:23+00:00| seen| https://t.me/SEReborn/5756 2025-07-16 17:11:09+00:00|...
CVE-2025-7605 code-projects AVL Rooms profile.php sql injection
A vulnerability was found in code-projects AVL Rooms 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /profile.php. The manipulation of the argument firstname leads to sql injection. The attack may be launched remotely. The exploit has been...
Important: Red Hat Security Advisory: kernel security update
An update for kernel is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2025-31267
creationtimestamp| type| source ---|---|--- 2025-07-14 03:33:56+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3ltvhe6fwhs2i...
Exploit for CVE-2025-52488
DNN Unicode Path Normalization NTLM Hash Disclosure Exploit C...
CVE-2025-6491
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. before 8.4.10 when parsing XML data in SOAP extensions, overly large 2Gb XML namespace prefix may lead to null pointer dereference. This may lead to crashes and affect the availability of the target server...
CVE-2025-52980
A Use of Incorrect Byte Ordering vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS on SRX300 Series allows an unauthenticated, network-based attacker to cause a Denial-of-Service DoS. When a BGP update is received over an established BGP session which contains a...
CVE-2025-6788
A CWE-668: Exposure of Resource to Wrong Sphere vulnerability exists that exposes TGML diagram resources to the wrong control sphere, providing other authenticated users with potentially inappropriate access to TGML diagrams...
CVE-2025-7523
A vulnerability was found in Jinher OA 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /c6/Jhsoft.Web.message/ToolBar/DelTemp.aspx. The manipulation leads to xml external entity reference. The attack may be launched remotely. The exploit has bee...
CVE-2025-7480 PHPGurukul Vehicle Parking Management System signup.php sql injection
A vulnerability was found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this issue is some unknown functionality of the file /users/signup.php. The manipulation of the argument email leads to sql injection. The attack may be launched remotely. The...
CVE-2025-7466
creationtimestamp| type| source ---|---|--- 2025-07-12 13:09:10+00:00| seen| https://bsky.app/profile/potato.software/post/3ltrgkwzz2m2b...
CVE-2025-02297
creationtimestamp| type| source ---|---|--- 2025-07-12 13:05:42+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3ltrgepbkdk2f...
CVE-2025-7474 code-projects Job Diary search.php sql injection
A vulnerability was found in code-projects Job Diary 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /search.php. The manipulation of the argument Search leads to sql injection. The attack may be launched remotely. The exploit has been disclose...
CVE-2025-7469 Campcodes Sales and Inventory System product_add.php sql injection
A vulnerability was found in Campcodes Sales and Inventory System 1.0 and classified as critical. This issue affects some unknown processing of the file /pages/productadd.php. The manipulation of the argument prodname leads to sql injection. The attack may be initiated remotely. The exploit has...
CVE-2025-7464
A vulnerability classified as problematic has been found in osrg GoBGP up to 3.37.0. Affected is the function SplitRTR of the file pkg/packet/rtr/rtr.go. The manipulation leads to out-of-bounds read. It is possible to launch the attack remotely. The complexity of an attack is rather high. The...
BELL-CVE-2025-38290
Bulletin has no description...
CVE-2025-28245
Cross-site scripting XSS vulnerability in Alteryx Server 2023.1.1.460 allows remote attackers to inject arbitrary web script or HTML via the notification body...