CVE-2025-6767 sfturing hosp_order DoctorServiceImpl.java findDoctorByCondition sql injection

A vulnerability was found in sfturing hosporder up to 627f426331da8086ce8fff2017d65b1ddef384f8. It has been rated as critical. This issue affects the function findDoctorByCondition of the file DoctorServiceImpl.java. The manipulation of the argument hospitalName leads to sql injection. The attack...

CVE-2025-32298

Improper Control of Filename for Include/Require Statement in PHP Program 'PHP Remote File Inclusion' vulnerability in Case-Themes CTUsers ctuser allows PHP Local File Inclusion.This issue affects CTUsers: from n/a through = 1.0.0...

CVE-2025-49883

CVE-2025-49883 affects Greenmart WordPress Theme (versions

CVE-2025-4587

creationtimestamp| type| source ---|---|--- 2025-06-27 07:52:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19678 2025-06-27 10:37:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslh3q6opg2o...

CVE-2025-5940

creationtimestamp| type| source ---|---|--- 2025-06-27 07:52:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19676 2025-06-27 11:16:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsljc7w7my2a...

CVE-2025-5194 WP Map Block by aBlocks < 2.0.3 - Contributor+ Stored XSS via Marker

The WP Map Block WordPress plugin before 2.0.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...

CVE-2025-5093

The CVE-2025-5093 entry concerns the WordPress plugin Responsive Lightbox & Gallery (versions prior to 2.5.2). The root cause is Swipebox failing to validate/escape title attributes before output, enabling Stored XSS in pages/posts where content is rendered. Impact is defined as Stored Cross-Site...

CVE-2025-6800

creationtimestamp| type| source ---|---|--- 2025-06-27 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-459/...

CVE-2025-6731

creationtimestamp| type| source ---|---|--- 2025-06-27 01:02:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskgx5d67e2i...

CVE-2025-45729

The CVE-2025-45729 entry affects D-Link DIR-823-Pro hardware (version 1.02) and is caused by improper permission control that allows unauthorized users to turn on and access Telnet services. The documented impact is low for confidentiality, integrity, and availability, with network access as the ...

CVE-2025-46415

A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b...

CVE-2025-46415

A race condition in the Nix, Lix, and Guix package managers allows the removal of content from arbitrary folders. This affects Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; and Guix before 1.4.0-38.0e79d5b...

CVE-2025-46415

CVE-2025-46415 involves a race condition in the Nix, Lix, and Guix package managers that can lead to removal of content from arbitrary folders. The connected documents specify affected versions: Nix before 2.24.15, 2.26.4, 2.28.4, and 2.29.1; Lix before 2.91.2, 2.92.2, and 2.93.1; Guix before 1.4...

CVE-2025-4437

There's a vulnerability in the CRI-O application where when container is launched with securityContext.runAsUser specifying a non-existent user, CRI-O attempts to create the user, reading the container's entire /etc/passwd file into memory. If this file is excessively large, it can cause the a hi...

CVE-2015-0843

yubiserver before 0.6 is prone to buffer overflows due to misuse of sprintf...

CVE-2018-10831

creationtimestamp| type| source ---|---|--- 2025-06-26 21:02:21+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lsjzkck2em2i 2026-06-19 12:53:13+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9f23ff3e-0e22-47c1-b47b-9697381af975...

CVE-2025-52904 File Browser: Command Execution not Limited to Scope

File Browser provides a file managing interface within a specified directory and it can be used to upload, delete, preview, rename and edit files. In versions of the web application on the 2.x branch, all users have a scope assigned, and they only have access to the files within that scope. The...

CVE-2025-34046

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19631 2025-06-26 20:42:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjyh66y642r 2025-06-27 21:02:22+00:00| seen|...

CVE-2025-6701

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19627 2025-06-26 20:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjy4vrwjs2r...

CVE-2025-52887

cpp-httplib is a C++11 single-file header-only cross platform HTTP/HTTPS library. In version 0.21.0, when many http headers fields are passed in, the library does not limit the number of headers, and the memory associated with the headers will not be released when the connection is disconnected...