CVE-2025-5783 PHPGurukul Employee Record Management System editmyexp.php sql injection

A vulnerability, which was classified as critical, was found in PHPGurukul Employee Record Management System 1.3. This affects an unknown part of the file /editmyexp.php. The manipulation of the argument emp3workduration leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-32105

Cross-Site Request Forgery CSRF vulnerability in ELEXtensions ELEX WooCommerce Dynamic Pricing and Discounts.This issue affects ELEX WooCommerce Dynamic Pricing and Discounts: from n/a through 2.1.2...

CVE-2025-4338

creationtimestamp| type| source ---|---|--- 2025-05-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-142-01 2025-05-22 23:43:40+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17367...

CVE-2025-37969

No description is available for this CVE...

Malicious PyPI Package Posing as Solana Tool Stole Source Code in 761 Downloads

Cybersecurity researchers have discovered a malicious package on the Python Package Index PyPI repository that purports to be an application related to the Solana blockchain, but contains malicious functionality to steal source code and developer secrets. The package, named solana-token, is no...

CVE-2025-4323

creationtimestamp| type| source ---|---|--- 2025-05-06 05:20:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/15056 2025-05-06 06:21:09+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loiajnhvm42h 2025-05-06 08:37:08+00:00| published-proof-of-concept|...

CVE-2025-20666

creationtimestamp| type| source ---|---|--- 2025-05-05 03:19:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14829 2025-05-05 06:16:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofprimjgb2h 2025-05-05 07:30:58+00:00| seen|...

CVE-2025-37766

In the Linux kernel, the following vulnerability has been resolved: drm/amd/pm: Prevent division by zero The user can set any speed value. If speed is greater than UINTMAX/8, division by zero is possible. Found by Linux Verification Center linuxtesting.org with SVACE...

CVE-2022-49853

In the Linux kernel, the following vulnerability has been resolved: net: macvlan: fix memory leaks of macvlancommonnewlink kmemleak reports memory leaks in macvlancommonnewlink, as follows: ip link add link eth0 name .. type macvlan mode source macaddr add kmemleak reports: unreferenced object...

PT-2025-17994 · Unknown · Codeprojects News Publishing Site Dashboard

Name of the Vulnerable Software and Affected Versions: codeprojects News Publishing Site Dashboard version 1.0 Description: A critical issue has been identified, affecting the /api.php file. The manipulation of the cat id argument leads to SQL injection. This issue can be exploited remotely...

CVE-2025-3511

Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module, CC-Link IE TSN Remote Station...

CVE-2025-3803

creationtimestamp| type| source ---|---|--- 2025-04-19 16:02:36+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12586 2025-04-19 16:09:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ln6ji7obr42u 2025-04-19 16:28:54+00:00| seen|...

CVE-2025-39436

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:48+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325261385044 2025-04-17 18:24:21+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmzq3clqkt2v 2025-04-20 05:00:06+00:00| published-proof-of-concept...

CVE-2025-32605 WordPress MemberPress Discord Addon Plugin <= 1.1.1 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in expresstechsoftware MemberPress Discord Addon expresstechsoftwares-memberpress-discord-add-on allows Reflected XSS.This issue affects MemberPress Discord Addon: from n/a through = 1.1.1...

CVE-2025-30732

...

CVE-2025-30711

...

Gladinet's Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability

A recently disclosed security flaw in Gladinet CentreStack also impacts its Triofox remote access and collaboration solution, according to Huntress, with seven different organizations compromised to date. Tracked as CVE-2025-30406 CVSS score: 9.0, the vulnerability refers to the use of a hard-cod...

CVE-2025-29705

creationtimestamp| type| source ---|---|--- 2025-04-10 16:18:32+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/30953 2025-04-10 23:00:05+00:00| published-proof-of-concept| Telegram/9LqTCC70Tmrs3-GJxOa30srOJB-prgOGFp9BSoM5dngRJY 2025-04-15 18:43:57+00:00| seen|...

togo.poho.com.au Cross Site Scripting vulnerability OBB-4042812

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fanosanchez.com Cross Site Scripting vulnerability OBB-4042268

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...