CVE-2022-49848

In the Linux kernel, the following vulnerability has been resolved: phy: qcom-qmp-combo: fix NULL-deref on runtime resume Commit fc64623637da "phy: qcom-qmp-combo,usb: add support for separate PCSUSB region" started treating the PCSUSB registers as potentially separate from the PCS registers but...

CVE-2022-49830

In the Linux kernel, the following vulnerability has been resolved: drm/drv: Fix potential memory leak in drmdevinit drmdevinit will add drmdevinitrelease as a callback. When drmmaddaction failed, the release function won't be added. As the result, the ref cnt added by deviceget in drmdevinit won...

CVE-2022-49880 ext4: fix warning in 'ext4_da_release_space'

In the Linux kernel, the following vulnerability has been resolved: ext4: fix warning in 'ext4dareleasespace' Syzkaller report issue as follows: EXT4-fs loop0: Free/Dirty block details EXT4-fs loop0: freeblocks=0 EXT4-fs loop0: dirtyblocks=0 EXT4-fs loop0: Block reservation details EXT4-fs loop0:...

CVE-2022-49762

CVE-2022-49762: In the Linux kernel, ntfs_attr_find() can overflow when iterating ATTR_RECORDs in MFT records, due to adding le32_to_cpu(a->length) to the current pointer and wrapping on 32‑bit systems. A patch adds bounds checks when computing the end address of the current ATTR_RECORD to pre...

CVE-2025-37754

creationtimestamp| type| source ---|---|--- 2025-05-01 13:55:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo4hlshobf2k 2025-05-01 16:30:03+00:00| seen| https://t.me/cvedetector/24210...

CVE-2025-23154

In the Linux kernel, the following vulnerability has been resolved: iouring/net: fix ioreqpostcqe abuse by send bundle 114.987980 T5313 WARNING: CPU: 6 PID: 5313 at iouring/iouring.c:872 ioreqpostcqe+0x12e/0x4f0 114.991597 T5313 RIP: 0010:ioreqpostcqe+0x12e/0x4f0 115.001880 T5313 Call Trace:...

CVE-2025-37752

In the Linux kernel, the following vulnerability has been resolved: netsched: schsfq: move the limit validation It is not sufficient to directly validate the limit on the data that the user passes as it can be updated based on how the other parameters are changed. Move the check at the end of the...

Ticket Resale Platform TicketToCash Left 200GB of User Data Exposed

A misconfigured, non-password-protected database belonging to TicketToCash exposed data from 520,000 customers, including PII and partial financial details.…...

CVE-2025-4157

A vulnerability was found in PHPGurukul Boat Booking System 1.0 and classified as critical. This issue affects some unknown processing of the file /admin/booking-details.php. The manipulation of the argument Status leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-4157

CVE-2025-4157 affects PHPGurukul Boat Booking System 1.0, specifically the "/admin/booking-details.php" endpoint. The vulnerability arises from improper handling of the \

CVE-2025-4152

A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-4152 PHPGurukul Online Birth Certificate System bwdates-reports-details.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Online Birth Certificate System 1.0. Affected is an unknown function of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate leads to sql injection. It is possible to launch the attack remotely...

CVE-2024-26010

creationtimestamp| type| source ---|---|--- 2025-05-01 04:14:47+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14226 2025-06-29 20:11:08+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lsri3iecbk2g...

CVE-2025-4145

creationtimestamp| type| source ---|---|--- 2025-05-01 01:48:37+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114430057960003343 2025-05-01 01:56:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo37f5qu3t2n 2025-05-01 04:00:52+00:00| published-proof-of-concept...

CVE-2025-46630

Improper access controls in the web management portal of the Tenda RX2 Pro 16.03.30.14 allows an unauthenticated remote attacker to enable 'ate' a remote system management binary by sending a /goform/ate web request...

PHPGurukul Boat Booking System Injection Vulnerability

PHPGurukul Boat Booking System is a boat booking system from PHPGurukul. An injection vulnerability exists in version 1.0 of the PHPGurukul Boat Booking System, which stems from SQL injection due to incorrect manipulation of the parameter Status in the file /admin/booking-details.php...

CVE-2025-4141

creationtimestamp| type| source ---|---|--- 2025-04-30 22:14:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14178 2025-04-30 23:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114429585840360844 2025-05-01 01:56:14+00:00| seen|...

WordPress Gravity Forms WebHooks plugin <= 1.6.0 - Authenticated (Admin+) Server-Side Request Forgery via Webhook vulnerability

Authenticated Admin+ Server-Side Request Forgery via Webhook vulnerability discovered by Francesco Carlucci in WordPress Plugin Gravity Forms WebHooks versions = 1.6.0...

WordPress Ultimate Store Kit Elementor Addons plugin <= 2.4.1 - Cross-Site Request Forgery to Limited User Meta Update vulnerability

Cross-Site Request Forgery to Limited User Meta Update vulnerability discovered by Peter Thaleikis in WordPress Plugin Ultimate Store Kit Elementor Addons versions = 2.4.1...

WordPress Page View Count plugin 2.8.0-2.8.4 - Missing Authorization to Authenticated (Subscriber+) Limited Options Update

Missing Authorization to Authenticated Subscriber+ Limited Options Update vulnerability discovered by kr0d in WordPress Plugin Page View Count versions 2.8.0-2.8.4...