CVE-2025-27937

creationtimestamp| type| source ---|---|--- 2025-04-28 00:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13646 2025-04-28 03:11:28+00:00| seen| https://t.me/cvedetector/23869 2025-04-28 03:45:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lntu45ekav2d...

CVE-2025-3981

A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This issue affects some unknown processing of the file /v1/prescription/details/. The manipulation leads to improper authorization. The attack may be initiated...

CVE-2025-3979

creationtimestamp| type| source ---|---|--- 2025-04-27 18:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13629 2025-04-27 21:20:11+00:00| seen| https://t.me/cvedetector/23850 2025-04-27 21:40:18+00:00| seen|...

CVE-2025-4014

creationtimestamp| type| source ---|---|--- 2025-04-27 15:20:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114410601339069486 2025-04-28 10:10:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13667 2025-04-28 13:13:31+00:00| seen|...

Exploit for CVE-2024-36587

CVE-2024-36587 - dnscrypt-proxy Local Privilege Escalation...

CVE-2025-3972

creationtimestamp| type| source ---|---|--- 2025-04-27 14:09:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13619 2025-04-27 15:35:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnslbqc7nd2b 2025-04-27 17:01:02+00:00| published-proof-of-concept|...

CVE-2025-3966

creationtimestamp| type| source ---|---|--- 2025-04-27 10:10:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13612 2025-04-27 11:23:47+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lns55yfpc7u2 2025-04-27...

WowJoy Internet Doctor Workstation System has a security vulnerability

The wowjoy Internet Doctor Workstation System is a medical system from China-based wowjoy. A security vulnerability exists in version 1.0 of the wowjoy Internet Doctor Workstation System that originates from improper authorization in file /v1/prescription/details...

CVE-2025-3981: Improper Authorization

A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This issue affects some unknown processing of the file /v1/prescription/details/. The manipulation leads to improper authorization. The attack may be initiated...

CVE-2025-32795

Dify is an open-source LLM app development platform. Prior to version 0.6.12, a vulnerability was identified in the DIFY where normal users are improperly granted permissions to edit APP names, descriptions and icons. This access control flaw allows non-admin users to modify app details, despite...

CVE-2025-22340

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Think201 Data Dash data-dash allows Stored XSS.This issue affects Data Dash: from n/a through = 1.2.3...

CVE-2025-32514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in cscode WooCommerce Estimate and Quote wc-estimate-and-quote allows Reflected XSS.This issue affects WooCommerce Estimate and Quote: from n/a through = 1.0.2.5...

Security Bulletin: Vulnerabilities in Apache Solr (lucene) and Apache ZooKeeper affect IBM Operations Analytics - Log Analysis (CVE-2024-23454, CVE-2024-30171, CVE-2024-23944)

Summary There are vulnerabilities in Bouncy Castle, Apache Hadoop that potentially expose sensitive information that affect Apache Solr and Apache ZooKeeper used by IBM Operations Analytics - Log Analysis Vulnerability Details CVEID:CVE-2024-23454 DESCRIPTION: Apache Hadoop could allow a local...

Moodle has an IDOR in messaging web service which allows access to some user details

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...

GHSA-6G5X-H5X7-Q4MQ Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access...

GHSA-PJ96-XH2W-FGQX Moodle has an IDOR in messaging web service which allows access to some user details

A flaw was found in Moodle. Insufficient capability checks in a messaging web service allowed users to view other users' names and online statuses...

Authorization Bypass Through User-Controlled Key

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key due to insufficient capability checks in the web service. An attacker can access sensitive user details such as full names and profile images by...

Moodle has an IDOR in web service which allows users enrolled in a course to access some details of other users

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access...

CVE-2025-3640

A flaw was found in Moodle. Insufficient capability checks made it possible for a user enrolled in a course to access some details, such as the full name and profile image URL, of other users they did not have permission to access...

GHSA-8H6M-WV39-239M Rancher users who can create Projects can gain access to arbitrary projects

Impact A vulnerability has been identified within Rancher where a user with the ability to create a project, on a certain cluster, can create a project with the same name as an existing project in a different cluster. This results in the user gaining access to the other project in the different...