PHPGurukul Bank Locker Management System Injection Vulnerability

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of the search-report-details.php file. An attacker ca...

openSUSE Security Advisory (SUSE-SU-2025:0979-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microhard Bullet-LTE Stack-based Buffer Overflow (CVE-2020-17407)

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microhard Bullet-LTE prior to v1.2.0-r1112. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of authentication headers. The issue results fro...

CVE-2025-29795

Improper link resolution before file access 'link following' in Microsoft Edge Chromium-based allows an authorized attacker to elevate privileges locally...

CVE-2025-2637

creationtimestamp| type| source ---|---|--- 2025-03-23 03:05:52+00:00| seen| https://t.me/cvedetector/20886 2025-03-23 03:53:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkzdrmntkf24...

PHPGurukul Bank Locker Management System security vulnerabilities

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of /search-locker-details.php. An attacker can exploi...

CVE-2025-2622

creationtimestamp| type| source ---|---|--- 2025-03-22 17:44:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkybpojeou26 2025-03-22 21:14:42+00:00| seen| https://t.me/cvedetector/20880 2025-12-11 09:24:49+00:00| seen| https://gist.github.com/Liyw979/5f9fe6121ac99c7be2f2359c9259b...

CVE-2025-2617

creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtzaddng2j 2025-03-22 17:03:54+00:00| seen| https://t.me/cvedetector/20876...

CVE-2025-2331

creationtimestamp| type| source ---|---|--- 2025-03-22 13:39:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkxtz7vlr62w 2025-03-22 14:33:19+00:00| seen| https://t.me/cvedetector/20867...

CVE-2024-7046

An improper access control vulnerability in open-webui/open-webui v0.3.8 allows an attacker to view admin details. The application does not verify whether the attacker is an administrator, allowing the attacker to directly call the /api/v1/auths/admin/details interface to retrieve the first admin...

CVE-2024-9447

An information disclosure vulnerability exists in the latest version of transformeroptimus/superagi. The /get/organisation/ endpoint does not verify the user's organization, allowing any authenticated user to retrieve sensitive configuration details, including API keys, of any organization. This...

CVE-2024-8616

In h2oai/h2o-3 version 3.46.0, the /99/Models/name/json endpoint allows for arbitrary file overwrite on the target server. The vulnerability arises from the exportModelDetails function in ModelsHandler.java, where the user-controllable mexport.dir parameter is used to specify the file path for...

Security Bulletin: IBM DataPower Gateway vulnerable to Denial of Service (CVE-2024-53088)

Summary IBM DataPower Gateway uses the ethernet driver on hardware platforms. Vulnerability Details CVEID:CVE-2024-53088 DESCRIPTION: In the Linux kernel, the following vulnerability has been resolved: i40e: fix race condition by adding filter's intermediate sync state Fix a race condition in the...

CVE-2016-10924

creationtimestamp| type| source ---|---|--- 2025-03-21 16:00:10+00:00| published-proof-of-concept| Telegram/vxR48xjEP6WBdCVXNbCTjoVsMUt2b0RWUkGzAhfJjXTHV4Q 2025-07-08 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lti75hvrtv22 2026-11-03 02:48:59+00:00| exploited|...

CVE-2021-25635

An Improper Certificate Validation vulnerability in LibreOffice allowed an attacker to self sign an ODF document, with a signature untrusted by the target, then modify it to change the signature algorithm to an invalid or unknown to LibreOffice algorithm and LibreOffice would incorrectly present...

CVE-2025-25274

creationtimestamp| type| source ---|---|--- 2025-03-21 11:48:06+00:00| seen| https://t.me/cvedetector/20805 2025-03-21 13:23:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkvcp4hvrj2m...

openSUSE Security Advisory (SUSE-SU-2025:0958-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-12447 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 135.0.7049.52 Description: The issue is related to a use after free in Navigations, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity of this issue...

Edunext Systems + School Management Software 1.0 SQL Injection

Edunext Systems + School Management Software version 1.0 suffers from multiple remote SQL injection vulnerabilities. Exploit Title: Edunext Systems + School Management Software Multiple SQL injection Google Dork: inurl:/page.php?PAGE= , inurl:/image-gallery-detail.php?galid= , intext:Powered by...

CVE-2025-29914

creationtimestamp| type| source ---|---|--- 2025-03-20 18:14:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114196115958327030 2025-03-20 18:20:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8257 2025-03-20 21:04:11+00:00| seen|...