HEXAGreen CMS SQL Injection Vulnerability

Title: HEXAGreen CMS - Authenticated SQLi Description: HEXAGreen CMS authenticated error-based sql injection Source URL: http://ezcode.pt/tests/hexagreen/admin/ Source Name/Email: Mehmet Can Kadıoğlu a.k.a mao7un CVEs: N/A Software URL: https://www.codester.com/items/36507/hexagreen-website-cms...

PT-2025-9908

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not explicitly mentioned. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

OpenAdmin 0.3.4 Cross Site Request Forgery

Cross site request forgery in the Users and Change Root Password functions in OpenAdmin version 0.3.4 allows remote attackers to perform attacks enabling unauthorized actions that could lead to privilege escalation. Exploit Title: OpenAdmin 0.3.4 - Multiple CSRF Vulnerabilities Date: Nov 8, 2024...

Wazuh 4.9.1 Remote Code Execution

Wazuh version 4.9.1 proof of concept remote code execution exploit with a reverse shell. ============================================================================================================================================= | Title : Wazuh v 4.9.1 PHP Code Injection Vulnerability | | Autho...

OpenPanel 0.3.4 Remote Code Execution Vulnerability

Exploit Title: OpenPanel 0.3.4 - Remote Code Execution via Fix Permission Exploit Author: Punthat Siriwan, Korn Chaisuwan, Pongtorn Angsuchotmetee Vendor Homepage: https://openpanel.com/ Software Link: https://openpanel.com/ Version: 0.3.4 Tested on: macOS CVE : CVE-2025-25872 POST /fix-permissio...

Linux Distros Unpatched Vulnerability : CVE-2024-56727

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: octeontx2-pf: handle otx2mboxgetrsp errors in otx2flows.c Adding error pointer check after...

Linux Distros Unpatched Vulnerability : CVE-2024-7550

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium...

Medium: expat

Issue Overview: An issue was discovered in libexpat before 2.6.4. There is a crash within the XMLResumeParser function because XMLStopParser can stop/suspend an unstarted parser. CVE-2024-50602 Affected Packages: expat Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit...

Linux Distros Unpatched Vulnerability : CVE-2024-56372

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: net: tun: fix tunnapiallocfrags syzbot reported the following crash 1 Issue came with the...

Slackware: Security Advisory (SSA:2025-064-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[slackware-security] mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/mozilla-thunderbird-128.8.0esr-i686-1slack15.0.txz: Upgraded. This release contains security fixes and improvements. For...

CVE-2024-51947

There is a stored Cross-site Scripting vulnerability in ArcGIS Server for versions 11.3 and below that may allow a remote, authenticated attacker to create a stored crafted link which when clicked could potentially execute arbitrary JavaScript code in the victim’s browser. The privileges required...

CVE-2025-25632

creationtimestamp| type| source ---|---|--- 2025-03-05 20:36:44+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6609 2025-03-05 23:39:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljo5nkwucg2f 2025-03-06 01:18:24+00:00| seen|...

CVE-2023-38693

CVE-2023-38693 affects Lucee Server’s REST endpoint, where an XML XXE vulnerability in the REST handler enables remote code execution. The root cause is improper XML processing allowing external entities to be evaluated during parsing, leading to potential code execution with high impact (as per ...

CVE-2025-25132

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...

CVE-2025-1872

SQL injection vulnerability have been found in 101news affecting version 1.0 through the "sadminusername" parameter in admin/add-subadmins.php...

CVE-2024-13778

The Hero Mega Menu - Responsive WordPress Menu Plugin plugin for WordPress is vulnerable to SQL Injection via several functions in all versions up to, and including, 1.16.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Th...

CVE-2025-27667

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6504 2025-03-05 08:34:52+00:00| seen| https://t.me/cvedetector/19599 2025-03-05 09:24:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuvb56a2y 2025-03-06...

CVE-2025-27668

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6503 2025-03-05 08:34:55+00:00| seen| https://t.me/cvedetector/19600 2025-03-05 09:24:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ljmnuukc422s 2025-03-06...

CVE-2025-27681

creationtimestamp| type| source ---|---|--- 2025-03-05 05:33:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6490 2025-03-05 08:34:36+00:00| seen| https://t.me/cvedetector/19587 2025-03-06 12:00:28+00:00| seen| https://bsky.app/profile/vulnalerts.bsky.social/post/3ljpgzt3i6j2g 2025-04-15...