Security Bulletin: Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass affects watsonx.data

Summary Applications and libraries which misuse the ServerConfig.PublicKeyCallback callback may be susceptible to an authorization bypass, which could affect watsonx.data. Vulnerability Details CVEID:CVE-2024-45337 DESCRIPTION: Applications and libraries which misuse connection.serverAuthenticate...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 8.0.6 security update

A security update is now available for Red Hat JBoss Enterprise Application Platform 8.0 for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

CVE-2025-1864

creationtimestamp| type| source ---|---|--- 2025-03-03 08:46:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114097623114593596 2025-03-03 10:01:09+00:00| published-proof-of-concept| Telegram/B00WHQsRDE7JVKYOf8yUGl6ojwx9yH5tJgPqXOMPOY24Pc 2025-03-03 11:21:28+00:00| seen|...

CVE-2025-1855

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The...

CVE-2025-1855 PHPGurukul Online Shopping Portal product-details.php sql injection

A vulnerability was found in PHPGurukul Online Shopping Portal 2.1. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /product-details.php. The manipulation of the argument quality/price/value/name/summary/review leads to sql injection. The...

PT-2025-9242

Name of the Vulnerable Software and Affected Versions Serosoft Solutions Pvt Ltd Academia Student Information System SIS EagleR version 1.0.118 Description The issue is related to an Insecure Direct Object References IDOR in the component "/getStudemtAllDetailsById?studentId=XX". This allows...

Debian: Security Advisory (DLA-4077-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2025-9450

Name of the Vulnerable Software and Affected Versions ravi Singh Visitor Details versions n/a through 1.0.1 Description The issue is related to improper neutralization of input during web page generation, which leads to a Stored XSS vulnerability. This allows for the storage of malicious scripts...

CVE-2025-25132: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in ravi Singh Visitor Details visitors-details allows Stored XSS.This issue affects Visitor Details: from n/a through = 1.0.1...

PHPGurukul Online Shopping Portal Injection Vulnerability

Online Shopping Portal is an online store. Online Shopping Portal suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in the product-details.php file. An attacker can exploit this vulnerability to execute illegal SQL commands to ste...

CVE-2025-27220

In the CGI gem before 0.4.2 for Ruby, a Regular Expression Denial of Service ReDoS vulnerability exists in the UtilescapeElement method...

CVE-2025-1834

creationtimestamp| type| source ---|---|--- 2025-03-02 22:29:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6112 2025-03-03 01:18:18+00:00| seen| https://t.me/cvedetector/19274 2025-03-03 02:34:07+00:00| seen|...

CVE-2025-1829

creationtimestamp| type| source ---|---|--- 2025-03-02 19:28:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/6106 2025-03-02 21:07:21+00:00| seen| https://t.me/cvedetector/19266 2025-06-06 15:15:20+00:00| seen|...

CVE-2025-0289

creationtimestamp| type| source ---|---|--- 2025-03-02 16:26:33+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/114093771201977118 2025-03-03 04:34:36+00:00| seen| https://bsky.app/profile/kyosuke-tanaka.bsky.social/post/3ljh4q7nxjc2y 2025-03-03 12:56:00+00:00| seen|...

PT-2025-9211 · Zj1983 Zz · Zj1983 Zz

Name of the Vulnerable Software and Affected Versions: zj1983 zz up to 2024-8 Description: A critical vulnerability was found in the function getUserList of the file src/main/java/com/futvan/z/system/zrole/ZroleAction.java. The manipulation of the argument roleid leads to SQL injection. The attac...

U.S. Dept Of Defense: Exposure of Sensitive Debug File Containing database dump with passwords in plain text

A publicly accessible debug file was discovered, exposing sensitive database credentials including usernames and passwords in plaintext. The file contained information such as the database name, type, and server...

PT-2025-9154 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: General information about the issue is not available. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

D-Link DAR-7000 injection vulnerability

The D-Link DAR-7000 is an Internet Behavior Management and Auditing Gateway device that provides Internet behavior management and auditing capabilities. The D-Link DAR-7000 suffers from a command injection vulnerability that stems from the ethname parameter of the getipaddrdetails function in the...

Security Bulletin: IBM Engineering Requirements Management DOORS Next is vulnerable to Xml Entity Injection (CVE-2024-39726)

Summary IBM Engineering Requirements Management DOORS Next is vulnerable to Xml Entity Injection CVE-2024-39726. Vulnerability Details CVEID:CVE-2024-39726 DESCRIPTION: IBM Engineering Lifecycle Optimization - Engineering Insights 7.0.2 and 7.0.3 is vulnerable to an XML External Entity Injection...

CVE-2025-1748 HTML injection vulnerability in OpenCart

HTML injection vulnerabilities in OpenCart versions prior to 4.1.0. These vulnerabilities could allow an attacker to modify the HTML of the victim's browser by sending a malicious URL and modifying the parameter name in /account/register...