EUVD-2017-2780

Malware in sbrugna...

CampCodes Online Apartment Visitor Management SQL注入漏洞

CampCodes Online Apartment Visitor Management is an online apartment visitor management system from CampCodes Philippines. CampCodes Online Apartment Visitor Management version 1.0 suffers from a SQL injection vulnerability that stems from incorrect manipulation of the parameters fromdate and...

EUVD-2025-32581

The YoSmart YoLink application through 2025-10-02 has session tokens with unexpectedly long lifetimes...

CVE-2025-60967

creationtimestamp| type| source ---|---|--- 2025-10-06 18:01:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115328526970680119...

CVE-2025-43825

creationtimestamp| type| source ---|---|--- 2025-10-06 15:08:06+00:00| seen| Telegram/6YOWeqsGo7r8jD5OGExy28k6cXRqksXgng0ziWUvqQxEa9E...

CVE-2025-0607

creationtimestamp| type| source ---|---|--- 2025-10-06 15:08:02+00:00| seen| Telegram/Da5DOZHqZla7d2awdYyqH4ZaZ7xxP3sP8yhbOLNdlRVoyM...

CVE-2025-59734

creationtimestamp| type| source ---|---|--- 2025-10-06 13:56:31+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115327565160692907...

CVE-2025-59163

creationtimestamp| type| source ---|---|--- 2025-10-06 12:34:16+00:00| seen| https://bsky.app/profile/evanharris.bsky.social/post/3m2jmpq4iwi2j...

CVE-2025-11330

The CVE describes a SQL injection in PHPGurukul Beauty Parlour Management System 1.1, caused by unsafely handling the fromdate/todate parameters in /admin/sales-reports-detail.php. This can be exploited remotely and the exploit has been disclosed. Connected sources corroborate a lack of input val...

PT-2025-40948

Name of the Vulnerable Software and Affected Versions YoSmart YoLink application versions through 2025-10-02 Description The YoSmart YoLink application has session tokens with unexpectedly long lifetimes. Recommendations Update to a version later than 2025-10-02. At the moment, there is no...

Forensic Timeliner 2.2

Forensic Timeliner is a high-speed forensic processing engine built for DFIR investigators. It quickly consolidates CSV output from top-tier triage tools into a unified mini timeline with built-in filtering, artifact detection, date filtering, keyword tagging, and deduplication...

CVE-2025-59728

When calculating the content path in handling of MPEG-DASH manifests, there's an out-of-bounds NUL-byte write one byte past the end of the buffer.When we call xmlNodeGetContent below 0, it returns a buffer precisely allocated to match the string length, using strdup internally. If this buffer is...

PT-2025-40887

Name of the Vulnerable Software and Affected Versions PHPGurukul Beauty Parlour Management System version 1.1 Description A flaw exists in PHPGurukul Beauty Parlour Management System version 1.1 that allows for SQL injection. The issue is located in the /admin/sales-reports-detail.php file,...

CVE-2025-61765

python-socketio is a Python implementation of the Socket.IO realtime client and server. A remote code execution vulnerability in python-socketio versions prior to 5.14.0 allows attackers to execute arbitrary Python code through malicious pickle deserialization in multi-server deployments on which...

CVE-2025-34226

creationtimestamp| type| source ---|---|--- 2025-10-05 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2hynlnqae2j...

CVE-2024-28157

creationtimestamp| type| source ---|---|--- 2025-10-05 21:00:12+00:00| published-proof-of-concept| Telegram/PhhScPJ8nIwc2vRijZXtfdgvBVI811MtSflqcGx0gK4a11w 2025-10-08 21:02:25+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2pk24w6ff23 2026-09-19 00:00:08+00:00|...

CVE-2023-31038

creationtimestamp| type| source ---|---|--- 2025-10-05 13:19:21+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3m2h6rbd2hs2d...

CVE-2025-9952

The Trinity Audio – Text to Speech AI audio player to convert content into audio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'range-date' parameter in all versions up to, and including, 5.20.2 due to insufficient input sanitization and output escaping. This makes ...

CVE-2025-11277

A weakness has been identified in Open Asset Import Library Assimp 6.0.2. This affects the function Q3DImporter::InternReadFile of the file assimp/code/AssetLib/Q3D/Q3DLoader.cpp. Executing a manipulation can lead to heap-based buffer overflow. The attack needs to be launched locally. The exploit...

CVE-2025-11275

A vulnerability was identified in Open Asset Import Library Assimp 6.0.2. Affected by this vulnerability is the function ODDLParser::getNextSeparator in the library assimp/contrib/openddlparser/include/openddlparser/OpenDDLParserUtils.h. Such manipulation leads to heap-based buffer overflow. The...