CVE-2025-5966

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

CVE-2025-5366

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report...

CVE-2025-5366

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report...

CVE-2025-5966 Stored XSS

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

CVE-2025-5966 Stored XSS

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

CVE-2025-5366 Stored XSS

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report...

CVE-2025-5366

CVE-2025-5366 affects Zohocorp ManageEngine Exchange Reporter Plus 5722 and earlier. The flaw is a Stored XSS in the Folder-wise read mails feature (subject is report). The CVSSv3.1 base score is 8.1 (HIGH); attack vector NETWORK, attack complexity LOW, privileges None, user interaction REQUIRED,...

CVE-2025-20337

creationtimestamp| type| source ---|---|--- 2025-06-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1579 2025-07-16 16:29:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114863857818669082 2025-07-17 03:00:00+00:00| seen|...

ManageEngine Exchange Reporter Plus Installed (Windows)

Binary data manageengineexchangereporterpluswininstalled.nbin...

PT-2025-26957 · Manageengine · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine Exchange Reporter Plus versions 5722 and below Description: The issue concerns a Stored XSS in the Attachments by filename keyword report. This affects the management of attachments based on filename keywords, potentially allowin...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5722 and prior versions that stems from a stored cross-site scripting attack...

ZOHO ManageEngine Exchange Reporter Plus 安全漏洞

ZOHO ManageEngine Exchange Reporter Plus is a Web-based Exchange Server reporting software from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Exchange Reporter Plus 5722 and prior versions that stems from a stored cross-site scripting attack...

CVE-2025-6617

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19494 2025-06-26 05:03:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114747913862840805 2025-06-30 20:26:57+00:00| seen|...

CVE-2025-6543

creationtimestamp| type| source ---|---|--- 2025-06-25 12:51:00+00:00| seen| https://thehackernews.com/2025/06/citrix-releases-emergency-patches-for.html 2025-06-25 13:50:50+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19439 2025-06-25 14:54:41+00:00| exploited|...

[SECURITY] Fedora 42 Update: mirrorlist-server-3.0.7-7.fc42

The mirrorlist-server uses the data created by MirrorManager2 https://github.com/fedora-infra/mirrormanager2 to answer client request for the "best" mirror. This implementation of the mirrorlist-server is written in Rust. The original version of the mirrorlist-server was part of the MirrorManager...

Hackers Target Over 70 Microsoft Exchange Servers to Steal Credentials via Keyloggers

Unidentified threat actors have been observed targeting publicly exposed Microsoft Exchange servers to inject malicious code into the login pages that harvest their credentials. Positive Technologies, in a new analysis published last week, said it identified two different kinds of keylogger code...

CVE-2025-3090

creationtimestamp| type| source ---|---|--- 2025-06-24 08:15:24+00:00| seen| https://infosec.exchange/users/certvde/statuses/114737343640310100 2025-06-24 08:16:10+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lsdns4hibhy2 2025-06-24 08:16:20+00:00| seen|...

GHSA-7RXV-5JHH-J6XX

creationtimestamp| type| source ---|---|--- 2025-06-24 03:48:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19297 2025-06-24 04:32:30+00:00| published-proof-of-concept| Telegram/xYRYp9RnMrs6asvPZWHHQ0msOulfM9P8474meOJ4G31k98 2025-06-30 19:53:48+00:00| seen|...

Yotta: a Large-Scale Trustless Data Trading Scheme for Blockchain System

Data trading is one of the key focuses of Web 3.0. However, all the current methods that rely on blockchain-based smart contracts for data exchange cannot support large-scale data trading while ensuring data security, which falls short of fulfilling the spirit of Web 3.0. Even worse, there is...

GHSA-43G3-QPWQ-HFGG

creationtimestamp| type| source ---|---|--- 2025-06-23 21:31:05+00:00| seen| Telegram/3KuJxnL-u9Q1MXHm7LBK-vISfp2Lp9FGxNigrPHhkXm0g 2025-06-24 17:49:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19385 2025-06-30 19:01:18+00:00| seen|...