4254 matches found
CVE-2025-31591
creationtimestamp| type| source ---|---|--- 2025-03-31 14:32:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9666...
CVE-2025-31543
creationtimestamp| type| source ---|---|--- 2025-03-31 14:32:01+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9654...
How Each Pillar of the 1st Amendment is Under Attack
" Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances." -U.S. Constitution,...
Code-Projects Payroll Management System 安全漏洞
Code-Projects Payroll Management System is an open source payroll management system from Code-Projects. A security vulnerability exists in Code-Projects Payroll Management System version 1.0, which stems from an incorrect manipulation of the parameters lname and fname that can lead to SQL injecti...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the first name field in the processMentions method, which allows arbitrary HTML injection into emails. Details Cross-site scripting or XSS is a code vulnerability that occurs when an attacker “injects” a...
DEBIAN-CVE-2025-2713
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...
UBUNTU-CVE-2025-2713
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork...
PT-2025-13547
Name of the Vulnerable Software and Affected Versions: Google gVisor affected versions not specified Description: The issue is related to a local privilege escalation due to incorrect handling of file access permissions in Google gVisor's runsc component. This allowed unprivileged users to access...
CVE-2025-28254: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting vulnerability in Leantime v3.2.1 and before allows an authenticated attacker to execute arbitrary code and obtain sensitive information via the first name field in processMentions...
CVE-2024-7767 Improper Access Control in danswer-ai/danswer
An improper access control vulnerability exists in danswer-ai/danswer version v0.3.94. This vulnerability allows the first user created in the system to view, modify, and delete chats created by an Admin. This can lead to unauthorized access to sensitive information, loss of data integrity, and...
CVE-2025-22228
BCryptPasswordEncoder.matchesCharSequence,String will incorrectly return true for passwords larger than 72 characters as long as the first 72 characters are the same...
LiteLLM 安全漏洞
LiteLLM is an open source application from Berri AI. All LLM APIs can be called using the OpenAI format. A security vulnerability exists in LiteLLM versions prior to 1.44.12, which stems from the API key masking code masking only the first 5 characters, which could lead to API key disclosure...
PT-2025-12287
Name of the Vulnerable Software and Affected Versions berriai/litellm versions 1.44.9 through 1.44.11 Description The issue affects the litellm/litellm core utils/litellm logging.py file, where the API key masking code only masks the first 5 characters of the key. This results in the leakage of...
Danswer 安全漏洞
Danswer is Danswer AI open source an artificial intelligence assistant that connects to company documents, applications and people. A security vulnerability exists in Danswer version v0.3.94, which stems from improper access control and allows the first user to view, modify, and delete...
CVE-2025-26485
A vulnerability in Beta80 Life 1st enables the retrieval of different error messages for failed authentication attempts in case of the usage of a wrong password or a non existent user. The difference in the returned error messages could be used by attackers to understand whether a certain user is...
CVE-2025-29425
Code-projects Online Class and Exam Scheduling System 1.0 is vulnerable to SQL Injection in examsave.php via the parameters member and first...
Online Class and Exam Scheduling System profile.php file cross-site scripting vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. A cross-site scripting vulnerability exists in Online Class and Exam Scheduling System, which stems from the lack of effective filtering and escaping of user-supplied data in the parameters memberfirst and...
Online Class and Exam Scheduling System exam_save.php File SQL Injection Vulnerability
Online Class and Exam Scheduling System is an online class and exam scheduling system. The Online Class and Exam Scheduling System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameters member and first of...