CVE-2025-44135

CVE-2025-44135 affects the code-projects Online Class and Exam Scheduling System 1.0, with a SQL injection vulnerability in the /Scheduling/pages/profile_update.php endpoint. The issue stems from manipulating the username parameter without proper validation, enabling an attacker to inject SQL com...

CVE-2025-46400

In xfig diagramming tool, a segmentation fault while running fig2dev allows an attacker to availability via local input manipulation via readarcobject function...

CVE-2022-23143

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13157...

CVE-2025-46397

creationtimestamp| type| source ---|---|--- 2025-04-23 21:05:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13154 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:13+00:00| seen| https://t.me/cvedetector/23620...

CVE-2025-46400

creationtimestamp| type| source ---|---|--- 2025-04-23 21:04:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13151 2025-04-24 00:02:03+00:00| published-proof-of-concept| Telegram/nLLiU9XeUeMIp5jrXJDhah4Wv5btJb4tJwgKYZU-gIMEuU0 2025-04-24 00:31:12+00:00| seen| https://t.me/cvedetector/23618...

CVE-2025-45427

creationtimestamp| type| source ---|---|--- 2025-04-23 17:19:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnipapo3j32t 2025-04-23 17:48:49+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114388535130823992 2025-04-23 18:39:46+00:00| seen|...

CVE-2025-2760

GIMP XWD File Parsing Integer Overflow Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of GIMP. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

CVE-2025-1054

creationtimestamp| type| source ---|---|--- 2025-04-23 10:10:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13017 2025-04-23 13:15:13+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnibm3l7xc2r 2025-04-23 14:28:59+00:00| seen| https://t.me/cvedetector/23588...

CVE-2025-3530

creationtimestamp| type| source ---|---|--- 2025-04-23 09:20:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhj2qcb2r 2025-04-23 12:48:32+00:00| seen| https://t.me/cvedetector/23581...

CVE-2025-0926

CVE-2025-0926 affects AXIS Camera Station Pro. A non-admin user can remove system files, causing a boot loop by redirecting a file deletion during video recording. The issue is tied to Axis products and is mitigated by a patched Axis advisory; Axis has released a fixed version. Exploitation detai...

CVE-2025-46394

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences...

CVE-2025-28019

CVE-2025-28019 affects TOTOLINK A800R router (version 4.1.2cu.5137_B20200730). A buffer overflow in the downloadFile.cgi component is documented across CNVD/CNNVD/CVELIST entries, enabling potential remote code execution or denial of service as described in vendor/coverage notes. Connected source...

CVE-2025-31328

creationtimestamp| type| source ---|---|--- 2025-04-22 21:09:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngln3ulrl2c 2025-04-22 22:35:16+00:00| seen| https://t.me/cvedetector/23541...

CVE-2025-37087

CVE-2025-37087 affects HPE Performance Cluster Manager (HPCM) cmdb service. Multiple connected sources confirm a vulnerability that could allow an attacker to access an arbitrary file on the server host. The initial entry lists a high-severity CVSS 3.1 vector (9.8, NETWORK / LOW complexity / no u...

CVE-2025-28038

creationtimestamp| type| source ---|---|--- 2025-04-22 20:19:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngitkis2s2c 2025-04-22 21:48:27+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114383815046638917...

CVE-2012-12332

creationtimestamp| type| source ---|---|--- 2025-04-22 19:58:28+00:00| seen| https://bsky.app/profile/intelrob.bsky.social/post/3lnghoau5b222...

CVE-2025-3767

creationtimestamp| type| source ---|---|--- 2025-04-22 19:09:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lngewdoelk2v 2025-04-22 20:54:50+00:00| seen| https://t.me/cvedetector/23533...

CVE-2025-1950 IBM Hardware Management Console - Power Systems command execution

IBM Hardware Management Console - Power Systems V10.2.1030.0 and V10.3.1050.0 could allow a local user to execute commands locally due to improper validation of libraries of an untrusted source...

CVE-2025-23176 Tecnick – CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CWE-89: Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection'...

CVE-2025-23175

CVE-2025-23175 relates to a multiple XSS (CWE-79) exposure associated with Tecnick TCExam. Connected sources indicate the vulnerable software is Tecnick TCExam, including version 16.3.2 per CNNVD, with reports in PT-Security citing the Tecnick/Tcexam name. The documents do not provide concrete ex...