CVE-2025-25580

The yimioa (CloudNet OA) software, a locally deployed OA application, is vulnerable to a SQL injection vulnerability in versions prior to v2024.07.04 . The flaw exists within the listNameBySql() method located at the /xml/UserMapper.xml API endpoint. This vulnerability allows for the improper neu...

CVE-2025-25590

yimioa before v2024.07.04 was discovered to contain a SQL injection vulnerability via the component /mapper/xml/AddressDao.xml...

CVE-2025-26125

creationtimestamp| type| source ---|---|--- 2025-03-17 21:39:41+00:00| seen| https://t.me/cvedetector/20511 2025-03-17 22:01:05+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkm5q7svb426 2025-05-12 06:38:07+00:00| published-proof-of-concept|...

CVE-2025-25914

SQL injection vulnerability in Online Exam Mastering System v.1.0 allows a remote attacker to execute arbitrary code via the fid parameter...

CVE-2024-54525

creationtimestamp| type| source ---|---|--- 2025-03-17 19:47:44+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7835 2025-03-17 23:20:06+00:00| seen| https://t.me/cvedetector/20527 2025-03-18 00:01:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkmegyejtv2e 2025-03-23...

CVE-2025-24185

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. Parsing a maliciously crafted file may lead to an unexpected app termination...

CVE-2025-2388

creationtimestamp| type| source ---|---|--- 2025-03-17 19:32:25+00:00| seen| Telegram/r8ruSAfyv0cYfCWQL2RY3M8WbLJE6isd6j6oFDTTV3tTy4 2025-03-17 19:34:24+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7829 2025-03-17 21:39:40+00:00| seen| https://t.me/cvedetector/20510...

MAL-2025-2449 Malicious code in real-world1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c283f503b8625f549d7d7eae7699333b3d1ecf140d4aded77c129247c0ba1217 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2025-2385

creationtimestamp| type| source ---|---|--- 2025-03-17 16:47:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7794 2025-03-17 19:08:39+00:00| seen| https://t.me/cvedetector/20489 2025-03-17 19:32:26+00:00| seen| Telegram/tqhjnqyG63AMavUfrYijdv7hHvwgO0fWOo-eg8WU7ZDp2c...

CVE-2025-2241

CVE-2025-2241 describes a vulnerability in Hive (MCE/ACM) where VCenter credentials are exposed in the ClusterProvision object after provisioning a vSphere cluster. Attackers with read access to ClusterProvision objects can extract credentials even without direct Kubernetes Secrets access, potent...

CVE-2025-1398

Mattermost Desktop App versions =5.10.0 explicitly declared unnecessary macOS entitlements which allows an attacker with remote access to bypass Transparency, Consent, and Control TCC via code injection...

CVE-2025-0596

CVE-2025-0596 is a stored Cross-site Scripting (XSS) vulnerability in Dassault Systèmes’ ENOVIA Collaborative Industry Innovator (Bookmark Editor) on Release 3DEXPERIENCE R2024x. The issue allows an attacker to inject and execute arbitrary script code in a user’s browser session. Affected compone...

CVE-2025-29786

creationtimestamp| type| source ---|---|--- 2025-03-17 13:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7769 2025-03-17 16:33:06+00:00| published-proof-of-concept| Telegram/k2hWLXjvKh8ojTF1EeSN0Mqc987DrfNzj7Aa-hbf1HoriQ 2025-03-17 17:28:14+00:00| seen|...

CVE-2021-32584

An improper access control CWE-284 vulnerability in FortiWLC version 8.6.0, version 8.5.3 and below, version 8.4.8 and below, version 8.3.3 and below, version 8.2.7 to 8.2.4, version 8.1.3 may allow an unauthenticated and remote attacker to access certain areas of the web management CGI...

CVE-2025-2401

creationtimestamp| type| source ---|---|--- 2025-03-17 12:47:35+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7758 2025-03-17 12:54:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114177870665644076 2025-03-17 14:57:21+00:00| seen| https://t.me/cvedetector/20458 2025-03-17...

CVE-2025-2374

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. This issue affects some unknown processing of the file /profile.php. The manipulation of the argument aid/adminname/mobilenumber/email leads to sql injection. The...

CVE-2024-12992

creationtimestamp| type| source ---|---|--- 2025-03-17 09:46:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7748 2025-03-17 13:17:00+00:00| seen| https://t.me/cvedetector/20450 2025-03-17 13:51:37+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lklcf3vf722n 2025-03-25...

CVE-2024-12971 QuickShell Authenticated Command Injection

Improper Neutralization of Special Elements used in a Command vulnerability allows OS Command Injection.This issue affects Pandora FMS from 700 to 777.6...

CVE-2025-2369

creationtimestamp| type| source ---|---|--- 2025-03-17 08:46:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7745 2025-03-17 09:46:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkkuolnn6s2j 2025-03-17 09:48:22+00:00| seen|...

CVE-2025-2362

creationtimestamp| type| source ---|---|--- 2025-03-17 07:00:17+00:00| published-proof-of-concept| Telegram/upxSCMtLYTBuypjid0Yf5VZRtVVreDt9cRbcMaGwiEpFoQ 2025-03-17 07:46:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lkknxsqovh2h 2025-03-17 09:06:13+00:00| seen|...