23751 matches found
WordPress plugin Export All Posts 跨站请求伪造漏洞
WordPress and WordPress plugin are products of the WordPress Foundation, a blogging platform developed in the PHP language. WordPress is a blogging platform developed using the PHP language, which provides the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is ...
PHPGurukul Billing System 安全漏洞
Billing System is a billing system. The Billing System suffers from a SQL injection vulnerability that stems from the username and mobileno parameters in the /admin/password-recovery.php endpoint not validating user input. An attacker can use this vulnerability to steal, tamper, or delete sensiti...
PT-2025-48776
Name of the Vulnerable Software and Affected Versions PHPGurukul Billing System version 1.0 Description The PHPGurukul Billing System version 1.0 contains a SQL Injection flaw in the /admin/password-recovery.php endpoint. The username and mobileno parameters do not properly validate user-supplied...
CVE-2025-14874
creationtimestamp| type| source ---|---|--- 2025-12-01 20:44:25+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-rcmh-qjqh-p98v 2025-12-18 09:45:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maavdb2hfn2e 2026-01-08 04:00:32+00:00| published-proof-of-concept...
CVE-2025-65405
creationtimestamp| type| source ---|---|--- 2025-12-01 17:13:17+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645428301148412 2025-12-01 18:29:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x2oeulp42q...
CVE-2025-65403
creationtimestamp| type| source ---|---|--- 2025-12-01 16:39:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115645297038433564 2025-12-01 18:34:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6x2xdcjks2k...
CVE-2025-55222
creationtimestamp| type| source ---|---|--- 2025-12-01 15:30:56+00:00| seen| https://infosec.place/objects/b07c452b-428c-48af-a490-215c0e255962...
CERTFR-2025-ACT-052
creationtimestamp| type| source ---|---|--- 2025-12-01 13:24:26+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3m6wjmyxrdx2w 2025-12-01 13:24:27+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/115644528440908877 2025-12-01 13:39:09+00:00| seen|...
CVE-2025-13803
creationtimestamp| type| source ---|---|--- 2025-12-01 03:04:43+00:00| seen| https://infosec.exchange/users/offseq/statuses/115642091530470669...
ASB-A-445793670
Bulletin has no description...
ASB-A-442288324
Bulletin has no description...
ASB-A-442288325
Bulletin has no description...
ASB-A-448277338
Bulletin has no description...
ECHO-965A-0075-CB52
Bulletin has no description...
EUVD-2025-199693
Not used...
EUVD-2025-199694
Not used...
CVE-2025-51746
An issue was discovered in jishenghua JSHERP 2.3.1. The /serialNumber/addSerialNumber endpoint is vulnerable to fastjson deserialization attacks...
D-link DIR-878A1 USB storage processor Code Execution
The vulnerability of the USB storage processor module in D-link DIR-878A1 software routers is related to buffer overflows in the stack during the processing of the Serial Number field. Exploiting this vulnerability allows an attacker to execute arbitrary code...
JLSEC-2025-302 A vulnerability was found in the libtiff library
A vulnerability was found in the libtiff library. This flaw causes a heap buffer overflow issue via the TIFFTAGINKNAMES and TIFFTAGNUMBEROFINKS values...