PHPGurukul Hostel Management System 注入漏洞

Hostel Management System is a dormitory management system designed specifically for schools or organizations. Hostel Management system suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the studentrollno parameter in the...

CVE-2025-6136

A vulnerability was found in Projectworlds Life Insurance Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /insertPayment.php. The manipulation of the argument reciptno leads to sql injection. The attack may be initiated remotely. The...

CVE-2025-6177

creationtimestamp| type| source ---|---|--- 2025-06-16 18:31:08+00:00| published-proof-of-concept| Telegram/XnI5CwGAlu7722iQmgriWIagWxg1-zWVkiRoBugxAbdJ49c 2025-06-16 19:44:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqqkhafhd2r 2025-06-17 01:09:33+00:00| seen|...

RHSA-2025:8385

creationtimestamp| type| source ---|---|--- 2025-06-16 17:37:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18474 2025-06-18 16:43:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18777...

CVE-2025-6123

creationtimestamp| type| source ---|---|--- 2025-06-16 13:31:01+00:00| published-proof-of-concept| Telegram/rz53I5WOeu2EFNHxI9pOi8BPa-vsRW4PYahdwFC13ZNIQ 2025-06-16 13:36:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18448 2025-06-16 15:48:14+00:00| seen|...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: soc: qcom: socinfo: Avoid out-of-bounds read of the serial number. On MSM8916 devices, the serial number exposed in sysfs is constant and does not change across different devices. It always remains the same:...

Astra Linux – Vulnerability found in Linux 6.1, Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: clk: samsung: Fixed the UBSAN panic in samsungclkinit. With UBSANARRAYBOUNDS=y, I encounter the following panic due to dereferencing ctx-clkdata.hws before setting ctx-clkdata.num = nrclks. This issue needs to be fixed. Panic...

CVE-2025-47868

Out-of-bounds Write resulting in possible Heap-based Buffer Overflow vulnerability was discovered in tools/bdf-converter font conversion utility that is part of Apache NuttX RTOS repository. This standalone program is optional and neither part of NuttX RTOS nor Applications runtime, but active...

CVE-2025-40916

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand function for generating the captcha text as well as image noise, which is insecure...

CVE-2025-40916 Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha text

Mojolicious::Plugin::CaptchaPNG version 1.05 for Perl uses a weak random number source for generating the captcha. That version uses the built-in rand function for generating the captcha text as well as image noise, which is insecure...

CVE-2025-4592

The AI Image Lab – Free AI Image Generator plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.0.6. This is due to missing or incorrect nonce validation on the 'wpz-ai-images' page. This makes it possible for unauthenticated attackers to update...

CVE-2025-4216

The DIOT SCADA with MQTT plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'diot' shortcode in all versions up to, and including, 1.0.5.1 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticat...

TencentOS Server 3: edk2 (TSSA-2024:0393)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2024:0393 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

Projectworlds Life Insurance Management System 注入漏洞

Projectworlds Life Insurance Management System is a life insurance management system from Projectworlds India. An injection vulnerability exists in Projectworlds Life Insurance Management System version 1.0, which stems from an incorrect manipulation of the parameter reciptno in the file...

TencentOS Server 3: libxml2 (TSSA-2025:0238)

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the TSSA-2025:0238 advisory. Package updates are available for TencentOS Server 3 that fix the following vulnerabilities...

TencentOS Server 2: curl (TSSA-2023:0311)

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0311 advisory. Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:...

CGA-9GP6-Q853-9FR5

Bulletin has no description...

CVE-2025-6115

creationtimestamp| type| source ---|---|--- 2025-06-15 10:15:34+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114686855323732103 2025-06-16 09:37:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18428 2025-06-16 11:10:06+00:00| seen|...

CVE-2025-37928

creationtimestamp| type| source ---|---|--- 2025-06-15 07:32:18+00:00| seen| https://bsky.app/profile/nimblenerd.social/post/3lrmx5ps3nt2l 2025-06-16 21:02:28+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrquv7nxa52c 2025-12-03 14:14:49+00:00| seen|...

CVE-2025-5336

CVE-2025-5336 concerns WordPress plugin “Click to Chat” for HoliThemes. The vulnerability is a Stored DOM-based Cross-Site Scripting via the data-no_number parameter in versions up to 4.22, caused by insufficient input sanitization and output escaping. Exploitation requires authenticated access a...