CVE-2023-6060

creationtimestamp| type| source ---|---|--- 2025-02-11 02:17:09+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulq2cy2r2n...

CVE-2023-3930

creationtimestamp| type| source ---|---|--- 2025-02-11 02:16:41+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhulp7raun2x...

Hospital Management System /edit-profile.php File Cross-Site Scripting Vulnerability

Hospital Management System a PHP and MySQL based hospital management system. Hospital Management System suffers from a cross-site scripting vulnerability that originates from the lack of effective filtering and escaping of user-supplied data in /edit-profile.php, which can be exploited by an...

F5 Networks BIG-IP : BIG-IP APM access profile vulnerability (K000141003)

The version of F5 Networks BIG-IP installed on the remote host is prior to 16.1.5 / 17.1.2. It is, therefore, affected by a vulnerability as referenced in the K000141003 advisory. When a BIG-IP APM access profile is configured on a virtual server, undisclosed requests can cause the Traffic...

CVE-2025-22675

creationtimestamp| type| source ---|---|--- 2025-02-04 15:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lhedz3pyef2n 2025-02-04 18:54:35+00:00| seen| https://t.me/cvedetector/17216...

CVE-2025-21682

creationtimestamp| type| source ---|---|--- 2025-01-31 12:16:47+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgzy45fslt2i 2025-01-31 13:14:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/3646 2025-01-31 15:22:34+00:00| seen|...

CERTFR-2019-ALE-003

creationtimestamp| type| source ---|---|--- 2025-01-29 16:28:50+00:00| seen| https://bsky.app/profile/tuxpanik.bsky.social/post/3lgvfaytoxf2d...

CVE-2025-23867

creationtimestamp| type| source ---|---|--- 2025-01-22 15:21:12+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lgdo7mqxnv2e...

CVE-2024-40513

An issue in themesebrand Chatvia v.5.3.2 allows a remote attacker to execute arbitrary code via the User profile Upload image function...

CVE-2025-22142

CVE-2025-22142 concerns NamelessMC. The vulnerability allows cross-site scripting via an admin-enabled extra field where a user may inject JavaScript that executes when a staff member views the user’s profile on the staff panel. Affected version details are not all consistently stated across sour...

CVE-2024-12211

Pega Platform versions 8.1 to Infinity 24.2.0 are affected by an Stored XSS issue with profile...

Maid Hiring Management System profile.php file cross-site scripting vulnerability

Maid Hiring Management System is a maid hiring management system. Maid Hiring Management System suffers from a cross-site scripting vulnerability in the file /admin/profile.php that stems from a lack of adequate validation and filtering of the input of the name parameter. No details of the...

GetSimpleCMS 安全漏洞

GetSimpleCMS is a content management system open-sourced by an individual developer GetSimpleCMS. A security vulnerability exists in GetSimpleCMS version 3.3.16, which stems from the file /admin/profile.php can lead to a cross-site request forgery vulnerability...

Apple macOS ICC Profile Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of ICC...

Directory Management System 跨站脚本漏洞

Directory Management System is a directory management system by the individual developer Anuj Kumar. A cross-site scripting vulnerability exists in Directory Management System version 1.0, which stems from an unknown function in /admin/admin-profile.php that results in cross-site scripting...

Prison Management System SQL注入漏洞

Prison Management System is a prison management system by Carlo Montero, a personal developer. A SQL injection vulnerability exists in the SourceCodester Prison Management System version 1.0, which originates in the /Employee/edit-profile.php file and can be exploited for SQL injection attacks...

Complete Online Beauty Parlor Management System /admin-profile.php File SQL Injection Vulnerability

Complete Online Beauty Parlor Management System is an online beauty parlor management system. The Complete Online Beauty Parlor Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the adminname parameter of...

CVE-2024-28752

creationtimestamp| type| source ---|---|--- 2024-03-15 12:26:27+00:00| seen| https://t.me/ctinow/208693 2024-03-15 12:31:31+00:00| seen| https://t.me/ctinow/208696 2025-02-13 19:15:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4310 2025-05-10 21:00:06+00:00|...

CVE-2024-20018

creationtimestamp| type| source ---|---|--- 2024-03-04 04:31:54+00:00| seen| https://t.me/ctinow/198977 2025-03-27 15:40:15+00:00| seen| https://bsky.app/profile/cyberalerts.bsky.social/post/3llen4mhqgg2g...

PHPGurukul Online Notes Sharing System Cross-Site Request Forgery Vulnerability

PHPGurukul Online Notes Sharing System is an online notes sharing system from PHPGurukul Inc. A cross-site request forgery vulnerability exists in PHPGurukul Online Notes Sharing System version 1.0, which stems from a cross-site request forgery vulnerability in /user/profile.php...