Emergency Ambulance Hiring Portal bwdates-request-report-details.php File SQL Injection Vulnerability

Emergency Ambulance Hiring Portal is an emergency ambulance hiring portal. Emergency Ambulance Hiring Portal suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter fromdate/todate in the file...

CVE-2025-6735

creationtimestamp| type| source ---|---|--- 2025-06-26 23:53:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19659 2025-06-27 04:48:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsktmdu42k2a...

CVE-2014-0468

creationtimestamp| type| source ---|---|--- 2025-06-26 20:51:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19653 2025-06-27 01:12:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lskhj2essn2o...

CVE-2025-52888

Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool. A critical XML External Entity XXE vulnerability exists in the xunit-xml-plugin used by Allure 2 prior to version 2.34.1. The plugin fails to securely configure the XML parser DocumentBuilderFactory and...

CVE-2025-6701

creationtimestamp| type| source ---|---|--- 2025-06-26 16:51:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19627 2025-06-26 20:36:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjy4vrwjs2r...

CVE-2025-6700

creationtimestamp| type| source ---|---|--- 2025-06-26 15:52:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19611 2025-06-26 20:39:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjybs6x7k2s...

Wordfence Intelligence Weekly WordPress Vulnerability Report (June 16, 2025 to June 22, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

CVE-2025-5366

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Folder-wise read mails with subject report...

CVE-2025-5966 Stored XSS

Zohocorp ManageEngine Exchange reporter Plus version 5722 and below are vulnerable to Stored XSS in the Attachments by filename keyword report...

CVE-2025-3773

creationtimestamp| type| source ---|---|--- 2025-06-26 11:51:21+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19588 2025-06-26 16:34:46+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsjklurn4h2m...

CVE-2025-41404

creationtimestamp| type| source ---|---|--- 2025-06-26 06:51:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19580 2025-06-26 10:55:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsixnvp54g2r...

CVE-2025-5813

creationtimestamp| type| source ---|---|--- 2025-06-26 03:48:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19566 2025-06-26 06:27:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiin52y752s...

PT-2025-26956 · Manageengine · Zoho Manageengine Exchange Reporter Plus

Name of the Vulnerable Software and Affected Versions: ManageEngine Exchange Reporter Plus versions 5722 and earlier Description: The issue concerns a Stored XSS in the report for emails read by folder with subject. This affects the specified versions of ManageEngine Exchange Reporter Plus,...

CVE-2025-52577

creationtimestamp| type| source ---|---|--- 2025-06-25 23:38:33+00:00| seen| https://bsky.app/profile/eris404.rip/post/3lshrsp5is22p 2025-07-10 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-191-08...

CVE-2025-6621

creationtimestamp| type| source ---|---|--- 2025-06-25 18:52:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19521 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6618

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19491 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6619

creationtimestamp| type| source ---|---|--- 2025-06-25 18:06:20+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19490 2025-06-30 20:26:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-6615

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19488 2025-06-25 17:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsh5i24mhj2m 2025-06-30 20:26:57+00:00| seen|...

GHSA-W8JV-RG3H-FC68

creationtimestamp| type| source ---|---|--- 2025-06-25 16:47:30+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19475...

CVE-2025-50179 Tuleap missing CSRF protection on tracker reports manipulation

Tuleap is an Open Source Suite to improve management of software developments and collaboration. An attacker could use a cross-site request forgery vulnerability in Tuleap Community Edition prior to version 16.8.99.1749830289 and Tuleap Enterprise Edition prior to version 16.9-1 to trick victims...