CVE-2025-3834

CVE-2025-3834 affects Zohocorp ManageEngine ADAudit Plus — vulnerable in versions 8510 and prior due to an authenticated SQL injection in the OU History report. Root cause: improper handling of SQL queries in the reports module. Impact: potential unauthorized data exposure/integrity compromise fo...

CVE-2025-3834 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

OSV-2025-363 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417323384 Crash type: Heap-buffer-overflow READ 2 Crash state: jvstringvfmt jvstringfmt jvget...

PT-2025-21148 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the OU History report. This allows for potential exploitation where an attacker could manipulate database queries...

PT-2025-23443 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow read issue. The crash occurs during the execution of the jv string vfmt, jv string fmt, and jv get functions...

CVE-2025-22252

creationtimestamp| type| source ---|---|--- 2025-05-13 21:09:34+00:00| seen| https://www.fortiguard.com/psirt/FG-IR-24-472 2025-05-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1549 2025-05-14 06:13:02+00:00| seen|...

CVE-2025-43572

creationtimestamp| type| source ---|---|--- 2025-05-13 20:31:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16227 2025-05-14 00:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peiqokx2e...

CVE-2025-4660

creationtimestamp| type| source ---|---|--- 2025-05-13 17:55:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501808160728674 2025-05-13 18:15:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp33axfghk32 2025-05-13...

CERTFR-2025-ALE-006

creationtimestamp| type| source ---|---|--- 2025-05-13 16:24:21+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lp2viqexeb2s 2025-05-13 16:27:19+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lp2vo27f5z2m 2025-05-13 16:27:20+00:00| seen|...

50,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Uncanny Automator WordPress Plugin

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. On April 26th, 2024, we received a submission for an authenticated PHP...

GHSA-QPV8-G6QV-RF8P

creationtimestamp| type| source ---|---|--- 2025-05-13 15:55:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501334070497265...

CVE-2025-22462

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16144 2025-05-13 15:59:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501351524003106 2025-05-13 16:47:59+00:00| seen|...

CVE-2025-4647

creationtimestamp| type| source ---|---|--- 2025-05-13 10:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxiypl52t 2025-05-13 13:52:10+00:00| seen| https://t.me/cvedetector/25176 2026-08-14 16:00:15+00:00| seen| https://t.me/purpsec/623 2026-08-15 00:00:07+00:00| seen|...

CVE-2025-40579

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16096 2025-05-13 10:48:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cn4u6yr42 2025-05-13 10:52:45+00:00| seen|...

kernel: HID: cougar: fix slab-out-of-bounds Read in cougar_report_fixup

In the Linux kernel, the following vulnerability has been resolved: HID: cougar: fix slab-out-of-bounds Read in cougarreportfixup reportfixup for the Cougar 500k Gaming Keyboard was not verifying that the report descriptor size was correct before accessing it...

kernel: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free +0.000021 BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 gpusched +0.000027 Read of size 8 at addr ffff8881b8605f88 by task amdpciunplug/2147 +0.000023 CPU: 6 PID: 2147...

Online Birth Certificate System between-dates-report.php File SQL Injection Vulnerability

Online Birth Certificate System is an online birth certificate system. Online Birth Certificate System is vulnerable to a SQL injection vulnerability that stems from incorrect manipulation of the parameter fromdate in the file /admin/between-dates-report.php resulting in SQL injection. No details...

Important: libxslt security update

libxslt is a library for transforming XML files into other textual formats including HTML, plain text, and other XML representations of the underlying data using the standard XSLT stylesheet transformation mechanism. Security Fixes: libxslt: Use-After-Free in libxslt xsltGetInheritedNsList...

Park Ticketing Management System foreigner-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the foreigner-bwdates-reports-details.php file. An attacker can exploit this vulnerabili...

CVE-2025-31247

creationtimestamp| type| source ---|---|--- 2025-05-12 22:47:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3loz2g35uwr2e 2025-05-13 01:19:35+00:00| seen| https://t.me/cvedetector/25135 2026-04-02 22:17:36+00:00| seen| Telegram/D2Q8ZJtbt01PhfwyXC7lQ4EJlbjNcIuURdjGDUEt8LUtAQ...