CVE-2025-46558

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14127 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642542388304 2025-04-30 20:30:48+00:00| seen|...

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

CVE-2025-46780

creationtimestamp| type| source ---|---|--- 2025-04-30 05:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4deqmtl2h 2025-04-30 07:53:01+00:00| seen| https://t.me/cvedetector/24069...

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the foreigner-bwdates-reports-details.php file. An attacker can exploit this vulnerabili...

PT-2025-27985

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL dereference of tsm ops in the configfs-tsm-report mechanism has been fixed. The issue arises because the lifetime of configfs objects is controlled by userspace, and there is no...

PT-2025-18912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an uninitialized memory access in the Linux kernel. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a rejection of the vulnerabilit...

Fedora 40 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-8445f115f6)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-8445f115f6 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2025-4080

creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13916 2025-04-29 23:31:44+00:00| seen| https://t.me/cvedetector/24051 2025-04-29 23:50:46+00:00| seen|...

CVE-2025-4074

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack...

CVE-2025-45956

creationtimestamp| type| source ---|---|--- 2025-04-29 17:11:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13864 2025-04-29 19:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2iklvmk2r 2025-04-29 21:01:14+00:00| seen|...

CVE-2025-22883

creationtimestamp| type| source ---|---|--- 2025-04-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-119-02 2025-04-30 08:13:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13989 2025-04-30 10:00:18+00:00| seen|...

PHPGurukul Curfew e-Pass Management System 注入漏洞

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in the parameter fromdate/todate in the file...

CVE-2025-4033

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /patient-search-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-4030

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to initiate the attack remotely...

Interesting WordPress Malware Disguised as Legitimate Anti-Malware Plugin

📢In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. The Wordfence Threat Intelligence team recently discovered an interestin...

CVE-2025-4026

creationtimestamp| type| source ---|---|--- 2025-04-28 16:11:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13702 2025-04-28 19:50:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzdh3z22u 2025-04-28 19:54:59+00:00| seen|...

CVE-2015-2079

creationtimestamp| type| source ---|---|--- 2025-04-28 15:10:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13686 2025-04-28 15:48:51+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114416374759123338 2025-04-28 17:45:20+00:00| seen|...

CVE-2025-23377

Dell PowerProtect Data Manager Reporting, versions 19.17, 19.18 contains an Improper Encoding or Escaping of Output vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to inject arbitrary web script or html in reporting outputs...

CVE-2025-4012

creationtimestamp| type| source ---|---|--- 2025-04-28 09:10:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13664 2025-04-28 09:41:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnuhxjsgyu2b 2025-04-28 13:13:38+00:00| seen|...

CVE-2025-4005

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. The attack may be initiated remotely. The...