Linux Distros Unpatched Vulnerability : CVE-2025-26527

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block. CVE-2025-26527 Note that Nessus relies...

PT-2025-35908

Name of the Vulnerable Software and Affected Versions: appRain CMF version 4.0.5 Description: A stored authenticated cross-site scripting XSS issue exists due to insufficient validation of user input. The vulnerability is located in the dataFileManagersearch parameter within the...

PT-2025-35937

Name of the Vulnerable Software and Affected Versions: GOV CMS versions prior to 4.0 Description: The input from the search query parameter in GOV CMS is not properly sanitized, leading to a Blind SQL injection. This could be exploited by an unauthenticated remote attacker. Recommendations: Ensur...

Exploit for CVE-2025-55998

CVE-2025-55998 Summary | Vulnerability Details | CVE-2025...

CVE-2025-58613

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...

WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bao - BlueRock in WordPress Plugin Posts Table with Search & Sort versions = 1.4.10...

CVE-2025-58613

CVE-2025-58613 concerns a Missing Authorization/Broken Access Control flaw in the WordPress plugin “Posts Table with Search & Sort” (Barn2 Plugins). The vulnerability affects versions up to 1.4.10 and is driven by incorrectly configured access control security levels, enabling unauthorized access...

CVE-2025-58613 WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...

CVE-2025-58613 WordPress Posts Table with Search & Sort Plugin <= 1.4.10 - Broken Access Control Vulnerability

Missing Authorization vulnerability in Barn2 Plugins Posts Table with Search & Sort posts-data-table allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Posts Table with Search & Sort: from n/a through = 1.4.10...

Fake AnyDesk Installer Spreads MetaStealer Through ClickFix Scam

A new and clever ClickFix scam is using a fake AnyDesk installer and Windows search to bypass security,…...

CVE-2025-9771

A security vulnerability has been detected in SourceCodester Eye Clinic Management System 1.0. Affected by this issue is some unknown functionality of the file /main/searchindexDiagnosis.php. Such manipulation of the argument Search leads to sql injection. It is possible to launch the attack...

CVE-2025-9753

A vulnerability was detected in Campcodes Online Hospital Management System 1.0. The affected element is an unknown function of the file /admin/patient-search.php of the component Patient Search Module. Performing manipulation of the argument Search by Name Mobile No results in cross site...

CVE-2025-9842

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-9842

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-9842 Das Parking Management System 停车场管理系统 Search information disclosure

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-9842 Das Parking Management System 停车场管理系统 Search information disclosure

A vulnerability was detected in Das Parking Management System 停车场管理系统 6.2.0. This impacts an unknown function of the file /Operator/Search. The manipulation results in information disclosure. The attack may be performed from remote. The exploit is now public and may be used...

CVE-2025-9842

The CVE-2025-9842 entry concerns Das Parking Management System 6.2.0, where the issue lies in the /Operator/Search functionality leading to information disclosure. Descriptions indicate a remote attack and publicly available exploit. Connected sources corroborate the affected version and the file...

PT-2025-35645

Name of the Vulnerable Software and Affected Versions: Das Parking Management System versions 6.2.0 Description: A vulnerability exists in Das Parking Management System that may lead to information disclosure. The issue impacts an unknown function within the /Operator/Search file and can be...

Linux Distros Unpatched Vulnerability : CVE-2024-31456

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GLPI is a Free Asset and IT Management Software package. Prior to 10.0.15, an authenticated user can exploit a SQL injection vulnerability from map search. This...

PT-2025-35747

Name of the Vulnerable Software and Affected Versions: Barn2 Plugins Posts Table with Search & Sort versions through 1.4.10 Description: The Posts Table with Search & Sort plugin contains a missing authorization flaw due to incorrectly configured access control security levels. Recommendations:...