PT-2025-34582 · Git · Libwebp

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=438294044 Crash type: Null-dereference READ Crash state: enc [email protected]...

PHPGurukul Zoo Management System 跨站脚本漏洞

Zoo Management System is a zoo management system. Zoo Management System has a cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the parameter visitorname in the file /admin/add-foreigner-ticket.php, which can be...

PT-2025-33450 · Phpgurukul · Phpgurukul Zoo Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Zoo Management System version 2.1 Description: A vulnerability exists in PHPGurukul Zoo Management System 2.1, specifically within the /admin/add-foreigner-ticket.php file. Manipulation of the visitorname argument can lead to...

MAL-2025-7341 Malicious code in @crabas0npm/impedit-magnam-soluta (npm)

The package @crabas0npm/impedit-magnam-soluta was found to contain malicious code...

MAL-2025-36108 Malicious code in test-mlw2-repot-sells (npm)

The package test-mlw2-repot-sells was found to contain malicious code...

MAL-2025-36372 Malicious code in test-mlw2-sulks-proms (npm)

The package test-mlw2-sulks-proms was found to contain malicious code...

MAL-2025-35014 Malicious code in test-mlw2-bunia-foxed (npm)

The package test-mlw2-bunia-foxed was found to contain malicious code...

MAL-2025-40222 Malicious code in yangkuan (npm)

The package yangkuan was found to contain malicious code...

MAL-2025-8341 Malicious code in @lbnqduy/psychic-journey (npm)

The package @lbnqduy/psychic-journey was found to contain malicious code...

MAL-2025-37608 Malicious code in uinsport (npm)

The package uinsport was found to contain malicious code...

MAL-2025-39566 Malicious code in xanadu-k8mj8-aokcz-dew-project (npm)

The package xanadu-k8mj8-aokcz-dew-project was found to contain malicious code...

MAL-2025-7060 Malicious code in @amber-team/log-uptime-deploy (npm)

The package @amber-team/log-uptime-deploy was found to contain malicious code...

MAL-2025-35729 Malicious code in test-mlw2-lycee-weeny (npm)

The package test-mlw2-lycee-weeny was found to contain malicious code...

MAL-2025-35957 Malicious code in test-mlw2-pened-haith (npm)

The package test-mlw2-pened-haith was found to contain malicious code...

MAL-2025-8904 Malicious code in @malware-test-sculs-glory-lants-elder/test-mlw3-sculs-glory-lants-elder (npm)

The package @malware-test-sculs-glory-lants-elder/test-mlw3-sculs-glory-lants-elder was found to contain malicious code...

Exploit for CVE-2025-4404

CVE-2025-4404 POC POC for CVE-2025-4404 If you have a domain...

CVE-2025-54882

Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. In versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, Himmelblau stores the cloud TGT received during logon in the Kerberos credential cache. The created credential cache collection and received credentials...

Himmelblau 安全漏洞

Himmelblau is an Azure Entra ID authentication module open-sourced by Himmelblau. A security vulnerability exists in Himmelblau versions 0.8.0 through 0.9.21 and 1.0.0-beta through 1.1.0, which stems from the Cloud TGT credential cache being stored as globally readable...

CVE-2025-52203

A stored cross-site scripting XSS vulnerability exists in DevaslanPHP project-management v1.2.4. The vulnerability resides in the Ticket Name field, which fails to properly sanitize user-supplied input. An authenticated attacker can inject malicious JavaScript payloads into this field, which are...

Exploits AD CS Template misconfigurations which involve updating an LDAP object: ESC9, ESC10, and ESC16

This module exploits Active Directory Certificate Services AD CS template misconfigurations, specifically ESC9, ESC10, and ESC16, by updating an LDAP object and requesting a certificate on behalf of a target user. The module leverages the auxiliary/admin/ldap/ldapobjectattribute module to update...