CVE-2025-4303

A vulnerability, which was classified as critical, has been found in PHPGurukul Human Metapneumovirus Testing Management System 1.0. Affected by this issue is some unknown functionality of the file /add-phlebotomist.php. The manipulation of the argument empid leads to sql injection. The attack ma...

CVE-2025-4263

creationtimestamp| type| source ---|---|--- 2025-05-05 04:18:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14831 2025-05-05 06:15:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lofpri3bsn2t 2025-05-05 07:30:45+00:00| exploited|...

CVE-2022-49804

In the Linux kernel, the following vulnerability has been resolved: s390: avoid using global register for currentstackpointer Commit 30de14b1884b "s390: currentstackpointer shouldn't be a function" made currentstackpointer a global register variable like on many other architectures. Unfortunately...

CVE-2025-37793

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix null-ptr-deref in avscomponentprobe devmkasprintf returns NULL when memory allocation fails. Currently, avscomponentprobe does not check for this case, which results in a NULL pointer dereference...

CVE-2025-46633

creationtimestamp| type| source ---|---|--- 2025-05-01 22:01:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cppd7hh2h 2025-05-01 23:12:31+00:00| seen| https://t.me/cvedetector/24265 2025-05-02 15:16:59+00:00| published-proof-of-concept|...

CVE-2025-37778

In the Linux kernel, the following vulnerability has been resolved: ksmbd: Fix dangling pointer in krbauthenticate krbauthenticate frees sess-user and does not set the pointer to NULL. It calls ksmbdkrb5authenticate to reinitialise sess-user but that function may return without doing so. If that...

CVE-2025-3503

creationtimestamp| type| source ---|---|--- 2025-05-01 06:13:50+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14239 2025-05-01 09:55:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo426aydww2p 2025-05-01 10:39:11+00:00| seen|...

CVE-2025-31197

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuffhil2d 2025-04-29 06:47:57+00:00| seen| https://t.me/cvedetector/23975...

CVE-2025-46761

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweuemz6q2h 2025-04-29 06:47:45+00:00| seen| https://t.me/cvedetector/23967...

CVE-2025-2248

creationtimestamp| type| source ---|---|--- 2025-04-28 02:57:52+00:00| seen| https://bsky.app/profile/thewhynet.bsky.social/post/3lntrgsnq6x2h 2025-05-16 20:34:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16753...

Threat Replay Testing: Turning Attackers into Pen Testers

API security is no longer just a concern; it’s a critical priority for businesses. With APIs serving as the backbone of modern applications, they’ve become a primary target for attackers. While automated security testing tools help detect vulnerabilities, their limitations leave organizations...

CVE-2025-31353

creationtimestamp| type| source ---|---|--- 2025-04-22 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-112-01 2025-06-16 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-396/...

CVE-2025-2291

creationtimestamp| type| source ---|---|--- 2025-04-22 01:38:00+00:00| seen| https://bsky.app/profile/PostgreSQL.activitypub.awakari.com.ap.brid.gy/post/3lnek5qwsyqo2 2025-04-23 07:35:38+00:00| seen| https://bsky.app/profile/theemerichunter.bsky.social/post/3lnhomvsxmg25 2025-08-09 13:26:56+00:00...

GHSA-MG2H-6X62-WPWC

creationtimestamp| type| source ---|---|--- 2025-04-18 16:59:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12494 2025-04-18 17:10:14+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114360071872639571 2025-04-18 19:30:43+00:00| published-proof-of-concept|...

BELL-CVE-2025-22104

Bulletin has no description...

CVE-2025-39526

creationtimestamp| type| source ---|---|--- 2025-04-17 16:48:50+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114354325296030508...

CVE-2025-99999

creationtimestamp| type| source ---|---|--- 2025-04-17 11:16:44+00:00| seen| https://bsky.app/profile/masuda-bot.jiskey.dev.ap.brid.gy/post/3lmyy6gkrnej2 2026-05-21 11:00:14+00:00| seen| Telegram/srrws2Goqnzo18NHrsMZQVnJlAuG4EubtN588eV7RqbvrI...

CVE-2025-31021

creationtimestamp| type| source ---|---|--- 2025-04-16 23:24:10+00:00| seen| https://bsky.app/profile/infosecsherpa.bsky.social/post/3lmxqekakxc2e...

CVE-2024-40069

Sourcecodester Online ID Generator System 1.0 was discovered to contain Stored Cross Site Scripting XSS via idgenerator/classes/Users.php?f=save, and the point of vulnerability is in the POST parameter 'firstname' and 'lastname'...

GHSA-H99M-6755-RGWC

creationtimestamp| type| source ---|---|--- 2025-04-16 08:55:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11997 2025-04-16 13:03:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114347775337646077...