ZOHO ManageEngine ADAudit Plus 安全漏洞

ZOHO ManageEngine ADAudit Plus is used by ZOHO USA, Inc. to simplify auditing, demonstrate compliance and detect threats. A security vulnerability exists in ZOHO ManageEngine ADAudit Plus 8510 and prior versions, which stems from an authenticated SQL injection in the Alerts module...

Blockchain Powered Edge Intelligence for U-Healthcare in Privacy Critical and Time Sensitive Environment

Edge Intelligence EI serves as a critical enabler for privacy-preserving systems by providing AI-empowered computation and distributed caching services at the edge, thereby minimizing latency and enhancing data privacy. The integration of blockchain technology further augments EI frameworks by...

MINI-FW74-3JQR-PHJG

Bulletin has no description...

MINI-8R3C-7V2G-8FVG

Bulletin has no description...

MINI-49Q7-F2VP-G9V8

Bulletin has no description...

Debian: Security Advisory (DLA-4179-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-47673

creationtimestamp| type| source ---|---|--- 2025-05-23 17:45:27+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17441...

CVE-2025-47678

creationtimestamp| type| source ---|---|--- 2025-05-23 17:44:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17440...

CVE-2025-20257

A vulnerability in an API subsystem of Cisco Secure Network Analytics Manager and Cisco Secure Network Analytics Virtual Manager could allow an authenticated, remote attacker with low privileges to generate fraudulent findings that are used to generate alarms and alerts on an affected product. Th...

GHSA-H3F2-MC85-67GC

creationtimestamp| type| source ---|---|--- 2025-05-23 16:45:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17414...

GHSA-62MF-VHHW-XMF8

creationtimestamp| type| source ---|---|--- 2025-05-23 15:44:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17410...

CVE-2025-46448

creationtimestamp| type| source ---|---|--- 2025-05-23 14:47:00+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17397...

CVE-2025-31060

creationtimestamp| type| source ---|---|--- 2025-05-23 14:05:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17388...

CVE-2025-39536

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-39536 WordPress JobHunt Job Alerts <= 3.6 - Arbitrary Content Deletion Vulnerability

Missing Authorization vulnerability in Chimpstudio JobHunt Job Alerts allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects JobHunt Job Alerts: from n/a through 3.6...

CVE-2025-39536

CVE-2025-39536 affects WordPress plugin JobHunt Job Alerts (versions n/a–3.6). This is a Missing Authorization vulnerability arising from misconfigured access control that could enable Arbitrary Content Deletion. The provided documents do not confirm a patch; Patch Status is listed as Unpatched, ...

CVE-2024-7438

A vulnerability has been found in SimpleMachines SMF 2.1.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /index.php?action=profile;u=2;area=showalerts;do=read of the component User Alert Read Status Handler. The manipulation of the argument...

CVE-2024-31946

An issue was discovered in Stormshield Network Security SNS 3.7.0 through 3.7.41, 3.10.0 through 3.11.29, 4.0 through 4.3.24, and 4.4.0 through 4.7.4. A user who has access to the SNS with write access on the email alerts page has the ability to create alert email containing malicious JavaScript,...

CVE-2023-22642

An improper certificate validation vulnerability CWE-295 in FortiAnalyzer and FortiManager 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4.8 through 6.4.10 may allow a remote and unauthenticated attacker to perform a Man-in-the-Middle attack on the communication channel between the device and the...

CVE-2022-43167

A stored cross-site scripting XSS vulnerability in the Users Alerts feature /index.php?module=usersalerts/usersalerts of Rukovoditel v3.2.1 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title parameter after clicking "Add"...