9437 matches found
CVE-2025-6155 PHPGurukul Hostel Management System login-hm.inc.php sql injection
A vulnerability was found in PHPGurukul Hostel Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /includes/login-hm.inc.php. The manipulation of the argument Username leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2024-40570
SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...
CVE-2025-6143
CVE-2025-6143 affects TOTOLINK EX1200T (version 4.1.2cu.5232_B20210713). The vulnerability is a buffer overflow in the /boafrm/formNtp HTTP POST Request Handler when the submit-url argument is manipulated. This can be triggered remotely and, according to multiple sources, the exploit is public. R...
CVE-2025-32800
creationtimestamp| type| source ---|---|--- 2025-06-16 21:31:33+00:00| seen| Telegram/KLejpjD5UEH6hnx5d7FQ9Ch0fmQr9r8Zh3VRBo7F-IhlZCI 2025-06-16 21:38:18+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18546 2025-06-16 23:40:43+00:00| seen|...
CVE-2025-49134
Weblate (localization tool) exposed user IPs via audit log email notifications prior to version 5.12; IPs could be harvested by third‑party servers (SMTP relays, spam filters). The issue is resolved by patching in Weblate 5.12 (5.12.1 recommended).
CVE-2025-6138
The CVE-2025-6138 entry applies to TOTOLINK T10 (version 4.1.8cu.5207). The vulnerability is in the HTTP POST Request Handler function setWizardCfg, in the file /cgi-bin/cstecgi.cgi, where manipulation of the ssid5g argument causes a buffer overflow. It can be exploited remotely, and the exploit ...
CVE-2025-6128
creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:57+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18462 2025-06-16 16:27:20+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693979502813612 2025-06-16 16:33:45+00:00| published-proof-of-concept|...
CVE-2025-4565
Any project that uses Protobuf Pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit. This can result in a Denial of service by crashin...
CVE-2025-48988
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat. This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.41, from 9.0.0.M1 through 9.0.105. The following versions were EOL at the time the CVE was created but are known to be...
CVE-2025-40916
creationtimestamp| type| source ---|---|--- 2025-06-16 11:39:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18441 2025-06-16 14:32:50+00:00| published-proof-of-concept| Telegram/U8pKzxPaqTMvqzadPo8O1KrDHB3eplOCTxi2a-1fsFdgwBo 2025-06-16 15:08:12+00:00| seen|...
CVE-2025-24388
OTRS Administrative and Agent Interfaces are affected by CVE-2025-24388. A parameter injection vulnerability exists for an authenticated admin or agent user in versions before OTRS 8, impacting OTRS 7.0.X, 8.0.X, 2023.X, 2024.X, 2025.X and ((OTRS)) Community Edition 6.0.x. The issue stems from pa...
CVE-2025-4748
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Erlang OTP stdlib modules allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and program routines zip:unzip/1, zip:unzip/2,...
CVE-2025-40728
SQL injection vulnerability in Customer Support System v1.0. This vulnerability allows an authenticated attacker to retrieve, create, update and delete databases via the id parameter in the /customersupport/manageuser.php endpoint...
CVE-2025-49709 vulnerabilities
Vulnerabilities for packages: firefox...
CVE-2025-6109
creationtimestamp| type| source ---|---|--- 2025-06-16 06:36:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18418 2025-06-16 07:48:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrpikccokq2u 2025-06-16 10:09:38+00:00| seen|...
CVE-2025-6101
CVE-2025-6101 affects the letta-ai letta project up to version 0.4.1. The vulnerable component is the function_message logic in the file letta/letta/interface.py, where manipulation of the arguments function_name/function_args enables improper neutralization of directives in dynamically evaluated...
CVE-2025-6097
creationtimestamp| type| source ---|---|--- 2025-06-16 00:38:43+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18390 2025-06-16 01:33:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrotla7zzv2k...
CVE-2025-5964
creationtimestamp| type| source ---|---|--- 2025-06-15 20:39:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18386 2025-06-15 21:00:28+00:00| seen| Telegram/qqGdRq3IEZWlesNnwy1ijPtikCMQVd1aEhfCMytKb8KLZk 2025-06-15 21:06:26+00:00| seen|...
CVE-2025-5990
creationtimestamp| type| source ---|---|--- 2025-06-15 19:01:17+00:00| published-proof-of-concept| Telegram/cdlz3y5IHmZBzdfZM02iXdk0I82b8uC2wbv6lTKq0J7SQ 2025-06-15 21:23:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lroflspgz32i 2025-06-16 14:38:17+00:00|...
