CVE-2025-3041 Project Worlds Online Time Table Generator updatestudent.php unrestricted upload

A vulnerability classified as critical has been found in Project Worlds Online Time Table Generator 1.0. This affects an unknown part of the file /admin/updatestudent.php. The manipulation of the argument pic leads to unrestricted upload. It is possible to initiate the attack remotely. The exploi...

CVE-2025-31188

A race condition was addressed with additional validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to bypass Privacy preferences...

CVE-2025-30441

This issue was addressed through improved state management. This issue is fixed in Xcode 16.3. An app may be able to overwrite arbitrary files...

CVE-2025-24283

A logging issue was addressed with improved data redaction. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, visionOS 2.4, watchOS 11.4. An app may be able to access sensitive user data...

CVE-2025-24170

A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges...

CVE-2025-24254

CVE-2025-24254 affects macOS, with fixes in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The underlying issue is improved validation of symlinks, addressing a potential privilege-escalation vector. Remediation is to apply the listed OS updates; exploitation details are not p...

CVE-2025-24278

This issue was addressed with improved validation of symlinks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data...

CVE-2025-31191

CVE-2025-31191 is a macOS sandbox escape vulnerability fixed in Apple security updates (Ventura 13.7.5, Sequoia 15.4, Sonoma 14.7.5, iOS 18.4, etc.). The connected Microsoft threat research details a sandbox-escape chain abusing security-scoped bookmarks and the keychain. Attackers could leverage...

CVE-2025-24272

Summary: CVE-2025-24272 affects macOS where an app may modify protected parts of the file system. The issue was addressed with improved checks and is fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. The public sources indicate Apple updates released to remediate this vu...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24178

This issue was addressed through improved state management. This issue is fixed in iOS 18.4 and iPadOS 18.4, iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to break out of its sandbox...

CVE-2025-24241

The CVE-2025-24241 issue is a configuration-related vulnerability affecting macOS, fixed in macOS Ventura 13.7.5, macOS Sequoia 15.4, and macOS Sonoma 14.7.5. It describes a way an app may deceive a user into copying sensitive data to the pasteboard. The core detail provided is a configuration is...

CVE-2025-24191

The issue was addressed with improved validation of environment variables. This issue is fixed in macOS Sequoia 15.4. An app may be able to modify protected parts of the file system...

CVE-2025-31123

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9764 2025-03-31 21:49:02+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114259246539821602 2025-03-31 21:49:02+00:00| seen|...

CVE-2025-21893

creationtimestamp| type| source ---|---|--- 2025-03-31 20:31:08+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9762 2025-03-31 21:09:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114259091334934490 2025-03-31 21:09:33+00:00| seen|...

CVE-2025-31124

Zitadel is open-source identity infrastructure software. ZITADEL administrators can enable a setting called "Ignoring unknown usernames" which helps mitigate attacks that try to guess/enumerate usernames. If enabled, ZITADEL will show the password prompt even if the user doesn't exist and report...

CVE-2025-3004

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...

CVE-2025-2292

creationtimestamp| type| source ---|---|--- 2025-03-31 17:31:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9718 2025-03-31 21:43:32+00:00| seen| https://t.me/cvedetector/21646 2025-07-22 15:27:53+00:00| seen|...

CVE-2025-31122

creationtimestamp| type| source ---|---|--- 2025-03-31 17:16:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258175577877862 2025-03-31 17:16:40+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114258175577877862 2025-03-31 17:30:51+00:00| published-proof-of-concept|...

CVE-2025-3004

A vulnerability has been found in Sayski ForestBlog up to 20250321 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /search. The manipulation of the argument keywords leads to cross site scripting. The attack can be launched remotely. The explo...