PT-2025-37563

Name of the Vulnerable Software and Affected Versions: Campcodes Online Job Finder System version 1.0 Description: A flaw has been found that allows for SQL injection. The issue affects an unknown function of the file /index.php?q=result=bycompany. Manipulation of the Search parameter causes the...

CVE-2025-57118

An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php...

PT-2025-37643

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the RDMA/bnxt re driver related to the handling of the mbox producer index wraparound. The driver incorrectly manages the wraparound of the mbox...

CVE-2025-10410

A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-10410

A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-10410 SourceCodester Link Status Checker index.php server-side request forgery

A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-10410 SourceCodester Link Status Checker index.php server-side request forgery

A security vulnerability has been detected in SourceCodester Link Status Checker 1.0. This vulnerability affects unknown code of the file index.php. The manipulation of the argument proxy leads to server-side request forgery. The attack may be initiated remotely. The exploit has been disclosed...

CVE-2025-10410

CVE-2025-10410 affects SourceCodester Link Status Checker 1.0, specifically the code in index.php where manipulating the proxy argument enables server-side request forgery (SSRF). Multiple feeds confirm remote initiation and public disclosure of the exploit. The primary affected component is the ...

CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

MAL-2025-47787 Malicious code in mevguard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46b2aa8c02569ef9c6bab8214553d7af8d7e1c1f3499324654bb30870832f6f5 The obfuscated code provides "initializesession" function that exfiltrates the provided argument. --- Category: MALICIOUS - The campaign has clearly malicious...

Malicious code in mevguard (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 46b2aa8c02569ef9c6bab8214553d7af8d7e1c1f3499324654bb30870832f6f5 The obfuscated code provides "initializesession" function that exfiltrates the provided argument. --- Category: MALICIOUS - The campaign has clearly malicious...

PT-2025-37430

Name of the Vulnerable Software and Affected Versions: SourceCodester Link Status Checker version 1.0 Description: A security issue exists in SourceCodester Link Status Checker 1.0, affecting unknown code within the index.php file. Manipulation of the proxy argument can lead to server-side reques...

SUSE CVE-2025-39797

In the Linux kernel, the following vulnerability has been resolved: xfrm: Duplicate SPI Handling The issue originates when Strongswan initiates an XFRMMSGALLOCSPI Netlink message, which triggers the kernel function xfrmallocspi. This function is expected to ensure uniqueness of the Security...

SUSE CVE-2025-38568

In the Linux kernel, the following vulnerability has been resolved: net/sched: mqprio: fix stack out-of-bounds write in tc entry parsing TCAMQPRIOTCENTRYINDEX is validated using NLAPOLICYMAXNLAU32, TCQOPTMAXQUEUE, which allows the value TCQOPTMAXQUEUE 16. This leads to a 4-byte out-of-bounds stac...

Malicious code in tronkeypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15beba1021e7f60daed074087734c4a931b0b0d93695e6d1bf28aea909f41a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-47807 Malicious code in tronkeypy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 15beba1021e7f60daed074087734c4a931b0b0d93695e6d1bf28aea909f41a80 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

Malicious code in consolecolornew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a54001c8462b9c69251a199f4e782ad084ccd11ad435aa785443af2590dc0f02 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

MAL-2025-47754 Malicious code in consolecolornew (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 a54001c8462b9c69251a199f4e782ad084ccd11ad435aa785443af2590dc0f02 If used, the code attempts to take a photo using the computer's camera and exfiltrates it --- Category: MALICIOUS - The campaign has clearly malicious intent,...

Malicious code in tronkeyspy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 762c52ac89d263a12b871d89f8eda658aaa6cc433251fb764ccc55d28e94f1e1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...

MAL-2025-47808 Malicious code in tronkeyspy (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 762c52ac89d263a12b871d89f8eda658aaa6cc433251fb764ccc55d28e94f1e1 Package appears to be designed for private key exfiltration, but no known usage. The name appears to be related to the cryptocurrency TRX Tron / Tronix. Some...