1511 matches found
CVE-2025-15195
Code-Projects Assessment Management 1.0 is affected. The vulnerability lies in /admin/add-module.php where manipulating the linked[] parameter enables SQL injection. The issue can be exploited remotely and exploits have been publicly disclosed. Multiple sources corroborate the SQLi risk and remot...
Picklescan does not block ctypes
Summary Picklescan doesnt flag ctypes module as a dangerous module, which is a huge issue. ctypes is basically a foreign function interface library and can be used to Load DLLs Call C functions directly Manipulate memory raw pointers. This can allow attackers to achieve RCE by invoking direct...
CVE-2025-15181
creationtimestamp| type| source ---|---|--- 2025-12-29 12:18:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb4sz6bckm2u...
PT-2025-53742
Name of the Vulnerable Software and Affected Versions code-projects Assessment Management version 1.0 Description A SQL injection issue exists due to manipulation of the linked argument within the /admin/add-module.php file. This manipulation affects some unknown functionality. The attack can be...
CVE-2025-15195: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was determined in code-projects Assessment Management 1.0. Affected by this issue is some unknown functionality of the file /admin/add-module.php. This manipulation of the argument linked causes sql injection. The attack can be initiated remotely. The exploit has been publicly...
CVE-2024-30167
creationtimestamp| type| source ---|---|--- 2025-12-27 15:00:07+00:00| published-proof-of-concept| Telegram/jzwMWime8fhSscH30BIVAvpGgHaIHZPVce6IatouQmqqRA 2026-04-29 05:31:07+00:00| seen| https://bsky.app/profile/exploitdb-bot.bsky.social/post/3mkmensmnki2g...
SUSE CVE-2023-54043
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
EUVD-2023-60283
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
CVE-2024-25183
creationtimestamp| type| source ---|---|--- 2025-12-24 14:22:52+00:00| seen| https://gist.github.com/joaoviictorti/db387ef5ea3d35482c5ad4598d945b2f 2025-12-29 22:29:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mb5v5noghq2u...
CVE-2025-68505
creationtimestamp| type| source ---|---|--- 2025-12-24 13:50:32+00:00| seen| https://gist.github.com/Darkcrai86/e369efab61cb9559e825a02fc169db07 2025-12-26 01:25:13+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mau53nl52b22...
CVE-2023-54043
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
CVE-2023-54043 iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
CVE-2023-54043 iommufd: Do not add the same hwpt to the ioas->hwpt_list twice
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
PT-2025-53041
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw within the iommufd subsystem where the same hardware-assisted page table hwpt could be added to the ioas-hwpt list multiple times. This double addition...
CVE-2023-54043: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: iommufd: Do not add the same hwpt to the ioas-hwptlist twice The hwpt is added to the hwptlist only during its creation, it is never added again. This hunk is some missed leftover from rework. Adding it twice will corrupt the...
CVE-2025-68490
creationtimestamp| type| source ---|---|--- 2025-12-19 07:41:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mad6ugdyfr2q...
The ghosts of WhatsApp: How GhostPairing hijacks accounts
Researchers have found an active campaign aimed at taking over WhatsApp accounts. They've called this attack GhostPairing because it tricks the victim into completing WhatsApp’s own device-pairing flow, silently adding the attacker’s browser as an invisible linked device on the account. Ghost of...
CVE-2025-14924
creationtimestamp| type| source ---|---|--- 2025-12-18 05:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-1141/ 2025-12-23 21:34:47+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115771027410495980...
CVE-2025-68434
creationtimestamp| type| source ---|---|--- 2025-12-18 01:54:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3maa2yyqw5b22...
Compromised IAM Credentials Power a Large AWS Crypto Mining Campaign
An ongoing campaign has been observed targeting Amazon Web Services AWS customers using compromised Identity and Access Management IAM credentials to enable cryptocurrency mining. The activity, first detected by Amazon's GuardDuty managed threat detection service and its automated security...