4408 matches found
Fedora: Security Advisory (FEDORA-2025-d58f8ec8ec)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-Q4V2-FVRV-QRF6
creationtimestamp| type| source ---|---|--- 2025-03-17 23:48:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/7890 2025-03-18 00:15:46+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114180551137811517...
CVE-2025-2386 PHPGurukul Local Services Search Engine Management System serviceman-search.php sql injection
A vulnerability was found in PHPGurukul Local Services Search Engine Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /serviceman-search.php. The manipulation of the argument location leads to sql injection. The attack may be initiated...
Fedora: Security Advisory (FEDORA-2025-20bd6d94b9)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GHSA-V8XR-GPVJ-CX9G
creationtimestamp| type| source ---|---|--- 2025-03-14 18:23:04+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lkea5pvarj26 2025-03-29 06:28:40+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9534...
CVE-2024-13824 CiyaShop - Multipurpose WooCommerce Theme <= 4.19.0 - Unauthenticated PHP Object Injection
The CiyaShop - Multipurpose WooCommerce Theme theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.19.0 via deserialization of untrusted input in the 'addciyashopwishlist' and 'ciyashopgetcompare' functions. This makes it possible for unauthenticated...
SICK DL100-2xxxxxxx 安全漏洞
The SICK DL100-2xxxxxxxxx is a series of sensors from SICK, Germany. A security vulnerability exists in the SICK DL100-2xxxxxxxxx that stems from the use of a weak hash algorithm to generate a password hash, which could lead to an attacker easily calculating a matching password...
USN-7332-3 linux-lts-xenial vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - PowerPC architecture; - Block layer subsystem; - GPIO subsystem; - GPU drivers; - Media drivers; - Network drivers;...
Unspecified Vulnerability in Multiple Mozilla Products (CNVD-2025-05231)
Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A security vulnerability exists in several Mozilla products that stems...
RARLabs WinRAR Multiple Vulnerabilities (Mar 2025) - Windows
WinRAR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:rarlab:winrar"; ifdescription...
AlmaLinux 8 : kernel (ALSA-2025:2473)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:2473 advisory. kernel: HID: core: zero-initialize the report buffer CVE-2024-50302 kernel: ALSA: usb-audio: Fix potential out-of-bound accesses for Extigy and Mbox devic...
GHSA-54XQ-CGQR-RPM3
creationtimestamp| type| source ---|---|--- 2025-03-11 22:39:27+00:00| seen| https://gist.github.com/iamJakeRobbins/defef5643ea488f5b864b06ab463866f...
漏洞检测
It is an offensive tool for vulnerability detection. The repository contains a project with a name that translates to "漏洞检测" which means "vulnerability detection" in English. The project is likely used for identifying vulnerabilities in systems or applications. The code snippets provided are...
CERTFR-2025-ACT-010
creationtimestamp| type| source ---|---|--- 2025-03-10 14:27:47+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3ljzr5f5p4r2n 2025-03-10 14:27:47+00:00| seen| https://social.numerique.gouv.fr/users/certfr/statuses/114138602965774995 2025-03-10 15:40:16+00:00| seen|...
Unbreakable Enterprise kernel security update
5.15.0-306.177.4 - Revert 'usb: gadget: userial: Disable ep before setting port to null to fix the crash caused by port being null' Greg Kroah-Hartman - drm/v3d: Assign job pointer to NULL before signaling the fence Maira Canal - scsi: mpi3mr: Fix corrupt config pages PHY state is switched in sys...
CVE-2025-2125 Control iD RH iD PDF Document companyId resource injection
A vulnerability has been found in Control iD RH iD 25.2.25.0 and classified as problematic. This vulnerability affects unknown code of the file /v2/report.svc/comprovantemarcacao/?companyId=1 of the component PDF Document Handler. The manipulation of the argument nsr leads to improper control of...
CVE-2024-58074
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab inteldisplay from the encoder to avoid potential oopsies Grab the inteldisplay from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intelsanitizeencoder, which passes NULL as...
CVE-2025-2084
CVE-2025-2084 concerns a cross-site scripting vulnerability in PHPGurukul’s Human Metapneumovirus Testing Management System 1.0. The affected component is the Search Report Page’s file /search-report.php, where an unknown function is manipulated to trigger XSS. The vulnerability is exploitable re...
CVE-2024-58074 drm/i915: Grab intel_display from the encoder to avoid potential oopsies
In the Linux kernel, the following vulnerability has been resolved: drm/i915: Grab inteldisplay from the encoder to avoid potential oopsies Grab the inteldisplay from 'encoder' rather than 'state' in the encoder hooks to avoid the massive footgun that is intelsanitizeencoder, which passes NULL as...