The vulnerability of the Notes component in operating systems iPadOS and macOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and macOS systems relates to the disclosure of information through registration files. Exploiting this vulnerability can allow attackers to disclose protected information...

Early Bird Registration Now Open for The Inaugural OpenSSL Conference 2025

Newark, United States, 4th August 2025, CyberNewsWire...

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones, which stems from the disclosure of information through registration files, allows attackers to disclose the protected information.

The vulnerability of D-Link DPH-400S and DPH-400SE VoIP phones lies in the ability to disclose information through registration files. Exploiting this vulnerability allows a remote attacker to disclose the protected information...

Arbitrary Code Injection

Overview github.com/hashicorp/vault/vault is a tool for securely accessing secrets. Affected versions of this package are vulnerable to Arbitrary Code Injection on the host by exploiting write permissions in the root namespace, creating audit files in the plugin directory, and using the plugin...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection on the host by exploiting write permissions in the root namespace, creating audit files in the plugin directory, and using the plugin registration functionality to execute the created files. Notes: - This is onl...

CVE-2025-8437

A vulnerability classified as critical has been found in code-projects Kitchen Treasure 1.0. This affects an unknown part of the file /userregistration.php. The manipulation of the argument email leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclose...

Unspecified vulnerability in Apple macOS Sequoia and Apple macOS Sonoma (CNVD-2025-18435)

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. A security vulnerability exists in Apple macOS Sequoia and Apple macOS Sonoma, which stems from an insufficient configuration restriction, and can be exploited by an attacker to cause...

PT-2025-31617 · Code Projects · Kitchen Treasure

Name of the Vulnerable Software and Affected Versions: code-projects Kitchen Treasure version 1.0 Description: A critical vulnerability exists in code-projects Kitchen Treasure 1.0. The issue is located in an unknown part of the file /userregistration.php and involves SQL injection. The...

CVE-2025-52289

A Broken Access Control vulnerability in MagnusBilling v7.8.5.3 allows newly registered users to gain escalated privileges by sending a crafted request to /mbilling/index.php/user/save to set their account status fom "pending" to "active" without requiring administrator approval...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

Apple macOS 安全漏洞

Apple macOS Sequoia and Apple macOS Sonoma are both operating systems from the American company Apple. A security vulnerability exists in Apple macOS Sequoia and Apple macOS Sonoma, which stems from an insufficient configuration restriction, and can be exploited by an attacker to cause...

Taxi Stand Management System admin/new-autoortaxi-entry-form.php file cross-site scripting vulnerability

Taxi Stand Management System is a cab stand management system. Taxi Stand Management System suffers from a cross-site scripting vulnerability that originates from the incorrect operation of the parameter registrationnumber/licensenumber in the file /admin/new-autoortaxi-entry-form.php, for which ...

Online Course Registration Session Hijacking Vulnerability

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

PT-2025-31394 · Cvat · Cvat

Name of the Vulnerable Software and Affected Versions: CVAT versions 1.1.0 through 2.41.0 Description: CVAT is an open source interactive video and image annotation tool for computer vision. Email verification was not enforced when using Basic HTTP Authentication in versions 1.1.0 through 2.41.0,...

SUSE CVE-2025-38354

In the Linux kernel, the following vulnerability has been resolved: drm/msm/gpu: Fix crash when throttling GPU immediately during boot There is a small chance that the GPU is already hot during boot. In that case, the call to ofdevfreqcoolingregister will immediately try to apply devfreq cooling,...

CVE-2025-4056

creationtimestamp| type| source ---|---|--- 2025-07-28 15:40:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luzwj5k2io2q 2026-01-08 05:04:36+00:00| seen| Telegram/WxrxB6nrBwZwliVPEyx9PqLlLqeacusuGOqkaC87KoVWLg0 2026-02-02 14:20:51+00:00| seen|...

PHPGurukul Online Course Registration 安全漏洞

Online Course Registration is an online course registration system. A session hijacking vulnerability exists in Online Course Registration, which stems from improper session expiration of the component /crm/change-password.php. No details of the vulnerability are available at this time...

CVE-2025-50485

Improper session invalidation in the component /crm/change-password.php of PHPGurukul Online Course Registration v3.1 allows attackers to execute a session hijacking attack...

The vulnerability of FortiOS operating systems, related to insufficient protection of registration data, allows attackers to disclose sensitive information.

The vulnerability of the FortiOS operating systems is related to insufficient protection of registration data. Exploiting this vulnerability can allow attackers to disclose the protected information...

The vulnerability of the IAM authentication service for the Kubernetes MinIO Operator STS allows a perpetrator to escalate their privileges and expose protected information.

The vulnerability of the IAM authentication service for the Kubernetes MinIO Operator STS is related to insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor to increase their privileges and expose sensitive information...