PT-2025-29450 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0. The vulnerability affects unknown code within the /view-cad.php file. Manipulation of the ID argument can lead to SQL injection, allowing...

PHPGurukul Online Fire Reporting System 注入漏洞

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

PT-2025-33756

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0 31 Description: A flaw exists in the Linux kernel related to Human Interface Devices HID with the APPLE MAGIC BACKLIGHT quirk. A malicious HID device can trigger a NULL pointer dereference within the appl...

curl: HTTP Request Smuggling Vulnerability Analysis - cURL Security Report

HTTP Request Smuggling Vulnerability Report - cURL Summary: cURL does not explicitly reject HTTP requests that contain both Transfer-Encoding and Content-Length headers, which can lead to HTTP request smuggling vulnerabilities CWE-444 when the request passes through intermediary systems proxies,...

BELL-CVE-2025-38310

Bulletin has no description...

PT-2025-29298 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-29304 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

Leaked Shellter Elite Tool Now Fueling Infostealer Attacks Worldwide

A new report details how the advanced hacking tool Shellter Elite was leaked and is now being used…...

GHSA-453J-Q27H-5P8X

creationtimestamp| type| source ---|---|--- 2025-07-11 20:15:22+00:00| seen| https://seclists.org/oss-sec/2025/q3/35...

CVE-2025-6395

creationtimestamp| type| source ---|---|--- 2025-07-11 19:37:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/34 2025-09-10 09:29:04+00:00| seen| https://gist.github.com/Darkcrai86/b87e14a5bc55e398469cc37b642c3272 2026-01-21 21:18:16+00:00| seen|...

CVE-2025-30402

creationtimestamp| type| source ---|---|--- 2025-07-11 19:03:10+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114836150017822027...

CVE-2025-52951

creationtimestamp| type| source ---|---|--- 2025-07-11 15:24:11+00:00| seen| Telegram/kkSDHnydT8KB8qrfX5aVARNi4bfYfHed2L6Zq5TyfaKN4M...

CVE-2025-48924

creationtimestamp| type| source ---|---|--- 2025-07-11 14:04:51+00:00| seen| https://seclists.org/oss-sec/2025/q3/32 2025-07-11 18:31:21+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3ltpi45uma42o 2025-07-16 19:29:31+00:00| seen|...

CVE-2025-38308

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: avs: Fix possible null-ptr-deref when initing hw Search result of avsdaifindpathtemplate shall be verified before being used. As 'template' is already known when avshwconstraintsinit is fired, drop the search entirel...

OSV-2025-544 Heap-buffer-overflow in N_BELE_RTP::LEPolicy::get32

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=430110068 Crash type: Heap-buffer-overflow READ 4 Crash state: NBELERTP::LEPolicy::get32 PackLinuxElf32::elflookup PackLinuxElf32::PackLinuxElf32help1...

PT-2025-29208 · Apache · Apache Http Server

Name of the Vulnerable Software and Affected Versions: Apache HTTP Server affected versions not specified Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2025-53542

creationtimestamp| type| source ---|---|--- 2025-07-10 18:39:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830395993184387...

CVE-2024-43394 Apache HTTP Server: SSRF on Windows due to UNC paths

Server-Side Request Forgery SSRF in Apache HTTP Server on Windows allows to potentially leak NTLM hashes to a malicious server via modrewrite or apache expressions that pass unvalidated request input. This issue affects Apache HTTP Server: from 2.4.0 through 2.4.63. Note: The Apache HTTP Server...

CVE-2025-49812

creationtimestamp| type| source ---|---|--- 2025-07-10 15:56:32+00:00| seen| https://seclists.org/oss-sec/2025/q3/27 2025-07-10 17:02:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830011674092966 2025-07-11 01:46:56+00:00| seen|...

CVE-2025-23048

creationtimestamp| type| source ---|---|--- 2025-07-10 15:52:45+00:00| seen| https://seclists.org/oss-sec/2025/q3/26 2025-07-10 17:02:07+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114830011674092966 2025-07-10 18:29:06+00:00| seen|...