CVE-2025-49825

creationtimestamp| type| source ---|---|--- 2025-06-17 11:32:23+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lrsfiuodvs25 2025-06-17 22:00:58+00:00| published-proof-of-concept| Telegram/3wlas6nRaFbR1V-B1xEwrJrPKOz4CFQa-j0eVutc5pi--w 2025-06-17 22:03:08+00:00| seen|...

CVE-2025-49848

creationtimestamp| type| source ---|---|--- 2025-06-17 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-168-02 2025-06-17 19:02:49+00:00| seen| Telegram/iY1e4d35r5DuMD6xVc0zCjzUfsszbqmNzOIDQdgMzjjccfQ...

CVE-2025-6156

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-ds.php. The manipulation of the argument testtype leads to sql injection. The attack can be...

CVE-2025-6156 PHPGurukul Nipah Virus Testing Management System bwdates-report-ds.php sql injection

A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /bwdates-report-ds.php. The manipulation of the argument testtype leads to sql injection. The attack can be...

CVE-2025-6140

creationtimestamp| type| source ---|---|--- 2025-06-17 00:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrr753mazd2m...

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

Miliaris Amigdala 跨站脚本漏洞

Miliaris Amigdala is an application from the Italian company Miliaris. A cross-site scripting vulnerability exists in Miliaris Amigdala version v2.2.6, which stems from the presence of cross-site scripting in the Report Manager functionality that could lead to the execution of arbitrary HTML...

PT-2025-25637 · Undefined · Undefined

CVE-2025-52441 Rejected reason https://t.co/UDw8lb8Tab...

PT-2025-25740 · Unknown · Miliaris Amigdala

Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the report manager function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. Recommendations: For Miliaris...

PT-2025-25632 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A deserialization issue is mentioned, but details are not provided. No information is available about the estimated number of potentially affected devices or real-world incidents...

GHSA-XMMM-JW76-Q7VG

creationtimestamp| type| source ---|---|--- 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3 2025-06-17 01:00:32+00:00| seen| https://gist.github.com/safer-bot/95fa9e363790e3d145320791b4d5b508 2025-06-17 01:10:34+00:00| seen|...

CVE-2025-32797

creationtimestamp| type| source ---|---|--- 2025-06-16 19:26:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694685602522986 2025-06-16 20:37:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18527 2025-12-17 14:22:27+00:00| seen|...

CVE-2025-6170

creationtimestamp| type| source ---|---|--- 2025-06-16 15:40:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18465 2025-06-16 19:34:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqpykd4os2p 2025-06-17 08:06:47+00:00| seen|...

CVE-2025-49794

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18464 2025-06-16 16:24:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693966654084445 2025-06-16 16:33:33+00:00| seen|...

CVE-2025-6127

PHPGurukul Nipah Virus Testing Management System 1.0 is affected by a cross-site scripting vulnerability in the /search-report.php file via the serachdata parameter. Exploitation is possible remotely and may execute arbitrary script in the victim’s browser, potentially stealing cookies or hijacki...

CVE-2025-6126

creationtimestamp| type| source ---|---|--- 2025-06-16 14:56:23+00:00| seen| https://bsky.app/profile/potato.software/post/3lrqagqinbe2x 2025-06-16 16:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18471 2026-07-22 05:00:05+00:00| seen|...

GHSA-4QQF-9M5C-W2C5 Weblate exposes personal IP address via e-mail

Impact The audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. Patches This issue has been addressed in Weblate 5.12 via https://github.com/WeblateOrg/weblate/pull/15102. References Thanks to...

CVE-2025-49125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18453 2025-06-16 15:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693644318306796 2025-06-16 15:19:46+00:00| seen| https://seclists.org/oss-sec/2025/q2/253...

CVE-2025-6165

creationtimestamp| type| source ---|---|--- 2025-06-16 14:08:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693431824068032 2025-06-17 06:39:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18568 2025-06-17 07:00:59+00:00| published-proof-of-concept|...

CVE-2025-6164

creationtimestamp| type| source ---|---|--- 2025-06-16 13:54:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693378725524836 2025-06-17 05:40:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18564 2025-06-17 07:27:58+00:00| seen|...