GHSA-V8QH-5C5W-48PP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-1461

creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6suri5a2...

CVE-2025-40650

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

CVE-2025-48848

creationtimestamp| type| source ---|---|--- 2025-05-28 08:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7qigkgrl2j...

CVE-2024-26579

creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...

OSV-2025-412 UNKNOWN WRITE in luaL_newstate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420248727 Crash type: UNKNOWN WRITE Crash state: luaLnewstate...

📄 Frappe Framework 15.56.1 SQL Injection

Frappe Framework version 15.56.1 suffers from a remote SQL injection vulnerability. An authenticated SQL injection vulnerability exists in the frappe.desk.reportview.getlist API of the Frappe Framework, affecting versions v15.56.1. The vulnerability stems from improper sanitization of the fields...

PT-2025-24333 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: Lua affected versions not specified Description: The software is susceptible to an unknown write issue triggered during the luaL newstate function call. Recommendations: At the moment, there is no information about a newer version that contai...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from an arbitrary file upload ...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from the presence of an...

M2Soft CROWNIX Report & ERS 安全漏洞

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 7.4.3.599 and earlier and 8.0.3.79 and earlier, which stems from improper access control and could lead to the takeov...

CVE-2025-5250

creationtimestamp| type| source ---|---|--- 2025-05-27 17:47:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6anwzr5662 2025-05-27 17:48:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17689...

CVE-2025-5252

creationtimestamp| type| source ---|---|--- 2025-05-27 17:47:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq6anrpheaj2 2025-05-27 17:48:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17682 2025-09-03...

Important: Red Hat Security Advisory: python-tornado security update

An update for python-tornado is now available for Red Hat Enterprise Linux 9.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2025-48370

creationtimestamp| type| source ---|---|--- 2025-05-27 15:49:17+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17659 2025-05-27 15:55:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq62fj35jmy2...

CVE-2025-27462

creationtimestamp| type| source ---|---|--- 2025-05-27 12:20:55+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lq5ogdt6ua2m 2025-05-27 18:50:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/168 2025-05-27 21:38:26+00:00| seen|...

CVE-2025-41653

creationtimestamp| type| source ---|---|--- 2025-05-27 09:07:04+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:03+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lq5e6purrr62...

CVE-2025-41651

creationtimestamp| type| source ---|---|--- 2025-05-27 08:48:01+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17614 2025-05-27 09:07:03+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lq5dessbva62 2025-05-27 09:18:03+00:00| seen|...

CVE-2025-5232

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiate...

CVE-2025-5232 PHPGurukul Student Study Center Management System report.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Student Study Center Management System 1.0. This issue affects some unknown processing of the file /admin/report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may be initiate...