Fedora: Security Advisory (FEDORA-2025-17fed14cc3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2025-36527

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports...

CVE-2025-5156

creationtimestamp| type| source ---|---|--- 2025-05-25 07:14:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114567235034165547 2025-05-25 22:46:25+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17515 2025-05-25 22:56:44+00:00| seen|...

CVE-2025-5138

creationtimestamp| type| source ---|---|--- 2025-05-25 00:46:14+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17500 2025-05-25 00:57:47+00:00| seen| https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lpxhct46oe22 2025-05-25...

CVE-2000-0984

creationtimestamp| type| source ---|---|--- 2025-05-23 21:02:17+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lpujovt2vz2o...

CVE-2024-51108

creationtimestamp| type| source ---|---|--- 2025-05-23 17:40:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpu6fnfon222...

CVE-2025-5106

creationtimestamp| type| source ---|---|--- 2025-05-23 16:15:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptzobiysv2w...

CVE-2025-3894

creationtimestamp| type| source ---|---|--- 2025-05-23 16:05:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lptz4eg6lg2o...

CVE-2025-47673

CVE-2025-47673 affects the WordPress Arconix Shortcodes plugin up to version 2.1.16. It is a Reflected XSS flaw caused by improper input neutralization during web page generation. According to CVSS 3.1, the base score is 7.1 (High); vector: Network, low attack complexity, privileges required: Non...

CVE-2025-23369

An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowed signature spoofing for unauthorized internal users. Instances not utilizing SAML single sign-on or where the attacker is not already an existing user were not impacted. This...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report...

CVE-2025-36527

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection while exporting reports...

CVE-2024-25624

Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper setup of Jinja2 environment, reports generation in iris-web is prone to a Server Side Template Injection SSTI. Successful exploitation of the vulnerability c...

CVE-2024-10160

A vulnerability, which was classified as critical, has been found in PHPGurukul Boat Booking System 1.0. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php of the component BW Dates Report Page. The manipulation of the argument fdate/tdate leads to...

CVE-2024-10122

A vulnerability was found in Topdata Inner Rep Plus WebServer 2.01. It has been classified as problematic. Affected is an unknown function of the file /InnerRepPlus.html of the component Operator Details Form. The manipulation leads to missing password field masking. It is possible to launch the...

CVE-2024-1604

Improper authorization in the report management and creation module of BMC Control-M branches 9.0.20 and 9.0.21 allows logged-in users to read and make unauthorized changes to any reports available within the application, even without proper permissions. The attacker must know the unique identifi...

CVE-2024-52506

Graylog is a free and open log management platform. The reporting functionality in Graylog allows the creation and scheduling of reports which contain dashboard widgets displaying individual log messages or metrics aggregated from fields of multiple log messages. This functionality, as included i...

CVE-2025-41407 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions below 8511 are vulnerable to SQL injection in the OU History report...

CVE-2025-41407

Zohocorp ManageEngine ADAudit Plus, prior to version 8511, has a SQL injection vulnerability in the OU History report. Root cause: improper handling of input in the OU History reporting path leading to SQL injection. Impact: potential unauthorized access or data disclosure from affected installat...