PT-2025-31104 · Meddream · Meddream Pacs Premium

Name of the Vulnerable Software and Affected Versions: meddream MedDream PACS Premium version 7.3.5.860 Description: A reflected cross-site scripting xss vulnerability exists in the radiationDoseReport.php functionality. A specially crafted URL can lead to arbitrary javascript code execution. An...

FreeBSD : Mozilla -- HTTP Basic Authentication credentials leak (477e9eb3-685e-11f0-a12d-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 477e9eb3-685e-11f0-a12d-b42e991fc52e advisory. [email protected] reports: The username:password part was not correctly stripped from URLs in CSP...

CVE-2025-8241

A vulnerability, which was classified as critical, was found in 1000 Projects ABC Courier Management System 1.0. This affects an unknown part of the file /report.php. The manipulation of the argument From leads to sql injection. It is possible to initiate the attack remotely. The exploit has been...

Exploit for Use After Free in Adobe Flash_Player

APTREPORT collected by @blackorbird https://x.com/blackorbird Interesting apt report & sample & malware & technology & intellegence collection APT Group for country Threat Actor Groups Tracked by Palo Alto Networks Unit 42...

PrivescCheck

PrivescCheck This script aims to identify Local Privilege Escalation LPE vulnerabilities that are usually due to Windows configuration issues, or bad practices. It can also gather useful information for some exploitation and post-exploitation tasks. Getting started After downloading the script an...

1000 Projects ABC Courier Management System Injection Vulnerability

1000 Projects ABC Courier Management System is an open source courier management system from 1000 Projects. An injection vulnerability exists in version 1.0 of 1000 Projects ABC Courier Management System, which originates from a SQL injection due to misuse of the From parameter in the file...

curl: Vulnerability Report: Public Exposure of Security Audit File

Summary: A sensitive internal security audit report file for cURL/libcurl—specifically cure53-curl-report-2016.pdf—was found to be publicly accessible via search engine dorking. This file includes detailed vulnerability findings, exploit vectors, code review observations, and remediation advice...

BELL-CVE-2025-38457

Bulletin has no description...

CVE-2025-8170

creationtimestamp| type| source ---|---|--- 2025-07-25 21:13:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114915936740178131...

CVE-2025-38384

In the Linux kernel, the following vulnerability has been resolved: mtd: spinand: fix memory leak of ECC engine conf Memory allocated for the ECC engine conf is not released during spinand cleanup. Below kmemleak trace is seen for this memory leak: unreferenced object 0xffffff80064f00e0 size 8:...

CVE-2025-36728

creationtimestamp| type| source ---|---|--- 2025-07-25 17:09:49+00:00| seen| https://bsky.app/profile/potato.software/post/3lusk3af3yc2g 2025-10-16 16:48:49+00:00| seen| https://gist.github.com/Darkcrai86/a4b19cc327512cf5ba6ada67c7cd231c...

CVE-2025-7724

creationtimestamp| type| source ---|---|--- 2025-07-25 16:32:42+00:00| seen| https://bsky.app/profile/thedailytechfeed.com/post/3lushyr2lw22a...

CVE-2025-38446

In the Linux kernel, the following vulnerability has been resolved: clk: imx: Fix an out-of-bounds access in dispmixcsrclkdevdata When numparents is 4, clkregister occurs an out-of-bounds when accessing parentnames member. Use ARRAYSIZE instead of hardcode number here. BUG: KASAN:...

CVE-2025-38431

In the Linux kernel, the following vulnerability has been resolved: smb: client: fix regression with native SMB symlinks Some users and customers reported that their backup/copy tools started to fail when the directory being copied contained symlink targets that the client couldn't parse - even...

CVE-2025-8138

creationtimestamp| type| source ---|---|--- 2025-07-25 15:08:01+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2025-8140

creationtimestamp| type| source ---|---|--- 2025-07-25 15:08:00+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114914497629194333...

CVE-2025-38402

In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will lead to allocation fail. Command: ethto...

CVE-2025-38370

In the Linux kernel, the following vulnerability has been resolved: btrfs: fix failure to rebuild free space tree using multiple transactions If we are rebuilding a free space tree, while modifying the free space tree we may need to allocate a new metadata block group. If we end up using multiple...

CVE-2025-02515

creationtimestamp| type| source ---|---|--- 2025-07-25 12:04:12+00:00| seen| https://bsky.app/profile/ferramentaslinux.bsky.social/post/3luryyoszas2f...

CVE-2025-8134: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical was found in PHPGurukul BP Monitoring Management System 1.0. This vulnerability affects unknown code of the file /bwdates-report-result.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack can be initiated remotely. The...