PHPGurukul BP Monitoring Management System security vulnerabilities

PHPGurukul BP Monitoring Management System is a bp monitoring management system from PHPGurukul. A security vulnerability exists in version 1.0 of the PHPGurukul BP Monitoring Management System, which originates from a SQL injection due to the incorrect operation of the parameter fromdate/todate ...

GHSA-VR59-GM53-V7CQ XWiki Platform vulnerable to SQL injection through getdeleteddocuments.vm template sort parameter

Impact It's possible for anyone to inject SQL using the parameter sort of the getdeleteddocuments.vm. It's injected as is as an ORDER BY value. One can see the result of the injection with...

CLSA-2025-1753377886 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CLSA-2025-1753374522 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CVE-2025-41420

creationtimestamp| type| source ---|---|--- 2025-07-24 15:30:28+00:00| seen| https://infosec.place/objects/9e8fca1b-b68f-4eeb-acef-1e8f38f32db1...

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 14, 2025 to July 20, 2025)

Calling all Vulnerability Researchers and Bug Bounty Hunters! Spring into Summer with Wordfence! Now through August 4, 2025, earn 2X bounty rewards forall in-scope submissions from our 'High Threat' list in software with fewer than 5 million active installs. Bounties up to $31,200 per...

Possible HTML Injection in Accept-Language header

This report is not public...

CVE-2025-26397

creationtimestamp| type| source ---|---|--- 2025-07-24 12:53:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114908305840509677 2025-07-28 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-654/...

CVE-2025-8035

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:21+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:02+00:00| seen| Telegram/QdjPiU3XLImoJo40f52ajZTWmtCw6dTGaxXHsES2Ysru0TI...

CVE-2025-8042

creationtimestamp| type| source ---|---|--- 2025-07-24 12:26:20+00:00| seen| https://poliverso.org/objects/0477a01e-5811f83d-175e754718197297 2026-04-13 17:57:38+00:00| seen| Telegram/9o4BfNtIOZ97fNW94XQZtKman2tFufd5bSC8ENSBdHyp2c...

CVE-2025-8070

creationtimestamp| type| source ---|---|--- 2025-07-24 10:16:06+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lupcig5lkm2s...

CVE-2025-54377

creationtimestamp| type| source ---|---|--- 2025-07-24 00:58:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3luoddpdtyz22 2026-03-17 07:30:05+00:00| seen| https://bsky.app/profile/nerq-ai.bsky.social/post/3mhahavtunb2g...

GitLab 15.4 < 18.0.5 / 18.1 < 18.1.3 / 18.2 < 18.2.1 (CVE-2025-1299)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - Missing Authorization in GitLab CVE-2025-1299 Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenabl...

libxml2 xmlSchematronFormatReport DoS

The vulnerability of the xmlSchematronFormatReport function in the Schematron Schema Report component of the libxml2 library is related to the use of a null pointer during the processing of XPath expressions. Exploiting this vulnerability could allow an attacker to cause service failures by sendi...

Security Bulletin: Vulnerability in org.apache.mina_mina-core affects IBM Db2 Data Management Console(CVE-2024-52046)

Summary org.apache.minamina-core dependency package is used by IBM Db2 Data Management Console . This bulletin describes the upgrades necessary to address the vulnerability. Vulnerability Details CVEID:CVE-2024-52046 DESCRIPTION: The ObjectSerializationDecoder in Apache MINA uses Java’s native...

CVE-2025-47281 Kyverno's Improper JMESPath Variable Evaluation Leads to Denial of Service

Kyverno is a policy engine designed for cloud native platform engineering teams. In versions 1.14.1 and below, a Denial of Service DoS vulnerability exists due to improper handling of JMESPath variable substitutions. Attackers with permissions to create or update Kyverno policies can craft...

CVE-2025-4700

creationtimestamp| type| source ---|---|--- 2025-07-23 20:31:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lunugwa5aj2i 2025-07-25 03:38:54+00:00| seen| https://bsky.app/profile/getpokemon7.bsky.social/post/3lur4r6l6lc2g...

CLSA-2025-1753298958 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...

CLSA-2025-1753298604 Fix CVE(s): CVE-2025-49794, CVE-2025-49796

SECURITY UPDATE: memory vulnerabilities in schematron - debian/patches/CVE-2025-49794CVE-2025-49796.patch: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements and memory corruption issue triggered by processing sch:name elements in input XML file - CVE-2025-49794 -...

CLSA-2025-1753298447 libxml2: Fix of 2 CVEs

CVE-2025-49794: fix memory safety issues in xmlSchematronReportOutput when parsing XPath elements - CVE-2025-49796: fix memory corruption issue triggered by processing sch:name elements in input XML file...