PT-2025-18609 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 5.10.0 Description: A use-after-free issue has been identified in the Linux kernel, specifically in the ftrace subsystem. This issue occurs when the ftrace shutdown function is called, and the FTRACE UPDATE CALL...

PT-2025-18549 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A null pointer dereferencing issue has been resolved in the Linux kernel, specifically in the pinctrl dt to map function. The issue occurred when kasprintf returned a NULL pointer due ...

Microsoft - NTLM Hash Disclosure Spoofing (library-ms)

Exploit title: Microsoft - NTLM Hash Disclosure Spoofing library-ms Exploit Author: John Page aka hyp3rlinx x.com/hyp3rlinx ISR: ApparitionSec Back in 2018, I reported a ".library-ms" File NTLM information disclosure vulnerability to MSRC and was told "it was not severe enough", that being said I...

CVE-2025-4141

creationtimestamp| type| source ---|---|--- 2025-04-30 22:14:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14178 2025-04-30 23:48:33+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114429585840360844 2025-05-01 01:56:14+00:00| seen|...

CVE-2025-4136

creationtimestamp| type| source ---|---|--- 2025-04-30 21:55:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lo2rxiziqb2h 2025-05-01 00:37:01+00:00| seen| https://t.me/cvedetector/24160...

CVE-2025-46558

creationtimestamp| type| source ---|---|--- 2025-04-30 19:13:38+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/14127 2025-04-30 19:48:40+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114428642542388304 2025-04-30 20:30:48+00:00| seen|...

CVE-2025-45015

A Cross-Site Scripting XSS vulnerability was discovered in the foreigner-bwdates-reports-details.php file of PHPGurukul Park Ticketing Management System v2.0. The vulnerability allows remote attackers to inject arbitrary JavaScript code via the fromdate and todate parameters...

CVE-2025-46780

creationtimestamp| type| source ---|---|--- 2025-04-30 05:56:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnz4deqmtl2h 2025-04-30 07:53:01+00:00| seen| https://t.me/cvedetector/24069...

PHPGurukul Park Ticketing Management System 安全漏洞

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the foreigner-bwdates-reports-details.php file. An attacker can exploit this vulnerabili...

PT-2025-27985

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A NULL dereference of tsm ops in the configfs-tsm-report mechanism has been fixed. The issue arises because the lifetime of configfs objects is controlled by userspace, and there is no...

PT-2025-18912 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The issue concerns an uninitialized memory access in the Linux kernel. However, Red Hat Product Security has concluded that this CVE is not needed, indicating a rejection of the vulnerabilit...

Fedora 40 : perl / perl-Devel-Cover / perl-PAR-Packer (2025-8445f115f6)

The remote Fedora 40 host has packages installed that are affected by a vulnerability as referenced in the FEDORA-2025-8445f115f6 advisory. Fix CVE-2024-56406 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not tested for this...

CVE-2025-4080

creationtimestamp| type| source ---|---|--- 2025-04-29 20:12:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13916 2025-04-29 23:31:44+00:00| seen| https://t.me/cvedetector/24051 2025-04-29 23:50:46+00:00| seen|...

CVE-2025-4074

A vulnerability was found in PHPGurukul Curfew e-Pass Management System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/pass-bwdates-report.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack...

CVE-2025-45956

creationtimestamp| type| source ---|---|--- 2025-04-29 17:11:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13864 2025-04-29 19:50:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lny2iklvmk2r 2025-04-29 21:01:14+00:00| seen|...

CVE-2025-22883

creationtimestamp| type| source ---|---|--- 2025-04-29 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-119-02 2025-04-30 08:13:33+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13989 2025-04-30 10:00:18+00:00| seen|...

PHPGurukul Curfew e-Pass Management System 注入漏洞

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a SQL injection vulnerability, which originates from the lack of validation of externally-entered SQL statements in the parameter fromdate/todate in the file...

CVE-2025-4033

A vulnerability classified as critical has been found in PHPGurukul Nipah Virus Testing Management System 1.0. Affected is an unknown function of the file /patient-search-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...

CVE-2025-4030

A vulnerability was found in PHPGurukul COVID19 Testing Management System 1.0. It has been classified as critical. This affects an unknown part of the file /search-report-result.php. The manipulation of the argument serachdata leads to sql injection. It is possible to initiate the attack remotely...

Interesting WordPress Malware Disguised as Legitimate Anti-Malware Plugin

📢In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. The Wordfence Threat Intelligence team recently discovered an interestin...