PHPGurukul COVID19 Testing Management System 注入漏洞

The PHPGurukul COVID19 Testing Management System is a new Crown Pneumonia Testing Management System from PHPGurukul, Inc. An injection vulnerability exists in version 1.0 of the PHPGurukul COVID19 Testing Management System, which stems from SQL injection due to incorrect manipulation of the todat...

PT-2025-18015

Name of the Vulnerable Software and Affected Versions Apereo CAS version 5.2.6 Description A critical issue was found, affecting the saveService function of the RegisteredServiceSimpleFormController.java file in the Groovy Code Handler component. This issue leads to code injection and can be...

CVE-2025-2101

creationtimestamp| type| source ---|---|--- 2025-04-26 09:08:35+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13576 2025-04-26 11:29:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnpn4367a72b 2025-04-26 11:30:37+00:00| seen|...

CVE-2025-28020

TOTOLINK A800R V4.1.2cu.5137B20200730 was found to contain a buffer overflow vulnerability in downloadFile.cgi through the v25 parameter...

OSV-2025-300 Negative-size-param in recurse_update_offsets

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413078692 Crash type: Negative-size-param Crash state: recurseupdateoffsets match pcre2match8...

OSV-2025-298 Heap-buffer-overflow in i18n::phonenumbers::UnicodeText::const_iterator::operator--

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=413161357 Crash type: Heap-buffer-overflow READ 1 Crash state: i18n::phonenumbers::UnicodeText::constiterator::operator-- i18n::phonenumbers::UnicodeString::tempSubString...

PT-2025-21904 · Git +1 · Pcre2

Name of the Vulnerable Software and Affected Versions: pcre2 affected versions not specified Description: The software is susceptible to a negative-size-param issue. The crash state involves the recurse update offsets and match functions, ultimately leading to a crash within the pcre2 match 8...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32982

NETSCOUT nGeniusONE before 6.4.0 b2350 has a Broken Authorization Schema for the report module...

CVE-2025-32979

creationtimestamp| type| source ---|---|--- 2025-04-25 21:08:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13541 2025-04-25 23:20:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnoedfju7w2j 2025-04-26 01:52:35+00:00| seen| https://t.me/cvedetector/23789 2025-04-28...

GHSA-34G7-PG9J-PXGP Moodle allows IDOR when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

Incorrect Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Incorrect Authorization via the cohorts report. An attacker can access unauthorized cohort data by exploiting insufficient access control checks. Remediation Upgrade moodle/moodle to version 4.1.18,...

CVE-2025-3634

creationtimestamp| type| source ---|---|--- 2025-04-25 15:25:24+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114399295811920995 2025-04-25 17:30:45+00:00| seen| https://t.me/cvedetector/23753 2025-04-25 19:35:04+00:00| seen|...

CVE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-3647 Moodle: idor when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

CVE-2025-2986

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13409 2025-04-25 13:19:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncromcw42h 2025-04-25 15:00:29+00:00| seen| https://t.me/cvedetector/23750...

CVE-2025-3912

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:54+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13408 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncrofgdb2g 2025-04-25 15:00:28+00:00| seen| https://t.me/cvedetector/23749...

CVE-2025-2470

creationtimestamp| type| source ---|---|--- 2025-04-25 12:09:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13406 2025-04-25 13:19:33+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnncroikpk2a 2025-04-25 13:48:43+00:00| seen|...

GHSA-CPJ6-FHP6-MR6J

creationtimestamp| type| source ---|---|--- 2025-04-25 01:10:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13366 2025-04-25 03:30:33+00:00| published-proof-of-concept| Telegram/oGnFJdmXUCqYx0xYR0D8dpnhpl9VxD3P3IPRWVfgfpPSsY 2025-04-26 05:43:33+00:00| seen|...

CVE-2025-32982

NETSCOUT nGeniusONE prior to 6.4.0 b2350 is affected by a Broken Authorization Schema in the report module (CVE-2025-32982). The CVE details indicate a high-severity impact (CVSS 3.1: 7.5; Confidentiality impact H, Integrity/Availability none) due to an authorization flaw that could enable unauth...