CVE-2025-50070

CVE-2025-50070 affects Oracle Database Server JDBC: vulnerable in JDBC component for Oracle Database Server versions 23.4–23.8. Root cause as described is a vulnerability in JDBC that can enable a low-privileged, authenticated OS user with logon to the infrastructure where JDBC runs to access JDB...

CVE-2025-50063

...

CVE-2025-41236

creationtimestamp| type| source ---|---|--- 2025-07-15 18:53:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858762801914674 2025-07-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1592 2025-07-16 12:20:29+00:00| seen|...

CVE-2025-53905

creationtimestamp| type| source ---|---|--- 2025-07-15 18:42:26+00:00| seen| https://seclists.org/oss-sec/2025/q3/40 2025-07-20 19:58:16+00:00| seen| https://bsky.app/profile/r-netsec-bot.bsky.social/post/3lugb5tvae72e 2025-07-20 21:09:32+00:00| seen|...

GHSA-6C5P-6WWW-PCMR

creationtimestamp| type| source ---|---|--- 2025-07-15 16:50:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114858278941700138...

CVE-2025-0831

creationtimestamp| type| source ---|---|--- 2025-07-15 15:08:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857876718008945 2025-07-17 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-619/...

CVE-2025-52377

creationtimestamp| type| source ---|---|--- 2025-07-15 14:15:37+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114857668518872739...

CVE-2019-9256

creationtimestamp| type| source ---|---|--- 2025-07-15 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-196-01...

OSV-2025-547 Security exception in com.alibaba.fastjson2.JSONReader.readArray

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=431584944 Crash type: Security exception Crash state: com.alibaba.fastjson2.JSONReader.readArray java.base/java.nio.charset.CharsetEncoder. java.base/java.nio.charset.CharsetEncoder...

SUSE: Security Advisory (SUSE-SU-2025:02294-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-CFH4-9F7V-FHRC

creationtimestamp| type| source ---|---|--- 2025-07-14 19:49:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114853319755970178...

CVE-2025-7027

creationtimestamp| type| source ---|---|--- 2025-07-14 13:45:03+00:00| seen| https://t.me/truesecator/7227 2025-07-15 14:29:23+00:00| seen| https://t.me/SEReborn/5756 2025-07-16 17:11:08+00:00| seen| https://bsky.app/profile/fraustief.bsky.social/post/3lu3vx5gtfk2k 2025-07-16 17:11:11+00:00| seen...

CVE-2025-7026

creationtimestamp| type| source ---|---|--- 2025-07-14 13:12:09+00:00| seen| https://bsky.app/profile/brianhaddock.bsky.social/post/3ltwho4bzyf2a 2025-07-14 13:45:03+00:00| seen| https://t.me/truesecator/7227 2025-07-15 14:29:23+00:00| seen| https://t.me/SEReborn/5756 2025-07-16 17:11:08+00:00|...

PT-2025-29450 · Code Projects · Job Diary

Name of the Vulnerable Software and Affected Versions: code-projects Job Diary version 1.0 Description: A critical issue exists in code-projects Job Diary 1.0. The vulnerability affects unknown code within the /view-cad.php file. Manipulation of the ID argument can lead to SQL injection, allowing...

PT-2025-33756

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.15.0 31 Description: A flaw exists in the Linux kernel related to Human Interface Devices HID with the APPLE MAGIC BACKLIGHT quirk. A malicious HID device can trigger a NULL pointer dereference within the appl...

PHPGurukul Online Fire Reporting System Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. Online Fire Reporting System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /admin/bwdates-report-result.php for externally entered SQL statements...

curl: HTTP Request Smuggling Vulnerability Analysis - cURL Security Report

HTTP Request Smuggling Vulnerability Report - cURL Summary: cURL does not explicitly reject HTTP requests that contain both Transfer-Encoding and Content-Length headers, which can lead to HTTP request smuggling vulnerabilities CWE-444 when the request passes through intermediary systems proxies,...

BELL-CVE-2025-38310

Bulletin has no description...

PT-2025-29298 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...

PT-2025-29304 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: The reported issue has been rejected as not used. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability...