OSV-2025-275 UNKNOWN READ in void std::__1::vector<unsigned char, std::__1::allocator<unsigned char>>::__cons

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=410115359 Crash type: UNKNOWN READ Crash state: void std::1::vector::cons Poco::Net::NTLMCredentials::parseChallengeMessage Poco::Net::HTTPNTLMCredentials::createNTLMMessage...

db-hospital-drug 代码注入漏洞

db-hospital-drug is a hospital inventory management system by James Personal Developer. A code injection vulnerability exists in db-hospital-drug version 1.0, which stems from improper manipulation of the parameter content in the file ContentController.java, and could lead to a cross-site scripti...

PT-2025-16264 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A vulnerability was reported, but the details are not available due to the candidate number being withdrawn by its CNA. No information is provided about the estimated number of potentially...

CVE-2025-32671

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in John Weissberg Print Science Designer print-science-designer allows Path Traversal.This issue affects Print Science Designer: from n/a through = 1.3.155...

CVE-2025-32541

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in infosoftplugin WooCommerce Sales MIS Report woocommerce-mis-report allows Reflected XSS.This issue affects WooCommerce Sales MIS Report: from n/a through = 4.0.3...

CVE-2025-3531

creationtimestamp| type| source ---|---|--- 2025-04-13 05:52:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11555 2025-04-13 09:24:00+00:00| seen| https://t.me/cvedetector/22803 2025-04-13 10:18:06+00:00| seen|...

pierrebensusan.com Cross Site Scripting vulnerability OBB-4045404

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-1386- Query smuggling in ch-go library

Impact When using the ch-go library, under a specific condition when the query includes a large, uncompressed malicious external data, it is possible for an attacker in control of such data to smuggle another query packet into the connection stream. Patches If you are using ch-go library, we...

CVE-2025-2881

creationtimestamp| type| source ---|---|--- 2025-04-12 02:51:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11532 2025-04-12 05:42:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmlt6rccl42i 2025-04-12 06:39:52+00:00| seen|...

CVE-2025-32073

creationtimestamp| type| source ---|---|--- 2025-04-11 17:32:41+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320523948394256 2025-04-11 19:43:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkrorrlqp2g 2025-04-11 20:38:26+00:00| seen| https://t.me/cvedetector/227...

ak.postcodebase.com Cross Site Scripting vulnerability OBB-4043647

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-42973

creationtimestamp| type| source ---|---|--- 2025-04-11 15:24:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114320021678810637 2025-04-11 17:38:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lmkkp66hry2a 2025-04-11 18:07:34+00:00| seen| https://t.me/cvedetector/227...

CVE-2025-32587

creationtimestamp| type| source ---|---|--- 2025-04-11 11:48:36+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319171016417004...

CVE-2025-32558

creationtimestamp| type| source ---|---|--- 2025-04-11 11:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319170782587152...

CVE-2025-32568

creationtimestamp| type| source ---|---|--- 2025-04-11 11:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319170889184516...

CVE-2025-32567

creationtimestamp| type| source ---|---|--- 2025-04-11 11:48:35+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114319170848427521...

craftedge.com Cross Site Scripting vulnerability OBB-4043637

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

tennistown.shop Cross Site Scripting vulnerability OBB-4043635

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

leebyunghun.kr Cross Site Scripting vulnerability OBB-4043632

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

allparts.me Cross Site Scripting vulnerability OBB-4043629

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...