85780 matches found
CVE-2025-5880
creationtimestamp| type| source ---|---|--- 2025-06-09 15:08:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr6ntepw2e2a 2026-04-23 19:00:11+00:00| published-proof-of-concept| Telegram/FrY9Ln1WDEhr5C7rGjfojNu1lRnf20MYdaUpc36iZR5uD0M 2026-04-23 21:00:04+00:00|...
GHSA-J226-63J7-QRQH Laravel Translation Manager Vulnerable to Stored Cross-site Scripting
Impact The application is vulnerable to Cross-Site Scripting XSS attacks due to incorrect input validation and sanitization of user-input data. An attacker can inject arbitrary HTML code, including JavaScript scripts, into the page processed by the user's browser, allowing them to steal sensitive...
CVE-2025-27819
creationtimestamp| type| source ---|---|--- 2025-06-09 13:07:36+00:00| seen| https://seclists.org/oss-sec/2025/q2/237 2025-06-09 15:34:45+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lr6pctrjc42u 2025-06-10 08:32:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17843...
CVE-2025-5912
creationtimestamp| type| source ---|---|--- 2025-06-09 08:17:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114652415438530839 2025-06-10 04:31:27+00:00| published-proof-of-concept| Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8 2025-06-10 05:49:07+00:00| seen|...
CVE-2025-5894
creationtimestamp| type| source ---|---|--- 2025-06-09 08:01:10+00:00| seen| Telegram/8DD9EH1jjPgxFP-wN6j7n4FLGqxinvMMBZqqPnx2jljiLjs 2025-06-09 09:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr62m4kusl2q...
CVE-2025-5858
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...
CVE-2025-5858 PHPGurukul Nipah Virus Testing Management System patient-report.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...
PHPGurukul Nipah virus Testing Management System injection vulnerability
Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that arises from insufficient filtering of the searchdata parameter in the patient-report.php file. An attacker can exploit this...
CVE-2025-27563
creationtimestamp| type| source ---|---|--- 2025-06-08 15:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46pjiwfo2e...
CVE-2025-3365
A missing protection against path traversal allows to access any file on the server...
CVE-2025-5223
creationtimestamp| type| source ---|---|--- 2025-06-08 01:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2ogveg2l2s...
CVE-2022-36466
creationtimestamp| type| source ---|---|--- 2025-06-08 01:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2o5ww3fu2s...
CVE-2025-49619
creationtimestamp| type| source ---|---|--- 2025-06-07 14:30:39+00:00| published-proof-of-concept| Telegram/YSJhdJjMlrABiHF1mC9tmQTTaLYxNBOL8QpiCjaALoLvyOE 2025-06-07 16:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzszxvl7m2c 2025-06-15 08:14:08+00:00|...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the report serving functionality. An attacker capable of changing report content can bypass the Content-Security-Policy introduced in Jenkins 1.641 and 1.625.3. Workaround Affected users are advised to...
CVE-2025-47601
creationtimestamp| type| source ---|---|--- 2025-06-07 05:00:22+00:00| seen| Telegram/rvYzq3XuSqIS6Jq2gKTARck8Jdf3ZePMyR6aO0nPIgKoa34 2025-06-07 06:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqyqy4kql72e...
Tenda AC9 injection vulnerability
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability that stems from the parameter list in the file /goform/SetIPTVCfg failing to properly filter constructed command special characters, commands, and so on. No details of the...
CVE-2025-5799
creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrwxrno525...
CVE-2025-49599
creationtimestamp| type| source ---|---|--- 2025-06-06 19:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxjtuyoou2m...