MINI-8HQX-8JM7-9VCJ

Bulletin has no description...

Malware in html-report

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Campcodes Online Hospital Management System 1.0 - SQL Injection

Exploit Title: Campcodes Online Hospital Management System 1.0 - SQL Injection Google Dork: N/A Exploit Author: Carine Constantino Vendor Homepage: https://www.campcodes.com Software Link: https://www.campcodes.com/projects/online-hospital-management-system-using-php-and-mysql/ Version: 1.0 Teste...

PT-2025-23139

Name of the Vulnerable Software and Affected Versions Mitsubishi Electric Corporation MELSEC iQ-F Series CPU modules affected versions not specified Description The issue allows a remote unauthenticated attacker to read information in the product, cause a Denial-of-Service DoS condition in MELSOF...

Moodle Grade Report Handler Unauthorized Access

The vulnerability of the Grade Report Handler component in the virtual training environment is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2022-46736

creationtimestamp| type| source ---|---|--- 2025-05-28 23:40:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqbeuvnr5w2m...

GHSA-V8QH-5C5W-48PP vulnerabilities

Vulnerabilities for packages: openssl, libcrypto3-2.34...

CVE-2025-1461

creationtimestamp| type| source ---|---|--- 2025-05-28 18:24:14+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqat6suri5a2 2026-10-04 11:00:16+00:00| seen| Telegram/kLbM597m8y1Q2m8FGpsqBqZGqk3GiDj8GDNzhdLGup4AVM 2026-10-04 11:00:16+00:0...

CVE-2025-40650

Insecure Direct Object Reference IDOR vulnerability in Clickedu. This vulnerability could allow an attacker to retrieve information about student report cards...

CVE-2025-48848

creationtimestamp| type| source ---|---|--- 2025-05-28 08:03:12+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lq7qigkgrl2j...

CVE-2024-26579

creationtimestamp| type| source ---|---|--- 2025-05-28 01:35:05+00:00| seen| https://seclists.org/oss-sec/2025/q2/171...

OSV-2025-412 UNKNOWN WRITE in luaL_newstate

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=420248727 Crash type: UNKNOWN WRITE Crash state: luaLnewstate...

📄 Frappe Framework 15.56.1 SQL Injection

Frappe Framework version 15.56.1 suffers from a remote SQL injection vulnerability. An authenticated SQL injection vulnerability exists in the frappe.desk.reportview.getlist API of the Frappe Framework, affecting versions v15.56.1. The vulnerability stems from improper sanitization of the fields...

CVE-2024-57337: Improper Neutralization of Special Elements used in a Command

An arbitrary file upload vulnerability in the opcode 500 functionality of M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file...

CVE-2024-57336: Improper Access Control

Incorrect access control in M2Soft CROWNIX Report & ERS affected v7.x to v7.4.3.599 and v8.x to v8.0.3.79 allows unauthorized attackers to obtain Administrator account access...

CVE-2024-57338: Improper Neutralization of Special Elements used in a Command

An arbitrary file upload vulnerability in M2Soft CROWNIX Report & ERS v5.x to v5.5.14.1070, v7.x to v7.4.3.960, and v8.x to v8.2.0.345 allows attackers to execute arbitrary code via supplying a crafted file...

PT-2025-24333 · Git +1 · Tarantool

Name of the Vulnerable Software and Affected Versions: Lua affected versions not specified Description: The software is susceptible to an unknown write issue triggered during the luaL newstate function call. Recommendations: At the moment, there is no information about a newer version that contai...

M2Soft CROWNIX Report & ERS Security Vulnerabilities

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 7.4.3.599 and earlier and 8.0.3.79 and earlier, which stems from improper access control and could lead to the takeov...

M2Soft CROWNIX Report & ERS Security Vulnerabilities

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from the presence of an...

M2Soft CROWNIX Report & ERS Security Vulnerabilities

M2Soft CROWNIX Report & ERS is a reporting solution with powerful reporting capabilities from M2Soft Korea. A security vulnerability exists in M2Soft CROWNIX Report & ERS versions 5.5.14.1070 and earlier, 7.4.3.960 and earlier, and 8.2.0.345 and earlier, which stems from an arbitrary file upload ...