ops-py-appreg (0.0.0), ops-py-cert-report (5.0.0) +1 more potentially affected by CVE-2025-47273 via setuptools (75.0.0)

setuptools PYPI version 75.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ops-py-appreg 0.0.0 - ops-py-cert-report 5.0.0 - ops-py-reports =0.0.1, =0.3.0 Source cves: CVE-2025-47273 Source advisory:...

CVE-2025-4940

CVE-2025-4940 affects 1000 Projects Daily College Class Work Report Book 1.0. A SQL injection vulnerability exists in the handling of the batch argument in /admin_info.php, which can be triggered remotely. Multiple Connected documents confirm the issue, retrieving that the vulnerability stems fro...

Advisory ROSA-SA-2025-2861

Software: kernel 4.18.0 OS: ROSA Virtualization 3.0 packageevrstring: kernel-4.18.0-553.40.1.el810 CVE-ID: CVE-2019-13631 BDU-ID: 2019-03626 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the parsehidreportdescriptor function of the Linux operating system kernel is related to writing outside buffer...

Over 40,000 iOS Apps Found Exploiting Private Entitlements, Zimperium

A new report from Zimperium is alerting users about growing threats facing iOS devices, particularly those tied to…...

CVE-2025-4928

creationtimestamp| type| source ---|---|--- 2025-05-19 10:38:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16837 2025-05-19 13:13:50+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjnnk5clr2t...

CVE-2025-4927

A vulnerability was found in PHPGurukul Online Marriage Registration System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/between-dates-application-report.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to...

⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and More

Cybersecurity leaders aren't just dealing with attacks—they're also protecting trust, keeping systems running, and maintaining their organization's reputation. This week's developments highlight a bigger issue: as we rely more on digital tools, hidden weaknesses can quietly grow. Just fixing...

CVE-2025-4925

A vulnerability has been found in PHPGurukul Daily Expense Tracker System 1.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /expense-monthwise-reports-detailed.php. The manipulation of the argument fromdate/todate leads to sql injection. The...

CVE-2025-47754

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16826 2025-05-19 09:13:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa222io24...

CVE-2025-47756

creationtimestamp| type| source ---|---|--- 2025-05-19 08:38:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16824 2025-05-19 09:13:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpjaa2aofg2p...

CVE-2025-37891

creationtimestamp| type| source ---|---|--- 2025-05-19 07:38:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16813 2025-05-19 07:42:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114533369295562334 2025-05-19 09:13:35+00:00| seen|...

CVE-2025-4940: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admininfo.php. The manipulation of the argument batch leads to sql injection. The attack may be initiated remotely...

A Systematic Review and Taxonomy for Privacy Breach Classification: Trends, Gaps, and Future Directions

In response to the rising frequency and complexity of data breaches and evolving global privacy regulations, this study presents a comprehensive examination of academic literature on the classification of privacy breaches and violations between 2010-2024. Through a systematic literature review, a...

PHPGurukul Daily Expense Tracker System Security Vulnerability

Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. The Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the fromdate/todate parameter of file...

PHPGurukul Online Marriage Registration System Injection Vulnerability

PHPGurukul Online Marriage Registration System is a website builder from PHPGurukul that supports online marriage registration. An injection vulnerability exists in version 1.0 of the PHPGurukul Online Marriage Registration System, which originates from the operation of the parameter...

I’m done preparing the slides for my talk about Vulristics at PHDays

I 'm done preparing the slides for my talk about Vulristics at PHDays. I'll be speaking on the last day of the festival - Saturday, May 24, at 16:00 in Popov Hall 25. If you're there at that time, I'd be glad to see you. If not - join online! I'll have an hour to dive into Vulristics, vulnerabili...

CVE-2025-4865

creationtimestamp| type| source ---|---|--- 2025-05-18 08:27:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgn4nxhrrb2 2025-05-18 09:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqrt3rh2l...

CVE-2025-4843

creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszc5tzab2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqjddh24...

CVE-2024-13965

creationtimestamp| type| source ---|---|--- 2025-05-17 21:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bot3p2e...

CVE-2024-8397

The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visitors to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Consent report' page and the malicious...