85810 matches found
CVE-2025-37891
creationtimestamp| type| source ---|---|--- 2025-05-19 07:38:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16813 2025-05-19 07:42:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114533369295562334 2025-05-19 09:13:35+00:00| seen|...
CVE-2025-4940: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in 1000 Projects Daily College Class Work Report Book 1.0. This issue affects some unknown processing of the file /admininfo.php. The manipulation of the argument batch leads to sql injection. The attack may be initiated remotely...
PHPGurukul Daily Expense Tracker System Security Vulnerability
Daily Expense Tracker System is a PHP and MySQL based daily expense tracking system. The Daily Expense Tracker System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the fromdate/todate parameter of file...
PHPGurukul Online Marriage Registration System Injection Vulnerability
PHPGurukul Online Marriage Registration System is a website builder from PHPGurukul that supports online marriage registration. An injection vulnerability exists in version 1.0 of the PHPGurukul Online Marriage Registration System, which originates from the operation of the parameter...
A Systematic Review and Taxonomy for Privacy Breach Classification: Trends, Gaps, and Future Directions
In response to the rising frequency and complexity of data breaches and evolving global privacy regulations, this study presents a comprehensive examination of academic literature on the classification of privacy breaches and violations between 2010-2024. Through a systematic literature review, a...
I’m done preparing the slides for my talk about Vulristics at PHDays
I 'm done preparing the slides for my talk about Vulristics at PHDays. I'll be speaking on the last day of the festival - Saturday, May 24, at 16:00 in Popov Hall 25. If you're there at that time, I'd be glad to see you. If not - join online! I'll have an hour to dive into Vulristics, vulnerabili...
CVE-2025-4865
creationtimestamp| type| source ---|---|--- 2025-05-18 08:27:32+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpgn4nxhrrb2 2025-05-18 09:13:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpgpqrt3rh2l...
CVE-2025-4843
creationtimestamp| type| source ---|---|--- 2025-05-18 00:39:30+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpfszc5tzab2 2025-05-18 01:13:03+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfuvqjddh24...
CVE-2024-13965
creationtimestamp| type| source ---|---|--- 2025-05-17 21:07:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpfh7bot3p2e...
CVE-2024-8397
The webtoffee-gdpr-cookie-consent WordPress plugin before 2.6.1 does not properly sanitize and escape the IP headers when logging them, allowing visitors to conduct Stored Cross-Site Scripting attacks. The payload gets triggered when an admin visits the 'Consent report' page and the malicious...
ops-py-appreg (0.0.0), ops-py-cert-report (5.0.0) +1 more potentially affected by CVE-2025-47273 via setuptools (75.0.0)
setuptools PYPI version 75.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ops-py-appreg 0.0.0 - ops-py-cert-report 5.0.0 - ops-py-reports =0.0.1, =0.3.0 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-...
CVE-2025-4389
creationtimestamp| type| source ---|---|--- 2025-05-17 05:38:13+00:00| seen| https://bsky.app/profile/potato.software/post/3lpdtb2d2hl2d 2025-05-17 06:43:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lpdwv2zzu72e 2025-05-17 17:01:23+00:00| seen|...
CVE-2025-26086
creationtimestamp| type| source ---|---|--- 2025-05-17 04:43:07+00:00| seen| https://schleuss.online/users/vulnbot/statuses/114521341008289755 2025-05-18 18:08:07+00:00| seen| https://bsky.app/profile/hacker.at.thenote.app/post/3lphnmuxh722c...
OSV-2025-374 Use-of-uninitialized-value in pcpp::SomeIpSdEntry::SomeIpSdEntry
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=418036603 Crash type: Use-of-uninitialized-value Crash state: pcpp::SomeIpSdEntry::SomeIpSdEntry pcpp::SomeIpSdLayer::getEntries readParsedPacket...
OSV-2025-373 Heap-use-after-free in aiMesh::~aiMesh
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417905428 Crash type: Heap-use-after-free READ 8 Crash state: aiMesh::aiMesh aiScene::aiScene Assimp::BaseProcess::ExecuteOnScene...
firefox -- out-of-bounds read/write
[email protected] reports: An attacker was able to perform an out-of-bounds read or write on a JavaScript object by confusing array index sizes...
Beware! A threat actor could steal the titles of your private (and draft) WordPress posts with this new vulnerability!
As of today, almost a billion sites have been built using WordPress, powering businesses and organizations of all sizes. That makes any newly discovered vulnerability especially concerning—like the one recently found and reported by Imperva researchers, which could affect any WordPress site. In...
CVE-2025-2247
creationtimestamp| type| source ---|---|--- 2025-05-16 20:34:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16752 2025-10-16 21:02:44+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m3dnrmh6vg2a...