CVE-2025-0130

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0130 2025-05-14 16:52:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114507221776253105 2025-05-14 18:57:18+00:00| seen|...

CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834

CVE-2025-3834 affects Zohocorp ManageEngine ADAudit Plus — vulnerable in versions 8510 and prior due to an authenticated SQL injection in the OU History report. Root cause: improper handling of SQL queries in the reports module. Impact: potential unauthorized data exposure/integrity compromise fo...

CVE-2025-3834 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

OSV-2025-363 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417323384 Crash type: Heap-buffer-overflow READ 2 Crash state: jvstringvfmt jvstringfmt jvget...

PT-2025-21148 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the OU History report. This allows for potential exploitation where an attacker could manipulate database queries...

PT-2025-23443 · Git +1 · Jq

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: The software suffers from a heap-buffer-overflow read issue. The crash occurs during the execution of the jv string vfmt, jv string fmt, and jv get functions...

CVE-2025-3834: Improper Neutralization of Special Elements used in an SQL Command

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-22252

creationtimestamp| type| source ---|---|--- 2025-05-13 21:09:34+00:00| seen| https://www.fortiguard.com/psirt/FG-IR-24-472 2025-05-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1549 2025-05-14 06:13:02+00:00| seen|...

CVE-2025-43572

creationtimestamp| type| source ---|---|--- 2025-05-13 20:31:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16227 2025-05-14 00:07:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp3peiqokx2e...

CVE-2025-4660

creationtimestamp| type| source ---|---|--- 2025-05-13 17:55:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501808160728674 2025-05-13 18:15:25+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp33axfghk32 2025-05-13...

CERTFR-2025-ALE-006

creationtimestamp| type| source ---|---|--- 2025-05-13 16:24:21+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lp2viqexeb2s 2025-05-13 16:27:19+00:00| seen| https://bsky.app/profile/cert-fr.bsky.social/post/3lp2vo27f5z2m 2025-05-13 16:27:20+00:00| seen|...

50,000 WordPress Sites Affected by PHP Object Injection Vulnerability in Uncanny Automator WordPress Plugin

In case you missed it, Wordfence just published itsannual WordPress security report for 2024. Read it now to learn more about the evolving risk landscape of WordPress so you can keep your sites protected in 2025 and beyond. On April 26th, 2024, we received a submission for an authenticated PHP...

GHSA-QPV8-G6QV-RF8P

creationtimestamp| type| source ---|---|--- 2025-05-13 15:55:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501334070497265...

CVE-2025-22462

creationtimestamp| type| source ---|---|--- 2025-05-13 15:31:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16144 2025-05-13 15:59:30+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114501351524003106 2025-05-13 16:47:59+00:00| seen|...

CVE-2025-4647

creationtimestamp| type| source ---|---|--- 2025-05-13 10:52:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp2cxiypl52t 2025-05-13 13:52:10+00:00| seen| https://t.me/cvedetector/25176 2026-08-14 16:00:15+00:00| seen| https://t.me/purpsec/623 2026-08-15 00:00:07+00:00| seen|...

CVE-2025-40579

creationtimestamp| type| source ---|---|--- 2025-05-13 10:30:20+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16096 2025-05-13 10:48:35+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lp2cn4u6yr42 2025-05-13 10:52:45+00:00| seen|...

kernel: drm/amdgpu: fix usage slab after free

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu: fix usage slab after free +0.000021 BUG: KASAN: slab-use-after-free in drmschedentityflush+0x6cb/0x7a0 gpusched +0.000027 Read of size 8 at addr ffff8881b8605f88 by task amdpciunplug/2147 +0.000023 CPU: 6 PID: 2147...