PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally entered SQL statements in the /search-report-result.php file. An attacker can...

CVE-2024-46975

creationtimestamp| type| source ---|---|--- 2025-02-22 15:20:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5031 2025-02-22 17:56:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lirvein6jq2t 2025-02-22 19:10:24+00:00| seen| https://t.me/cvedetector/18734...

OSV-2025-147 UNKNOWN WRITE in ndpi_free_flow_data

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731142 Crash type: UNKNOWN WRITE Crash state: ndpifreeflowdata ndpiflowfree processndpicollectedinfo...

OSV-2025-145 Heap-buffer-overflow in ___interceptor_strncat

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=397731139 Crash type: Heap-buffer-overflow READ 1 Crash state: interceptorstrncat processndpicollectedinfo nodecleanupwalker...

CVE-2025-25282

creationtimestamp| type| source ---|---|--- 2025-02-21 23:31:55+00:00| published-proof-of-concept| Telegram/z-TEGJuLb-MI9QSBe5sQLLsDPvx9hpDxWNGhFcSyGduHviQ 2025-02-21 23:48:55+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114044550171978219 2025-02-21 23:57:36+00:00| seen|...

i-map.jp Cross Site Scripting vulnerability OBB-4027581

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

jc-motor.com.tw Cross Site Scripting vulnerability OBB-4027582

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bestbathroom.mee.nu Cross Site Scripting vulnerability OBB-4027578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2024-9150

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150 Code Injection in Wyn Enterprise

Report generation functionality in Wyn Enterprise allows for code inclusion, but not sufficiently limits what code might be included. An attacker is able use a low privileges account in order to abuse this functionality and execute malicious code, load DLL libraries and executing OS commands on a...

CVE-2024-9150

CVE-2024-9150 affects Wyn Enterprise: the report generation feature allows code inclusion beyond safe bounds, enabling a low-privilege user to abuse the functionality to execute malicious code, load DLLs, and run OS commands on a high-privilege host. The vulnerability arises from insufficient inp...

CVE-2024-13900

creationtimestamp| type| source ---|---|--- 2025-02-21 11:18:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4880 2025-02-21 15:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lip4jhf5id2a 2025-02-21 15:35:52+00:00| seen| https://t.me/cvedetector/18651...

britcham.org.sg Open Redirect vulnerability OBB-4027452

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress SVG Support plugin <= 2.5.10 - Authenticated (Author+) Stored Cross-Site Scripting via SVG File Upload vulnerability

Authenticated Author+ Stored Cross-Site Scripting via SVG File Upload vulnerability discovered by Francesco Carlucci in WordPress Plugin SVG Support versions = 2.5.10...

PT-2025-7579 · Itsourcecode · Itsourcecode Simple Chatbox

Name of the Vulnerable Software and Affected Versions: ITSourcecode Simple ChatBox versions up to 1.0 Description: A vulnerability was found in ITSourcecode Simple ChatBox, affecting unknown code of the file /delete.php. The attack can use SQL injection to obtain sensitive data. Recommendations:...

PT-2025-7455 · Unknown · Wyn Enterprise

Name of the Vulnerable Software and Affected Versions: Wyn Enterprise versions prior to 8.0.00204.0 Description: The report generation functionality in Wyn Enterprise allows for code inclusion but does not sufficiently limit what code might be included. An attacker can use a low-privileges accoun...

Wyn Enterprise 安全漏洞

Wyn Enterprise is an embedded business intelligence and analytics tool from Wyn Enterprise, Inc. A security vulnerability exists in Wyn Enterprise prior to version 8.0.00204.0, which stems from a report generation feature that allows code to be included, but does not adequately restrict the code...

WordPress igumbi Online Booking plugin <= 1.40 - Authenticated (Contributor+) Stored Cross-Site Scripting vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting vulnerability discovered by SOPROBRO in WordPress Plugin igumbi Online Booking versions = 1.40...

CVE-2024-7131

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/4838 2025-02-21 01:01:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3linm6med622p...

CVE-2025-25676

creationtimestamp| type| source ---|---|--- 2025-02-20 23:17:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4833 2025-02-21 00:55:49+00:00| seen| https://t.me/cvedetector/18613 2025-02-21 19:48:45+00:00| seen|...