CVE-2025-6140

creationtimestamp| type| source ---|---|--- 2025-06-17 00:05:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrr753mazd2m...

PHPGurukul Nipah virus Testing Management System 注入漏洞

Nipah Virus Testing Management System is an online virus diagnostic platform. Nipah Virus Testing Management System suffers from a SQL injection vulnerability that originates from a lack of validation of externally-entered SQL statements in the testtype parameter of the /bwdates-report-ds.php fil...

Miliaris Amigdala 跨站脚本漏洞

Miliaris Amigdala is an application from the Italian company Miliaris. A cross-site scripting vulnerability exists in Miliaris Amigdala version v2.2.6, which stems from the presence of cross-site scripting in the Report Manager functionality that could lead to the execution of arbitrary HTML...

PT-2025-25637 · Undefined · Undefined

CVE-2025-52441 Rejected reason https://t.co/UDw8lb8Tab...

PT-2025-25740 · Unknown · Miliaris Amigdala

Name of the Vulnerable Software and Affected Versions: Miliaris Amigdala version 2.2.6 Description: A cross-site scripting XSS issue in the report manager function allows attackers to execute arbitrary HTML in the context of a user's browser via a crafted payload. Recommendations: For Miliaris...

PT-2025-25632 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A deserialization issue is mentioned, but details are not provided. No information is available about the estimated number of potentially affected devices or real-world incidents...

GHSA-XMMM-JW76-Q7VG

creationtimestamp| type| source ---|---|--- 2025-06-16 20:20:39+00:00| seen| https://gist.github.com/safer-bot/8eded6b925c160dc08c1b28d51d6c0c3 2025-06-17 01:00:32+00:00| seen| https://gist.github.com/safer-bot/95fa9e363790e3d145320791b4d5b508 2025-06-17 01:10:34+00:00| seen|...

CVE-2025-32797

creationtimestamp| type| source ---|---|--- 2025-06-16 19:26:55+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694685602522986 2025-06-16 20:37:10+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18527 2025-12-17 14:22:27+00:00| seen|...

CVE-2025-6170

creationtimestamp| type| source ---|---|--- 2025-06-16 15:40:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18465 2025-06-16 19:34:47+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrqpykd4os2p 2025-06-17 08:06:47+00:00| seen|...

CVE-2025-49794

creationtimestamp| type| source ---|---|--- 2025-06-16 15:39:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18464 2025-06-16 16:24:04+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114693966654084445 2025-06-16 16:33:33+00:00| seen|...

CVE-2025-6127

PHPGurukul Nipah Virus Testing Management System 1.0 is affected by a cross-site scripting vulnerability in the /search-report.php file via the serachdata parameter. Exploitation is possible remotely and may execute arbitrary script in the victim’s browser, potentially stealing cookies or hijacki...

CVE-2025-6126

creationtimestamp| type| source ---|---|--- 2025-06-16 14:56:23+00:00| seen| https://bsky.app/profile/potato.software/post/3lrqagqinbe2x 2025-06-16 16:36:07+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18471 2026-07-22 05:00:05+00:00| seen|...

GHSA-4QQF-9M5C-W2C5 Weblate exposes personal IP address via e-mail

Impact The audit log notifications included the full IP address of the acting user. This could be obtained by third-party servers such as SMTP relays, or spam filters. Patches This issue has been addressed in Weblate 5.12 via https://github.com/WeblateOrg/weblate/pull/15102. References Thanks to...

CVE-2025-49125

creationtimestamp| type| source ---|---|--- 2025-06-16 14:38:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18453 2025-06-16 15:02:05+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693644318306796 2025-06-16 15:19:46+00:00| seen| https://seclists.org/oss-sec/2025/q2/253...

CVE-2025-6165

creationtimestamp| type| source ---|---|--- 2025-06-16 14:08:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693431824068032 2025-06-17 06:39:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18568 2025-06-17 07:00:59+00:00| published-proof-of-concept|...

CVE-2025-6164

creationtimestamp| type| source ---|---|--- 2025-06-16 13:54:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114693378725524836 2025-06-17 05:40:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18564 2025-06-17 07:27:58+00:00| seen|...

CVE-2025-5689

creationtimestamp| type| source ---|---|--- 2025-06-16 12:42:54+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18446 2025-06-16 19:42:38+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114694747478598696 2025-06-16 19:47:13+00:00| seen|...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: The default value for “denominator” is initialized to 1. WHAT & HOW Variables that are used as denominators and may not be assigned to other values should be initialized to a non-zero value to avoid “DIVIDEBYZERO...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerabilities have been resolved: block, bfq: fixed the UAF in wakerbfqq after bfqsplitbfqq Our syzkaller report identifies the following UAF for v6.6: BUG: KASAN: slab-use-after-free in bfqinitrq+0x175d/0x17a0 block/bfq-iosched.c:6958 A size 8 read at address...

CVE-2025-40728

CVE-2025-40728 affects Customer Support System v1.0. SQL injection via the id parameter in /customer_support/manage_user.php enables an authenticated attacker to retrieve, create, update, and delete databases. The advisories describe high impact (confidentiality/integrity/availability) with low a...