83197 matches found
PHPGurukul Online Fire Reporting System 注入漏洞
Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter serachdata in the file /search-report-result.php. An attacker c...
PHPGurukul Dairy Farm Shop Management System SQL注入漏洞
Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /bwdate-report-details.php for externally...
Grafana 11.3.x < 11.3.7 Improper Access Control
According to its self-reported version, the Grafana install hosted on the remote host is earlier than 10.4.19, or 11.2.x earlier than 11.2.10, or 11.3.x earlier than 11.3.7, or 11.4.x earlier than 11.4.5, or 11.5.x earlier than 11.5.5, or 11.6.x earlier than 11.6.2, or 12.0.x earlier than 12.0.1...
CVE-2020-10548
creationtimestamp| type| source ---|---|--- 2025-06-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-04 2025-06-06 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-06-06 2026-03-17 00:00:00+00:00| exploited| The...
CVE-2025-32105
creationtimestamp| type| source ---|---|--- 2025-06-03 18:49:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpxgc44as2r 2025-07-24 23:55:37+00:00| seen| https://bsky.app/profile/dasgeldco.bsky.social/post/3luqqbwevwt2y 2025-08-31 19:31:14+00:00| seen|...
GO-2025-3733 Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome
Navidrome Transcoding Permission Bypass Vulnerability Report in github.com/navidrome/navidrome...
CVE-2025-5505
creationtimestamp| type| source ---|---|--- 2025-06-03 16:37:20+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppv6zemqj2...
CVE-2025-25022
creationtimestamp| type| source ---|---|--- 2025-06-03 16:37:19+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqppuxp5qia2 2025-06-03 17:23:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqpslba27v2m 2025-06-05...
CVE-2025-43924
creationtimestamp| type| source ---|---|--- 2025-06-03 15:49:40+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqpndniq7pj2...
CVE-2025-43923
An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Focal Point can perform SQL injection via the image parameter during a delete report image operation...
Android Trojan Crocodilus Now Active in 8 Countries, Targeting Banks and Crypto Wallets
A growing number of malicious campaigns have leveraged a recently discovered Android banking trojan called Crocodilus to target users in Europe and South America. The malware, according to a new report published by ThreatFabric, has also adopted improved obfuscation techniques to hinder analysis...
CVE-2025-31711
creationtimestamp| type| source ---|---|--- 2025-06-03 09:11:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqox4mjnye2e...
CVE-2024-53026
creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:16+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomzhf2cki2 2025-06-03 08:39:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqovd4zkij2m...
CVE-2024-53018
creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomzaeldp22 2025-06-03 08:32:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqouwnys5f2j 2025-06-04...
OSV-2025-424 UNKNOWN READ in RDKit::RDValue::destroy
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=421736524 Crash type: UNKNOWN READ Crash state: RDKit::RDValue::destroy RDKit::Dict::clearVal RDKit::RDProps::clearProp...
CVE-2025-43923
An issue was discovered in ReportController in Unicom Focal Point 7.6.1. A user who has administrative privilege in Focal Point can perform SQL injection via the image parameter during a delete report image operation...
Parallels Desktop prl_packer_inplace PVMP Unpack Directory Traversal Privilege Escalation
Talos Vulnerability Report TALOS-2025-2160 Parallels Desktop prlpackerinplace PVMP Unpack Directory Traversal Privilege Escalation June 3, 2025 CVE Number CVE-2025-31359 SUMMARY A directory traversal vulnerability exists in the PVMP package unpacking functionality of Parallels Desktop for Mac...
Parallels Desktop prl_disp_service Snapshots.xml Hard Link Privilege Escalation
Talos Vulnerability Report TALOS-2024-2124 Parallels Desktop prldispservice Snapshots.xml Hard Link Privilege Escalation June 3, 2025 CVE Number CVE-2024-54189 SUMMARY A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 build 55740...
CVE-2025-47585
creationtimestamp| type| source ---|---|--- 2025-06-02 20:37:42+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqnmxts5orv2 2025-06-03 00:37:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqo2elu5gr2q...