WebERP 安全漏洞

webERP is an open source inventory and financial management system ERP system by Tim Schofield, an individual developer. The system supports inventory management, permission role management, order management and financial management. A security vulnerability exists in WebERP v4.15.2, which...

GHSA-4H98-2769-GH6H

creationtimestamp| type| source ---|---|--- 2025-05-14 23:15:09+00:00| seen| https://gist.github.com/0xi1y4an7/605ea54aa36cbd993d66a4e7d1674901 2025-06-21 18:25:59+00:00| seen| https://gist.github.com/alissondpoliveira/29983764a9e449b0edeef6a4e813c0da 2025-11-19 14:57:55+00:00| seen|...

CVE-2025-47885

creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whigzt2n 2025-05-15 13:33:32+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16488...

CVE-2024-56427

creationtimestamp| type| source ---|---|--- 2025-05-14 22:57:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63whbu2k2w...

CVE-2025-44879

creationtimestamp| type| source ---|---|--- 2025-05-14 21:32:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16416 2025-05-14 22:57:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp63wi4q6c2e...

CVE-2022-47075

creationtimestamp| type| source ---|---|--- 2025-05-14 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vio2usk2s 2025-06-01 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-06-01 2025-06-29 00:00:00+00:00| seen| The Shadowserver...

CVE-2025-4638

creationtimestamp| type| source ---|---|--- 2025-05-14 18:32:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16374 2025-05-14 18:58:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5okr7ne42l 2025-12-28 12:30:30+00:00| seen|...

CVE-2025-4664

creationtimestamp| type| source ---|---|--- 2025-05-14 18:31:51+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16356 2025-05-14 18:57:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5oizyvnz2w 2025-05-14 20:40:49+00:00| seen|...

CVE-2025-47704 Klaro Cookie & Consent Management - Moderately critical - Cross Site Scripting - SA-CONTRIB-2025-050

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Drupal Klaro Cookie & Consent Management allows Cross-Site Scripting XSS.This issue affects Klaro Cookie & Consent Management: from 0.0.0 before 3.0.5...

CVE-2025-47781

creationtimestamp| type| source ---|---|--- 2025-05-14 16:33:49+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16330 2025-05-14 16:38:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp5gqad37u2t...

‘Admin’ and ‘123456’ Still Among Most Used Passwords in FTP Attacks

Weak passwords continue to be a major vulnerability for FTP servers. Specops' latest report highlights the most frequent…...

CVE-2025-0132

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0132 2025-05-14 18:32:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16369 2025-05-14 19:03:31+00:00| seen|...

CVE-2025-0130

creationtimestamp| type| source ---|---|--- 2025-05-14 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-0130 2025-05-14 16:52:23+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114507221776253105 2025-05-14 18:57:18+00:00| seen|...

CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834

CVE-2025-3834 affects Zohocorp ManageEngine ADAudit Plus — vulnerable in versions 8510 and prior due to an authenticated SQL injection in the OU History report. Root cause: improper handling of SQL queries in the reports module. Impact: potential unauthorized data exposure/integrity compromise fo...

CVE-2025-3834 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

CVE-2025-3834 SQL Injection

Zohocorp ManageEngine ADAudit Plus versions 8510 and prior are vulnerable to authenticated SQL injection in the OU History report...

OSV-2025-363 Heap-buffer-overflow in jv_string_vfmt

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=417323384 Crash type: Heap-buffer-overflow READ 2 Crash state: jvstringvfmt jvstringfmt jvget...

PT-2025-21148 · Zohocorp · Zoho Manageengine Adaudit Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADAudit Plus versions 8510 and prior Description: The issue concerns an authenticated SQL injection in the OU History report. This allows for potential exploitation where an attacker could manipulate database queries...