ycrash.io Cross Site Scripting vulnerability OBB-4040095

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2738

creationtimestamp| type| source ---|---|--- 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 08:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va366vp2n 2025-03-25 09:27:39+00:00| seen|...

CVE-2024-8313

creationtimestamp| type| source ---|---|--- 2025-03-25 06:56:55+00:00| seen| https://t.me/cvedetector/21036 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05...

CVE-2025-2739

creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8610 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 08:49:31+00:00| seen|...

CVE-2025-2736

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736 PHPGurukul Old Age Home Management System bwdates-report-details.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736 PHPGurukul Old Age Home Management System bwdates-report-details.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2727

creationtimestamp| type| source ---|---|--- 2025-03-25 03:24:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8588 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:23+00:00| seen|...

CVE-2025-2725

creationtimestamp| type| source ---|---|--- 2025-03-25 02:23:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8581 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:22+00:00| seen|...

CVE-2025-2720

Last updated 25 March 2025 Notes gianz According to the linked bug this is likely not even a vulnerability...

B&R Industrial Automation B&R APROL 代码注入漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A code injection vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from a code injection in the AprolCreateReport component that could allow a...

CVE-2025-2732

creationtimestamp| type| source ---|---|--- 2025-03-24 16:19:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114218312897136883 2025-03-25 04:23:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8589 2025-03-25 04:48:25+00:00| seen|...

Using Mermaid to cause JS memory overflow and service downtime

Description Librechat has many means of limiting the rate, which can be found at https://www.librechat.ai/docs/configuration/librechatyaml/objectstructure/configratelimits. However, it can be found that the Fork Function in /api/convos/fork is not restricted, which allows attackers to fork...

CVE-2025-2690

creationtimestamp| type| source ---|---|--- 2025-03-24 10:02:21+00:00| seen| https://t.me/cvedetector/20944 2025-03-24 10:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmpjcez2h 2025-03-24 18:48:16+00:00| seen|...

CVE-2025-2683

creationtimestamp| type| source ---|---|--- 2025-03-24 06:30:52+00:00| published-proof-of-concept| Telegram/kP9yqiAKfxVbjZsANaRhvdiBWIlMgbAXRpD9R63SjOi8KOg 2025-03-24 08:22:07+00:00| seen| https://t.me/cvedetector/20942 2025-03-24 08:24:09+00:00| seen|...

CVE-2025-2672

creationtimestamp| type| source ---|---|--- 2025-03-24 01:40:55+00:00| seen| https://t.me/cvedetector/20927 2025-03-24 02:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3owufyhh26...

PHPGurukul Bank Locker Management System 注入漏洞

Bank Locker Management System is a bank locker management system. Bank Locker Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally-entered SQL statements in the searchinput parameter of the search-report-details.php file. An attacker ca...

PT-2025-12698 · Unknown · Phpgurukul Old Age Home Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Old Age Home Management System version 1.0 Description: A critical vulnerability was found in PHPGurukul Old Age Home Management System, affecting some unknown functionality of the file /admin/bwdates-report-details.php. The...

CVE-2025-2660

creationtimestamp| type| source ---|---|--- 2025-03-23 22:19:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3bl5lzfi2m 2025-03-23 22:20:12+00:00| seen| https://t.me/cvedetector/20917...