CVE-2025-6452 CodeAstro Patient Record Management System Generate New Report Page cross site scripting

A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be...

CVE-2025-6452 CodeAstro Patient Record Management System Generate New Report Page cross site scripting

A vulnerability was found in CodeAstro Patient Record Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the component Generate New Report Page. The manipulation of the argument Patient Name/Name leads to cross site scripting. The attack may be...

CVE-2025-6449

creationtimestamp| type| source ---|---|--- 2025-06-22 00:44:16+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19142 2025-06-22 01:31:39+00:00| published-proof-of-concept| Telegram/p8F798LSCV2sUyCA6ioZ8hbl6YMhZj0eqwyIGuUlAdEidAo 2025-06-22 04:35:55+00:00| seen|...

CVE-2025-52923

creationtimestamp| type| source ---|---|--- 2025-06-22 00:44:15+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19141 2025-06-22 04:04:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls66sml4vd2m...

PT-2025-26538 · Unknown · Codeastro Patient Record Management System

Name of the Vulnerable Software and Affected Versions: CodeAstro Patient Record Management System version 1.0 Description: A vulnerability was found in the CodeAstro Patient Record Management System. This issue affects some unknown processing of the component Generate New Report Page. The...

CodeAstro Patient Record Management System 代码注入漏洞

CodeAstro Patient Record Management System is a patient record management system from CodeAstro, Inc. A code injection vulnerability exists in CodeAstro Patient Record Management System version 1.0, which originates from cross-site scripting due to incorrect operation of the parameter Patient...

CVE-2025-52917

creationtimestamp| type| source ---|---|--- 2025-06-21 23:43:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19137 2025-06-22 02:25:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5zc5pxly2s 2025-08-07 10:00:00+00:00| seen|...

CVE-2025-6446

creationtimestamp| type| source ---|---|--- 2025-06-21 23:30:45+00:00| published-proof-of-concept| Telegram/5DOq2DiFQqVGP4NgcBlMmGjMiliyLoJ8urq1ooGyZBVufk 2025-06-21 23:43:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19139 2025-06-22 02:15:49+00:00| seen|...

CVE-2025-1987

creationtimestamp| type| source ---|---|--- 2025-06-21 21:47:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19129 2025-06-22 01:57:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls5xpxfior2s...

CVE-2025-6408

creationtimestamp| type| source ---|---|--- 2025-06-21 15:42:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19118 2025-06-21 16:31:48+00:00| published-proof-of-concept| Telegram/N5xb8aPdHeqYoGeqIlWHSNd3ovkwt-hXN2mjrRLjnqW7ols 2025-06-21 17:53:59+00:00| seen|...

Report Warns of Sophisticated DDoS Campaigns Crippling Global Banks

A new FS-ISAC and Akamai report warns that sophisticated DDoS attacks are severely impacting the global financial sector, leading to multi-day outages. Learn about these evolving threats and how institutions can strengthen defences...

CVE-2025-3629

creationtimestamp| type| source ---|---|--- 2025-06-21 13:58:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls4pkespq42i...

CVE-2025-6367

creationtimestamp| type| source ---|---|--- 2025-06-20 22:47:10+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ls34mb6m4d2a 2025-06-30 20:26:57+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114774193882630947...

CVE-2025-34024

An OS command injection vulnerability exists in the Edimax EW-7438RPn firmware version 1.13 and prior via the mp.asp form handler. The /goform/mp endpoint improperly handles user-supplied input to the command parameter. An authenticated attacker can inject shell commands using shell metacharacter...

CVE-2025-25038

An OS command injection vulnerability exists in MiniDVBLinux version 5.4 and earlier. The system’s web-based management interface fails to properly sanitize user-supplied input before passing it to operating system commands. A remote unauthenticated attacker can exploit this vulnerability to...

zkVM Underconstrained Vulnerability

Due to a missing constraint in the rv32im circuit, any 3-register RISC-V instruction including remu and divu in risc0-zkvm 2.0.0, 2.0.1, and 2.0.2 are vulnerable to an attack by a malicious prover. The main idea for the attack is to confuse the RISC-V virtual machine into treating the value of th...

CVE-2025-3319

creationtimestamp| type| source ---|---|--- 2025-06-20 15:44:27+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114716460122430571 2025-06-20 15:57:32+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114716511566293830 2025-06-20 17:23:08+00:00| seen|...

CVE-2025-6308 PHPGurukul Emergency Ambulance Hiring Portal bwdates-request-report-details.php sql injection

A vulnerability classified as critical has been found in PHPGurukul Emergency Ambulance Hiring Portal 1.0. Affected is an unknown function of the file /admin/bwdates-request-report-details.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the...

CVE-2025-49715

creationtimestamp| type| source ---|---|--- 2025-06-20 01:33:52+00:00| seen| Telegram/3MtQD2Az6x3Z0JnV6xHkzIGmkFDUgMcQhDMc9KiJtjUx54 2025-06-20 01:49:54+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114713178529573302...

OSV-2025-481 Stack-buffer-overflow in void glz::from<10000u, int>::op<glz::opts_csv{10000u,

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=425730091 Crash type: Stack-buffer-overflow READ 1 Crash state: void glz::from::op::op::opglz::optscsv10000u,...