OSV-2025-456 Use-of-uninitialized-value in ppd_hash_option

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=423674620 Crash type: Use-of-uninitialized-value Crash state: ppdhashoption cupsArrayFind ppdFindOption...

CVE-2025-6001

creationtimestamp| type| source ---|---|--- 2025-06-11 16:50:44+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114665759988523805 2025-06-11 18:35:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18121 2025-06-11 19:23:49+00:00| seen|...

CVE-2025-1699

CVE-2025-1699: The MotoSignature application is affected by an incorrect default permissions vulnerability that could allow unauthorized access. The entry is corroborated by multiple sources (NVD/NVD-centric, Red Hat CVE page, CVE lists) noting MotoSignature as the affected component. Exploitatio...

CVE-2025-4230

creationtimestamp| type| source ---|---|--- 2025-06-11 14:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2025-4230 2025-06-11 19:03:31+00:00| seen| https://bsky.app/profile/ripjyr.bsky.social/post/3lre3w2cxq52h 2025-06-13 00:32:33+00:00| seen|...

CVE-2024-1244

creationtimestamp| type| source ---|---|--- 2025-06-11 03:37:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18040 2025-06-11 05:18:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrcnthzptu2a 2025-06-11 11:03:35+00:00| seen|...

CVE-2025-49216

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-373/ 2025-06-13 05:11:08+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114674333654788638 2025-06-16 16:53:04+00:00| seen| https://t.me/truesecator/7129...

CVE-2025-49213

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-370/ 2025-06-16 16:53:04+00:00| seen| https://t.me/truesecator/7129 2025-06-18 01:03:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrtsttw3nx2u...

CVE-2025-49487

creationtimestamp| type| source ---|---|--- 2025-06-11 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-360/...

CVE-2025-47115

creationtimestamp| type| source ---|---|--- 2025-06-11 02:03:53+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrccwsjbgl2k 2025-06-11 15:31:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18081...

Online Fire Reporting System /search-report-result.php File SQL Injection Vulnerability

Online Fire Reporting System is an online fire reporting system. The Online Fire Reporting System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter serachdata in the file /search-report-result.php. An attacker c...

Human Metapneumovirus Testing Management System /search-report-result.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. The Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter...

Out-of-bounds Read

Overview nokogiri is a gem for parsing HTML, XML, SAX, and Reader. Affected versions of this package are vulnerable to Out-of-bounds Read due to improper namespace processing of sch:name elements in xmlSchematronFormatReport function. An attacker can cause a denial of service or potentially execu...

Out-of-bounds Read

Overview Affected versions of this package are vulnerable to Out-of-bounds Read due to improper namespace processing of sch:name elements in xmlSchematronFormatReport function. An attacker can cause a denial of service or potentially execute arbitrary code by providing specially crafted XML input...

Human Metapneumovirus Testing Management System /bwdates-report-result.php File SQL Injection Vulnerability

Human Metapneumovirus Testing Management System is a human subpneumovirus testing management system. Human Metapneumovirus Testing Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file...

Dairy Farm Shop Management System /bwdate-report-details.php File SQL Injection Vulnerability

Dairy Farm Shop Management System is a PHP and MySQL based dairy farm management system . Dairy Farm Shop Management System suffers from a SQL injection vulnerability that originates from the lack of validation of the fromdate/todate parameter in the file /bwdate-report-details.php for externally...

CVE-2025-49133

creationtimestamp| type| source ---|---|--- 2025-06-10 20:31:55+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17994 2025-07-30 18:05:38+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lv77jnzi732z 2025-07-30 18:06:21+00:00| seen|...

Patch Tuesday - June 2025

Microsoft is addressing 67 vulnerabilities this June 2025 Patch Tuesday. Microsoft has evidence of in-the-wild exploitation for just one of the vulnerabilities published today, and that is reflected in CISA KEV. Separately, Microsoft is aware of existing public disclosure for one other freshly...

CVE-2025-30327

creationtimestamp| type| source ---|---|--- 2025-06-10 19:31:26+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17982...

CVE-2025-5975 PHPGurukul Rail Pass Management System download-pass.php cross site scripting

A vulnerability, which was classified as problematic, was found in PHPGurukul Rail Pass Management System 1.0. This affects an unknown part of the file /rpms/download-pass.php. The manipulation of the argument searchdata leads to cross site scripting. It is possible to initiate the attack remotel...

CVE-2024-43706

creationtimestamp| type| source ---|---|--- 2025-06-10 18:33:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17965 2025-06-16 23:22:37+00:00| seen| https://bsky.app/profile/securitylab-jp.bsky.social/post/3lrr4ptjf2k2w...