83316 matches found
CVE-2025-5912
creationtimestamp| type| source ---|---|--- 2025-06-09 08:17:03+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114652415438530839 2025-06-10 04:31:27+00:00| published-proof-of-concept| Telegram/SuCuNuYYG7YH6LF-PMvjYx2GIDz9A5wanFKy4pWUO100XY8 2025-06-10 05:49:07+00:00| seen|...
CVE-2025-5894
creationtimestamp| type| source ---|---|--- 2025-06-09 08:01:10+00:00| seen| Telegram/8DD9EH1jjPgxFP-wN6j7n4FLGqxinvMMBZqqPnx2jljiLjs 2025-06-09 09:24:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr62m4kusl2q...
CVE-2025-5858
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...
CVE-2025-5858 PHPGurukul Nipah Virus Testing Management System patient-report.php sql injection
A vulnerability was found in PHPGurukul Nipah Virus Testing Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /patient-report.php. The manipulation of the argument searchdata leads to sql injection. It is possible to launch the attack remotely...
PHPGurukul Nipah virus Testing Management System 注入漏洞
Nipah Virus Testing Management System is an online virus diagnostic platform. The Nipah Virus Testing Management System suffers from a SQL injection vulnerability that arises from insufficient filtering of the searchdata parameter in the patient-report.php file. An attacker can exploit this...
CVE-2025-27563
creationtimestamp| type| source ---|---|--- 2025-06-08 15:32:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr46pjiwfo2e...
CVE-2025-3365
A missing protection against path traversal allows to access any file on the server...
CVE-2025-5223
creationtimestamp| type| source ---|---|--- 2025-06-08 01:08:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2ogveg2l2s...
CVE-2022-36466
creationtimestamp| type| source ---|---|--- 2025-06-08 01:03:26+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lr2o5ww3fu2s...
CVE-2025-49619
creationtimestamp| type| source ---|---|--- 2025-06-07 14:30:39+00:00| published-proof-of-concept| Telegram/YSJhdJjMlrABiHF1mC9tmQTTaLYxNBOL8QpiCjaALoLvyOE 2025-06-07 16:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzszxvl7m2c 2025-06-15 08:14:08+00:00|...
Cross-site Scripting (XSS)
Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS through the report serving functionality. An attacker capable of changing report content can bypass the Content-Security-Policy introduced in Jenkins 1.641 and 1.625.3. Workaround Affected users are advised to...
CVE-2025-47601
creationtimestamp| type| source ---|---|--- 2025-06-07 05:00:22+00:00| seen| Telegram/rvYzq3XuSqIS6Jq2gKTARck8Jdf3ZePMyR6aO0nPIgKoa34 2025-06-07 06:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqyqy4kql72e...
Tenda AC9 注入漏洞
Tenda AC9 is a wireless router from Tenda, a Chinese company. The Tenda AC9 suffers from a command injection vulnerability that stems from the parameter list in the file /goform/SetIPTVCfg failing to properly filter constructed command special characters, commands, and so on. No details of the...
CVE-2025-5799
creationtimestamp| type| source ---|---|--- 2025-06-06 19:42:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114638125652421315 2025-06-06 21:33:08+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxrwxrno525...
CVE-2025-49599
creationtimestamp| type| source ---|---|--- 2025-06-06 19:08:14+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqxjtuyoou2m...
CVE-2025-5764
creationtimestamp| type| source ---|---|--- 2025-06-06 15:10:44+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx4l6vw5f2a...
CVE-2025-49446
creationtimestamp| type| source ---|---|--- 2025-06-06 14:48:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqx3dtdxq42k...
CVE-2025-5806
CVE-2025-5806 affects Jenkins Gatling Plugin 136.vb_9009b_3d33a_e. The vulnerability arises from serving Gatling reports in a way that bypasses CSP protections added in Jenkins 1.641/1.625, enabling cross-site scripting (XSS) exploitable by users who can change report content. CVSSv3.1 base score...
CVE-2025-5806
Jenkins Gatling Plugin 136.vb9009b3d33ae serves Gatling reports in a manner that bypasses the Content-Security-Policy protection introduced in Jenkins 1.641 and 1.625, resulting in a cross-site scripting XSS vulnerability exploitable by users able to change report content...