devoldere.net Cross Site Scripting vulnerability OBB-4040139

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

openSUSE Security Advisory (SUSE-SU-2025:0989-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Navigation Tree Elementor plugin <= 1.0.1 - SQL Injection Vulnerability

SQL Injection Vulnerability discovered by timomangcut in WordPress Plugin Navigation Tree Elementor versions = 1.0.1...

ycrash.io Cross Site Scripting vulnerability OBB-4040095

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2025-2738

creationtimestamp| type| source ---|---|--- 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 08:49:30+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va366vp2n 2025-03-25 09:27:39+00:00| seen|...

CVE-2024-8313

creationtimestamp| type| source ---|---|--- 2025-03-25 06:56:55+00:00| seen| https://t.me/cvedetector/21036 2025-04-03 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-093-05...

CVE-2025-2739

creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8610 2025-03-25 08:01:13+00:00| published-proof-of-concept| Telegram/1huWIRueQzufqMISTEPMEyKE3aRIFqK3qoq5n6GjRtUUGx0 2025-03-25 08:49:31+00:00| seen|...

CVE-2025-2736

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736 PHPGurukul Old Age Home Management System bwdates-report-details.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2736 PHPGurukul Old Age Home Management System bwdates-report-details.php sql injection

A vulnerability was found in PHPGurukul Old Age Home Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-report-details.php. The manipulation of the argument fromdate leads to sql injection. The attack may be launched...

CVE-2025-2727

creationtimestamp| type| source ---|---|--- 2025-03-25 03:24:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8588 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:23+00:00| seen|...

CVE-2025-2725

creationtimestamp| type| source ---|---|--- 2025-03-25 02:23:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8581 2025-03-25 04:01:20+00:00| published-proof-of-concept| Telegram/MXLtd6D6lDs-X3W-toegTHLzYyO4SelR8FKZM3tOB5yKLoA 2025-03-25 04:48:22+00:00| seen|...

B&R Industrial Automation B&R APROL 代码注入漏洞

B&R Industrial Automation B&R APROL is a process control system from B&R Industrial Automation, Austria. A code injection vulnerability exists in B&R Industrial Automation B&R APROL versions prior to 4.4-00P5, which stems from a code injection in the AprolCreateReport component that could allow a...

CVE-2025-2720

Last updated 25 March 2025 Notes gianz According to the linked bug this is likely not even a vulnerability...

CVE-2025-2732

creationtimestamp| type| source ---|---|--- 2025-03-24 16:19:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114218312897136883 2025-03-25 04:23:22+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8589 2025-03-25 04:48:25+00:00| seen|...

Using Mermaid to cause JS memory overflow and service downtime

Description Librechat has many means of limiting the rate, which can be found at https://www.librechat.ai/docs/configuration/librechatyaml/objectstructure/configratelimits. However, it can be found that the Fork Function in /api/convos/fork is not restricted, which allows attackers to fork...

CVE-2025-2690

creationtimestamp| type| source ---|---|--- 2025-03-24 10:02:21+00:00| seen| https://t.me/cvedetector/20944 2025-03-24 10:34:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll4kmpjcez2h 2025-03-24 18:48:16+00:00| seen|...

CVE-2025-2683

creationtimestamp| type| source ---|---|--- 2025-03-24 06:30:52+00:00| published-proof-of-concept| Telegram/kP9yqiAKfxVbjZsANaRhvdiBWIlMgbAXRpD9R63SjOi8KOg 2025-03-24 08:22:07+00:00| seen| https://t.me/cvedetector/20942 2025-03-24 08:24:09+00:00| seen|...

CVE-2025-2672

creationtimestamp| type| source ---|---|--- 2025-03-24 01:40:55+00:00| seen| https://t.me/cvedetector/20927 2025-03-24 02:18:54+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll3owufyhh26...