Microsoft .library-ms File / NTLM Information Disclosure - Resurrected 2025

It took 7 years, but Microsoft finally realized a vulnerability was severe enough to be addressed and it was not until other researchers also reported it, that the original researcher finally got credited after pointing it out...

Security Bug Report Prediction within and across Projects: a Comparative Study of BERT and Random Forest

Early detection of security bug reports SBRs is crucial for preventing vulnerabilities and ensuring system reliability. While machine learning models have been developed for SBR prediction, their predictive performance still has room for improvement. In this study, we conduct a comprehensive...

CVE-2025-43952

A cross-site scripting reflected XSS vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 440. It allows an attacker to inject malicious scripts via the IWSessionID parameter...

Moodle allows IDOR when accessing the cohorts report

A flaw was discovered in Moodle. Additional checks were required to ensure that users can only access cohort data they are authorized to retrieve...

Moodle shows hidden grades to users without permission on some grade reports

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades...

GHSA-8M7C-HM88-2P97 Moodle shows hidden grades to users without permission on some grade reports

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades...

Missing Authorization

Overview moodle/moodle is a learning platform. Affected versions of this package are vulnerable to Missing Authorization due to insufficient capability checks in certain grade reports. An attacker can view hidden grades by accessing these reports without the required permissions. Remediation...

UBUNTU-CVE-2025-32045

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades...

CVE-2025-32045 Moodle: hidden grades shown to users without permission on some grade reports

A flaw has been identified in Moodle where insufficient capability checks in certain grade reports allowed users without the necessary permissions to access hidden grades...

CVE-2025-32045

CVE-2025-32045 describes a Moodle vulnerability where insufficient capability checks in certain grade reports allow users without the necessary permissions to access hidden grades. Affected software: Moodle; affected component: grade reports formatting/access control pathway (insufficient capabil...

ECG Identity Authentication in Open-Set with Multi-Model Pretraining and Self-Constraint Center and Irrelevant Sample Repulsion Learning

Electrocardiogram ECG signal exhibits inherent uniqueness, making it a promising biometric modality for identity authentication. As a result, ECG authentication has gained increasing attention in recent years. However, most existing methods focus primarily on improving authentication accuracy...

CVE-2025-46274

creationtimestamp| type| source ---|---|--- 2025-04-24 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-114-06 2025-04-24 23:09:16+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13361 2025-04-25 00:19:53+00:00| seen|...

CVE-2025-2703

creationtimestamp| type| source ---|---|--- 2025-04-23 08:30:30+00:00| seen| https://bsky.app/profile/grafana.bsky.social/post/3lnhroytxvs2w 2025-04-23 10:38:14+00:00| seen| https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lnhytg4c222p 2025-04-23 12:19:33+00:00| seen|...

CVE-2025-1951

creationtimestamp| type| source ---|---|--- 2025-04-22 15:03:45+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12866 2025-04-22 15:52:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114382415652361250 2025-04-22 15:56:49+00:00| seen|...

A Time Series Analysis of Malware Uploads to Programming Language Ecosystems

Software ecosystems built around programming languages have greatly facilitated software development. At the same time, their security has increasingly been acknowledged as a problem. To this end, the paper examines the previously overlooked longitudinal aspects of software ecosystem security,...

PT-2025-17584 · Mettler Toledo · Mettler Toledo Freeweight.Net Web Reports Viewer

Name of the Vulnerable Software and Affected Versions: Mettler Toledo FreeWeight.Net Web Reports Viewer version 8.4.0 440 Description: A cross-site scripting reflected XSS issue was found, allowing an attacker to inject malicious scripts via the IW SessionID parameter. This enables the execution ...

CVE-2025-43952

The CVE-2025-43952 entry applies to Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 (440). The vulnerability is a reflected cross-site scripting (XSS) flaw that allows an attacker to inject malicious scripts via the IW_SessionID_ parameter, potentially affecting users who interact with the...

CVE-2025-43952

A cross-site scripting reflected XSS vulnerability was found in Mettler Toledo FreeWeight.Net Web Reports Viewer 8.4.0 440. It allows an attacker to inject malicious scripts via the IWSessionID parameter...

CVE-2025-3829

A vulnerability was found in PHPGurukul Men Salon Management System 1.0. It has been classified as critical. Affected is an unknown function of the file /admin/sales-reports-detail.php. The manipulation of the argument fromdate/todate leads to sql injection. It is possible to launch the attack...

CVE-2025-3829

PHPGurukul Men Salon Management System 1.0 is affected by a SQL injection in /admin/sales-reports-detail.php caused by manipulation of the fromdate/todate parameters. The issue can be exploited remotely and has been publicly disclosed. Public details consistently identify this as a critical issue...