4765 matches found
GHSA-JFH8-C2JP-5V3Q
creationtimestamp| type| source ---|---|--- 2025-07-16 08:23:40+00:00| seen| https://gist.github.com/safer-bot/ef60ba5b8082b173c2019a18ade46e96 2025-07-16 09:35:26+00:00| seen| https://gist.github.com/safer-bot/36999e3d8163b7f4c1934f5db4c70cc6 2025-07-16 09:45:24+00:00| seen|...
GHSA-7R82-7XV7-XCPJ
creationtimestamp| type| source ---|---|--- 2025-07-16 03:12:23+00:00| seen| https://gist.github.com/safer-bot/79174d0c201539d79b25fe0f667fa43e 2025-07-16 03:23:26+00:00| seen| https://gist.github.com/safer-bot/b741dde9ba07c0f12e52ef92e8b23ee0 2025-07-16 03:39:54+00:00| seen|...
SUSE: Security Advisory (SUSE-SU-2025:02296-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-7522
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The...
CVE-2025-7522 PHPGurukul Vehicle Parking Management System bwdates-reports-details.php sql injection
A vulnerability has been found in PHPGurukul Vehicle Parking Management System 1.13 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The...
CVE-2025-7522
CVE-2025-7522 affects PHPGurukul Vehicle Parking Management System v1.13. The vulnerability is a SQL injection in /admin/bwdates-reports-details.php triggered by manipulating fromdate/todate. It is exploitable remotely, and the exploit has been publicly disclosed. The PT- security entry notes no ...
PHPGurukul Vehicle Parking Management System 注入漏洞
PHPGurukul Vehicle Parking Management System is a parking management system from PHPGurukul. An injection vulnerability exists in PHPGurukul Vehicle Parking Management System version 1.13, which originates from SQL injection due to incorrect operation of the parameter fromdate/todate in the file...
openSUSE Security Advisory (SUSE-SU-2025:02261-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2025-53651
Jenkins HTML Publisher Plugin 425 and earlier displays log messages that include the absolute paths of files archived during the Publish HTML reports post-build step, exposing information about the Jenkins controller file system in the build log...
CVE-2025-53546
creationtimestamp| type| source ---|---|--- 2025-07-09 14:42:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114823801833628508 2025-07-09 16:05:16+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ltk6z3xql62y 2025-08-06 01:04:19+00:00| seen|...
Automated Attack Testflow Extraction from Cyber Threat Report Using BERT for Contextual Analysis
In the ever-evolving landscape of cybersecurity, the rapid identification and mitigation of Advanced Persistent Threats APTs is crucial. Security practitioners rely on detailed threat reports to understand the tactics, techniques, and procedures TTPs employed by attackers. However, manually...
CVE-2025-48385
creationtimestamp| type| source ---|---|--- 2025-07-08 15:02:11+00:00| seen| https://github.blog/open-source/git/git-security-vulnerabilities-announced-6/ 2025-07-08 15:11:31+00:00| seen| https://seclists.org/oss-sec/2025/q3/13 2025-07-08 15:56:31+00:00| seen|...
CVE-2025-25271
creationtimestamp| type| source ---|---|--- 2025-07-08 07:09:17+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816355954472736 2025-07-08 07:10:35+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3ltgqm2dg2r72 2025-07-08 09:29:48+00:00| seen|...
CVE-2025-42973
Due to a Cross-Site Scripting vulnerability in SAP Data Services Management Console, an authenticated attacker could exploit the search functionality associated with DQ job status reports. By intercepting requests, malicious script can be injected and subsequently executed when a user loads the...
The vulnerability of the XML Services component of the Oracle BI Publisher software allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the XML Services component of the Oracle BI Publisher software for creating reports is related to insufficient protection of operational data. Exploiting this vulnerability may allow an attacker, operating remotely, to gain unauthorized access to protected information...
Cloud Digital Forensic Readiness: an Open Source Approach to Law Enforcement Request Management
Cloud Forensics presents a multi-jurisdictional challenge that may undermines the success of digital forensic investigations DFIs. The growing volumes of domiciled and foreign law enforcement LE requests, the latency and complexity of formal channels for crossborder data access are challenging...
Information Exposure
org.junit.platform, junit-platform-reporting is vulnerable to information exposure. The vulnerability is due to a flaw in the OpenTestReportGeneratingListener leaking Git credentials in generated Open Test Reporting XML files, which allows an attacker to steal exposed tokens from publicly...
Qualys Named an Overall Leader in CNAPP by KuppingerCole
We’re proud to share that Qualys has been named an Overall Leader in the 2025 KuppingerCole Leadership Compass for Cloud-Native Application Protection Platforms CNAPP—achieving leadership positions in both product and market presence. This recognition validates our commitment to delivering truste...
CVE-2025-6462 EZ SQL Reports Shortcode Widget and DB Backup <= 5.25.11 - Authenticated (Contributor+) Stored Cross-Site Scripting via SQLREPORT Shortcode
The EZ SQL Reports Shortcode Widget and DB Backup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's SQLREPORT shortcode in all versions up to, and including, 5.25.11 due to insufficient input sanitization and output escaping on user supplied attributes. This makes...