PT-2025-21147 · Zohocorp · Zoho Manageengine Adselfservice Plus

Name of the Vulnerable Software and Affected Versions: Zohocorp ManageEngine ADSelfService Plus versions 6513 and prior Description: The issue concerns an authenticated SQL injection in the MFA reports. Recommendations: For versions 6513 and prior, consider restricting access to the MFA reports...

Park Ticketing Management System normal-bwdates-reports-details.php file HTML injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from an HTML injection vulnerability that stems from improper handling of the fromdate and todate parameters in the normal-bwdates-reports-details.php file. No details of the...

Park Ticketing Management System normal-bwdates-reports-details.php file SQL injection vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a SQL injection vulnerability that stems from improper handling of the todate parameter in the normal-bwdates-reports-details.php file. An attacker could use this vulnerability to...

Park Ticketing Management System foreigner-bwdates-reports-details.php file cross-site scripting vulnerability

Park Ticketing Management System is a park ticketing management system. Park Ticketing Management System suffers from a cross-site scripting vulnerability that stems from improper handling of the fromdate and todate parameters in the foreigner-bwdates-reports-details.php file, which can be...

Curfew e-Pass Management System /admin/pass-bwdates-reports-details.php File SQL Injection Vulnerability

Curfew e-Pass Management System is an electronic pass management system. Curfew e-Pass Management System suffers from a SQL injection vulnerability that originates from an incorrect operation of the parameter fromdate in the /admin/pass-bwdates-reports-details.php file that results in SQL...

CVE-2025-4553

A vulnerability was found in PHPGurukul Apartment Visitors Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/bwdates-reports-details.php. The manipulation of the argument fromdate/todate leads to sql injection. The attack may...

CVE-2025-4553

CVE-2025-4553 concerns a SQL injection in PHPGurukul Apartment Visitors Management System 1.0, triggered by improper handling of the fromdate/todate parameters in /admin/bwdates-reports-details.php. The issue allows remote exploitation and has been publicly disclosed. Multiple connected sources c...

SUSE CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

CVE-2024-25652

In Delinea PAM Secret Server 11.4, it is possible for a user assigned "Administer Reports" permission and/or with access to Report functionality via UNLIMITED ADMIN MODE with access to the Report functionality to gain unauthorized access to remote sessions created by legitimate users through...

DEBIAN-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

UBUNTU-CVE-2025-37862

In the Linux kernel, the following vulnerability has been resolved: HID: pidff: Fix null pointer dereference in pidfffindfields This function triggered a null pointer dereference if used to search for a report that isn't implemented on the device. This happened both for optional and required...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from the pidfffindfields function not checking for null reports, which could lead to a null pointer dereference...

About Spoofing – Windows NTLM (CVE-2025-24054) vulnerability

About Spoofing - Windows NTLM CVE-2025-24054 vulnerability. It was patched in the March Microsoft Patch Tuesday. VM vendors didn't mention this vulnerability in their reviews; it was only known to be exploited via user interaction with a malicious file. A month later, on April 16, Check Point...

Exploit for CVE-2025-1974

CVE-2025-1974IngressNightmare poc IngressNightmare Script...

Stable Channel Update for Desktop

The Stable channel has been updated to 136.0.7103.92/.93 for Windows, Mac and 136.0.7103.92 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. Security Fixes and Rewards Note: Access to bug details and links may be kept restrict...

CVE-2025-4266 PHPGurukul Notice Board System bwdates-reports-details.php sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Notice Board System 1.0. Affected by this issue is some unknown functionality of the file /bwdates-reports-details.php?vid=2. The manipulation of the argument fromdate/tomdate leads to sql injection. The attack may be...

PHPGurukul Notice Board System 注入漏洞

Notice Board System is a bulletin board system. Notice Board System has a SQL injection vulnerability that stems from improper handling of the parameters fromdate/tomdate in the file /bwdates-reports-details.php. No details of the vulnerability are available at this time...

Towards Effective Identification of Attack Techniques in Cyber Threat Intelligence Reports Using Large Language Models

This work evaluates the performance of Cyber Threat Intelligence CTI extraction methods in identifying attack techniques from threat reports available on the web using the MITRE ATT&CK framework. We analyse four configurations utilising state-of-the-art tools, including the Threat Report ATT&CK...

RHSA-2024:6503

creationtimestamp| type| source ---|---|--- 2025-05-02 17:16:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14525 2025-05-02 22:20:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14620...

BIT-MOODLE-2024-43429 Moodle: user information visibility control issues in gradebook reports

A flaw was found in moodle. Some hidden user profile fields are visible in gradebook reports, which could result in users without the "view hidden user fields" capability having access to the information...