4718 matches found
CVE-2026-6162 PHPGurukul Company Visitor Management System bwdates-reports-details.php cross site scripting
A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...
PT-2026-32263
A vulnerability has been found in PHPGurukul Company Visitor Management System 2.0. This impacts an unknown function of the file /bwdates-reports-details.php. The manipulation of the argument fromdate leads to cross site scripting. The attack is possible to be carried out remotely. The exploit ha...
Linux Distros Unpatched Vulnerability : CVE-2026-1516
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality...
PHPGurukul Company Visitor Management System 代码注入漏洞
PHPGurukul Company Visitor Management System is a visitor management system developed by PHPGurukul Corporation. Version 2.0 of the PHPGurukul Company Visitor Management System has a code injection vulnerability. This vulnerability stems from incorrect handling of the parameter “fromdate” in the...
PT-2026-32413
GitLab has remediated an issue in GitLab EE affecting all versions from 18.0.0 before 18.8.9, 18.9 before 18.9.5, and 18.10 before 18.10.3 that in Code Quality reports could have allowed an authenticated user to leak IP addresses of users viewing the report via specially crafted content...
cyber-punk
Cyber Punk Security Vulnerability Scanner A Claude Code plu...
CVE-2026-6157
creationtimestamp| type| source ---|---|--- 2026-04-12 18:27:12+00:00| seen| https://infosec.exchange/users/vuldb/statuses/116393143940938921 2026-04-13 04:17:31+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjdz3hiejr27 2026-04-13 05:18:10+00:00| published-proof-of-concep...
CVE-2018-25258
creationtimestamp| type| source ---|---|--- 2026-04-12 14:16:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mjck2qo2dc23 2026-04-12 15:32:40+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3mjcodso6mx25...
CVE-2026-6112
creationtimestamp| type| source ---|---|--- 2026-04-12 05:16:17+00:00| published-proof-of-concept| Telegram/rbF7fSnY0VEd6aCx4theR2I2I4JGiCz6cyJ3UThbj-lLIU 2026-04-12 05:45:49+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mjbnkgiyk52w 2026-04-12 06:35:09+00:00| seen|...
CVE-2025-81110
creationtimestamp| type| source ---|---|--- 2026-04-12 03:00:07+00:00| published-proof-of-concept| Telegram/S964UnaAzc4FW7CZCUbAm7wNqkztcWapRmtGqRf9U9sXCaA 2026-04-12 03:00:11+00:00| published-proof-of-concept| Telegram/uShh7JQ-RKU8UrIGlZFZPf5aOBK5MJm9YT2tTiL1E4LyHaQ...
A Relay a Day Keeps the AirTag Away: Practical Relay Attacks on Apple's AirTags
Apple AirTags use Apple's Find My network: when nearby iDevices detect a lost tag, they anonymously forward an encrypted location report to Apple, which the tag's owner can then fetch to locate the item. That encryption protects privacy -- neither the finder nor Apple learns the owner's identity ...
CVE-2025-15480
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...
CVE-2025-14551
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...
CVE-2026-6057
creationtimestamp| type| source ---|---|--- 2026-04-10 10:04:25+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mj532zqngr2i 2026-04-10 10:30:31+00:00| seen| https://infosec.exchange/users/offseq/statuses/116379944895861861 2026-04-10 10:30:33+00:00| seen|...
[SECURITY] Fedora 43 Update: cockpit-360-1.fc43
The Cockpit Web Console enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more...
Gramps Web API: Private Sub-Object Data in Non-Private Objects Exposed to Guest Users
Summary Users with the Guest role could receive private sub-object data e.g. private alternate names, private addresses, private note/citation/media handles through list API endpoints such as GET /api/people/, GET /api/places/, GET /api/events/, and all other object list endpoints. This does not...
EUVD-2025-209377
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...
EUVD-2025-209375
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...
PYSEC-2026-135
In Ubuntu, Subiquity version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, Subiquity could include certain user credentials, such as the user's plaintext Wi-Fi password, in the attached logs...
CVE-2025-15480
In Ubuntu, ubuntu-desktop-provision version 24.04.4 could leak sensitive user credentials during crash reporting. Upon installation failure, if a user submitted a bug report to Launchpad, ubuntu-desktop-provision could include the user's password hash in the attached logs...