CVE-2025-15168: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in itsourcecode Student Management System 1.0. Affected is an unknown function of the file /statistical.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit is publicly available and might be used...

CVE-2025-68860: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Mobile Builder Mobile builder mobile-builder allows Authentication Abuse.This issue affects Mobile builder: from n/a through = 1.4.2...

CVE-2025-68861: Missing Authorization

Missing Authorization vulnerability in pluginoptimizer Plugin Optimizer plugin-optimizer allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Plugin Optimizer: from n/a through = 1.3.7...

CVE-2024-25182: Unrestricted Upload of File with Dangerous Type

givanz VvvebJs 1.7.2 suffers from a File Upload vulnerability via save.php...

CVE-2025-15070: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information to an Unauthorized Actor, Missing Authorization vulnerability in Gmission Web Fax allows Authentication Abuse. This issue affects Web Fax: from 3.0 before 3.0.1...

Exploit for CVE-2025-14847

🩸 MongoBleed Scanner High-Performance MongoDB Heap Memory L...

Exploit for Deserialization of Untrusted Data in Facebook React

🎯 CVE-2025-55182-advanced-scanner- - Detect and Exploit Vulner...

Syntecxhub_SQL_Injection_Scanner

SyntecxhubSQLInjectionScanner A...

CVE-2025-8075: Improper Input Validation

Cybersecurity Nozomi Networks Labs, a specialized security company focused on Industrial Control Systems ICS and OT/IoT security, has discovered that validation of incoming XML format request messages is inadequate. This vulnerability could allow an attacker to XSS on the user's browser. The...

CVE-2025-62578: Cleartext Transmission of Sensitive Information

DVP-12SE - Modbus/TCP Cleartext Transmission of Sensitive Information...

The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system allows a hacker to execute arbitrary code.

The vulnerability of the Malcure Malware Scanner plugin in the WordPress content management system is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Linux Distros Unpatched Vulnerability : CVE-2023-53991

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - drm/msm/dpu: Disallow unallocated resources to be returned In the event that the topology requests resources that have not been created by the system because th...

Linux Distros Unpatched Vulnerability : CVE-2023-53988

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fs/ntfs3: Fix slab-out-of-bounds read in hdrdeletede Here is a BUG report from syzbot: BUG: KASAN: slab-out-of-bounds in hdrdeletede+0xe0/0x150...

Linux Distros Unpatched Vulnerability : CVE-2023-54078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - media: max9286: Free control handler The control handler is leaked in some probe-time error paths, as well as in the remove path. Fix it. CVE-2023-54078 Note th...

Linux Distros Unpatched Vulnerability : CVE-2023-54130

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - hfs/hfsplus: avoid WARNON for sanity check, use proper error handling Commit 55d1cbbbb29e hfs/hfsplus: use WARNON for sanity check fixed a build warning by...

CVE-2025-2406: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Trizbi allows Cross-Site Scripting XSS. This issue affects Trizbi: before 2.144.4...

CVE-2025-68922: Improper Neutralization of Special Elements used in an OS Command

OpenOps before 0.6.11 allows remote code execution in the Terraform block...

CVE-2025-2307: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Aidango allows Cross-Site Scripting XSS. This issue affects Aidango: before 2.144.4...

CVE-2025-2405: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Verisay Communication and Information Technology Industry and Trade Ltd. Co. Titarus allows Cross-Site Scripting XSS. This issue affects Titarus: before 2.144.4...

Photon OS 5.0: Linux PHSA-2025-5.0-0720

An update of the linux package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2025-5.0-0720. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...