90833 matches found
CVE-2025-58312: Undefined Security Weakness
Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58310: Access of Resource Using Incompatible Type
Permission control vulnerability in the distributed component. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-13770: Improper Neutralization of Special Elements used in an SQL Command
WebITR developed by Uniong has a SQL Injection vulnerability, allowing authenticated remote attackers to inject arbitrary SQL commands to read database contents...
CVE-2025-66382: Inefficient Algorithmic Complexity
In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time...
CVE-2025-58308: Improperly Implemented Security Check for Standard
Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally...
CVE-2025-58304: Undefined Security Weakness
Permission control vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-64315: Undefined Security Weakness
Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity...
CVE-2025-64314: Access of Resource Using Incompatible Type
Permission control vulnerability in the memory management module. Impact: Successful exploitation of this vulnerability may affect confidentiality...
CVE-2025-58315: Undefined Security Weakness
Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2025-58309: Undefined Security Weakness
Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality...
CVE-2025-58307: Use After Free
UAF vulnerability in the screen recording framework module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-58294: Undefined Security Weakness
Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...
pickle-scan-bypass-poc
CTF Write-up: BrineBreaker Pickle Scan Evasion Este reposit...
📄 Laravel 11 Cross Site Scripting Scanner
This is a script to scan Laravel version 11 instances to identify known cross site scripting vulnerabilities. ============================================================================================================================================= | Title : Laravel v11 XSS Vulnerability Scann...
CVE-2025-12140: Improper Neutralization of Directives in Dynamically Evaluated Code
The application contains an insecure 'redirectToUrl' mechanism that incorrectly processes the value of the 'redirectUrlParameter' parameter. The application interprets the entered string of characters as a Java expression, allowing an unauthenticated attacer to perform arbitrary code execution...
CVE-2025-30186: Improper Neutralization of Input During Web Page Generation
Malicious content uploaded as file can be used to execute script code when following attacker-controlled links. Unintended actions can be executed in the context of the users account, including exfiltration of sensitive information. Please deploy the provided updates and patch releases. No public...
CVE-2025-13757: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in last usage logs in Devolutions Server.This issue affects Devolutions Server: through 2025.2.20, through 2025.3.8...
web-vulnerability-scanner
web-vulnerability-scanner Python-b...
Wordfence Intelligence Weekly WordPress Vulnerability Report (November 17, 2025 to November 23, 2025)
Last week, there were 167 vulnerabilities disclosed in 152 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 69 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities...