CVE-2025-5519: Insertion of Sensitive Information Into Sent Data

Insertion of Sensitive Information Into Sent Data vulnerability in ArgusTech BILGER allows Choosing Message Identifier. This issue affects BILGER: before 2.4.6...

CVE-2023-53330: Missing Release of Memory after Effective Lifetime

In the Linux kernel, the following vulnerability has been resolved: caif: fix memory leak in cfctrllinkuprequest When linktype is unknown or kzalloc failed in cfctrllinkuprequest, pkt is not released. Add release process to error path...

CVE-2025-56289: Improper Neutralization of Input During Web Page Generation

code-projects Document Management System 1.0 has a Cross Site Scripting XSS vulnerability, where attackers can leak admin's cookie information by entering malicious XSS code in the Company field when adding files...

CVE-2025-8057: Authorization Bypass Through User-Controlled Key

Authorization Bypass Through User-Controlled Key, Externally Controlled Reference to a Resource in Another Sphere, Improper Authorization vulnerability in Patika Global Technologies HumanSuite allows Exploiting Trust in Client. This issue affects HumanSuite: before 53.21.0...

CVE-2025-10417: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deleteproduct. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

CVE-2025-43315: Improper Access Control

This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Sonoma 14.8, macOS Tahoe 26. An app may be able to access user-sensitive data...

CVE-2023-53209: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211hwsim: Fix possible NULL dereference In a call to mac80211hwsimselecttxlink the sta pointer might be NULL, thus need to check that it is not NULL before accessing it...

CVE-2025-59399: Improper Cleanup on Thrown Exception

libocpp before 0.28.0 allows a denial of service EVerest crash because a secondary exception is thrown during error message generation...

CVE-2023-53257: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: check S1G action frame size Before checking the action code, check that it even exists in the frame...

CVE-2025-49089: Improper Limitation of a Pathname to a Restricted Directory

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...

CVE-2025-57118: Improper Privilege Management

An issue in PHPGurukul Online-Library-Management-System v3.0 allows an attacker to escalate privileges via the index.php...

CVE-2025-59397: Improper Neutralization of Special Elements used in an SQL Command

Open Web Analytics OWA before 1.8.1 allows owadb.php vvalue SQL injection...

Dell Data Domain Operating System Web Interface Detection

Binary data delldatadomainoperatingsystemwebinterfacedetect.nbin...

Apple iOS < 15.8.5 Vulnerability (125142)

Binary data appleios1585check.nbin...

Apple iOS < 16.7.12 Vulnerability (125141)

Binary data appleios16712check.nbin...

CVE-2025-9084: URL Redirection to Untrusted Site

Mattermost versions 10.5.x = 10.5.9 fail to properly validate redirect URLs which allows attackers to redirect users to malicious sites via crafted OAuth login URLs...

CVE-2025-41713: Initialization of a Resource with an Insecure Default

During a short time frame while the device is booting an unauthenticated remote attacker can send traffic to unauthorized networks due to the switch operating in an undefined state until a CPU-induced reset allows proper configuration...

Apple iOS < 26 Multiple Vulnerabilities (125108)

Binary data appleios26check.nbin...

redteam-notebook

It is an offensive tool for network and web exploitation. The repository, redteam-notebook, contains a collection of commands, tips, and tricks for preparation and execution of red teaming activities, specifically for the OSCP exam. The primary vulnerability targeted is not explicitly stated, but...

rapidscan

This is a Python-based web vulnerability scanner called RapidScan. It is designed to automate the process of security scanning by using a multitude of available Linux security tools and some custom scripts. The tool is still under development and currently supports around 80 vulnerability tests...