PT-2025-32954

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to 6.3.10 Description: An untrusted search path vulnerability exists in certain Zoom Clients for Windows. This flaw may allow an unauthenticated user to escalate privileges via network access. Recommendations: Update Zoom ...

Zoom Clients for Windows 安全漏洞

Zoom Clients for Windows is a video conferencing software from Zoom, Inc. A security vulnerability exists in Zoom Clients for Windows that originates from an untrusted search path and could result in elevated privileges...

Intel® RealSense™ Dynamic Calibrator Software Advisory

Summary: A potential security vulnerability for some Intel® RealSense™ Dynamic Calibrator software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-22838 Description: Uncontrolled search path fo...

Adobe Substance3D Modeler 代码问题漏洞

Adobe Substance3D Modeler is the core tool in the Adobe Substance 3D series of software, designed for 3D modeling, supporting digital clay sculpting, symmetry tools, automated UV management, and other features for seamless switching across computer VR environments. Adobe Substance3D Modeler suffe...

BIT-MOODLE-2025-26527 Non-searchable tags can still be discovered on the tag search page and in the tags block

Tags not expected to be visible to a user could still be discovered by them via the tag search page or in the tags block...

Linux Distros Unpatched Vulnerability : CVE-2021-23986

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A malicious extension with the 'search' permission could have installed a new search engine whose favicon referenced a cross-origin URL. The response to this...

Exploit for Code Injection in Xwiki

CVE-2025-24893 Exploit Title: XWiki 15.10.10 - Unauthen...

CVE-2023-41532

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the doctorcontact parameter in doctorsearch.php...

CVE-2023-41530

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the appcontact parameter in appsearch.php...

CVE-2023-41525

Hospital Management System v4 was discovered to contain a SQL injection vulnerability via the patientcontact parameter in patientsearch.php...

Linux Distros Unpatched Vulnerability : CVE-2023-4579

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Search queries in the default search engine could appear to have been the currently navigated URL if the search query itself was a well formed URL. This could...

Balancing Privacy and Efficiency: Music Information Retrieval Via Additive Homomorphic Encryption

In the era of generative AI, ensuring the privacy of music data presents unique challenges: unlike static artworks such as images, music data is inherently temporal and multimodal, and it is sampled, transformed, and remixed at an unprecedented scale. These characteristics make its core vector...

K000152931: Multiple PostgreSQL vulnerabilities

Security Advisory Description CVE-2023-2455 Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and a given query is planned under one role and then executed under other...

PT-2025-117: Server‑Side Request Forgery (SSRF) in FreeScout

The vulnerability was identified in FreeScout , versions 1.8.182. The discovered vulnerability allows an attacker to make requests to both local and external resources, mask their own IP address and retrieve data from protected network segments. Vulnerability status: Confirmed by vendor Date of...

Elastic Beats filebeat < 9.1.0 Privilege Escalation

The version of Elastic Beats filebeat installed on the remote host is prior to 9.1.0. It is, therefore, affected by a vulnerability. An uncontrolled search path element vulnerability can lead to local privilege Escalation LPE via Insecure Directory Permissions. The vulnerability arises from...

BIT-MOODLE-2025-26533 SQL injection risk in course search module list filter

An SQL injection risk was identified in the module list filter within course search...

Exploit for Code Injection in Xwiki

XWiki RCE Exploit PoC CVE-2025-24893 Overview This repos...

Exploit for Code Injection in Xwiki

CVE-2025-24893 — XWiki Unauthenticated RCE PoC Proof-of-Con...

ClickFix Malware Campaign Exploits CAPTCHAs to Spread Cross-Platform Infections

A combination of propagation methods, narrative sophistication, and evasion techniques enabled the social engineering tactic known as ClickFix to take off the way it did over the past year, according to new findings from Guardio Labs. "Like a real-world virus variant, this new 'ClickFix ' strain...

CVE-2025-8555 atjiu pybbs search cross site scripting

A vulnerability, which was classified as problematic, was found in atjiu pybbs up to 6.0.0. Affected is an unknown function of the file /search. The manipulation of the argument keyword leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to...