CVE-2025-50101

Removed by vendor...

CVE-2025-50073

CVE-2025-50073 affects Oracle WebLogic Server (Fusion Middleware) Web Container: versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise WebLogic Server; exploitation requires user interaction and can lead t...

CVE-2025-50070

...

CVE-2025-50059

Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected are Oracle Java SE: 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK: 17.0.15, 21.0.7 and 24.0.1...

CVE-2025-30753

CVE-2025-30753 affects Oracle WebLogic Server (Core) in Oracle Fusion Middleware. Affects WebLogic versions 12.2.1.4.0, 14.1.1.0.0, and 14.1.2.0.0. The vulnerability can be exploited by a low-privilege attacker with network access via HTTP to cause a hang or frequent crashes (complete DOS). No pu...

CVE-2025-7532

A vulnerability has been found in Tenda FH1202 1.2.0.14408 and classified as critical. This vulnerability affects the function fromwebExcptypemanFilter of the file /goform/webExcptypemanFilter. The manipulation of the argument page leads to stack-based buffer overflow. The attack can be initiated...

Directus' exact version number is exposed by the OpenAPI Spec

Summary The exact Directus version number is incorrectly being used as OpenAPI Spec version this means that it is being exposed by the /server/specs/oas endpoint without authentication. Impact With the exact version information a malicious attacker can look for known vulnerabilities in Directus...

CVE-2025-53891

creationtimestamp| type| source ---|---|--- 2025-07-15 06:33:43+00:00| seen| https://bsky.app/profile/potato.software/post/3ltybumgogk26...

MAL-2025-5967 Malicious code in vite-postcss-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a86cf25e81b6e1f513cf67782d9ef778fe14ad1eba93f4a28adb2c1f63bfa965 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-5897 Malicious code in bk-card-cc-credit-limit-adjustment-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 839ee8572e063e7008de9939f5e66afdb87eb4083735168ee48b739ed54814d9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2025-29580 · Jetbrains · Jetbrains Youtrack

Name of the Vulnerable Software and Affected Versions: JetBrains YouTrack versions prior to 2025.2.86069 JetBrains YouTrack versions prior to 2024.3.85077 JetBrains YouTrack versions prior to 2025.1.86199 Description: An issue exists in JetBrains YouTrack that allows for email spoofing through an...

CVE-2025-52363

Tenda CP3 Pro Firmware V22.5.4.93 contains a hardcoded root password hash in the /etc/passwd file and /etc/passwd-. An attacker with access to the firmware image can extract and attempt to crack the root password hash, potentially obtaining administrative access...

CVE-2025-7612 code-projects Mobile Shop login.php sql injection

A vulnerability was found in code-projects Mobile Shop 1.0. It has been declared as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument email leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the...

CVE-2025-24391 Possible user enumeration

A vulnerability in the External Interface of OTRS allows conclusions to be drawn about the existence of user accounts through different HTTP response codes and messages. This enables an attacker to systematically identify valid email addresses. This issue affects: OTRS 7.0.X OTRS 8.0.X OTRS 2023....

MAL-2025-6492 Malicious code in dbnodeindicator (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 0ca31ed82ece767a66ae60f44cfb3e36aa54f84e952217e36376f6519ac1f777 Code download and executes a remote script. At the time of analysis, the remote code just runs a notepad - as so classified as a pentest/research. --- Category...

CVE-2025-7560 PHPGurukul Online Fire Reporting System workin-progress-requests.php sql injection

A vulnerability was found in PHPGurukul Online Fire Reporting System 1.2. It has been declared as critical. This vulnerability affects unknown code of the file /admin/workin-progress-requests.php. The manipulation of the argument teamid leads to sql injection. The attack can be initiated remotely...

CVE-2025-7516

A vulnerability classified as critical was found in code-projects Online Appointment Booking System 1.0. This vulnerability affects unknown code of the file /cancelbookingpatient.php. The manipulation of the argument appointment leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-7516

The CVE-2025-7516 entry concerns code-projects Online Appointment Booking System 1.0. The vulnerability is a SQL injection in the file /cancelbookingpatient.php, triggered by manipulating the appointment parameter. It is remotely exploitable, with an exploit publicly disclosed. Affected component...

CVE-2025-7509 code-projects Modern Bag slide.php sql injection

A vulnerability, which was classified as critical, was found in code-projects Modern Bag 1.0. This affects an unknown part of the file /admin/slide.php. The manipulation of the argument idSlide leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...

CVE-2025-53632

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario i.e. a zip archive, the path of the file to write is not checked, potentially leading to zip slips. Exploitation does not require authentication nor authorization, so anyone can...