CVE-2025-24331

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:34+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743 2025-07-02 13:07:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsybt2ut3h2i...

CVE-2025-27022

creationtimestamp| type| source ---|---|--- 2025-07-02 12:47:33+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114783712216991743...

CVE-2025-53100

creationtimestamp| type| source ---|---|--- 2025-07-01 18:05:12+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114779298982762165 2025-07-01 18:09:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/20070...

New Flaw in IDEs Like Visual Studio Code Lets Malicious Extensions Bypass Verified Status

A new study of integrated development environments IDEs like Microsoft Visual Studio Code, Visual Studio, IntelliJ IDEA, and Cursor has revealed weaknesses in how they handle the extension verification process, ultimately enabling attackers to execute malicious code on developer machines. "We...

Number withdrawal

AVTECH IP camera and others are products of AVTECH Corporation.AVTECH IP camera is a series of network security cameras.AVTECH DVR is a digital video recording host.AVTECH NVR is a network video recorder. This CVE number has been withdrawn...

GHSA-MFG2-QR5C-99PP

creationtimestamp| type| source ---|---|--- 2025-06-30 21:09:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19979...

CVE-2025-6888

A vulnerability was found in PHPGurukul Teachers Record Management System 2.1. It has been classified as critical. This affects an unknown part of the file /admin/changeimage.php. The manipulation of the argument tid leads to sql injection. It is possible to initiate the attack remotely. The...

CVE-2024-12143

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Mobilteg Mobile Informatics Mikro Hand Terminal - MikroDB allows SQL Injection. This issue affects Mikro Hand Terminal - MikroDB. NOTE: The vendor did not inform about the completion of the fixing...

CVE-2025-6853

creationtimestamp| type| source ---|---|--- 2025-06-29 07:52:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19855 2025-06-29 10:44:59+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsqih6coxt2r...

CVE-2018-8849

creationtimestamp| type| source ---|---|--- 2025-06-27 16:57:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19749...

CVE-2025-24765

creationtimestamp| type| source ---|---|--- 2025-06-27 13:50:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19717...

CVE-2025-41418

creationtimestamp| type| source ---|---|--- 2025-06-27 05:51:57+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19668 2025-06-27 10:34:39+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lslgwtrcgw23...

Inventory Management System createBrand.php File SQL Injection Vulnerability

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter brandStatus of file /phpaction/createBrand.php. An attacker can...

CVE-2025-6290

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:38+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19556 2025-06-26 06:24:17+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsiiiamt2w2v...

CVE-2025-5540

creationtimestamp| type| source ---|---|--- 2025-06-26 02:50:30+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19551 2025-06-26 08:39:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lsipzt3vcl2q...

CVE-2025-6665

A vulnerability has been found in code-projects Inventory Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /phpaction/editBrand.php. The manipulation of the argument editBrandStatus leads to sql injection. The attack can be...

CVE-2025-6654

creationtimestamp| type| source ---|---|--- 2025-06-25 03:00:00+00:00| seen| http://www.zerodayinitiative.com/advisories/ZDI-25-439/ 2025-06-25 21:50:27+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/19541 2025-06-26 01:03:10+00:00| seen|...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

Code-Projects Inventory Management System Injection Vulnerabilities

Inventory Management System is an inventory management system. Inventory Management System suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the parameter brandStatus of file /phpaction/createBrand.php. An attacker can...

ath11k_wmi_gtk_offload_status_event Heap Buffer Overflow DoS

Vulnerability of the ath11kwmigtkoffloadstatusevent function in the drivers/net/wireless/ath/ath11k/wmi.c module – The wireless adapter support driver from Atheros/Qualcomm in Linux operating systems is vulnerable due to the reutilization of previously freed memory. Exploiting this vulnerability...