25114 matches found
CVE-2025-9593
Affected software: itsourcecode Apartment Management System 1.0. The vulnerability is an SQL injection in the /report/unit_status_info.php file caused by unsafely handling the usid parameter. This allows remote exploitation and an exploit has been published. Connected advisories confirm the issue...
CVE-2025-9586
creationtimestamp| type| source ---|---|--- 2025-08-28 21:11:58+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108447341555170...
CVE-2025-9584
creationtimestamp| type| source ---|---|--- 2025-08-28 20:18:25+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108236769126304...
CVE-2025-6203
creationtimestamp| type| source ---|---|--- 2025-08-28 20:03:51+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115108179538985792 2025-09-02 06:30:23+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3lxtijqktdl25 2025-09-02 16:09:59+00:00| seen|...
CVE-2025-9575
creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...
CVE-2025-9576
creationtimestamp| type| source ---|---|--- 2025-08-28 18:24:02+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107787041182636...
CVE-2025-57218
creationtimestamp| type| source ---|---|--- 2025-08-28 17:56:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115107678659351418...
Storing Passwords in a Recoverable Format
Overview org.xwiki.platform:xwiki-platform-export-pdf-api is an API for multipage PDF export that supports both client-side printing, using the user's web browser, and server-side printing, e.g. using a headless Chrome browser that may run inside a Docker container. Affected versions of this...
CVE-2025-55583
creationtimestamp| type| source ---|---|--- 2025-08-28 14:41:19+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106911137398166 2026-08-26 11:00:29+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/aff889aa-caa8-4230-873a-89e4247460ec 2026-08-27...
CVE-2025-54125
creationtimestamp| type| source ---|---|--- 2025-08-28 13:38:32+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-54125.yaml 2025-08-30 21:02:31+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxnhubciqr2b 2025-09-13...
CVE-2025-8067
creationtimestamp| type| source ---|---|--- 2025-08-28 13:23:28+00:00| seen| https://seclists.org/oss-sec/2025/q3/140 2025-08-28 15:00:06+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115106984983497798 2025-08-28 15:57:59+00:00| seen| https://seclists.org/oss-sec/2025/q3/143 2025-08-...
MAL-2025-41515 Malicious code in @twork-data-services/proxy-prime-api-v1-account-getting-services-status (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2025-41491 Malicious code in @twork-data-services/customer-api-v2-customer-vip-status (npm)
--- -= Per source details. Do not edit below this line.=-...
PT-2025-34983
Name of the Vulnerable Software and Affected Versions: QuickCMS version 6.8 Description: QuickCMS is susceptible to a Cross-Site Request Forgery CSRF issue in the page deletion functionality. A malicious actor can create a crafted website that, when visited by an administrator, automatically send...
PT-2025-35113
Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 14.4.2 through 16.4.7 XWiki Platform versions 16.5.0-rc-1 through 16.10.6 XWiki Platform versions 17.0.0-rc-1 through 17.4.0-rc-1 Description: The PDF export jobs store sensitive cookies unencrypted in job statuses. Th...
itsourcecode Apartment Management System 安全漏洞
Apartment Management System is an apartment management system. Apartment Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter usid in the file /report/unitstatusinfo.php. An attacker can exploit...
Google Android Information Disclosure Vulnerability (CNVD-2025-19991)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability due to an obfuscated agent in multiple functions of StatusHint.java and TelecomServiceImpl.java. An attacker could exploit the vulnerability to disclose...
CVE-2018-25115
creationtimestamp| type| source ---|---|--- 2025-08-27 21:46:21+00:00| seen| https://infosec.exchange/users/cR0w/statuses/115102920260061146 2025-08-29 21:02:19+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxf6r7ar2n...