Information Disclosure

moodle/moodle is vulnerable to an Information Disclosure. The vulnerability is due to inadequate input validation and authorization checks within the messaging web service, allows users to access data they are not authorized to view, such as other users' names and online statuses...

CVE-2025-31203

creationtimestamp| type| source ---|---|--- 2025-04-29 03:50:55+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnweufmpsl2s 2025-04-29 06:47:44+00:00| seen| https://t.me/cvedetector/23966...

PHPGurukul COVID19 Testing Management System 安全漏洞

The COVID19 Testing Management System is a new crown pneumonia testing management system. The COVID19 Testing Management System suffers from a SQL injection vulnerability that stems from the lack of validation of externally entered SQL statements in the parameter Status in the /test-details.php...

CVE-2015-4582

creationtimestamp| type| source ---|---|--- 2025-04-28 19:50:22+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnvjzcjkp22u 2025-04-28 19:55:08+00:00| seen| https://t.me/cvedetector/23928...

Malicious code in vonage-status-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ada0aade725df8ff1808b4600aaf892c84da40d29ad87d0488895e3894712c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-3506 Malicious code in vonage-status-panel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00ada0aade725df8ff1808b4600aaf892c84da40d29ad87d0488895e3894712c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Undertow: Infinite loop in SslConduit during close

A flaw was found in undertow. This issue makes achieving a denial of service possible due to an unexpected handshake status updated in SslConduit, where the loop never terminates...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CVE-2025-46672

Summary : CVE-2025-46672 affects NASA CryptoLib up to v1.3.1 (before 1.3.2). The root cause is that the OTAR crypto function return status is not checked, which could allow incorrect handling of OTAR results and potentially enable spacecraft hijacking. Impact : the issue is described as a securit...

CryptoLib 安全漏洞

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.3.2, which stems from a failure to check SA operational status and could lead to a bypass...

CVE-2025-46672

NASA CryptoLib before 1.3.2 does not check the OTAR crypto function returned status, potentially leading to spacecraft hijacking...

CryptoLib 安全漏洞

CryptoLib is a NASA open source application. It is used to provide a software-only solution using the CCSDS space data link security protocol. A security vulnerability exists in CryptoLib versions prior to 1.3.2 that stems from a failure to check key status and could lead to spacecraft hijacking...

CVE-2025-3727

A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component STATUS Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be...

Return of Wrong Status Code

Overview Affected versions of this package are vulnerable to Return of Wrong Status Code from the chacha20poly1305setkey function, when returning a ChaCha20 initialization error from the OpenSSL backend. An attacker can potentially impact confidentiality, integrity, and availability by exploiting...

CVE-2025-43862

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:51+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq76yi6e2h 2025-04-25 18:02:30+00:00| seen| Telegram/t8K1XuU9DycjdS-BJ0HBwR2vMp2ysg1gNZKK5Q0GJ-ZI8I 2025-04-25 19:11:15+00:00| seen| https://t.me/cvedetector/23768...

CVE-2025-43016

creationtimestamp| type| source ---|---|--- 2025-04-25 17:19:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75y7n52v 2025-04-25 19:11:12+00:00| seen| https://t.me/cvedetector/23767...

CVE-2025-25775

creationtimestamp| type| source ---|---|--- 2025-04-25 17:07:48+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13468 2025-04-25 19:48:22+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114400329847987378 2025-04-25 21:19:55+00:00| seen|...

CVE-2025-3641

creationtimestamp| type| source ---|---|--- 2025-04-25 16:48:14+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114399621545979009 2025-04-25 17:19:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lnnq75nzid2r 2025-04-25 18:02:30+00:00| seen|...

CVE-2025-46230

creationtimestamp| type| source ---|---|--- 2025-04-25 14:07:02+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13413...

CVE-2025-3867

creationtimestamp| type| source ---|---|--- 2025-04-25 07:07:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13388 2025-04-25 07:07:21+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmnxr2l5332 2025-04-25 10:49:33+00:00| seen|...