CVE-2025-5784

A vulnerability has been found in PHPGurukul Employee Record Management System 1.3 and classified as critical. This vulnerability affects unknown code of the file /myexp.php. The manipulation of the argument emp3ctc leads to sql injection. The attack can be initiated remotely. The exploit has bee...

CVE-2025-49619

creationtimestamp| type| source ---|---|--- 2025-06-07 14:30:39+00:00| published-proof-of-concept| Telegram/YSJhdJjMlrABiHF1mC9tmQTTaLYxNBOL8QpiCjaALoLvyOE 2025-06-07 16:58:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqzszxvl7m2c 2025-06-15 08:14:08+00:00|...

CVE-2025-47601

creationtimestamp| type| source ---|---|--- 2025-06-07 05:00:22+00:00| seen| Telegram/rvYzq3XuSqIS6Jq2gKTARck8Jdf3ZePMyR6aO0nPIgKoa34 2025-06-07 06:48:32+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqyqy4kql72e...

openSUSE Security Advisory (SUSE-SU-2025:01813-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

1000 Projects Online Notice Board 安全漏洞

1000 Projects Online Notice Board is an online bulletin board from 1000 Projects open source. A security vulnerability exists in 1000 Projects Online Notice Board version 1.0, which stems from an incorrect manipulation of the parameter fname, resulting in SQL injection...

CVE-2025-20286

creationtimestamp| type| source ---|---|--- 2025-06-04 16:44:59+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114626101159277212 2025-06-04 19:08:31+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqsiwkcmhy2r 2025-06-05 03:37:00+00:00| seen|...

CVE-2025-20996

creationtimestamp| type| source ---|---|--- 2025-06-04 05:41:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqr3sdntiqu2 2025-06-04 07:20:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqrbf6c4yc2r...

CVE-2025-21485

creationtimestamp| type| source ---|---|--- 2025-06-03 06:11:00+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqomz4dffci2 2025-06-03 07:02:50+00:00| seen| Telegram/VIdmBTFSmAuaRWgqjbv-5X-czhezVyPzv8S4BEAWYM2w 2025-06-03 09:06:48+00:00|...

GHSA-352J-376Q-2PMC

creationtimestamp| type| source ---|---|--- 2025-06-02 17:04:01+00:00| published-proof-of-concept| https://t.me/TheDarkWebInformer/17763 2025-06-02 17:04:29+00:00| seen| https://infosec.exchange/users/DarkWebInformer/statuses/114614853194971118...

CVE-2025-5443

creationtimestamp| type| source ---|---|--- 2025-06-02 13:28:49+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqmutrmwdkx2...

CVE-2025-1235 WAGO: Switches affected by year 2k38 problem

A low privileged attacker can set the date of the devices to the 19th of January 2038 an therefore exceed the 32-Bit time limit. This causes the date of the switch to be set back to January 1st, 1970...

CVE-2025-1235

creationtimestamp| type| source ---|---|--- 2025-06-02 06:20:48+00:00| seen| https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lqm53qzzeyw2 2025-06-02 08:51:48+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqmfjw7evh2r...

CVE-2025-49113

creationtimestamp| type| source ---|---|--- 2025-06-02 05:30:34+00:00| published-proof-of-concept| Telegram/uuyPA3gvakwp7Y6MXsDRHU-rReonmLN5TGQiUNAsxQcNXaQ 2025-06-02 06:32:54+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqm5rcedhhm2...

CVE-2025-5425

creationtimestamp| type| source ---|---|--- 2025-06-02 04:05:57+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqlvk4pyl6n2...

CVE-2025-5388

creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:52+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijnarr452 2025-05-31 21:42:23+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqipny77qt2s...

CVE-2025-5390

creationtimestamp| type| source ---|---|--- 2025-05-31 19:34:37+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqiijhpicxr2 2025-05-31 21:52:24+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lqiq7vg22r2e 2025-06-01...

The vulnerability of the UnlockTraceLevelSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, allowing a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.

The vulnerability of the UnlockTraceLevelSettings method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass...

The vulnerability of the ExportCertificate method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, allows a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.

The vulnerability of the ExportCertificate method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, such as the TeleControl Server Basic, is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allo...

The vulnerability of the CreateLog method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems, as well as in the TeleControl Server Basic, allows a hacker to circumvent security restrictions, read and write arbitrary files, and execute arbitrary code.

The vulnerability of the CreateLog method in the software for managing and monitoring deleted objects in telemetry and telemechanics systems related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to bypass security...

The vulnerability of the UnlockWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems allows a security intruder to read and write arbitrary files and execute arbitrary code.

The vulnerability of the UnlockWebServerGatewaySettings method in the software for managing and monitoring remote devices in telemetering and telemechanics systems is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to...